Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
ad5a499b11e3d140dfc6f9e0a92781facdfb1e96d01070f67ceb18d96887b2b4.dll
Resource
win7-20220812-en
Target
ad5a499b11e3d140dfc6f9e0a92781facdfb1e96d01070f67ceb18d96887b2b4
Size
1.0MB
MD5
554fb3efaca18bcd1c331182387f1363
SHA1
6dfa8c140ef13fc4e2127d1102142385b5a0c2c0
SHA256
ad5a499b11e3d140dfc6f9e0a92781facdfb1e96d01070f67ceb18d96887b2b4
SHA512
23f6d03ef3067caa286aa3fa213e0b003df2ed38bc1a1f93bcd3ecdf92c25686b7460a3fe41a81b1fb24a56970fde4a5e61fb3c57044df9731658827d79201a2
SSDEEP
24576:z3C02efKj6lDTlbbErC+CPk+1dFgJpB91h9dBe5p0J39zbfuE0aDN9jswwYe11AU:z+kDTpEr8Pk+1daB91XW0J39OE0aRDkF
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
CN=McAfee\, LLC,O=McAfee\, LLC,L=Santa Clara,ST=California,C=US
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WTSFreeMemory
WTSQuerySessionInformationW
BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptOpenAlgorithmProvider
BCryptFinishHash
BCryptHashData
BCryptGenRandom
BCryptGetProperty
BCryptCreateHash
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
IdnToAscii
GetFileType
GetStdHandle
FindResourceW
LoadResource
LockResource
GetModuleHandleW
WideCharToMultiByte
MultiByteToWideChar
GetLastError
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
SizeofResource
FindResourceExW
QueryPerformanceCounter
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
CreateEventA
SetEvent
CreateEventW
GetCurrentProcessId
WaitForMultipleObjects
GetModuleFileNameW
GetProcAddress
InitializeCriticalSectionEx
RaiseException
DecodePointer
FindClose
LocalFree
CreateDirectoryW
FindNextFileW
MoveFileExW
OutputDebugStringW
WTSGetActiveConsoleSessionId
WaitForSingleObject
GetUserDefaultLCID
ResetEvent
GetTimeFormatW
ReleaseMutex
WaitNamedPipeW
CreateFileW
GetNamedPipeServerProcessId
GetNamedPipeClientProcessId
GetCurrentThreadId
CancelIoEx
WriteFile
GetOverlappedResult
ReadFile
ProcessIdToSessionId
OpenProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
K32EnumProcesses
QueryFullProcessImageNameW
TerminateProcess
GetCurrentProcess
LocalAlloc
lstrlenW
VerSetConditionMask
InitializeCriticalSectionAndSpinCount
FreeLibrary
VerifyVersionInfoW
LoadLibraryExW
ExitProcess
VirtualQuery
GetSystemInfo
GetModuleHandleExW
ExitThread
RtlUnwind
LoadLibraryW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
DuplicateHandle
EnumSystemLocalesW
GetTimeZoneInformation
GetDateFormatW
CreateMutexA
IsValidLocale
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
ReadConsoleW
WriteConsoleW
SetEndOfFile
Sleep
VirtualFree
VirtualProtect
VirtualAlloc
GetVersionExW
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
GetCurrentThread
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
CreateThread
SignalObjectAndWait
CreateTimerQueue
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
IsDebuggerPresent
FormatMessageW
GetStringTypeW
TryEnterCriticalSection
WaitForSingleObjectEx
SwitchToThread
GetExitCodeThread
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
EncodePointer
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
DestroyWindow
SetWindowLongW
GetWindowLongW
CreateWindowExW
DefWindowProcW
RegisterClassExW
KillTimer
SetTimer
PostMessageW
RegSetValueExA
RegSetKeySecurity
RegQueryValueExW
RegNotifyChangeKeyValue
RegGetKeySecurity
RegFlushKey
RegEnumKeyExW
RegDeleteValueW
FreeSid
RegQueryValueExA
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
SHGetKnownFolderPath
SHGetSpecialFolderPathW
CLSIDFromString
StringFromGUID2
StringFromCLSID
CoCreateInstance
CoTaskMemFree
CoInitializeEx
CoUninitialize
SysAllocString
VariantClear
SysFreeString
StrChrW
SHDeleteKeyW
StrRChrW
PathFileExistsW
StrStrW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ