Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
Anno4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Anno4.exe
Resource
win10v2004-20231215-en
Target
Anno4.exe
Size
14.3MB
MD5
d5738190da2f1efa306565d6e2f905e0
SHA1
e10684e2680c03c434e54da952f000aa419126cd
SHA256
d16ef628029e771aa57944d4b356b747fdc4c97f1df29a0083e505f697fe32f8
SHA512
85c12987439c5234d6ff3265a4720ae65b773b08f6793ee694c93867d5cc712732e44d086cbcc0a252cbe0da3e0f0af8266d23b5d9daff2cb3e88817092c9a17
SSDEEP
196608:mkcGkzFjyjDcP/dh+2LPgf+ul+iHLGEOCGj:9cIDC/nRCl+Cij
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\PATCH_ANNO4\Anno4\Anno4.pdb
getsockname
socket
WSACleanup
WSAGetLastError
inet_ntoa
bind
closesocket
ntohl
ntohs
htons
connect
send
recv
WSASetLastError
shutdown
setsockopt
ioctlsocket
__WSAFDIsSet
select
accept
listen
sendto
recvfrom
getnameinfo
gethostbyname
gethostname
inet_addr
WSAStartup
htonl
getsockopt
gethostbyaddr
FreeLibrary
RaiseException
CreateMutexA
GetLastError
GetModuleFileNameA
GetCommandLineA
GetCurrentThread
SuspendThread
CreateDirectoryW
GetSystemInfo
CreateEventA
ResetEvent
WaitForSingleObject
SetEvent
GetDiskFreeSpaceExW
GetCurrentDirectoryW
ResumeThread
GetComputerNameA
GetLocaleInfoA
OpenMutexA
DeleteFileW
QueryPerformanceCounter
QueryPerformanceFrequency
GetLocalTime
GetLogicalDriveStringsA
GetModuleHandleA
SwitchToThread
OpenThread
SetLastError
VirtualQuery
GetFileTime
GetFileSizeEx
VirtualAlloc
VirtualFree
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
PulseEvent
CreateSemaphoreA
ReleaseSemaphore
SetThreadAffinityMask
GetVersion
SetThreadPriority
SetThreadPriorityBoost
OutputDebugStringA
SetFileAttributesA
ReadFile
DebugBreak
RemoveDirectoryA
FindNextFileA
DeleteFileA
CopyFileA
MoveFileA
DuplicateHandle
UnhandledExceptionFilter
PeekNamedPipe
GetFileInformationByHandle
SetStdHandle
GetStdHandle
SetHandleCount
GetDriveTypeW
CloseHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
RtlUnwind
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
GetStartupInfoA
GetProcessHeap
GetDateFormatA
GetTimeFormatA
HeapReAlloc
ExitProcess
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
InterlockedExchange
GetStringTypeA
LCMapStringA
EnumSystemLocalesA
lstrcmpiA
CompareStringW
CompareStringA
GetCPInfo
LCMapStringW
GetStringTypeW
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
FlushFileBuffers
SetFilePointer
CreateFileA
SetUnhandledExceptionFilter
ReleaseMutex
WriteFile
GetCurrentThreadId
CreateDirectoryA
GetCurrentProcessId
FindClose
GetCurrentProcess
SetEndOfFile
GetFileType
InterlockedDecrement
InterlockedIncrement
FindFirstFileA
Sleep
GetProcAddress
InterlockedExchangeAdd
SetPriorityClass
ExitThread
GetSystemDirectoryA
SetThreadExecutionState
GetModuleFileNameW
LoadLibraryW
GlobalAlloc
GlobalLock
GlobalUnlock
LocalAlloc
GetTempFileNameA
GetTempPathA
CreatePipe
GetCurrentDirectoryA
LoadLibraryA
GetFileAttributesA
GetTickCount
HeapSize
TerminateProcess
IsDebuggerPresent
HeapDestroy
HeapCreate
FatalAppExitA
GetTimeZoneInformation
SetConsoleCtrlHandler
GetACP
GetOEMCP
CreateFileW
GetFileSize
GetTempFileNameW
GetTempPathW
LocalFree
CreateProcessA
FindCloseChangeNotification
FindFirstChangeNotificationA
WaitForMultipleObjects
FindNextChangeNotification
WideCharToMultiByte
MultiByteToWideChar
FindFirstFileW
FindNextFileW
CreateThread
GetProcessHeaps
HeapWalk
IsValidCodePage
GetUserDefaultLCID
IsValidLocale
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
OpenProcess
GetThreadContext
GetEnvironmentVariableA
ReadProcessMemory
GetVersionExA
GlobalMemoryStatusEx
MulDiv
GetEnvironmentStringsW
GetConsoleCP
GetConsoleMode
GetFullPathNameA
SetCurrentDirectoryA
GetFullPathNameW
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetExitCodeProcess
SetEnvironmentVariableA
GetDriveTypeA
FormatMessageW
FormatMessageA
EqualRect
SetRectEmpty
SetRect
IsRectEmpty
CopyRect
wsprintfW
MessageBoxW
LoadCursorFromFileA
GetKeyboardLayoutNameA
GetDoubleClickTime
GetMenu
LoadAcceleratorsA
SetCapture
LoadStringA
MapVirtualKeyA
GetWindowLongA
InflateRect
OffsetRect
IntersectRect
UnionRect
SubtractRect
GetKeyNameTextW
SetMenu
SetWindowLongA
IsWindowVisible
GetFocus
DrawTextW
ClipCursor
ShowWindow
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
SetClipboardData
EmptyClipboard
GetDC
AttachThreadInput
SetCursorPos
ReleaseCapture
SetWindowPos
GetAsyncKeyState
UpdateWindow
CreateWindowExW
RegisterClassExA
LoadCursorA
LoadIconA
UnhookWindowsHookEx
CallNextHookEx
SetCursor
GetCursor
PtInRect
ScreenToClient
GetCursorPos
ClientToScreen
GetWindowRect
GetClientRect
GetActiveWindow
PostQuitMessage
SetWindowPlacement
GetWindowPlacement
DispatchMessageA
PeekMessageA
GetSystemMetrics
SystemParametersInfoA
DefWindowProcA
SetForegroundWindow
DispatchMessageW
SetFocus
TranslateMessage
TranslateAcceleratorA
PeekMessageW
MessageBoxA
SetBkColor
GetCharWidth32A
CreateCompatibleDC
DeleteDC
GetGlyphOutlineW
CreatePen
SelectObject
MoveToEx
GetTextExtentPoint32W
AddFontResourceExA
GetBitmapDimensionEx
BitBlt
CreateCompatibleBitmap
StretchDIBits
SetTextColor
SetBkMode
CreateDIBSection
GetTextMetricsA
CreateFontIndirectW
DeleteObject
PolyBezierTo
LineTo
GetCharABCWidthsW
GetStockObject
SetStretchBltMode
CryptDecrypt
CryptEncrypt
CryptImportKey
CryptGenKey
CryptExportKey
CryptDestroyKey
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptReleaseContext
CryptGetHashParam
GetUserNameA
RegSetValueExW
RegCreateKeyExW
RegFlushKey
RegCloseKey
RegOpenKeyExW
RegQueryValueExA
RegSetValueExA
RegQueryValueExW
SHGetFolderPathA
ShellExecuteExA
SHGetFolderPathW
ShellExecuteA
ShellExecuteW
D3DXQuaternionMultiply
D3DXQuaternionRotationAxis
D3DXMatrixRotationY
D3DXVec3Normalize
D3DXCreateFontIndirectW
D3DXCreateEffectCompiler
D3DXCreateEffect
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXCreateTextureFromFileInMemoryEx
D3DXGetImageInfoFromFileInMemory
D3DXQuaternionRotationMatrix
D3DXMatrixRotationAxis
D3DXMatrixRotationYawPitchRoll
D3DXLoadSurfaceFromSurface
D3DXSaveSurfaceToFileInMemory
D3DXGetPixelShaderProfile
D3DXGetVertexShaderProfile
D3DXVec3Unproject
D3DXVec3Project
D3DXMatrixTransformation
D3DXMatrixAffineTransformation
D3DXPlaneFromPoints
D3DXVec2Normalize
D3DXPlaneNormalize
D3DXMatrixRotationQuaternion
D3DXMatrixMultiply
D3DXMatrixInverse
D3DXMatrixRotationZ
D3DXQuaternionRotationYawPitchRoll
EnumProcesses
EnumProcessModules
GetModuleBaseNameA
GetProcessMemoryInfo
RpcStringFreeA
UuidToStringA
UuidCreate
PathFindFileNameA
PathIsRelativeW
PathFindFileNameW
PathFindExtensionW
PathAddBackslashA
PathAppendA
PathRemoveFileSpecW
Direct3DCreate9
D3DX10SaveTextureToMemory
D3DX10GetImageInfoFromMemory
D3DX10CreateTextureFromMemory
D3DX10CreateFontIndirectW
D3DX10CompileFromMemory
D3DX10CreateEffectFromMemory
D3DX10CreateEffectPoolFromMemory
ImageLoad
ImageUnload
Netbios
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
WinHttpSendRequest
WinHttpWriteData
WinHttpSetTimeouts
WinHttpOpen
WinHttpReceiveResponse
WinHttpConnect
WinHttpQueryDataAvailable
WinHttpCrackUrl
WinHttpQueryHeaders
WinHttpSetOption
WinHttpGetIEProxyConfigForCurrentUser
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpReadData
WinHttpAddRequestHeaders
WinHttpSetStatusCallback
GetAdaptersInfo
??0CAbstractMessage@NetComEngine2@RD@@IAE@XZ
??0CAbstractMessage@NetComEngine2@RD@@QAE@ABV012@@Z
??0CActionBarListener@@QAE@XZ
??0CActiveTradeListener@@QAE@AAVCActiveTransaction@@@Z
??0CBuildmenuListener@@QAE@XZ
??0CCSPWarehouseListener@@QAE@XZ
??0CEventMessage@NetComEngine2@RD@@QAE@ABV012@@Z
??0CEventMessage@NetComEngine2@RD@@QAE@ABV?$vector@HV?$allocator@H@stlp_std@@@stlp_std@@@Z
??0CEventMessage@NetComEngine2@RD@@QAE@HABV?$vector@HV?$allocator@H@stlp_std@@@stlp_std@@@Z
??0CEventMessage@NetComEngine2@RD@@QAE@XZ
??0CEventMessageFormatter@NetComEngine2@RD@@IAE@XZ
??0CEventMessageFormatter@NetComEngine2@RD@@QAE@ABV012@@Z
??0CIPAddress@NetComEngine2@RD@@QAE@ABV012@@Z
??0CIPAddress@NetComEngine2@RD@@QAE@ABV?$vector@HV?$allocator@H@stlp_std@@@stlp_std@@@Z
??0CIPAddress@NetComEngine2@RD@@QAE@XZ
??0CInfobarListener@@QAE@XZ
??0CMainListener@@QAE@XZ
??0CManufactoryListener@@QAE@XZ
??0CNetComEngine2@NetComEngine2@RD@@QAE@QAVCTransmissionProtocol@12@@Z
??0CNetComEngine2@NetComEngine2@RD@@QAE@XZ
??0CNeutralBuildingListener@@QAE@XZ
??0CObjectMenuListener@@QAE@XZ
??0CObjectmenuHousePortraitListener@@QAE@XZ
??0CObjectmenuResourceListener@@QAE@XZ
??0CProtocolMessageHandler@NetComEngine2@RD@@IAE@XZ
??0CProtocolMessageHandler@NetComEngine2@RD@@QAE@ABV012@@Z
??0CSlot@NetComEngine2@RD@@QAE@ABV012@@Z
??0CSlot@NetComEngine2@RD@@QAE@ABV?$vector@HV?$allocator@H@stlp_std@@@stlp_std@@@Z
??0CSlot@NetComEngine2@RD@@QAE@XZ
??0CWarehousemenuListener@@QAE@XZ
??0IntelLaptopGamingTDKInterface@@IAE@XZ
??1CAbstractMessage@NetComEngine2@RD@@UAE@XZ
??1CEventMessage@NetComEngine2@RD@@UAE@XZ
??1CEventMessageFormatter@NetComEngine2@RD@@UAE@XZ
??1CIPAddress@NetComEngine2@RD@@QAE@XZ
??1CNetComEngine2@NetComEngine2@RD@@UAE@XZ
??1CProtocolMessageHandler@NetComEngine2@RD@@UAE@XZ
??1CSlot@NetComEngine2@RD@@QAE@XZ
??4CAbstractMessage@NetComEngine2@RD@@QAEAAV012@ABV012@@Z
??4CEventMessage@NetComEngine2@RD@@QAEAAV012@ABV012@@Z
??4CEventMessageFormatter@NetComEngine2@RD@@QAEAAV012@ABV012@@Z
??4CIPAddress@NetComEngine2@RD@@QAEAAV012@ABV012@@Z
??4CProtocolMessageHandler@NetComEngine2@RD@@QAEAAV012@ABV012@@Z
??4CSlot@NetComEngine2@RD@@QAEAAV012@ABV012@@Z
??4IntelLaptopGamingTDKInterface@@QAEAAV0@ABV0@@Z
??8CIPAddress@NetComEngine2@RD@@QBE_NABV012@@Z
??9CIPAddress@NetComEngine2@RD@@QBE_NABV012@@Z
??MCIPAddress@NetComEngine2@RD@@QBE_NABV012@@Z
??_7CAbstractMessage@NetComEngine2@RD@@6B@
??_7CEventMessage@NetComEngine2@RD@@6B@
??_7CEventMessageFormatter@NetComEngine2@RD@@6B@
??_7CNetComEngine2@NetComEngine2@RD@@6B@
??_7CProtocolMessageHandler@NetComEngine2@RD@@6B@
?ChangeSlot@CNetComEngine2@NetComEngine2@RD@@QAEXHW4Type@CSlot@23@@Z
?CheckRange@CIPAddress@NetComEngine2@RD@@ABE_NABV?$vector@HV?$allocator@H@stlp_std@@@stlp_std@@HH@Z
?CreateSession@CNetComEngine2@NetComEngine2@RD@@QAEXH@Z
?CreateSignature@CCryptUtils@@SA_NPAEKAAUBlob@1@@Z
?GetBuildCounterString@CMainControl@@QAEXAAVCRDStringW@@@Z
?GetContent@CEventMessage@NetComEngine2@RD@@QBE?AV?$vector@HV?$allocator@H@stlp_std@@@stlp_std@@XZ
?GetHostSyncQueueLength@CNetComEngine2@NetComEngine2@RD@@QBEHXZ
?GetIPAddress@CSlot@NetComEngine2@RD@@QBEABVCIPAddress@23@XZ
?GetIPv4Address@CIPAddress@NetComEngine2@RD@@QBE?AV?$vector@HV?$allocator@H@stlp_std@@@stlp_std@@XZ
?GetIPv4AddressString@CIPAddress@NetComEngine2@RD@@QBE?AV?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@XZ
?GetIPv6Address@CIPAddress@NetComEngine2@RD@@QBE?AV?$vector@HV?$allocator@H@stlp_std@@@stlp_std@@XZ
?GetIPv6AddressString@CIPAddress@NetComEngine2@RD@@QBE?AV?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@XZ
?GetNumSlots@CNetComEngine2@NetComEngine2@RD@@QBEHXZ
?GetOwnSlot@CNetComEngine2@NetComEngine2@RD@@QBEHXZ
?GetSignatureFromResourceFile@CCryptUtils@@SA_NAAVCResourceFileIO@@AAUBlob@1@@Z
?GetSlot@CNetComEngine2@NetComEngine2@RD@@QBE?AVCSlot@23@H@Z
?GetStatus@CNetComEngine2@NetComEngine2@RD@@QBE?AW4Status@123@XZ
?GetType@CEventMessage@NetComEngine2@RD@@QBEHXZ
?GetType@CSlot@NetComEngine2@RD@@QBE?AW4Type@123@XZ
?Indent@CEventMessage@NetComEngine2@RD@@ABE?AV?$basic_string@GV?$char_traits@G@stlp_std@@V?$allocator@G@2@@stlp_std@@ABV45@@Z
?InitFileSystem@CGameApp@@IAE_NXZ
?InitGame@CMainControl@@IAE_NXZ
?InitGame@CMainControl@@QAE_NABVCRDStringW@@@Z
?InitLevel@CGameEngine@@QAE_NABVCRDStringW@@_N1@Z
?InitUserInterface@CMainControl@@QAEXXZ
?IsHost@CNetComEngine2@NetComEngine2@RD@@QBE_NXZ
?IsIPv4Address@CIPAddress@NetComEngine2@RD@@QBE_NXZ
?IsOpen@CSlot@NetComEngine2@RD@@QBE_NXZ
?JoinSession@CNetComEngine2@NetComEngine2@RD@@QAEXABVCIPAddress@23@@Z
?LeaveSession@CNetComEngine2@NetComEngine2@RD@@QAEXXZ
?LoadDialogs@CMenuManager@@QAE_NXZ
?LoadTriggerEngine@CGameEngine@@QAE_NAAVCRDString@@_N@Z
?OnReceive@CNetComEngine2@NetComEngine2@RD@@UAEXABVCProtocolMessage@23@@Z
?OnStartGame@CNetComEngine2@NetComEngine2@RD@@AAEXXZ
?PROTOCOL_UID@CNetComEngine2@NetComEngine2@RD@@0HB
?ParseCommandLine@CMyCmd@@IAEXPAD@Z
?ParseIPAddress@CIPAddress@NetComEngine2@RD@@ABE?AV?$vector@HV?$allocator@H@stlp_std@@@stlp_std@@ABV?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@5@HD_N@Z
?ParseParam@CMyCmd@@IAEXABVCRDString@@@Z
?PutEvent@CNetComEngine2@NetComEngine2@RD@@QAEXABVCEventMessage@23@@Z
?ReInitPlayers@CGameEngine@@QAEXXZ
?ResetGameCreateParameters@CMainControl@@IAE_NXZ
?ResetMainMenu@CMainControl@@QAEX_N@Z
?Serialize@CEventMessage@NetComEngine2@RD@@UBE?AV?$vector@HV?$allocator@H@stlp_std@@@stlp_std@@XZ
?Serialize@CIPAddress@NetComEngine2@RD@@QBEABV?$vector@HV?$allocator@H@stlp_std@@@stlp_std@@XZ
?Serialize@CSlot@NetComEngine2@RD@@QBE?AV?$vector@HV?$allocator@H@stlp_std@@@stlp_std@@XZ
?SetIPAddress@CSlot@NetComEngine2@RD@@QAEXABVCIPAddress@23@@Z
?SetIPv4Address@CIPAddress@NetComEngine2@RD@@QAEXABV?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@@Z
?SetIPv4Address@CIPAddress@NetComEngine2@RD@@QAEXABV?$vector@HV?$allocator@H@stlp_std@@@stlp_std@@@Z
?SetIPv6Address@CIPAddress@NetComEngine2@RD@@QAEXABV?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@@Z
?SetIPv6Address@CIPAddress@NetComEngine2@RD@@QAEXABV?$vector@HV?$allocator@H@stlp_std@@@stlp_std@@@Z
?SetType@CSlot@NetComEngine2@RD@@QAEXW4Type@123@@Z
?SignResourceFile@CCryptUtils@@SA_NAAVCResourceFileIO@@@Z
?StartGame@CNetComEngine2@NetComEngine2@RD@@QAEXXZ
?Tick@CNetComEngine2@NetComEngine2@RD@@QAEXXZ
?ToHexString@CEventMessage@NetComEngine2@RD@@ABE?AV?$basic_string@GV?$char_traits@G@stlp_std@@V?$allocator@G@2@@stlp_std@@ABV?$vector@HV?$allocator@H@stlp_std@@@5@@Z
?ToString@CEventMessage@NetComEngine2@RD@@QBE?AV?$basic_string@GV?$char_traits@G@stlp_std@@V?$allocator@G@2@@stlp_std@@QBVCEventMessageFormatter@23@@Z
?Tokenize@CIPAddress@NetComEngine2@RD@@ABE?AV?$vector@V?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@V?$allocator@V?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@@2@@stlp_std@@ABV?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@5@D@Z
?TryGameTick@CNetComEngine2@NetComEngine2@RD@@QAE?AU?$pair@_NV?$vector@VCEventMessage@NetComEngine2@RD@@V?$allocator@VCEventMessage@NetComEngine2@RD@@@stlp_std@@@stlp_std@@@stlp_std@@XZ
?VerifyResourceFile@CCryptUtils@@SA_NAAVCResourceFileIO@@@Z
?VerifySignature@CCryptUtils@@SA_NPAEKAAUBlob@1@@Z
?strcrypt2@CMainControl@@AAEPAGPAG0@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ