Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2f0f365cf85728137b2acddaa35c3aad42d269a44282676219e90cc83079db61.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
2f0f365cf85728137b2acddaa35c3aad42d269a44282676219e90cc83079db61.dll
Resource
win10v2004-20230621-en
Target
2f0f365cf85728137b2acddaa35c3aad42d269a44282676219e90cc83079db61
Size
1.9MB
MD5
0723f6a82506390cf8a793ce2951294c
SHA1
618b49726353222fbdef57424c216af428b3a6f1
SHA256
2f0f365cf85728137b2acddaa35c3aad42d269a44282676219e90cc83079db61
SHA512
8c6bf62c2102d0b49f3797424425e82035f901c97ca0f51cf9d86527639ef745bfb823ee5c81e59b2db3740400ff02b4db030eca285e4b4f4dcf79a49e305e1b
SSDEEP
49152:7u2XzhjIPRWR4Z97N0pIzyBMMBch1ZdxTUKXvjdfAt7Sw7o:7u2NFRU7c4h1zlwG
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
StrStrIW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
CryptQueryObject
CertCloseStore
CryptMsgGetParam
CertFindCertificateInStore
CertGetNameStringW
CertFreeCertificateContext
CryptMsgClose
??0RCConfigUser@DM@RC@@QAE@W4RCConfigCenterCategory@12@@Z
sqlite3_exec
sqlite3_close
sqlite3_free
sqlite3_open_v2
?GetUpdateStep@RCSQLiteUpdateNotification@RC@@QBE?AW4RCSQLiteUpdateStep@2@XZ
?AddObserver@RCSQLiteUpdateDMgr@RC@@SAXABVAbstractObserver@Poco@@@Z
?GetErrorCode@RCSQLiteUpdateNotification@RC@@QBEIXZ
?ExecSQL@RCSQLiteConnection@RC@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV34@@Z
?GetStringField@RCSQLiteRecordSet@RC@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@HABV34@@Z
?GetFieldNum@RCSQLiteRecordSet@RC@@QBEHXZ
?MoveFirst@RCSQLiteRecordSet@RC@@QAE_NXZ
??1RCSQLiteRecordSet@RC@@QAE@XZ
??0RCSQLiteRecordSet@RC@@QAE@XZ
?ExecSQL@RCSQLiteConnection@RC@@QAE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVRCSQLiteRecordSet@2@@Z
?DisconnectDB@RCSQLiteConnection@RC@@QAE_NXZ
?LoadDB@RCSQLiteConnection@RC@@QAE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??1RCSQLiteConnection@RC@@QAE@XZ
??0RCSQLiteConnection@RC@@QAE@XZ
?RemoveObserver@RCSQLiteUpdateDMgr@RC@@SAXABVAbstractObserver@Poco@@@Z
GetProcAddress
FreeLibrary
HeapFree
GetProcessHeap
CreateMutexW
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
Sleep
LoadLibraryA
RaiseException
DecodePointer
DeleteCriticalSection
GetTickCount
SizeofResource
EnterCriticalSection
GetModuleFileNameW
LeaveCriticalSection
WaitForSingleObject
GetCurrentThreadId
MultiByteToWideChar
LoadResource
FindResourceW
GetModuleHandleW
lstrcmpiW
LoadLibraryExW
WriteProcessMemory
OpenProcess
SetEvent
ResetEvent
VirtualAllocEx
CreateRemoteThread
VirtualFreeEx
HeapAlloc
LocalFree
SetLastError
WideCharToMultiByte
InterlockedExchange
DeviceIoControl
CreateThread
FormatMessageW
GetQueuedCompletionStatus
SuspendThread
ResumeThread
PostQueuedCompletionStatus
DeleteFileW
CreateIoCompletionPort
FileTimeToSystemTime
FindCloseChangeNotification
QueryDosDeviceW
GetEnvironmentVariableW
OpenMutexW
VirtualQuery
ReleaseSemaphore
CreateSemaphoreW
QueueUserAPC
IsWow64Process
OpenThread
GetPrivateProfileStringW
GetModuleHandleExW
ReleaseMutex
GetCurrentProcess
WriteFile
ReadFile
TryEnterCriticalSection
CreateNamedPipeW
InitializeCriticalSection
DisconnectNamedPipe
ConnectNamedPipe
SetFilePointer
SetEndOfFile
GetFileSize
InterlockedExchangeAdd
GlobalMemoryStatusEx
ExpandEnvironmentStringsW
GetVersionExW
GetFileAttributesW
GetLongPathNameW
GetFileAttributesExW
CreateProcessW
FindFirstChangeNotificationW
GetTempPathW
IsBadStringPtrW
IsBadReadPtr
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
DisableThreadLibraryCalls
InterlockedIncrement
GetCurrentProcessId
CloseHandle
GetLastError
CreateEventW
WaitForMultipleObjects
InterlockedDecrement
CreateToolhelp32Snapshot
LoadLibraryW
Thread32First
Thread32Next
CreateFileW
GetLocalTime
OpenFileMappingW
GetTempFileNameW
CopyFileW
GetLogicalDriveStringsW
FindNextChangeNotification
FindFirstFileW
GetSystemInfo
LockResource
TerminateThread
SetFileTime
GetFileTime
FindNextFileW
FindClose
CreateDirectoryW
GetFullPathNameW
SetFileAttributesW
GetCurrentDirectoryW
GetACP
GetWindowsDirectoryW
GetFileSizeEx
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
OutputDebugStringW
lstrlenW
GetMessageW
DispatchMessageW
PeekMessageW
CharNextW
TranslateMessage
PostThreadMessageW
wsprintfW
FindWindowW
CloseServiceHandle
OpenSCManagerW
OpenServiceW
QueryServiceStatusEx
SetSecurityDescriptorDacl
AllocateAndInitializeSid
FreeSid
InitializeSecurityDescriptor
InitializeAcl
GetLengthSid
AddAccessAllowedAce
RegQueryInfoKeyW
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegSetValueExW
RegDeleteValueW
RegQueryValueExW
RegNotifyChangeKeyValue
RegCloseKey
RegOpenKeyExW
SHGetFolderPathW
SHGetSpecialFolderPathW
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
VarUI4FromStr
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
_Mtx_trylock
?_Xout_of_range@std@@YAXPBD@Z
_Mtx_unlock
_Thrd_join
_Cnd_init
_Mtx_destroy
_Thrd_id
_Thrd_start
_Mtx_init
_Cnd_wait
_Cnd_destroy
_Cnd_do_broadcast_at_thread_exit
_Mtx_init_in_situ
_Mtx_lock
_Mtx_destroy_in_situ
?_Xlength_error@std@@YAXPBD@Z
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_signal
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Xbad_alloc@std@@YAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
FindFirstUrlCacheEntryW
FindCloseUrlCache
FindNextUrlCacheEntryW
__std_type_info_name
__CxxFrameHandler3
__std_exception_copy
_purecall
_except_handler4_common
__std_terminate
__RTDynamicCast
memchr
__RTtypeid
__std_exception_destroy
wcsrchr
wcsstr
__std_type_info_destroy_list
memmove
_CxxThrowException
strstr
wcschr
memset
memcpy
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_crt_atexit
_beginthreadex
_seh_filter_dll
_cexit
_initterm
_errno
_invalid_parameter_noinfo
_initterm_e
_execute_onexit_table
_register_onexit_function
terminate
_invalid_parameter_noinfo_noreturn
_time64
_mktime64
_localtime64
towupper
towlower
strpbrk
_wcsicmp
_wcsnicmp
wcsncpy_s
wcscpy_s
strcpy_s
_stricmp
tolower
wcsncpy
atoi
_atoi64
wcstoul
strtoull
_wtoi
__stdio_common_vswprintf_s
__stdio_common_vswprintf
ftell
_wfopen_s
fclose
fseek
rewind
fwrite
fread
__stdio_common_vsprintf
__stdio_common_vswscanf
__stdio_common_vsprintf_s
realloc
_callnewh
free
calloc
malloc
_recalloc
srand
rand
_splitpath_s
_dtest
modf
_except1
??1RCSQLiteUpdateNotification@RC@@UAE@XZ
??4RCConfigUser@DM@RC@@QAEAAV012@ABV012@@Z
??4RCSQLiteUpdateDMgr@RC@@QAEAAV01@$$QAV01@@Z
??4RCSQLiteUpdateDMgr@RC@@QAEAAV01@ABV01@@Z
??_FRCConfigUser@DM@RC@@QAEXXZ
?__autoclassinit2@RCConfigUser@DM@RC@@QAEXI@Z
?__autoclassinit2@RCSQLiteConnection@RC@@QAEXI@Z
?__autoclassinit2@RCSQLiteRecordSet@RC@@QAEXI@Z
RCVBusGetModuleCount
RCVBusQueryModule
RCVBusReleaseModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ