Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
amtlib_v10.0.0.221.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
amtlib_v10.0.0.221.dll
Resource
win10v2004-20220812-en
Target
amtlib_v10.0.0.221.dll.exe
Size
2.9MB
MD5
b6e4b49463a79182c790d8cb654dd6e4
SHA1
440fb487390618541faeb99809eb3c6e87afce67
SHA256
ed5ca12fbf7cfc3e3a98e31f2b311e20b2c34d06e6e0a7d569666cb5ca01da8f
SHA512
08c7bff53d18756a178cdfbbd17360db20269cae854dc28a9a5e5f87d608390577624329af0d1d0ba1ee26f4f30a871692a89e085fa236efda0b749e5ad9619c
SSDEEP
49152:SUpAvB58NiecafyaC2CJtPp/DhHOw5C2RubhI:7YMzctxJb79OrG
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetIfTable
WinHttpOpenRequest
WinHttpCrackUrl
WinHttpOpen
WinHttpCloseHandle
WinHttpConnect
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpSetStatusCallback
WinHttpSetCredentials
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpGetProxyForUrl
WinHttpGetIEProxyConfigForCurrentUser
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
CM_Get_DevNode_Status
SetupDiGetDeviceInstanceIdW
PathFileExistsW
PathFindFileNameW
PathRenameExtensionW
PathIsDirectoryW
PathAppendW
PathIsFileSpecW
PathAddExtensionW
PathRemoveExtensionW
PathRemoveFileSpecW
ExitProcess
MoveFileExW
GetFileAttributesExW
TzSpecificLocalTimeToSystemTime
SetFileTime
FileTimeToSystemTime
GetCurrentProcess
GetCurrentThread
GetLastError
CloseHandle
FreeLibrary
GetProcAddress
LocalFree
SetLastError
FormatMessageW
LoadLibraryW
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleFileNameW
GetEnvironmentVariableA
WideCharToMultiByte
LockFileEx
UnlockFileEx
GetFileSize
WriteFile
ReadFile
SetEndOfFile
SetFilePointer
GetSystemTime
SystemTimeToFileTime
CreateFileW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
DecodePointer
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
RaiseException
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetComputerNameExW
MultiByteToWideChar
GetTempPathW
GetLocalTime
GetModuleHandleExW
GetDateFormatW
CreateThread
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
ReleaseSemaphore
WaitForSingleObject
GetTickCount
OpenEventW
CreateSemaphoreW
GetTimeZoneInformation
GetVersionExW
OutputDebugStringA
TryEnterCriticalSection
GetCurrentThreadId
SwitchToThread
ResumeThread
GetFileSizeEx
CreateMutexW
ReleaseMutex
OpenMutexW
CreateProcessW
FindClose
FindFirstFileW
FindNextFileW
GlobalFree
WaitForMultipleObjects
CreateEventW
CreateDirectoryW
LocalAlloc
IsDBCSLeadByteEx
FlushFileBuffers
WriteConsoleW
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetModuleFileNameA
GetEnvironmentStringsW
GetFileType
GetDriveTypeW
GetFullPathNameA
GetFullPathNameW
InterlockedFlushSList
InterlockedPushEntrySList
GetTimeFormatW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
LoadLibraryExW
FindNextFileA
FindFirstFileExW
FindFirstFileExA
SetConsoleCtrlHandler
GetConsoleCP
SetStdHandle
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFilePointerEx
ReadConsoleW
RtlUnwindEx
RtlPcToFileHeader
OutputDebugStringW
InitializeSListHead
GetConsoleMode
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetStdHandle
GetACP
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
GetStringTypeW
EncodePointer
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
ResetEvent
MessageBoxW
UnregisterClassW
wsprintfW
OpenThreadToken
RegQueryValueExA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyA
RegDeleteKeyW
SetSecurityInfo
SetNamedSecurityInfoW
GetNamedSecurityInfoW
CreateWellKnownSid
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
SetTokenInformation
SetEntriesInAclW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetUserNameW
FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
SystemFunction036
OpenProcessToken
SHCreateDirectoryExW
SHGetFolderPathW
ShellExecuteA
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CreateErrorInfo
SetErrorInfo
VariantChangeType
VariantInit
GetErrorInfo
VariantClear
SysAllocStringByteLen
SysStringLen
SysAllocString
SysFreeString
AMTGetCurrentLicenseState
AMTGetLibVersion
AMTGetParentLEIDLicenseStatus
AMTGetProductClearSerialNumber
AMTGetRoyaltyBearingLEIDs
AMTGetSerialExpiryDate
AMTObtainProductLicense
AMTObtainRunningLicenseRecord
AMTPlugPlugRequest
AMTPreObtainProductLicense
AMTPreValidateProductLicense
AMTRecordCodecInvocation
AMTReleaseProductLicense
AMTRetrieveAdobeID
AMTRetrieveInfoForLEID
AMTRetrieveLibraryPath
AMTRetrievePersonGUIDWithAuthSource
AMTValidateProductLicense
GetAsnVersion
asnInst_InstallerProductInfo_constructor
asnInst_getAsnProductInfo
asnInst_getAsnProductInfoInMem
asn_exit
asn_info
asn_init
asn_makePrivate
asn_makePrivateEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ