Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
hvsievaluator.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
hvsievaluator.exe
Resource
win10v2004-20230703-en
Target
hvsievaluator.exe
Size
157KB
MD5
cee355abaed135a0124c501b851c0f86
SHA1
534d53e3644f235297661730ec2a4a6c3e550880
SHA256
667d359af30be08880b33253f628640a1948b78e2dbfddfb02dada9cc8f7b261
SHA512
9bd4c38fc442e6c8b55a3e6ed25538b2819aacb9ea8361e82a45e8620f1649c60f9e3ad07a6c848065af8ceaf5a42298b51e32b1d7a898202055abe5e6d6c271
SSDEEP
3072:yQXiO8UaFHWnjVQesxhuZQvBXXIt9M4UvkZVn/ljvikxsoh:RyavnyeQhhlwDAI/ljdCoh
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
?_Xlength_error@std@@YAXPEBD@Z
_register_thread_local_exe_atexit_callback
_c_exit
_initterm
_initterm_e
_o__errno
_o__exit
_o__get_initial_wide_environment
_o__initialize_onexit_table
_o__initialize_wide_environment
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__purecall
_o__register_onexit_function
_o__seh_filter_exe
_o__set_app_type
_o__set_fmode
_o__set_new_mode
memmove
_o__crt_atexit
_o__wcsicmp
_o_exit
_o_free
_o_malloc
_o_terminate
_CxxThrowException
__CxxFrameHandler3
_o__configthreadlocale
_o___std_exception_destroy
_o___std_exception_copy
_o___p__commode
_o__cexit
_o___p___wargv
_o__callnewh
_o___p___argc
_o___stdio_common_vswprintf
__std_terminate
_o___stdio_common_vsnprintf_s
__C_specific_handler
__CxxFrameHandler4
_o__configure_wide_argv
memcmp
memcpy
memset
wcscmp
GetModuleFileNameW
GetProcAddress
GetModuleHandleW
FreeLibrary
GetModuleHandleExW
GetModuleFileNameA
SysFreeString
SysAllocString
VariantInit
VariantClear
InitOnceBeginInitialize
InitOnceComplete
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegGetValueW
RegDeleteValueW
RegCloseKey
AcquireSRWLockExclusive
LeaveCriticalSection
CreateSemaphoreExW
DeleteCriticalSection
AcquireSRWLockShared
CreateMutexExW
EnterCriticalSection
ReleaseSRWLockShared
OpenSemaphoreW
WaitForSingleObjectEx
InitializeCriticalSectionEx
WaitForSingleObject
ReleaseSRWLockExclusive
ReleaseMutex
ReleaseSemaphore
HeapAlloc
HeapFree
GetProcessHeap
UnhandledExceptionFilter
GetLastError
SetUnhandledExceptionFilter
SetLastError
GetPhysicallyInstalledSystemMemory
CoCreateGuid
CoInitializeEx
CoUninitialize
CoSetProxyBlanket
CoCreateInstance
CoTaskMemFree
EventRegister
EventSetInformation
EventWriteTransfer
EventUnregister
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
TerminateProcess
I_RpcExceptionFilter
FormatMessageW
DebugBreak
IsDebuggerPresent
OutputDebugStringW
GetDiskFreeSpaceExW
CloseHandle
PathCchAppend
GetSystemTimeAsFileTime
GetSystemDirectoryW
GetWindowsDirectoryW
GetProcessMitigationPolicy
IsProcessorFeaturePresent
ExpandEnvironmentStringsW
LocalFree
LocalAlloc
RtlVirtualUnwind
RtlCaptureContext
RtlLookupFunctionEntry
QueryPerformanceCounter
InitializeSListHead
PolicyManager_GetPolicyInt
EnterprisePolicyManagerStore_EvaluatePoliciesUpdateCurrent
EnterprisePolicyManagerStore_SetProviderContextSidAreaPolicyValue
EnterprisePolicyManagerStore_GetCurrentPolicyValue
EnterprisePolicyManagerStore_DeleteProviderContextSidAreaPolicy
EnterprisePolicyManagerStore_GetProviderContextSidAreaPolicyValue
EnterprisePolicyManagerStore_GetEnrollmentState
EnterprisePolicyManagerStore_PerformEvaluatorMerge
DismOpenSession
DismCloseSession
DismInitialize
DismEnableFeature
DismDisableFeature
ord1
ord2
RtlPublishWnfStateData
PathFileExistsW
GetActiveProcessorCount
ord79
ord78
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.