Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
9fc8dc457d854564323b1c256ca249db77f4907593af7fbc0c3b099fc3e4b30b.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
9fc8dc457d854564323b1c256ca249db77f4907593af7fbc0c3b099fc3e4b30b.exe
Resource
win10v2004-20231023-en
Target
9fc8dc457d854564323b1c256ca249db77f4907593af7fbc0c3b099fc3e4b30b
Size
890KB
MD5
380c82dd44b28fe911877595571aab19
SHA1
f8697173727527fefe234ee934251cf44db284a8
SHA256
9fc8dc457d854564323b1c256ca249db77f4907593af7fbc0c3b099fc3e4b30b
SHA512
4e55b27085e750ab64166a6bfca7c8d9e97bd4864cfffa7a9c632aa747855699a7eb470c7effa137dcdef84c282aab380cabc38d6e70eac5560a5ebe1999b5e1
SSDEEP
12288:ob95mIHjFSornz0Lmcb8Ro7777777777777777778777777777777777777z7774:ob95OoT/4oeJ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SHDeleteValueW
SHGetValueW
SHSetValueW
WSACleanup
WSAStartup
?GetCoreCenterPtr@Module@Util@@YAPAUIUnknown@@XZ
?CreateObjectFromFile@Module@Util@@YAJPA_WPAUIUnknown@@ABU_GUID@@2PAPAXPAPAUHINSTANCE__@@@Z
?TXSetLanguageCode@@YAJPB_W@Z
?TXSetStringBundle@@YAXPB_W0@Z
?GetParentDir@Module@Util@@YAHPA_WPAPA_W@Z
?GetBinPath@Module@Util@@YAHPAPA_W@Z
?ReleaseTTInstanceObject@Module@Util@@YAXXZ
?IsUniqueOrMultiTTInstance@Module@Util@@YAKXZ
?HandleTTInstanceObject@Module@Util@@YAHH@Z
?GetModuleConfig@ModuleConfig@@YAHPAPAUIUnknown@@AAH@Z
?SetCmdLineUrl@Module@Util@@YAXPB_W@Z
?SetCoreCenterPtr@Module@Util@@YAHPAUIUnknown@@@Z
?IsURLEx@Module@Util@@YAHPB_W@Z
?GetMainWindowHandler@Module@Util@@YAPAUHWND__@@XZ
?SetGlobalData@Module@Util@@YAXHK@Z
?IsTTInstanceExsist@Module@Util@@YAHXZ
?GetCrashReportInfoFileName@Module@Util@@YAHPAVCComBSTR@ATL@@@Z
?SetStartupTime@Module@Util@@YAXXZ
?SetMainThreadID@Module@Util@@YAHABK@Z
?IsAllowMultiTTIntance@Module@Util@@YAHXZ
?ReleaseModuleConfig@ModuleConfig@@YAXXZ
?DRReportURL@DataReport@Util@@YAXXZ
?DRReport@DataReport@Util@@YAXPAXH@Z
?DRSetWord@DataReport@Util@@YAXPAXKG@Z
?DRGetLTHandle@DataReport@Util@@YAPAXK@Z
?TT_Log@TTLogDef@@SAXW4ENUM_LOG_SERVERITY@@PB_W1ZZ
?CreateTTData@Data@Util@@YAJABU_GUID@@PAPAX@Z
?TT_HookAPI@Module@Util@@YAXH@Z
?SetModuleApp@Module@Util@@YAXPAX@Z
?InitDBFile@Module@Util@@YAHXZ
?DRInit@DataReport@Util@@YAXPB_W@Z
?DoRebootTT@Module@Util@@YAXXZ
?g_bAppExit@@3HA
?GetOSVersion@Module@Util@@YAHPAVCComBSTR@ATL@@@Z
?GetCompileVerInfo@Module@Util@@YAHPAPA_W@Z
?SetStartbyInstall@Module@Util@@YAX_N@Z
?TTLoadLibrary@Module@Util@@YAPAUHINSTANCE__@@PB_WH@Z
?SetTTAsDefaultInVistaAsAdminPri@Module@Util@@YAHH@Z
?UnInstallTT@Module@Util@@YAXXZ
?EnumTTIntance@Module@Util@@YAKXZ
?OutputCrashURLs@Module@Util@@YAXAAVCComBSTR@ATL@@@Z
?GetCompileVerInfo@Module@Util@@YAHAAG000@Z
?GetCallstackInfoFileName@Module@Util@@YAHPAVCComBSTR@ATL@@@Z
?GetMainThreadID@Module@Util@@YAHAAK@Z
?GetModuleHash@Crypt@Util@@YAHPAVCComBSTR@ATL@@@Z
GetStartupInfoW
GetTickCount
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
HeapDestroy
HeapReAlloc
GetVersionExA
InterlockedExchange
HeapFree
GetLastError
GetCurrentProcess
lstrlenA
VirtualQueryEx
MultiByteToWideChar
SetUnhandledExceptionFilter
GetVersion
GetCurrentThread
TerminateThread
VirtualQuery
GetModuleFileNameW
CreateFileW
SetFilePointer
WriteFile
CloseHandle
DeleteFileW
WritePrivateProfileStringW
Sleep
GetProcAddress
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
InterlockedDecrement
InitializeCriticalSection
InterlockedIncrement
WideCharToMultiByte
HeapAlloc
GetProcessHeap
FormatMessageW
GetCurrentThreadId
DispatchMessageW
TranslateMessage
GetMessageW
DefWindowProcW
ShowWindow
SendMessageTimeoutW
PeekMessageW
DestroyWindow
EnableWindow
IsWindow
MessageBoxW
UnregisterClassA
RegOpenKeyExW
RegDeleteValueW
RegEnumValueW
RegSetValueExW
RegCreateKeyW
RegCloseKey
ShellExecuteW
OleInitialize
CLSIDFromString
CoCreateInstance
OleUninitialize
VariantClear
SysStringLen
SysAllocStringByteLen
SysAllocString
VarBstrCmp
SysAllocStringLen
SysFreeString
ord30
ord64
ord23
ord61
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_except_handler4_common
?terminate@@YAXXZ
malloc
??0exception@std@@QAE@ABV01@@Z
__setusermatherr
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
wcsrchr
__wargv
__argc
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
vsprintf_s
_vscprintf
_wcsicmp
_wcslwr_s
wcscmp
memcpy_s
??3@YAXPAX@Z
memset
wcsstr
_recalloc
memmove_s
free
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson
_controlfp_s
_CxxThrowException
_vscwprintf
vswprintf_s
_invalid_parameter_noinfo
??_V@YAXPAX@Z
??2@YAPAXI@Z
swprintf_s
__CxxFrameHandler3
wcslen
InitCommonControlsEx
StackWalk
SymInitialize
SymGetModuleInfo
SymLoadModule
SymSetOptions
SymGetSymFromAddr
SymFunctionTableAccess
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ