Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
49c5e7e087305db61cac8419fd30c857bc0e3cda7ac35f788c71273567bf08c5.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
49c5e7e087305db61cac8419fd30c857bc0e3cda7ac35f788c71273567bf08c5.dll
Resource
win10v2004-20230703-en
Target
49c5e7e087305db61cac8419fd30c857bc0e3cda7ac35f788c71273567bf08c5
Size
11.3MB
MD5
6caceb221f447aba9d12a2fbe9fc391b
SHA1
9ae008a0acedf8693acb223cfaff744a2d2439a3
SHA256
49c5e7e087305db61cac8419fd30c857bc0e3cda7ac35f788c71273567bf08c5
SHA512
a340005bd6e1909b479146469a68871de5bf6115699d29bb23d177a9b64b83f4eb9ee9589e2349b0b56c02b3ac5f77249378cf30bbb8f1f262400e48fba488db
SSDEEP
196608:0MqF+jMMvzwNoKvpmssxtHkZQFRriQOwlV7uZaYzjINQdpImZXh:0MG+jMMvzxFWS3r/HCbjIN2pRh
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DwmRenderGesture
RoActivateInstance
RoGetActivationFactory
WindowsIsStringEmpty
WindowsCreateString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsDeleteString
GetFileVersionInfoA
VerQueryValueA
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
waveOutGetNumDevs
waveOutGetDevCapsW
waveOutRestart
waveOutReset
waveOutWrite
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutClose
waveOutOpen
timeEndPeriod
timeBeginPeriod
timeGetDevCaps
timeGetTime
timeKillEvent
timeSetEvent
waveInReset
waveInStop
waveInStart
waveInAddBuffer
waveInUnprepareHeader
waveInPrepareHeader
waveInClose
waveInOpen
waveInGetDevCapsW
waveInGetNumDevs
mixerSetControlDetails
waveInGetPosition
waveOutPause
mixerGetControlDetailsA
mixerGetLineControlsA
mixerGetLineInfoA
mixerClose
mixerOpen
mixerGetDevCapsA
waveInMessage
waveOutMessage
waveOutGetDevCapsA
mixerGetID
waveInGetDevCapsA
waveOutGetPosition
InternetGetCookieW
InternetSetCookieW
CertCloseStore
CertVerifySubjectCertificateContext
CertCreateCertificateContext
CertFreeCertificateContext
CryptVerifyMessageSignature
CryptGetMessageCertificates
CertOpenStore
CertEnumCertificatesInStore
CertGetCertificateContextProperty
CertFindCertificateInStore
CertDuplicateCertificateContext
SafeArrayDestroy
SafeArrayLock
SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetVartype
VariantInit
VariantClear
SysAllocStringLen
SysFreeString
SysAllocString
SafeArrayCreateVector
SysStringByteLen
VariantChangeType
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
UnRegisterTypeLi
OleCreatePropertyFrame
SysAllocStringByteLen
SafeArrayPutElement
SysStringLen
SafeArrayGetLBound
SafeArrayGetUBound
VarBstrCat
ord8
ord1
AlphaBlend
ExpandEnvironmentStringsW
GlobalAlloc
GlobalFree
WideCharToMultiByte
GetLocaleInfoA
GetModuleHandleW
GetFileAttributesA
SetFileAttributesA
OutputDebugStringW
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionEx
CreateMutexW
DisableThreadLibraryCalls
GetModuleFileNameW
LoadLibraryExW
LoadResource
SizeofResource
GlobalLock
GlobalUnlock
LocalAlloc
LocalFree
MulDiv
lstrcmpiW
FindResourceW
GetTickCount
LCMapStringW
GetLocaleInfoW
CreateProcessA
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileSizeEx
RemoveDirectoryW
GetSystemTime
GetSystemDirectoryW
GetSystemWow64DirectoryW
SystemTimeToFileTime
SetThreadAffinityMask
CreateFileA
DeleteFileA
GetFileSize
GetTempFileNameW
ReadFile
SetFilePointer
WriteFile
CreateThread
GetSystemDirectoryA
VirtualQuery
FindResourceExW
LockResource
FindResourceExA
MoveFileExW
GetUserDefaultUILanguage
GetUserDefaultLangID
GetUserPreferredUILanguages
GetTempPathW
SetUnhandledExceptionFilter
GetTimeZoneInformation
ReleaseSemaphore
CreateSemaphoreW
ExpandEnvironmentStringsA
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryA
GetFileAttributesExW
GetFileInformationByHandle
GetFullPathNameW
GetLongPathNameW
GetVolumeInformationW
SetFilePointerEx
OutputDebugStringA
DeviceIoControl
CreateMutexA
GetModuleFileNameA
lstrlenW
GetTempPathA
GetTempFileNameA
ReleaseMutex
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
DuplicateHandle
GetExitCodeThread
SetThreadPriority
TerminateThread
CreateWaitableTimerW
QueryPerformanceCounter
QueryPerformanceFrequency
SleepEx
QueueUserAPC
OpenThread
GetModuleHandleExW
K32GetProcessImageFileNameW
CompareFileTime
SwitchToThread
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsFree
FormatMessageW
GetStdHandle
GetFileType
GetSystemTimeAsFileTime
SwitchToFiber
DeleteFiber
CreateFiber
ConvertFiberToThread
ConvertThreadToFiber
GetEnvironmentVariableW
GetConsoleMode
ReadConsoleA
ReadConsoleW
SetConsoleMode
GetCurrentThread
IsDBCSLeadByte
GetCPInfo
GetACP
TlsSetValue
MultiByteToWideChar
GetProcessTimes
GetCurrentThreadId
GetFileAttributesW
DeleteFileW
GetCurrentProcess
VerifyVersionInfoW
VirtualProtect
LoadLibraryExA
CreateEventA
SetWaitableTimer
CancelWaitableTimer
CreateWaitableTimerA
VerifyVersionInfoA
HeapCreate
HeapDestroy
HeapAlloc
HeapFree
HeapLock
HeapUnlock
HeapWalk
GetProcessMitigationPolicy
VirtualAlloc
VirtualFree
VerSetConditionMask
GetSystemInfo
WaitForMultipleObjects
FreeLibrary
GetLastError
CreateEventW
WaitForSingleObject
ResetEvent
SetEvent
CloseHandle
RaiseException
HeapSize
RaiseFailFastException
GetCurrentProcessId
DebugBreak
LoadLibraryW
LoadLibraryA
GetProcAddress
GetModuleHandleA
TryEnterCriticalSection
TlsGetValue
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
Sleep
GetProcessHeap
GetDateFormatW
GetTimeFormatW
CompareStringW
GetNumberFormatW
GetCurrencyFormatW
GetUserDefaultLCID
EnumSystemLocalesW
IsDebuggerPresent
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
IsProcessorFeaturePresent
GetStringTypeW
WaitForSingleObjectEx
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
RtlUnwind
InterlockedFlushSList
ExitProcess
SetConsoleCtrlHandler
GetDriveTypeW
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitThread
FreeLibraryAndExitThread
HeapReAlloc
GetConsoleCP
FlushFileBuffers
SetStdHandle
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
SetEndOfFile
GlobalSize
GetProcessAffinityMask
GetProcessWindowStation
EnumDisplaySettingsW
GetWindowTextLengthW
DeleteMenu
GetSystemMenu
GetActiveWindow
IsZoomed
IsIconic
SetWindowPlacement
GetWindowPlacement
MoveWindow
FlashWindowEx
ShowWindowAsync
SetCaretPos
ShowCaret
DestroyCaret
CreateCaret
EnumDisplayDevicesW
RegisterClipboardFormatW
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
RemoveMenu
SetMenuInfo
TrackPopupMenu
DestroyMenu
CreatePopupMenu
CreateMenu
DrawMenuBar
ToAscii
GetKeyboardState
CharLowerW
CharUpperW
CloseWindow
WaitForInputIdle
GetMonitorInfoW
CreateIconIndirect
LoadImageW
DestroyIcon
InflateRect
SetRectEmpty
GetCursor
SetWindowTextW
SetWindowTextA
GetPropW
SetPropW
RedrawWindow
IsCharAlphaW
DialogBoxIndirectParamW
SendMessageTimeoutW
GetClipboardFormatNameA
RegisterClipboardFormatA
PtInRect
EqualRect
IntersectRect
SetWindowRgn
IsWindow
GetCurrentInputMessageSource
SystemParametersInfoW
LoadIconW
GetWindowThreadProcessId
WindowFromPoint
MapWindowPoints
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
SetCursorPos
GetUserObjectInformationW
MessageBoxW
MessageBoxA
GetWindowRect
GetClientRect
EndPaint
BeginPaint
UpdateWindow
GetSubMenu
EnableMenuItem
CheckMenuItem
KillTimer
SetTimer
ReleaseCapture
SetCapture
GetCapture
GetQueueStatus
MapVirtualKeyW
GetPointerFrameTouchInfo
GetPointerFrameInfoHistory
GetPointerInfo
GetKeyState
GetDlgItem
EndDialog
DialogBoxParamW
IsWindowVisible
SetWindowPos
RegisterClassW
SendMessageW
GetMessageTime
PeekMessageW
LoadStringW
LoadStringA
CopyRect
PostQuitMessage
SendInput
GetKeyboardLayout
ActivateKeyboardLayout
UpdateLayeredWindow
LoadCursorW
GetParent
UnionRect
InvalidateRect
ReleaseDC
GetDC
GetFocus
SetFocus
CharNextW
GetClassInfoExW
RegisterClassExW
UnregisterClassW
GetDesktopWindow
GetForegroundWindow
MonitorFromWindow
EnumDisplayDevicesA
ShowWindow
DestroyWindow
CreateWindowExW
SetRect
SetWindowLongW
GetWindowLongW
CallWindowProcW
DefWindowProcW
PostThreadMessageW
DispatchMessageW
TranslateMessage
GetMessageW
OffsetRect
FillRect
GetSystemMetrics
GetDoubleClickTime
ShowCursor
GetWindow
GetClassNameA
EnumWindows
GetWindowTextW
GetWindowTextA
IsWindowEnabled
PostMessageW
RegisterWindowMessageA
PostMessageA
IsChild
EndDoc
StartDocW
DPtoLP
ExtTextOutA
SetWorldTransform
GetWorldTransform
GetTextMetricsW
SetTextColor
IntersectClipRect
CreateSolidBrush
GdiFlush
GetObjectW
CreateDIBSection
SelectObject
GetStockObject
DeleteObject
StartPage
CreateCompatibleDC
SetPolyFillMode
StretchDIBits
SetTextAlign
BeginPath
EndPath
FillPath
SelectClipPath
StrokePath
ExtCreatePen
MoveToEx
PolyBezierTo
CloseMetaFile
CreateMetaFileW
DeleteMetaFile
GetDeviceCaps
TextOutW
EndPage
DeleteDC
SetWindowExtEx
SetWindowOrgEx
BitBlt
CreateCompatibleBitmap
SetTextCharacterExtra
SetGraphicsMode
SelectClipRgn
GetTextExtentPoint32W
GetTextExtentPoint32A
GetTextColor
GetTextAlign
GetTextCharacterExtra
GetCurrentObject
RestoreDC
SaveDC
EnumFontFamiliesExW
GetFontData
GetBkMode
GetBkColor
EnumFontFamiliesA
CreateRectRgn
CreatePen
CreateFontIndirectA
GetICMProfileA
SetPixel
CreateFontIndirectW
CreateDCA
CreateBitmap
GetObjectType
CreateRectRgnIndirect
SetViewportOrgEx
LPtoDP
Rectangle
GetClipBox
LineTo
SetBkMode
EnumFontFamiliesW
ExtTextOutW
GdiAlphaBlend
SetStretchBltMode
StretchBlt
SetBkColor
GetStretchBltMode
GetClipRgn
DeregisterEventSource
CryptAcquireContextA
RegOpenKeyA
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
ReportEventW
RegisterEventSourceW
OpenServiceW
OpenSCManagerW
CloseServiceHandle
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
RegQueryValueExW
RegCreateKeyA
RegSetValueExW
QueryServiceStatusEx
RegSetValueExA
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExA
ord165
SHGetFolderPathW
SHGetSpecialFolderPathW
SHFileOperationW
SHAppBarMessage
SHGetPathFromIDListW
SHGetFolderPathA
SHGetFolderLocation
SHGetKnownFolderPath
SHGetDiskFreeSpaceExW
SHGetSettings
SHBrowseForFolderW
ShellExecuteW
CoCreateFreeThreadedMarshaler
CoUninitialize
CreateBindCtx
StringFromGUID2
CoTaskMemRealloc
CreateDataAdviseHolder
CreateOleAdviseHolder
CoWaitForMultipleHandles
OleRegGetMiscStatus
OleRegEnumVerbs
ReadClassStm
WriteClassStm
OleSaveToStream
OleInitialize
OleUninitialize
OleSetClipboard
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
PropVariantClear
OleRegGetUserType
CoCreateInstance
OleGetClipboard
OleFlushClipboard
CoSetProxyBlanket
CoRegisterMessageFilter
CoAllowSetForegroundWindow
CoInitializeEx
ReleaseStgMedium
OleIsCurrentClipboard
StrStrIW
StrRStrIW
PathFindFileNameW
ord158
UrlCanonicalizeW
AssocQueryStringW
StrNCatW
HlinkSimpleNavigateToMoniker
CopyStgMedium
RegisterBindStatusCallback
CreateURLMoniker
UiaGetReservedNotSupportedValue
OpenColorProfileW
CreateColorTransformW
DeleteColorTransform
TranslateBitmapBits
CloseColorProfile
gethostname
getpeername
WSAAddressToStringA
shutdown
getsockopt
getaddrinfo
freeaddrinfo
getnameinfo
WSAWaitForMultipleEvents
WSASend
WSARecv
WSAGetOverlappedResult
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
WSASetLastError
getservbyname
getservbyport
gethostbyname
ioctlsocket
gethostbyaddr
setsockopt
sendto
send
recvfrom
recv
ntohs
inet_ntoa
inet_addr
htons
htonl
getsockname
connect
bind
__WSAFDIsSet
WSASocketW
WSAIoctl
WSAAsyncSelect
WSAGetLastError
WSACleanup
WSAStartup
socket
closesocket
select
ntohl
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ