Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
af1922be34adad4325ee2ffddc57de353f5ba6a3050acc0a3bb551fe53b4e97f.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
af1922be34adad4325ee2ffddc57de353f5ba6a3050acc0a3bb551fe53b4e97f.dll
Resource
win10v2004-20220812-en
Target
af1922be34adad4325ee2ffddc57de353f5ba6a3050acc0a3bb551fe53b4e97f
Size
1.5MB
MD5
a98b846ad9a1a3d9e729b983069a1ad0
SHA1
24d2663f6417a7cc4b6568479449f086ab94f6de
SHA256
af1922be34adad4325ee2ffddc57de353f5ba6a3050acc0a3bb551fe53b4e97f
SHA512
099d3dd8b18a764c4b94154ec0648c573d782de28aa4f2efe5ac34900dfa08b31916c6ad78330dc6dfb7f0fbec1f42144967fd0a86048c5d2f9ba7969570da94
SSDEEP
24576:prg8Ha/Mo0vsenAhOntFtjlka9FLUJEoaRVWxT7vA1r:psyo0vznAAtFtjxhroaRY3A
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=NortonLifeLock Inc.,OU=Norton Product Engineering - CM,O=NortonLifeLock Inc.,L=Tempe,ST=Arizona,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
RpcImpersonateClient
RpcRevertToSelfEx
CryptUnprotectData
CryptProtectData
InternetCheckConnectionW
GetCurrentProcessId
LocalFree
GetSystemInfo
GetFileSize
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
OpenProcess
LockResource
GetCurrentThread
GetModuleHandleW
OpenThread
DisableThreadLibraryCalls
GetSystemPowerStatus
LocalAlloc
FormatMessageW
WaitForMultipleObjects
GetTickCount
ReadFile
LoadResource
VirtualProtect
GetSystemTime
WaitForSingleObject
LeaveCriticalSection
IsProcessorFeaturePresent
SizeofResource
LoadLibraryExW
FreeLibrary
GetProcAddress
GetFileAttributesW
CreateFileW
GetProcessHeap
DeleteCriticalSection
HeapDestroy
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionAndSpinCount
HeapFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
FindResourceW
lstrlenW
FindResourceExW
InitializeSListHead
EnterCriticalSection
OutputDebugStringW
IsDebuggerPresent
LoadLibraryExA
VirtualQuery
GetModuleFileNameW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
SetEvent
ResetEvent
GetTraceLoggerHandle
GetTraceEnableFlags
GetTraceEnableLevel
RegisterTraceGuidsW
UnregisterTraceGuids
ControlTraceW
CopySid
IsValidSid
OpenProcessToken
RegOpenKeyExW
GetLengthSid
OpenThreadToken
GetTokenInformation
RegCloseKey
LsaFreeMemory
ConvertStringSidToSidW
ConvertSidToStringSidW
LsaEnumerateAccountRights
LsaNtStatusToWinError
LsaOpenPolicy
LsaClose
LookupAccountSidW
RegOpenKeyW
RegEnumValueW
RegQueryValueExW
TraceMessage
CoInitializeSecurity
CoCreateInstance
IIDFromString
SysAllocString
VariantClear
VariantInit
SafeArrayGetElement
SafeArrayGetDim
SysFreeString
PathIsUNCServerW
PathAddBackslashW
PathRemoveFileSpecW
PathAppendW
?_Xlength_error@std@@YAXPEBD@Z
_Wcscoll
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Xbad_alloc@std@@YAXXZ
?id@?$ctype@_W@std@@2V0locale@2@A
?_Xout_of_range@std@@YAXPEBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$collate@_W@std@@2V0locale@2@A
_Wcsxfrm
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?is@?$ctype@_W@std@@QEBA_NF_W@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??Bid@locale@std@@QEAA_KXZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_init_in_situ
_Thrd_id
_Mtx_unlock
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?_XGetLastError@std@@YAXXZ
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
NetUserGetInfo
NetApiBufferFree
NetLocalGroupGetMembers
LsaFreeReturnBuffer
LsaEnumerateLogonSessions
LsaGetLogonSessionData
WinHttpSetOption
WinHttpTimeToSystemTime
WinHttpCrackUrl
WinHttpCloseHandle
WinHttpSetStatusCallback
WinHttpTimeFromSystemTime
strchr
memmove
memset
_CxxThrowException
__std_type_info_destroy_list
__std_exception_copy
__C_specific_handler
wcsstr
_purecall
wcschr
__std_terminate
__CxxFrameHandler3
memchr
memcmp
__std_exception_destroy
memcpy
_recalloc
realloc
_callnewh
calloc
malloc
free
__stdio_common_vsprintf_s
__stdio_common_vsprintf
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf_s
__stdio_common_vswprintf
__stdio_common_vsnprintf_s
__acrt_iob_func
__stdio_common_vfprintf
fflush
isprint
_wcsicmp
wmemcpy_s
strcpy_s
wcsnlen
_stricmp
strcat_s
wcscat_s
_wcsnicmp
_wcslwr_s
wcsncpy_s
iswxdigit
wcscpy_s
iswspace
_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
_errno
_cexit
_crt_atexit
_execute_onexit_table
_invalid_parameter_noinfo
_register_onexit_function
terminate
_resetstkoflw
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
strtoul
strtoull
mbstowcs_s
strtol
strtoll
strtod
rand_s
_splitpath_s
_waccess
_time64
_fdtest
_dtest
GetFactory
GetObjectCount
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ