Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
MicrosoftEdge.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
MicrosoftEdge.exe
Resource
win10v2004-20231023-en
Target
MicrosoftEdge.exe
Size
4.8MB
MD5
dc7a02077fa4f54a8b24e6a6e725b3f8
SHA1
eb6b040e838525218b5cd3bc110ca1f3602b2043
SHA256
e922b70ad667f6997c1d7982bea608360a3a0a2b1d4ae7d4d160859d68b6aa9a
SHA512
c65312cf5513931c8622eb094d11407ac423c292f5d8ab730012b9ed14d6070f34db11d833bc2178d25fa74effb0e0eba867e7e8a1039ddc2b913e47d7cdaf4e
SSDEEP
98304:8M5yhf9Gvu+kTg5FRzUOxZhFd6eZqBIZHUFYFSRPxM:h5qI2o5zUOrd6eZq8
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
EventSetInformation
EventRegister
EventWriteEx
EventUnregister
EventActivityIdControl
ConvertStringSecurityDescriptorToSecurityDescriptorW
EventWrite
RegGetValueW
MakeAbsoluteSD
SetProcessValidCallTargets
GetModuleHandleA
InitializeCriticalSectionEx
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringW
GetCurrentThreadId
FormatMessageW
OpenEventW
SetEvent
CloseHandle
CreateSemaphoreExW
HeapFree
SetLastError
CreateEventExW
ReleaseSemaphore
WaitForSingleObject
ReleaseMutex
GetLastError
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WaitForSingleObjectEx
OpenSemaphoreW
ResetEvent
HeapAlloc
CreateMutexExW
DeleteCriticalSection
GetCurrentProcessId
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitOnceBeginInitialize
InitOnceComplete
GetModuleFileNameA
GetModuleHandleExW
SetErrorMode
GetVersionExW
LoadPackagedLibrary
RaiseException
CreateThread
HeapSetInformation
GetProcAddress
LocalFree
FreeLibrary
LoadLibraryExW
IsDebuggerPresent
GetCurrentProcess
GetProcessMitigationPolicy
GetModuleHandleW
GetUserDefaultLangID
OpenThread
Sleep
InitOnceExecuteOnce
GetStartupInfoA
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
EncodePointer
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
DecodePointer
GetTickCount
ResolveDelayLoadedAPI
DelayLoadFailureHook
GetProcessHeap
memcpy
setlocale
_lock
_unlock
___mb_cur_max_func
___lc_handle_func
___lc_codepage_func
_ismbblead
__pctype_func
calloc
___lc_collate_cp_func
abort
_wcsdup
__crtCompareStringW
__crtLCMapStringW
_get_current_locale
_free_locale
??1type_info@@UAE@XZ
__dllonexit
_onexit
_XcptFilter
__p__commode
_amsg_exit
__CxxFrameHandler3
__set_app_type
exit
_exit
_cexit
__p__fmode
__setusermatherr
_initterm
_acmdln
_except_handler4_common
_controlfp
_ftol2_sse
_ftol2
wcslen
memset
_wcsnicmp
_wcsicmp
realloc
strchr
??0bad_cast@@QAE@PBD@Z
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@ABV0@@Z
wcsrchr
wcstol
_errno
wcschr
towlower
__ExceptionPtrRethrow
wcstok_s
_wtoi
swprintf_s
malloc
free
wcsstr
_vsnprintf_s
memcpy_s
??0exception@@QAE@ABQBD@Z
?what@exception@@UBEPBDXZ
_vsnwprintf
__ExceptionPtrCurrentException
__ExceptionPtrCreate
__ExceptionPtrDestroy
__ExceptionPtrCopy
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@XZ
?terminate@@YAXXZ
memmove
_purecall
??3@YAXPAX@Z
_callnewh
__getmainargs
??0exception@@QAE@ABQBDH@Z
_CxxThrowException
floor
??0InvalidArgumentException@Platform@@Q$AAA@XZ
?ToString@Guid@Platform@@QAAP$AAVString@2@XZ
??0GridLength@Xaml@UI@Windows@@QAA@NW4GridUnitType@123@@Z
??0InvalidArgumentException@Platform@@Q$AAA@P$AAVString@1@@Z
??0Exception@Platform@@Q$AAA@HP$AAVString@1@@Z
?ReferenceEquals@Object@Platform@@SA_NP$AAV12@0@Z
??0RepeatBehavior@Animation@Media@Xaml@UI@Windows@@QAA@N@Z
?CreateException@Exception@Platform@@SAP$AAV12@HP$AAVString@2@@Z
?Equals@Object@Platform@@Q$AAA_NP$AAV12@@Z
?Equals@ValueType@Platform@@Q$AAA_NP$AAVObject@2@@Z
?InitializeData@Details@Platform@@YGJH@Z
?UninitializeData@Details@Platform@@YGXH@Z
?GetActivationFactoryByPCWSTR@@YGJPAXAAVGuid@Platform@@PAPAX@Z
?GetIidsFn@@YGJHPAKPBU__s_GUID@@PAPAVGuid@Platform@@@Z
?get@Message@Exception@Platform@@Q$AAAP$AAVString@3@XZ
?ReCreateException@Exception@Platform@@SAP$AAV12@H@Z
?ResolveWeakReference@Details@Platform@@YGP$AAVObject@2@ABU_GUID@@PAPAU__abi_IUnknown@@@Z
?ToString@int32@default@@QAAP$AAVString@Platform@@XZ
?CreateException@Exception@Platform@@SAP$AAV12@H@Z
?GetWeakReference@Details@Platform@@YGPAU__abi_IUnknown@@Q$ADVObject@2@@Z
??0FailureException@Platform@@Q$AAA@P$AAVString@1@@Z
??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@P$AAV01@@Z
?get@FullName@Type@Platform@@Q$AAAP$AAVString@3@XZ
??0NullReferenceException@Platform@@Q$AAA@XZ
?EventSourceGetTargetArrayEvent@Details@Platform@@YGPAXPAXIPBXPA_J@Z
??0ObjectDisposedException@Platform@@Q$AAA@P$AAVString@1@@Z
?EventSourceGetTargetArray@Details@Platform@@YGPAXPAXPAUEventLock@12@@Z
?GetIBoxArrayVtable@Details@Platform@@YGPAXPAX@Z
?Allocate@Heap@Details@Platform@@SAPAXI@Z
??0Delegate@Platform@@Q$AAA@XZ
??0DisconnectedException@Platform@@Q$AAA@XZ
??0ChangedStateException@Platform@@Q$AAA@XZ
?EventSourceInitialize@Details@Platform@@YGXPAPAX@Z
??0OutOfBoundsException@Platform@@Q$AAA@XZ
??0FailureException@Platform@@Q$AAA@XZ
??0OutOfMemoryException@Platform@@Q$AAA@XZ
??0NotImplementedException@Platform@@Q$AAA@XZ
?AllocateException@Heap@Details@Platform@@SAPAXII@Z
?EventSourceUninitialize@Details@Platform@@YGXPAPAX@Z
?__abi_cast_Object_to_String@__abi_details@@YGP$AAVString@Platform@@_NP$AAVObject@3@@Z
?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@P$AAV12@@Z
?__abi_make_type_id@@YGP$AAVType@Platform@@ABU__abi_type_descriptor@@@Z
?CreateValue@Details@Platform@@YGP$AAVObject@2@W4TypeCode@2@PBX@Z
?__abi_ObjectToString@__abi_details@@YGP$AAVString@Platform@@P$AAVObject@3@_N@Z
?__abi_translateCurrentException@@YGJ_N@Z
?GetIBoxVtable@Details@Platform@@YGPAXPAX@Z
?__abi_cast_String_to_Object@__abi_details@@YGP$AAVObject@Platform@@P$AAVString@3@@Z
?Allocate@Heap@Details@Platform@@SAPAXII@Z
?__abi_WinRTraiseNotImplementedException@@YGXXZ
?__abi_WinRTraiseInvalidCastException@@YGXXZ
?__abi_WinRTraiseNullReferenceException@@YGXXZ
?__abi_WinRTraiseOperationCanceledException@@YGXXZ
?__abi_WinRTraiseFailureException@@YGXXZ
?__abi_WinRTraiseAccessDeniedException@@YGXXZ
?__abi_WinRTraiseOutOfMemoryException@@YGXXZ
?__abi_WinRTraiseInvalidArgumentException@@YGXXZ
?__abi_WinRTraiseOutOfBoundsException@@YGXXZ
?__abi_WinRTraiseChangedStateException@@YGXXZ
?__abi_WinRTraiseClassNotRegisteredException@@YGXXZ
?__abi_WinRTraiseWrongThreadException@@YGXXZ
?__abi_WinRTraiseDisconnectedException@@YGXXZ
?__abi_WinRTraiseObjectDisposedException@@YGXXZ
?__abi_WinRTraiseCOMException@@YGXJ@Z
?ReleaseTarget@ControlBlock@Details@Platform@@AAEXXZ
?AlignedFree@Heap@Details@Platform@@SAXPAX@Z
?Free@Heap@Details@Platform@@SAXPAX@Z
??0Object@Platform@@Q$AAA@XZ
?GetCmdArguments@Details@Platform@@YGPAPA_WPAH@Z
?EventSourceRemove@Details@Platform@@YGXPAPAXPAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?EventSourceAdd@Details@Platform@@YG?AVEventRegistrationToken@Foundation@Windows@@PAPAXPAUEventLock@12@P$AAVDelegate@2@@Z
?EventSourceGetTargetArraySize@Details@Platform@@YGIPAX@Z
CoCreateFreeThreadedMarshaler
CoCreateGuid
CoTaskMemFree
CoTaskMemAlloc
CoInitializeEx
CoInitializeSecurity
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoGetApartmentType
CoGetObjectContext
WindowsIsStringEmpty
WindowsGetStringLen
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsConcatString
WindowsCompareStringOrdinal
WindowsCreateString
WindowsDuplicateString
WindowsCreateStringReference
RoGetActivationFactory
SetRestrictedErrorInfo
RoOriginateError
RoFailFastWithErrorContext
RoReportUnhandledError
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ