Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
c4e7f8a621aca6b6b5ec10ebef70ebc1496751cd829cb81ec09cce05b8d573a6.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c4e7f8a621aca6b6b5ec10ebef70ebc1496751cd829cb81ec09cce05b8d573a6.dll
Resource
win10v2004-20220812-en
Target
c4e7f8a621aca6b6b5ec10ebef70ebc1496751cd829cb81ec09cce05b8d573a6
Size
214KB
MD5
3b2a2280be785c02d7725f50719a511d
SHA1
728dc7acbdf6a6329f6507000e7b6535c070760f
SHA256
c4e7f8a621aca6b6b5ec10ebef70ebc1496751cd829cb81ec09cce05b8d573a6
SHA512
c50543b4a70512436dab620e6aae6fb5142a7322e5598816c10b49edef839d796a69539dffc81a9c037a1ee14a66f8f160c574235d70651a64e2e462df94dd74
SSDEEP
6144:kbeMx/ZVV6V9383I5wI4IIsoIgd6YCs+x:kyMx/3V6V93XvzIvd6pn
ExtKeyUsageCodeSigning
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetTapeParameters
GetTapeStatus
GetTempFileNameW
GetTempPathW
GetTimeFormatA
GetTimeFormatW
GetUserDefaultLCID
GetVolumeNameForVolumeMountPointA
GlobalFindAtomW
GlobalUnfix
Heap32First
Heap32ListFirst
HeapFree
HeapUnlock
InitAtomTable
InterlockedCompareExchange
IsBadReadPtr
IsDBCSLeadByte
IsValidLanguageGroup
LoadModule
LocalAlloc
LocalCompact
LocalUnlock
LockFile
Module32NextW
MoveFileWithProgressA
MulDiv
MultiByteToWideChar
OpenFileMappingA
OpenMutexW
OpenProcess
OpenSemaphoreA
PeekNamedPipe
PostQueuedCompletionStatus
Process32First
Process32FirstW
QueryDosDeviceA
QueryInformationJobObject
ReadConsoleOutputAttribute
ReadConsoleOutputCharacterW
ReadConsoleW
RemoveDirectoryA
RemoveDirectoryW
RtlMoveMemory
SetCommConfig
SetCommMask
SetCommState
SetComputerNameW
SetConsoleCP
SetConsoleCursor
SetConsoleTitleW
SetEnvironmentVariableA
SetErrorMode
SetFileApisToOEM
SetFileTime
SetInformationJobObject
SetPriorityClass
SetProcessShutdownParameters
SetProcessWorkingSetSize
SetTimerQueueTimer
SetVolumeMountPointW
SwitchToFiber
TerminateJobObject
TerminateProcess
TerminateThread
UnlockFile
UnmapViewOfFile
UpdateResourceW
VerifyVersionInfoW
VirtualFree
VirtualFreeEx
VirtualUnlock
WaitForMultipleObjects
WaitForMultipleObjectsEx
WaitForSingleObject
WaitNamedPipeW
WriteConsoleA
WriteConsoleOutputW
WriteConsoleW
WriteFileGather
WritePrivateProfileStringA
WriteTapemark
_lclose
_lcreat
_llseek
_lwrite
lstrcatW
lstrcpynA
lstrlen
CreateFileA
lstrlenA
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
VirtualAlloc
lstrcpyA
AddConsoleAliasW
AllocateUserPhysicalPages
AssignProcessToJobObject
BackupSeek
BackupWrite
BeginUpdateResourceA
ClearCommError
CloseHandle
CompareFileTime
CompareStringW
CreateDirectoryExA
CreateEventW
CreateFileW
CreateJobObjectW
CreateMailslotW
CreateMutexA
CreateSemaphoreA
CreateSemaphoreW
CreateTapePartition
CreateTimerQueueTimer
DebugActiveProcess
DeleteCriticalSection
DeleteFiber
DeleteFileW
DeleteVolumeMountPointA
DeviceIoControl
EnumCalendarInfoW
EnumLanguageGroupLocalesW
EnumResourceLanguagesW
EnumSystemLocalesW
EnumTimeFormatsW
EnumUILanguagesA
EscapeCommFunction
ExpandEnvironmentStringsA
FileTimeToDosDateTime
FileTimeToLocalFileTime
FillConsoleOutputCharacterA
FillConsoleOutputCharacterW
FindFirstVolumeMountPointW
FindNextChangeNotification
FindNextFileA
FindNextVolumeMountPointA
FindResourceA
FindResourceW
FindVolumeClose
FindVolumeMountPointClose
FlushInstructionCache
FlushViewOfFile
FoldStringA
FreeEnvironmentStringsA
FreeLibraryAndExitThread
FreeUserPhysicalPages
GetBinaryTypeA
GetBinaryTypeW
GetCPInfo
GetCPInfoExA
GetCPInfoExW
GetCommModemStatus
GetCommState
GetComputerNameA
GetConsoleAliasExesW
GetConsoleAliasesA
GetConsoleAliasesW
GetConsoleDisplayMode
GetConsoleOutputCP
lstrcatA
GetCurrentDirectoryA
GetCurrentThread
GetCurrentThreadId
GetDefaultCommConfigW
GetDiskFreeSpaceA
GetExitCodeThread
GetFileAttributesExA
GetFileAttributesExW
GetFileSize
GetLocalTime
GetLocaleInfoA
GetNumberFormatW
GetNumberOfConsoleInputEvents
GetPriorityClass
GetPrivateProfileIntA
GetProcessAffinityMask
GetProcessIoCounters
GetProcessShutdownParameters
GetProcessVersion
GetProfileSectionA
GetStringTypeA
GetStringTypeExA
GetSystemDirectoryW
GetSystemTimeAdjustment
GetForegroundWindow
GetInputState
GetKeyNameTextA
GetKeyState
GetKeyboardState
GetDlgItemTextA
GetMenuDefaultItem
GetMenuStringA
GetMessageW
GetNextDlgGroupItem
GetDlgItem
GetDlgCtrlID
GetDialogBaseUnits
GetClipboardOwner
GetClipboardFormatNameW
GetClassWord
GetClassInfoExA
GetCaretPos
GetAsyncKeyState
GetAncestor
GetAltTabInfoA
FindWindowExA
FindWindowA
EnumPropsExA
EnumDisplaySettingsW
EnumDisplayMonitors
GetProcessWindowStation
EnumDisplayDevicesA
EnumDesktopsW
EnumDesktopWindows
EndMenu
EnableWindow
DrawTextExA
DrawFrameControl
DrawEdge
DlgDirSelectExW
DlgDirSelectComboBoxExA
DlgDirListW
DlgDirListA
DestroyCursor
DeleteMenu
DefWindowProcW
DdeUnaccessData
DdeQueryConvInfo
DdeImpersonateClient
DdeGetData
DdeFreeStringHandle
DdeEnableCallback
DdeConnectList
DdeCmpStringHandles
DdeClientTransaction
DdeAddData
CreateIconFromResourceEx
CreateIcon
CreateDesktopW
CreateCursor
CopyRect
CopyIcon
CloseClipboard
CharUpperW
CharNextExA
CharLowerBuffW
CharLowerA
ChangeMenuW
ChangeMenuA
CallNextHookEx
CallMsgFilterA
BlockInput
BeginPaint
AppendMenuA
AnyPopup
GetTabbedTextExtentW
GetUpdateRect
GetUpdateRgn
GetUserObjectInformationW
AnimateWindow
GetWindow
GetWindowModuleFileNameA
GrayStringA
IMPQueryIMEW
IMPSetIMEW
InternalGetWindowText
InvalidateRect
InvalidateRgn
IsChild
IsDialogMessageA
IsDialogMessageW
IsDlgButtonChecked
IsHungAppWindow
IsIconic
IsRectEmpty
IsZoomed
KillTimer
LoadAcceleratorsW
LoadCursorFromFileA
LoadCursorW
wvsprintfW
WindowFromPoint
WindowFromDC
WINNLSEnableIME
ValidateRgn
UpdateWindow
UpdateLayeredWindow
UnregisterHotKey
UnregisterClassW
TranslateMDISysAccel
TranslateAccelerator
ToUnicodeEx
ToAsciiEx
TileWindows
SystemParametersInfoW
SystemParametersInfoA
SetWindowsHookExW
SetWindowRgn
SetWinEventHook
SetUserObjectInformationA
SetScrollRange
SetScrollPos
SetPropW
SetPropA
SetParent
SetMenuItemInfoW
SetMenuItemBitmaps
SetMenuContextHelpId
SetLayeredWindowAttributes
SetKeyboardState
SetFocus
SetDlgItemTextA
SetClassLongW
SetCaretPos
SetCaretBlinkTime
SendInput
ReplyMessage
RemovePropA
RemoveMenu
ReleaseDC
RegisterWindowMessageA
RegisterShellHookWindow
RegisterClassExA
RealGetWindowClass
RealChildWindowFromPoint
PtInRect
PostThreadMessageW
PostMessageW
PostMessageA
PeekMessageW
PeekMessageA
OpenWindowStationW
OpenIcon
OemToCharBuffA
OemKeyScan
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MonitorFromWindow
MessageBoxIndirectA
MessageBoxA
MapWindowPoints
LookupIconIdFromDirectory
LoadKeyboardLayoutW
GetListBoxInfo
LoadIconA
ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
PageSetupDlgW
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetFileTitleW
GetFileTitleA
FindTextW
FindTextA
CommDlgExtendedError
ChooseFontW
ChooseFontA
ChooseColorW
ChooseColorA
RegOpenKeyW
WriteOleStg
WriteClassStg
WdtpInterfacePointer_UserMarshal
WdtpInterfacePointer_UserFree
UtGetDvtd32Info
UtGetDvtd16Info
UtConvertDvtd32toDvtd16
UtConvertDvtd16toDvtd32
StringFromIID
StringFromGUID2
StringFromCLSID
StgSetTimes
StgPropertyLengthAsVariant
StgOpenPropStg
StgIsStorageILockBytes
StgCreatePropStg
SetConvertStg
STGMEDIUM_UserUnmarshal
STGMEDIUM_UserMarshal
STGMEDIUM_UserFree
RegisterDragDrop
ReadOleStg
ReadFmtUserTypeStg
ReadClassStm
ProgIDFromCLSID
OpenOrCreateStream
OleUninitialize
OleTranslateAccelerator
OleSetAutoConvert
OleSaveToStream
OleSave
OleRegGetUserType
OleRegEnumVerbs
OleRegEnumFormatEtc
OleQueryLinkFromData
OleLockRunning
OleLoadFromStream
OleIsRunning
OleIsCurrentClipboard
OleInitializeWOW
OleGetClipboard
OleGetAutoConvert
OleFlushClipboard
OleDraw
OleDoAutoConvert
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateLinkFromData
OleCreateLink
OleCreateFromData
OleCreateEmbeddingHelper
OleCreateDefaultHandler
OleBuildVersion
MonikerRelativePathTo
MonikerCommonPrefixWith
MkParseDisplayName
IIDFromString
HWND_UserSize
HPALETTE_UserMarshal
HMETAFILEPICT_UserUnmarshal
HMETAFILEPICT_UserMarshal
HMETAFILEPICT_UserFree
HMENU_UserSize
HICON_UserUnmarshal
HGLOBAL_UserUnmarshal
HGLOBAL_UserMarshal
HENHMETAFILE_UserUnmarshal
HENHMETAFILE_UserSize
HENHMETAFILE_UserMarshal
HENHMETAFILE_UserFree
HDC_UserUnmarshal
HBRUSH_UserMarshal
HBRUSH_UserFree
HBITMAP_UserUnmarshal
HBITMAP_UserMarshal
HBITMAP_UserFree
HACCEL_UserUnmarshal
HACCEL_UserFree
GetRunningObjectTable
GetHGlobalFromILockBytes
GetConvertStg
FreePropVariantArray
DoDragDrop
DllGetClassObjectWOW
DllDebugObjectRPCHook
DcomChannelSetHResult
CreateStdProgressIndicator
CreatePointerMoniker
CreateOleAdviseHolder
CreateObjrefMoniker
CreateItemMoniker
CreateDataCache
CreateClassMoniker
CreateAntiMoniker
CoUnmarshalInterface
CoUnmarshalHresult
CoUnloadingWOW
CoSwitchCallContext
CoSetCancelObject
CoRevertToSelf
CoReleaseServerProcess
CoRegisterSurrogate
CoRegisterMessageFilter
CoRegisterChannelHook
CoReactivateObject
CoQueryReleaseObject
CoQueryProxyBlanket
CoQueryAuthenticationServices
CoMarshalInterface
CoLoadLibrary
CoIsOle1Class
CoIsHandlerConnected
CoInitializeWOW
CoInitialize
CoGetObjectContext
CoGetObject
CoGetMalloc
CoGetCurrentLogicalThreadId
CoGetClassVersion
CoGetClassObject
CoGetCallerTID
CoFreeUnusedLibraries
CoFreeLibrary
CoFreeAllLibraries
CoFileTimeToDosDateTime
CoFileTimeNow
CoDosDateTimeToFileTime
CoDeactivateObject
CoCreateObjectInContext
CoCreateInstanceEx
CoCreateGuid
CoCreateFreeThreadedMarshaler
CoCancelCall
CoBuildVersion
CoAddRefServerProcess
CLSIDFromString
CLSIDFromProgIDEx
CLIPFORMAT_UserSize
WdtpInterfacePointer_UserSize
CoWaitForMultipleHandles
VarDecFromCy
VarDecCmpR8
VarDecAdd
VarDateFromUdateEx
VarDateFromUdate
VarDateFromUI1
VarDateFromStr
VarDateFromR8
VarDateFromI4
VarDateFromI2
VarDateFromDec
VarDateFromCy
VarCySu
VarCyNeg
VarCyMulI4
VarCyFromUI4
VarCyFromUI2
VarCyFromR8
VarCyFromI1
VarCyFromDisp
VarCyFix
VarCyCmpR8
VarCyCmp
VarCat
VarBstrFromUI4
VarBstrFromUI2
VarBstrFromUI1
VarBstrFromI4
VarBstrFromI2
VarBstrFromDate
VarBstrFromBool
VarBstrCat
VarBoolFromUI4
VarBoolFromStr
VarBoolFromI4
VarBoolFromDisp
VarBoolFromDec
VarBoolFromCy
VarAnd
VarAdd
VarAbs
VARIANT_UserUnmarshal
SysStringLen
SysReAllocString
SysAllocStringLen
SetErrorInfo
SafeArrayUnaccessData
SafeArraySetIID
SafeArrayRedim
SafeArrayPutElement
SafeArrayLock
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayDestroyDescriptor
SafeArrayCreateVectorEx
SafeArrayCreateVector
SafeArrayCopyData
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayAccessData
RevokeActiveObject
OleTranslateColor
OleLoadPictureFileEx
OleLoadPictureEx
OleIconToCursor
OleCreatePropertyFrameIndirect
OleCreatePropertyFrame
OACreateTypeLib2
LoadTypeLibEx
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserFree
LPSAFEARRAY_Unmarshal
LHashValOfNameSysA
GetRecordInfoFromTypeInfo
GetRecordInfoFromGuids
DispGetParam
DispGetIDsOfNames
DispCallFunc
BstrFromVector
BSTR_UserUnmarshal
BSTR_UserSize
VarDecFromDate
VarDecFromDisp
VarDecFromI1
VarDecFromUI1
VarDecFromUI2
VarDecRound
VarDiv
VarEqv
VarFormatCurrency
VarFormatDateTime
VarFormatPercent
VarI1FromCy
VarI1FromI2
VarI1FromStr
VarI1FromUI1
VarI1FromUI2
VarI2FromCy
VarI2FromDisp
VarI2FromR8
VarI2FromUI2
VarI2FromUI4
VarI4FromI1
VarI4FromR4
VarI4FromR8
VarI4FromStr
VarIdiv
VarMod
VarMul
VarNumFromParseNum
VarOr
VarParseNumFromStr
VarR4FromDate
VarR4FromDec
VarR4FromR8
VarR4FromUI2
VarR8FromDate
VarR8FromDec
VarR8FromStr
VarR8FromUI1
VarR8FromUI2
VarR8Pow
VarSu
VarUI1FromBool
VarUI1FromI2
VarUI1FromI4
VarUI1FromR4
VarUI1FromR8
VarUI1FromUI2
VarUI2FromBool
VarUI2FromCy
VarUI2FromDate
VarUI2FromDec
VarUI2FromDisp
VarUI2FromI1
VarUI2FromI4
VarUI2FromR4
VarUI2FromStr
VarUI4FromDate
VarUI4FromDec
VarUI4FromI2
VarUI4FromUI1
VarWeekdayName
VarXor
VariantCopyInd
VariantInit
VariantTimeToDosDateTime
VectorFromBstr
VarDecFromBool
ord3
PropertySheetW
PropertySheet
ord2
ord13
ord14
InitializeFlatSB
InitMUILanguage
InitCommonControlsEx
ord17
ImageList_Write
ImageList_SetOverlayImage
ImageList_SetImageCount
ImageList_SetIconSize
ImageList_SetFilter
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Replace
ImageList_Read
ImageList_Merge
ImageList_LoadImageW
ImageList_LoadImageA
ImageList_LoadImage
ImageList_GetImageRect
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_GetIcon
ImageList_GetDragImage
ImageList_GetBkColor
ImageList_EndDrag
ImageList_Duplicate
ImageList_DrawIndirect
ImageList_DrawEx
ImageList_Draw
ImageList_DragShowNolock
_TrackMouseEvent
ImageList_DragLeave
ImageList_DragEnter
ImageList_Destroy
ImageList_Create
ImageList_Copy
ImageList_BeginDrag
ImageList_AddMasked
ImageList_AddIcon
ImageList_Add
GetMUILanguage
ord4
FlatSB_ShowScrollBar
FlatSB_SetScrollRange
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollProp
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
FlatSB_EnableScrollBar
DrawStatusTextW
ord5
DrawStatusText
ord15
DestroyPropertySheetPage
ord16
CreateToolbarEx
ord7
CreateStatusWindowW
ord6
CreateStatusWindow
CreatePropertySheetPageW
CreatePropertySheetPageA
CreatePropertySheetPage
ord8
ImageList_DragMove
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ