Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
Express.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Express.exe
Resource
win10v2004-20230221-en
Target
Express.exe
Size
602KB
MD5
b52d9a8fe88a7d602d35344a86725e73
SHA1
deb3b4cc6401c686df8ff5df9605ffbba746cf49
SHA256
9e8df46060cec818e96303f758cddcd3772b62b14a4739089350a4aea08d1d14
SHA512
815508f43087216b9081508833c787458eece1ea8d8370979bfaee017eda362243a2d5d05b02847f6db477fd04107b0fdd5aadb1feb1221a36d2a55fd204a2fb
SSDEEP
12288:hPS0h6kZy+GEStEIwv2PAOAtCzg7zPFMhdD:pBhZJGES2I02PmtHu
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetProfileStringW
GetTempFileNameW
GetShortPathNameW
CreateFileW
SetFilePointer
SetEndOfFile
FileTimeToLocalFileTime
FileTimeToSystemTime
GetTickCount
WaitForSingleObject
GetSystemInfo
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
GetLocaleInfoW
EnumCalendarInfoW
SetErrorMode
GetVolumeInformationW
GetDiskFreeSpaceW
DeleteFileW
SetEnvironmentVariableA
SetStdHandle
FindFirstFileW
FindClose
GetCurrentProcessId
CreateProcessW
LoadLibraryW
OpenSemaphoreW
ReleaseSemaphore
CloseHandle
lstrcpynW
lstrcmpiW
LoadLibraryExW
FreeLibrary
GetModuleHandleW
InterlockedIncrement
GetCurrentDirectoryW
SetCurrentDirectoryW
GetPrivateProfileStringW
GetCurrentThreadId
lstrcmpW
HeapAlloc
GetCurrentProcess
FlushInstructionCache
MulDiv
GetLastError
lstrcpyW
GlobalAlloc
GlobalLock
GlobalUnlock
GetProcessHeap
HeapFree
MultiByteToWideChar
EnterCriticalSection
GetModuleFileNameW
LeaveCriticalSection
GetCommandLineW
InterlockedDecrement
FormatMessageW
lstrlenW
LocalAlloc
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
GetCPInfo
GetOEMCP
QueryPerformanceCounter
CompareStringW
CompareStringA
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
HeapSize
VirtualQuery
VirtualAlloc
VirtualProtect
TerminateProcess
ExitProcess
GetSystemTimeAsFileTime
HeapReAlloc
RtlUnwind
GetStartupInfoW
WritePrivateProfileStringW
LocalFileTimeToFileTime
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
GlobalFlags
ReleaseMutex
CreateMutexW
GlobalGetAtomNameW
GetFileTime
SetFileTime
GetFileAttributesW
GetCurrentThread
lstrcmpA
lstrcmpiA
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetFullPathNameW
DuplicateHandle
GetFileSize
UnlockFile
LockFile
FlushFileBuffers
WriteFile
ReadFile
GetStringTypeExW
MoveFileW
SystemTimeToFileTime
WideCharToMultiByte
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetProcAddress
LoadLibraryA
GetSystemDefaultLangID
FreeResource
GlobalFree
SetLastError
GetModuleHandleA
LocalFree
GetVersionExA
lstrcatW
lstrlenA
MessageBoxW
CopyRect
SetWindowLongW
GetWindowLongW
CreateWindowExW
ShowWindow
DefWindowProcW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
LoadBitmapW
LoadCursorW
PostMessageW
RegisterWindowMessageW
GetParent
GetSysColor
ReleaseCapture
SetCapture
FillRect
GetDC
ReleaseDC
InvalidateRect
InvalidateRgn
GetDesktopWindow
CallWindowProcW
EndPaint
GetClientRect
wsprintfW
UnregisterClassW
EnableWindow
GetClassInfoExW
SendMessageW
RegisterClassExW
ValidateRect
DrawTextW
GetKeyState
IsWindowVisible
DrawFocusRect
TranslateMessage
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
SetActiveWindow
TabbedTextOutW
DrawTextExW
GrayStringW
GetWindowDC
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
UnhookWindowsHookEx
GetWindowPlacement
IsIconic
SystemParametersInfoA
RegisterClassW
GetClassInfoW
SetScrollInfo
GetScrollInfo
DeferWindowPos
EqualRect
AdjustWindowRectEx
GetMenu
ShowScrollBar
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
TrackPopupMenu
ScrollWindow
MapWindowPoints
LoadIconW
GetMessageTime
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
GetLastActivePopup
GetForegroundWindow
SendDlgItemMessageA
SendDlgItemMessageW
RemovePropW
GetPropW
SetPropW
GetClassLongW
CallNextHookEx
BeginPaint
WinHelpW
IsDialogMessageW
MoveWindow
GetMenuCheckMarkDimensions
CheckMenuItem
EnableMenuItem
ModifyMenuW
SetMenuItemBitmaps
FindWindowW
DrawIcon
SetWindowRgn
CharUpperW
PostQuitMessage
SetWindowsHookExW
ShowOwnedPopups
MapDialogRect
RegisterClipboardFormatW
TranslateAcceleratorW
SetMenu
BringWindowToTop
CreatePopupMenu
InsertMenuItemW
LoadAcceleratorsW
ReuseDDElParam
UnpackDDElParam
LoadMenuW
GetSysColorBrush
GetMenuItemInfoW
MessageBeep
DestroyIcon
CopyAcceleratorTableW
GetNextDlgGroupItem
PeekMessageW
SystemParametersInfoW
GetActiveWindow
ScreenToClient
GetMessagePos
InflateRect
SetForegroundWindow
IsWindowEnabled
EnumWindows
GetWindowThreadProcessId
GetCursorPos
WindowFromPoint
GetMessageW
DispatchMessageW
ClientToScreen
IntersectRect
OffsetRect
SetRectEmpty
SetRect
PtInRect
IsRectEmpty
GetSystemMetrics
GetWindowRect
DrawFrameControl
SetCursor
DestroyMenu
SetWindowContextHelpId
UpdateWindow
PostThreadMessageW
GetDlgCtrlID
KillTimer
SetTimer
GetCapture
LoadImageW
CreateAcceleratorTableW
CharNextW
GetClassNameW
SetWindowPos
DestroyWindow
RedrawWindow
IsWindow
GetDlgItem
SetFocus
GetFocus
IsChild
GetWindow
DestroyAcceleratorTable
GetTextExtentPoint32W
Rectangle
EndDoc
EndPage
StartPage
StartDocW
CreateSolidBrush
GetDeviceCaps
CreateCompatibleBitmap
DeleteDC
SelectObject
DeleteObject
StretchBlt
CreateBitmap
CreateCompatibleDC
GetObjectW
CreateFontIndirectW
GetStockObject
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetTextColor
SetMapMode
GetClipBox
LineTo
MoveToEx
SetTextAlign
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
TextOutW
ExtTextOutW
Escape
ExtCreatePen
GetBkColor
RectVisible
CreateRectRgnIndirect
BitBlt
GetRgnBox
GetTextColor
GetMapMode
Ellipse
LPtoDP
DPtoLP
CreateEllipticRgn
CreatePen
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
RegQueryValueExA
GetFileSecurityW
SetFileSecurityW
RegQueryValueW
RegEnumKeyW
RegQueryValueExW
RegOpenKeyW
RegSetValueW
RegOpenKeyExA
RegDeleteKeyW
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyW
ShellExecuteW
ExtractIconW
DragQueryFileW
DragFinish
SHGetFileInfoW
ImageList_Draw
ImageList_SetBkColor
ImageList_GetImageInfo
ord17
ImageList_Destroy
ImageList_LoadImageW
ImageList_GetImageCount
PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
OleUIBusyW
CoTaskMemFree
CoTaskMemRealloc
OleRun
OleInitialize
CoSuspendClassObjects
CoFreeUnusedLibraries
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
CoTaskMemAlloc
StringFromGUID2
OleUninitialize
CreateStreamOnHGlobal
CoRegisterMessageFilter
SafeArrayDestroy
SafeArrayGetElement
SafeArrayCopy
VariantCopy
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
VarUdateFromDate
VarBstrFromDate
VarDateFromStr
SystemTimeToVariantTime
VariantTimeToSystemTime
VarBstrCmp
VarUI4FromStr
VariantChangeType
OleCreateFontIndirect
SysAllocStringLen
SysStringLen
LoadTypeLi
LoadRegTypeLi
VariantInit
DispCallFunc
VariantClear
SysAllocString
SysStringByteLen
SysAllocStringByteLen
SysFreeString
GetErrorInfo
PrintDlgW
GetOpenFileNameW
GetSaveFileNameW
GetFileTitleW
OpenPrinterW
ClosePrinter
DocumentPropertiesW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ