Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
c38a66561f08954a804b04c45c9de57e0685cf1eadcbd3eae97e4b9a2875268d.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c38a66561f08954a804b04c45c9de57e0685cf1eadcbd3eae97e4b9a2875268d.dll
Resource
win10v2004-20240221-en
Target
c38a66561f08954a804b04c45c9de57e0685cf1eadcbd3eae97e4b9a2875268d
Size
4.3MB
MD5
c179c4efd6c3146635b39d8abe00a979
SHA1
1c4156bd629f749eec3f14e093f610f4ffb137fd
SHA256
c38a66561f08954a804b04c45c9de57e0685cf1eadcbd3eae97e4b9a2875268d
SHA512
cf09ce8fe3a29e10cd11af4a00fb9b939618ae55b14ea5746c752108b7b32873b0bcd3eda243790872b8df790881b809e9c4edc5e1c4a2d30a07208ffd5f718d
SSDEEP
49152:w6R0WFy/xu+ie4ny7jS8mtQz02wDUzdGYxpE3FdPuDjf1xNrgVOh5P57VIdwvYgW:KmLKAaj96dw6n1yBIuUL
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
d:\jenkins\workspace\N_MB5_UpdateControllerImpl\bin\x64\Release\UpdateControllerImpl.pdb
CryptDecodeObjectEx
CryptMsgGetParam
CertGetNameStringW
CryptQueryObject
CryptMsgClose
CryptDecodeObject
CertVerifyCertificateChainPolicy
CertOpenSystemStoreW
CertGetIssuerCertificateFromStore
CertCreateCertificateContext
CertFreeCertificateContext
CertCompareCertificateName
CertDuplicateCertificateContext
CertAddCertificateContextToStore
CertFindCertificateInStore
CertFreeCertificateChain
CertOpenStore
CertCloseStore
CertGetCertificateContextProperty
CertEnumCertificatesInStore
CertGetCertificateChain
GetAdaptersInfo
FlushFileBuffers
SetFilePointer
ReadFile
WriteFile
InitializeCriticalSectionEx
RaiseException
DecodePointer
DeleteCriticalSection
LocalAlloc
FormatMessageW
GetFileSize
lstrcmpA
FindFirstFileW
GetFileAttributesW
GetFileAttributesExW
CreateDirectoryW
RemoveDirectoryW
SetFileAttributesW
DeleteFileW
GetCurrentThreadId
SetFileTime
SetEndOfFile
SetLastError
FindNextFileW
FindClose
GetModuleHandleA
GetStdHandle
ExpandEnvironmentStringsW
GetCurrentDirectoryW
GetVersionExA
GetSystemTimeAsFileTime
ReleaseMutex
CreateMutexW
InitializeCriticalSectionAndSpinCount
GetExitCodeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
LoadLibraryExW
GetEnvironmentVariableW
SetEnvironmentVariableW
SystemTimeToFileTime
SwitchToFiber
DeleteFiber
CreateFiber
GetFileType
ConvertFiberToThread
ConvertThreadToFiber
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
WriteConsoleW
HeapSize
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
FileTimeToSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
GetSystemTime
GetLocalTime
GetLongPathNameW
GetWindowsDirectoryW
GetModuleFileNameW
GetFileInformationByHandle
GetProcessHeap
QueryDosDeviceW
GetLogicalDriveStringsW
Process32NextW
Process32FirstW
HeapFree
GetNativeSystemInfo
IsWow64Process
LocalFree
GetSystemInfo
GetVersionExW
CopyFileW
GetTempPathW
DeviceIoControl
CreateFileW
VerifyVersionInfoW
VerSetConditionMask
VirtualQueryEx
GetModuleHandleW
Module32FirstW
CreateToolhelp32Snapshot
QueryPerformanceCounter
QueryPerformanceFrequency
OutputDebugStringW
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
TerminateProcess
GetSystemDirectoryW
GetDiskFreeSpaceExW
GetCurrentProcessId
GetTickCount
GlobalFree
GlobalAlloc
MoveFileExW
WaitForMultipleObjects
OpenProcess
GetExitCodeProcess
CreateProcessW
GetProcAddress
LoadLibraryW
SetDllDirectoryW
FreeLibrary
GetLastError
GetCurrentThread
SetThreadPriority
WaitForSingleObject
CloseHandle
CreateEventW
ResetEvent
SetEvent
Sleep
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetFullPathNameW
RtlUnwind
SetStdHandle
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
SetFilePointerEx
GetConsoleCP
SetConsoleCtrlHandler
ExitProcess
PeekNamedPipe
GetDriveTypeW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlPcToFileHeader
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwindEx
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
EncodePointer
GetStringTypeW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
InitializeSListHead
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
SwitchToThread
GetUserObjectInformationW
MessageBoxW
GetProcessWindowStation
CharUpperW
GetSystemMetrics
LookupPrivilegeValueW
AdjustTokenPrivileges
DuplicateTokenEx
CreateProcessAsUserW
CryptAcquireContextW
CryptCreateHash
CryptReleaseContext
CryptHashData
CryptDestroyHash
CryptGetHashParam
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegEnumKeyExW
OpenThreadToken
AllocateAndInitializeSid
FreeSid
IsTextUnicode
GetExplicitEntriesFromAclW
DeleteAce
SetEntriesInAclW
CryptEnumProvidersW
CryptSignHashW
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
ReportEventW
RegisterEventSourceW
DeregisterEventSource
CryptGenRandom
CryptAcquireContextA
CreateWellKnownSid
GetSidSubAuthority
GetSidSubAuthorityCount
AreAllAccessesGranted
MapGenericMask
ConvertStringSidToSidW
ConvertSidToStringSidW
RegUnLoadKeyW
RegSetValueExW
RegSaveKeyW
RegRestoreKeyW
RegQueryInfoKeyW
RegLoadAppKeyW
RegLoadKeyW
RegEnumValueW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
TreeSetNamedSecurityInfoW
SetSecurityInfo
GetSecurityInfo
SetNamedSecurityInfoW
GetNamedSecurityInfoW
OpenProcessToken
SHGetFolderPathW
CoUninitialize
CoInitializeSecurity
CoSetProxyBlanket
PropVariantClear
CoInitializeEx
CoCreateInstance
VariantClear
SysStringLen
VariantInit
SysFreeString
SysAllocStringLen
SysAllocString
WNetGetConnectionW
WTSQueryUserToken
WTSFreeMemory
WTSEnumerateSessionsW
DestroyEnvironmentBlock
CreateEnvironmentBlock
NetWkstaGetInfo
NetApiBufferFree
GetProcessImageFileNameW
SfcIsFileProtected
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
BCryptDestroyKey
BCryptGetProperty
BCryptOpenAlgorithmProvider
BCryptFinishHash
BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptVerifySignature
BCryptImportKeyPair
BCryptHashData
BCryptGenRandom
BCryptCreateHash
CryptCATCatalogInfoFromContext
CryptCATAdminAcquireContext
CryptCATAdminReleaseContext
CryptCATAdminReleaseCatalogContext
CryptCATAdminEnumCatalogFromHash
CryptCATAdminCalcHashFromFileHandle
WinVerifyTrust
AuthzInitializeResourceManager
AuthzAccessCheck
AuthzFreeResourceManager
AuthzFreeContext
AuthzInitializeContextFromSid
WSAPoll
inet_addr
ntohl
getaddrinfo
freeaddrinfo
WSASend
getsockname
WSASetLastError
WSAStartup
WSAGetLastError
closesocket
WSARecvFrom
WSARecv
socket
shutdown
WSASendTo
setsockopt
sendto
send
recvfrom
WSACleanup
listen
connect
bind
getsockopt
getpeername
ioctlsocket
accept
ntohs
htons
recv
Create
Destroy
DisableGameMode
DoReplaceUI
DoesIrisFileExist
DownloadIrisFile
EnableGameMode
GetAutoUpdate_DBCLS
GetAutoUpdate_SdkCtlr
GetBetaDbUpdates
GetBetaOptInSetting
GetChannel
GetControllersVersion
GetDBClsPkgVersion
GetDBPublicationDate
GetDBVersion
GetDbUpdateAppliedTimeStamp
GetForceFullDBUpdate
GetIrisData
GetLegacyDbUpdateMode
GetMaxIncrementalDBUpdates
GetMessageDetails
GetMessageID
GetNumMessages
GetProgramVersion
GetUpdateCheckInterval
GetUpdateDetails
GetUpdatePhase
GetUseStaging
HasDoneInitialDBCheck
Initialize
InstallUpdate
IsInstallerUpdatePending
IsSdkControllerUpdatePending
LicenseStateChanged
PowerResumeNotification
PowerSuspendNotification
Proxy_SetAuthEnabled
Proxy_SetEnabled
Proxy_SetHostName
Proxy_SetPassword
Proxy_SetPortNumber
Proxy_SetUserName
RemoveIrisFile
ScanEnded
ScanStarted
SetAutoUpdate_DBCLS
SetAutoUpdate_SdkCtlr
SetBetaDbUpdates
SetBetaOptInSetting
SetChannel
SetControllerStateChangedCallback
SetControllersVersion
SetDBClsPkgVersion
SetDBPublicationDate
SetDORPending
SetForceFullDBUpdate
SetGetLicenseConfigDataCallback
SetGetLicenseEntitlementFeaturesCallback
SetLegacyDbUpdateMode
SetLogCallback
SetMalwareDefsDBUpdatedCallback
SetMaxIncrementalDBUpdates
SetMaxLogLevel
SetMinimumSupportedCUPackageVersion
SetPackageAging
SetProgramVersion
SetRestartUICallback
SetShutdownUICallback
SetUpdateAppliedCallback
SetUpdateAvailableCallback
SetUpdateCheckInterval
SetUpdateCtlrConfigChangedCallback
SetUpdateDownloadedCallback
SetUpdateProgressCallback
SetUseAlternateURLsOption
SetUseStaging
Shutdown
SideLoadDatabase
Update
UpdateComplete
UpdateCompleteV2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ