Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
ab3ceb44f223d25d5c94d3cbf65d84d37e65447b09a3d9b7a48a4c44e49492fb.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ab3ceb44f223d25d5c94d3cbf65d84d37e65447b09a3d9b7a48a4c44e49492fb.dll
Resource
win10v2004-20220812-en
Target
ab3ceb44f223d25d5c94d3cbf65d84d37e65447b09a3d9b7a48a4c44e49492fb
Size
282KB
MD5
b1883d782fa86da21ecfece6a3f07d8b
SHA1
21bddf0d2953ddaf9bb86be671e4778a5e9b0882
SHA256
ab3ceb44f223d25d5c94d3cbf65d84d37e65447b09a3d9b7a48a4c44e49492fb
SHA512
6ded44457c17d47ef1119f9a7b2334543e073369af97b613d1ed8a0461d67e3fd90073790d24c04908d1f151d7e821b49cc4e36930cfb60db216f0a362b036d3
SSDEEP
6144:l5NZwYDyL6WjpKO2TE2DkRTCcxXIX4erIc96xqjetjnLvVzhlP:laY6fNoQRTCSxFvB
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=AVG Technologies USA\, LLC,OU=RE 999,O=AVG Technologies USA\, LLC,L=Newton,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
?GetModuleLifetimeDll@mi@asw@@YA?AV?$shared_ptr@VIModuleLifetime@mi@asw@@@std@@XZ
RtlVirtualUnwind
NtSetInformationThread
RtlLookupFunctionEntry
RtlCaptureContext
Sleep
FreeLibrary
InitializeCriticalSection
DeleteCriticalSection
IsDebuggerPresent
GetModuleHandleExW
SetEvent
CreateEventW
WaitForSingleObject
WaitForMultipleObjects
ResetEvent
CloseHandle
GetModuleFileNameA
GetThreadPriority
GetCurrentThread
SetThreadPriority
GetTickCount64
GetTickCount
GetSystemDirectoryW
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
TerminateThread
ResumeThread
GetThreadTimes
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
K32GetMappedFileNameW
GetCurrentProcess
GetWindowsDirectoryW
FindFirstVolumeW
QueryDosDeviceW
FindNextVolumeW
GetVolumePathNamesForVolumeNameW
FindVolumeClose
CompareStringW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WideCharToMultiByte
EnterCriticalSection
GetCurrentThreadId
GetSystemTimes
GetModuleHandleW
LoadLibraryExW
GetProcAddress
LoadLibraryA
GetLastError
MultiByteToWideChar
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
WaitForSingleObjectEx
RevertToSelf
OpenThreadToken
SHGetFolderPathW
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
_Query_perf_frequency
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?classic@locale@std@@SAAEBV12@XZ
?_Xbad_function_call@std@@YAXXZ
?id@?$ctype@D@std@@2V0locale@2@A
?_Xlength_error@std@@YAXPEBD@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBADD@Z
??Bid@locale@std@@QEAA_KXZ
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Query_perf_counter
_Mtx_lock
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?_Xout_of_range@std@@YAXPEBD@Z
_Xtime_get_ticks
?_Syserror_map@std@@YAPEBDH@Z
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?uncaught_exception@std@@YA_NXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$ctype@_W@std@@2V0locale@2@A
CallNtPowerInformation
__CxxFrameHandler4
memcmp
memmove
__C_specific_handler
__std_exception_destroy
__std_exception_copy
_purecall
__std_terminate
__std_type_info_name
__RTtypeid
memcpy
__std_type_info_destroy_list
memset
_CxxThrowException
__RTDynamicCast
malloc
free
_callnewh
_initterm_e
_initterm
_errno
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_beginthreadex
terminate
__stdio_common_vsprintf
_wcsnicmp
wcscat_s
wcsncmp
ceilf
?GetModuleLifetimeObject@detail@tasklib@asw@@YA?AV?$shared_ptr@VIModuleLifetime@mi@asw@@@std@@XZ
?get_tasks_module@detail@tasklib@asw@@YA?AV?$shared_ptr@Vtasks_core_module@tasklib@asw@@@std@@XZ
get_tasks_moduleRaw
get_this_taskcancellation
on_avast_dll_unload
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ