Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
abaa9a13fd38656e238205ddd5aa4c8c17265490ab8a47166e5ea9df26587a97.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
abaa9a13fd38656e238205ddd5aa4c8c17265490ab8a47166e5ea9df26587a97.dll
Resource
win10v2004-20220812-en
Target
abaa9a13fd38656e238205ddd5aa4c8c17265490ab8a47166e5ea9df26587a97
Size
394KB
MD5
73aba4b402058c03a5536d752e8a3e1d
SHA1
5c4af4f6b78d595a6f40ca5c39dcd7db85e7e011
SHA256
abaa9a13fd38656e238205ddd5aa4c8c17265490ab8a47166e5ea9df26587a97
SHA512
c021263cd0f8707251466f073379732a5755085e29ce6fdb48cd12249945bd69ff1b71eaa584ac19508addf9535e93b0b835e377caedf988f116cd13b13fe2d6
SSDEEP
6144:6HOXSX8gJyNPnhU6Q6BkTRSjpj4guIWPt6H7dCca658ECGUZ:BXCwPxzkTqNZu7AUcCE7Q
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=AVG Technologies USA\, LLC,OU=RE 999,O=AVG Technologies USA\, LLC,L=Newton,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
dep_fsExtractDriveRoot
secWriteFile
secIsPathProtectedBySelfProtection
fsGetAvastLogPath
?GetModuleLifetimeDll@mi@asw@@YA?AV?$shared_ptr@VIModuleLifetime@mi@asw@@@std@@XZ
RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind
MoveFileW
GetDiskFreeSpaceW
GetOverlappedResult
GetFileSize
WaitForSingleObject
GetFileAttributesW
SetFileAttributesW
DeleteFileW
RemoveDirectoryW
FindFirstFileW
FindNextFileW
VirtualAlloc
VirtualFree
ExitThread
CreateThread
GetFileTime
SetEndOfFile
SetFileTime
LoadLibraryW
DuplicateHandle
GetCurrentProcess
TerminateThread
GetModuleFileNameA
CompareStringW
GetTickCount
SetFilePointerEx
QueryPerformanceCounter
QueryPerformanceFrequency
GetDriveTypeW
GetSystemTime
GlobalMemoryStatusEx
GetCurrentProcessId
GetCurrentThreadId
GetSystemDefaultLangID
GetSystemDefaultLCID
GetOEMCP
GetACP
GetLogicalDrives
GetTimeZoneInformation
GetVersionExW
GetSystemInfo
GetStartupInfoW
GetModuleFileNameW
Sleep
InitializeCriticalSectionEx
RaiseException
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
VirtualProtect
VirtualQuery
LoadLibraryExA
ExpandEnvironmentStringsW
K32GetMappedFileNameW
GetWindowsDirectoryW
FindFirstVolumeW
QueryDosDeviceW
FindNextVolumeW
GetVolumePathNamesForVolumeNameW
FindVolumeClose
GetEnvironmentVariableW
SetEvent
GetSystemTimeAsFileTime
OutputDebugStringW
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
MultiByteToWideChar
GetLastError
LoadLibraryA
GetProcAddress
LoadLibraryExW
ReadFile
GetVolumeInformationW
WriteFile
DeviceIoControl
SetFilePointer
CreateFileW
GetVersion
CloseHandle
WideCharToMultiByte
GetModuleHandleExW
GetModuleHandleW
FlushFileBuffers
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
FindClose
OpenProcess
GetCurrentThread
GetProcessHeap
GetSystemDirectoryW
GetForegroundWindow
wsprintfW
GetCaretBlinkTime
GetDoubleClickTime
GetKeyboardType
GetKeyboardLayout
GetSysColor
GetSystemMetrics
GetProcessWindowStation
GetOpenClipboardWindow
GetMessageTime
GetMessagePos
GetInputState
GetDialogBaseUnits
GetFocus
GetDesktopWindow
GetClipboardViewer
GetClipboardOwner
GetCapture
GetActiveWindow
GetCursorPos
GetCaretPos
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
ImpersonateLoggedOnUser
DuplicateTokenEx
GetTokenInformation
OpenProcessToken
RevertToSelf
SetThreadToken
OpenThreadToken
SHGetFolderPathW
_Mtx_init_in_situ
_Mtx_lock
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
_Mtx_destroy_in_situ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Xout_of_range@std@@YAXPEBD@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?classic@locale@std@@SAAEBV12@XZ
?_Xbad_function_call@std@@YAXXZ
?id@?$ctype@D@std@@2V0locale@2@A
?_Xlength_error@std@@YAXPEBD@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBADD@Z
??Bid@locale@std@@QEAA_KXZ
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?uncaught_exception@std@@YA_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
__CxxFrameHandler4
__current_exception
__current_exception_context
__CxxFrameHandler3
__RTDynamicCast
__std_type_info_destroy_list
__C_specific_handler
__std_exception_destroy
__std_exception_copy
_purecall
__std_terminate
__std_type_info_name
__RTtypeid
wcschr
strchr
_CxxThrowException
memcmp
memcpy
memmove
memset
realloc
free
malloc
_callnewh
_cexit
terminate
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
toupper
_wcsupr_s
wcscpy_s
wcsncmp
_wcsdup
wcscat_s
_wcsnicmp
strncmp
strncpy
wcsncpy
_wcsicmp
_memicmp
__stdio_common_vswprintf
__stdio_common_vsprintf
__stdio_common_vsprintf_s
rand
srand
modf
_dclass
?AcquireShredderModule@detail@shredder@asw@@YA?AV?$shared_ptr@VIShredderModule@shredder@asw@@@std@@XZ
?CleanFreeSpace@@YAHPEAPEAXPEB_W@Z
?DiskReadBenchmark@@YAKPEB_WPEAMKK@Z
?GetATAdiskInfo@@YAKPEB_WPEAKPEAH@Z
?GetModuleLifetimeObject@detail@shredder@asw@@YA?AV?$shared_ptr@VIModuleLifetime@mi@asw@@@std@@XZ
?GetShredderStatus@@YAKPEAK000@Z
?ShredFileList@@YAHPEAPEAXPEB_W1@Z
?ShredPartition@@YAHPEAPEAXPEB_W@Z
?StopShredder@@YAHXZ
AcquireShredderModuleRaw
on_avast_dll_unload
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ