Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
3abf36a843f85a7f656bde2ebd76d713e4fd0c209f1504739d0911530df878be.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3abf36a843f85a7f656bde2ebd76d713e4fd0c209f1504739d0911530df878be.dll
Resource
win10v2004-20220812-en
Target
3abf36a843f85a7f656bde2ebd76d713e4fd0c209f1504739d0911530df878be
Size
73KB
MD5
8455eb7abb1f1a6b24fbcd85e1e44654
SHA1
3aaf2d82c4a665d5f8b3630dcfca921be992d957
SHA256
3abf36a843f85a7f656bde2ebd76d713e4fd0c209f1504739d0911530df878be
SHA512
8978b349f52589c133e7c2c5f5dad28dc4fa458e36bc85886d0a79d5540fa9fcb0e24ca371f69b90940d18142c0f628d3bead8675b1e790f0e7e89d95417011a
SSDEEP
1536:B9T/1U8EXNenrYwwpX+8Cx9v0p0IsW4k4Ofa1LamuKcHoCX:/T/1/EXNenropX1C7v0p0bW4k4Ofa0m0
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?StreamIn@TiXmlText@@MAEXPAV?$basic_istream@_WU?$char_traits@_W@std@@@std@@PAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@@Z
?Accept@TiXmlText@@UBE_NPAVTiXmlVisitor@@@Z
?Clone@TiXmlText@@MBEPAVTiXmlNode@@XZ
?Parse@TiXmlText@@UAEPB_WPB_WPAVTiXmlParsingData@@W4TiXmlEncoding@@@Z
?Print@TiXmlText@@UBEXPAU_iobuf@@H@Z
?GetText@TiXmlElement@@QBEPB_WXZ
?QueryIntAttribute@TiXmlElement@@QBEHPB_WPAH@Z
?SetAttribute@TiXmlElement@@QAEXPB_WH@Z
?NextSiblingElement@TiXmlNode@@QAEPAVTiXmlElement@@PB_W@Z
?FirstChildElement@TiXmlNode@@QAEPAVTiXmlElement@@PB_W@Z
?ToDocument@TiXmlNode@@UBEPBVTiXmlDocument@@XZ
?ToText@TiXmlText@@UAEPAV1@XZ
?ToComment@TiXmlNode@@UBEPBVTiXmlComment@@XZ
?ToUnknown@TiXmlNode@@UBEPBVTiXmlUnknown@@XZ
?ToText@TiXmlText@@UBEPBV1@XZ
?ToDeclaration@TiXmlNode@@UBEPBVTiXmlDeclaration@@XZ
?ToDocument@TiXmlNode@@UAEPAVTiXmlDocument@@XZ
?ToElement@TiXmlNode@@UAEPAVTiXmlElement@@XZ
?ToComment@TiXmlNode@@UAEPAVTiXmlComment@@XZ
?ToUnknown@TiXmlNode@@UAEPAVTiXmlUnknown@@XZ
?ToText@TiXmlNode@@UAEPAVTiXmlText@@XZ
?ToDeclaration@TiXmlNode@@UAEPAVTiXmlDeclaration@@XZ
?ToElement@TiXmlElement@@UBEPBV1@XZ
?ToElement@TiXmlElement@@UAEPAV1@XZ
??1TiXmlDeclaration@@UAE@XZ
?Print@TiXmlDeclaration@@UBEXPAU_iobuf@@H@Z
?ToDeclaration@TiXmlDeclaration@@UBEPBV1@XZ
?ToDeclaration@TiXmlDeclaration@@UAEPAV1@XZ
??1TiXmlDocument@@UAE@XZ
?StreamIn@TiXmlDeclaration@@MAEXPAV?$basic_istream@_WU?$char_traits@_W@std@@@std@@PAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@@Z
?Accept@TiXmlDeclaration@@UBE_NPAVTiXmlVisitor@@@Z
??1TiXmlText@@UAE@XZ
??0TiXmlText@@QAE@PB_W@Z
?ToText@TiXmlNode@@UBEPBVTiXmlText@@XZ
?ToElement@TiXmlNode@@UBEPBVTiXmlElement@@XZ
?Clone@TiXmlDeclaration@@UBEPAVTiXmlNode@@XZ
?Parse@TiXmlDeclaration@@UAEPB_WPB_WPAVTiXmlParsingData@@W4TiXmlEncoding@@@Z
?StreamIn@TiXmlElement@@MAEXPAV?$basic_istream@_WU?$char_traits@_W@std@@@std@@PAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@@Z
?Accept@TiXmlElement@@UBE_NPAVTiXmlVisitor@@@Z
?Clone@TiXmlElement@@UBEPAVTiXmlNode@@XZ
?Parse@TiXmlElement@@UAEPB_WPB_WPAVTiXmlParsingData@@W4TiXmlEncoding@@@Z
?Print@TiXmlElement@@UBEXPAU_iobuf@@H@Z
?Attribute@TiXmlElement@@QBEPB_WPB_W@Z
??1TiXmlElement@@UAE@XZ
?SetAttribute@TiXmlElement@@QAEXPB_W0@Z
?LinkEndChild@TiXmlNode@@QAEPAV1@PAV1@@Z
??0TiXmlElement@@QAE@PB_W@Z
??0TiXmlDeclaration@@QAE@PB_W00@Z
??0TiXmlDocument@@QAE@XZ
?SaveFile@TiXmlDocument@@QBE_NPB_W@Z
?LoadFile@TiXmlDocument@@QAE_NPB_WW4TiXmlEncoding@@@Z
?Print@TiXmlDeclaration@@UBEXPAU_iobuf@@HPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SetMode@CBDDebug@@QAEXH@Z
??0CBDDebug@@QAE@H@Z
??1CBDDebug@@QAE@XZ
?Trace@CBDDebug@@QAAXPB_WZZ
CryptUnprotectData
MultiByteToWideChar
GetLastError
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
DecodePointer
LoadLibraryExW
GetFileAttributesW
CreateMutexW
OpenProcess
GetCurrentProcess
ReleaseMutex
GetModuleFileNameW
WaitForSingleObject
GetModuleHandleW
CloseHandle
LocalFree
lstrlenW
WideCharToMultiByte
GetPrivateProfileStringW
GetPrivateProfileIntW
Sleep
FreeLibrary
EncodePointer
GetProcAddress
LoadLibraryW
GetSystemTimeAsFileTime
RegOpenCurrentUser
SetSecurityDescriptorDacl
RevertToSelf
ConvertSidToStringSidW
LookupAccountNameW
InitializeSecurityDescriptor
ImpersonateLoggedOnUser
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CredFree
CredEnumerateW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
SHGetSpecialFolderPathW
wcsstr
wcscpy_s
_wcsnicmp
wcschr
_wtoi
swprintf_s
_wfopen_s
fgetws
strchr
vsprintf_s
??_V@YAXPAX@Z
??_U@YAPAXI@Z
sprintf_s
wcsncpy_s
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
wcsrchr
memmove
_unlock
__dllonexit
_lock
_onexit
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CxxFrameHandler3
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
fclose
memcpy
memset
_CxxThrowException
swscanf_s
wcscat_s
realloc
free
malloc
strcpy_s
??3@YAXPAX@Z
strcat_s
??2@YAPAXI@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
PathAppendW
PathRemoveFileSpecW
PathIsRelativeW
PathAddBackslashW
check_at_install
cleanup_manager
get_next_proxy_set
init_manager
load_proxy_settings
save_proxy_set
save_proxy_settings
set_current_user
set_file_path
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ