Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
dumper.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
dumper.exe
Resource
win10v2004-20230915-en
Target
dumper.exe
Size
96KB
MD5
9f9efb77091d9abfea592f0c036873f0
SHA1
728bb3fb54f8d81c1b095fc41266959c223f6b84
SHA256
006127860f4723a1d5b3ae879db1c73bcddf49c1acc28a7c2f42ca62f4990fed
SHA512
1e4ecfad83e90674ab8034d8befcaa23ef32111c45807ebd8c354e8947d10368e4bc316ff6d9d89b13dc9f1fcffc9d1ffc1b63355b443eddb2ca5b8cfd6c7f40
SSDEEP
3072:5arlIOWeWVXTbqltAoWo/guyUPjvaNXW0P1thN1vAsOI98X:5aVW/3atljWdkX
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
??0Exception@core@@QEAA@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEAVIExceptionObject@1@@Z
?os_detail@core@@YA_NHAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBW4OSErrorType@1@@Z
?start@Thread@core@@QEAAXXZ
?create_thread@core@@YA?AV?$SharedPtr@VThread@core@@@1@$$QEAV?$function@$$A6AXXZ@std@@@Z
?create_promise@core@@YA?AV?$InterfacePtr@VIPromise@core@@@1@XZ
?replace_all@core@@YA_KAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV23@1@Z
?object@Exception@core@@QEBA?AV?$InterfacePtr@VIExceptionObject@core@@@2@XZ
?create_numeric_value@core@@YAPEAVIValue@1@H@Z
?flush@BaseOutputStream@core@@QEAAXXZ
?cli_banner_with_copyright@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV23@@Z
??6BaseOutputStream@core@@QEAAAEAV01@_S@Z
?kDefaultLineSeparator@core@@3_SB
?initialize@SCOM_Module@core@@QEAAXXZ
??6BaseOutputStream@core@@QEAAAEAV01@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
??6BaseOutputStream@core@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?kCLI_Switch_version@core@@3QB_SB
??0FormattedOutputStream@core@@QEAA@PEAVIWriter@1@@Z
??_7FormattedOutputStream@core@@6B@
??1FormattedOutputStream@core@@UEAA@XZ
?cli_add_switch_version@core@@YAXPEAVICommandLineCommandCtor@1@@Z
?cli_add_switch_help@core@@YAXPEAVICommandLineCommandCtor@1@@Z
?current_process@core@@YAPEAVSCOM_Process@1@XZ
??1Process@core@@UEAA@XZ
??0Thread@core@@QEAA@W4PoolType@01@@Z
?cleanup@SCOM_Module@core@@QEAAXXZ
?cleanup@SCOM_ResourceBundle@core@@QEAAXXZ
??0CoreInitManager@core@@QEAA@XZ
??1CoreInitManager@core@@QEAA@XZ
??1Thread@core@@UEAA@XZ
?run@Thread@core@@UEAAXXZ
?wait@Thread@core@@MEAAXPEAV12@@Z
?doStart@Process@core@@MEAAXXZ
?doStartTimer@Thread@core@@MEAAXXZ
?isProcess@Process@core@@UEAA_NXZ
??0ModuleLoader@core@@QEAA@PEB_S@Z
??1ModuleLoader@core@@QEAA@XZ
?handle@ModuleLoader@core@@QEAAPEAUHINSTANCE__@@XZ
?release@?$Refcountable@VThread@core@@UAtomicCounter@2@@core@@QEAAHXZ
?is_space@core@@YA_N_S@Z
??1URL@core@@QEAA@XZ
??0Exception@core@@QEAA@AEBV01@@Z
?filePath@URL@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?string_printf@core@@YAHAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEB_SZZ
??0URL@core@@QEAA@AEBV?$basic_string_view@_SU?$char_traits@_S@std@@@std@@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_N@Z
?WriteDump@core@@YA_NW4_MINIDUMP_TYPE@@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEAU_EXCEPTION_POINTERS@@KKAEAUErrDescr@1@@Z
??0RWMutex@core@@QEAA@XZ
??1RWMutex@core@@QEAA@XZ
?string_uito@core@@YAAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@IAEAV23@H@Z
?string_ui64to@core@@YAAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_KAEAV23@H@Z
?inner@Exception@core@@QEBA?AV?$InterfacePtr@VIExceptionObject@core@@@2@XZ
?write_call_message@core@@YAXJPEBDPEB_SAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
??0SCOM_ResourceBundle@core@@QEAA@PEBD@Z
??1SCOM_ResourceBundle@core@@QEAA@XZ
?isServerProcess@Thread@core@@UEAA_NXZ
?isUIThread@Thread@core@@UEAA_NXZ
?construct@Process@core@@AEAAXPEAVSCOM_Module@2@@Z
?string_toui64@core@@YA_KPEB_SPEAPEB_S@Z
?string_toul@core@@YAKPEB_SPEAPEB_S@Z
?utf8@Converter@core@@SAAEBV12@XZ
?widen@Converter@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEBD_K@Z
?get_exit_code@core@@YAHXZ
??1Exception@core@@QEAA@XZ
?getVersionSuffix@core@@YAAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?load_wstring@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEAVSCOM_ResourceBundle@1@PEBD@Z
ord17
?nuke_delete_size@@YAXPEAX_K@Z
?nuke_delete@@YAXPEAX@Z
?nuke_new_nothrow@@YAPEAX_K@Z
?nuke_new@@YAPEAX_K@Z
DeleteCriticalSection
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
TerminateProcess
GetModuleFileNameW
GetCurrentProcess
LoadResource
GetProcAddress
CreateProcessW
IsDebuggerPresent
OutputDebugStringW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
CloseHandle
LoadLibraryExW
WaitForSingleObject
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
FreeLibrary
lstrcmpiW
GetModuleHandleW
FindResourceW
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
GetExitCodeProcess
SizeofResource
UpdateWindow
CreateDialogIndirectParamW
CharNextW
DestroyWindow
ShowWindow
ShellExecuteExW
CoUninitialize
CoInitializeSecurity
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitialize
VarUI4FromStr
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegDeleteKeyW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
GetTokenInformation
__CxxFrameHandler3
__std_terminate
_purecall
wcsstr
memset
__C_specific_handler
_CxxThrowException
memcpy
malloc
_recalloc
_set_new_mode
free
_initialize_onexit_table
_exit
exit
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
__p___argc
_set_app_type
_seh_filter_exe
__p___wargv
_crt_atexit
_register_onexit_function
_cexit
terminate
_invalid_parameter_noinfo_noreturn
_c_exit
_errno
_invalid_parameter_noinfo
_register_thread_local_exe_atexit_callback
_set_error_mode
wcsncpy_s
__setusermatherr
_set_fmode
__p__commode
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ