DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Microsoft_WDF_UMDF_Version
Static task
static1
Behavioral task
behavioral1
Sample
1e956ec5f6c21e693af3ce31ef69df01c2804ae204cb79be82ee86f1b68a202b.dll
Resource
win7-20220812-en
Target
1e956ec5f6c21e693af3ce31ef69df01c2804ae204cb79be82ee86f1b68a202b
Size
306KB
MD5
df4e8aef5848273213c39439e5f8485f
SHA1
61cfec2cc1b302099e945ee9cc740296c23deae1
SHA256
1e956ec5f6c21e693af3ce31ef69df01c2804ae204cb79be82ee86f1b68a202b
SHA512
c47856266a8b834fc0482e17447361eb9246ab028cf582ef603118d4af31c1ab8443cc0a98a61b07e1eddb134e9ddfdabc6df34489235912273c420b9a1bc279
SSDEEP
3072:gm1zdFaIEnJdsHhjfbPzU/XO0m3NWbVQqxob6uTDBzVU:gQzv7EnJ8NzzQONWZQqxob62BzVU
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
__badioinfo
ferror
_itoa
_snprintf
_iob
isleadbyte
__mb_cur_max
__pioinfo
memmove
memcpy
_onexit
_lock
__dllonexit
_fileno
_lseeki64
_write
_isatty
mbtowc
_unlock
realloc
??1type_info@@UAE@XZ
_adjust_fdiv
_amsg_exit
_initterm
_XcptFilter
??_V@YAXPAX@Z
malloc
free
_CxxThrowException
??2@YAPAXI@Z
??_U@YAPAXI@Z
memset
_wcsicmp
_vscwprintf
_errno
__CxxFrameHandler
??3@YAXPAX@Z
RegQueryInfoKeyW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
TraceMessage
RegSetValueExW
RegEnumKeyExW
RegQueryValueExW
ConvertSecurityDescriptorToStringSecurityDescriptorW
GetSecurityInfo
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
GetModuleFileNameW
DisableThreadLibraryCalls
FreeLibrary
SizeofResource
LoadResource
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
FindResourceW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
OutputDebugStringA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
LoadLibraryExW
GetModuleHandleW
CloseHandle
WaitForSingleObject
SetEvent
LocalFree
OpenEventW
WaitForMultipleObjects
CreateThread
CreateEventW
GetVersionExA
TerminateProcess
MultiByteToWideChar
HeapDestroy
UnregisterClassA
CharNextW
SysStringLen
SysAllocString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
SysFreeString
CLSIDFromString
PropVariantClear
StringFromGUID2
CoCreateInstance
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
CStdStubBuffer_DebugServerRelease
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrOleAllocate
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy
IUnknown_Release_Proxy
SetupDiOpenDevRegKey
SetupDiOpenDeviceInfoW
SetupDiCreateDeviceInfoList
SetupDiDestroyDeviceInfoList
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Microsoft_WDF_UMDF_Version
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE