Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
a4089dacfb1350fd30c8814ca67d58a4.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a4089dacfb1350fd30c8814ca67d58a4.dll
Resource
win10v2004-20240221-en
Target
a4089dacfb1350fd30c8814ca67d58a4
Size
3.4MB
MD5
a4089dacfb1350fd30c8814ca67d58a4
SHA1
f78feb325b09c13abd9b427545d3d3996924192f
SHA256
26b70bd7ec7aeb35134f681b23321107c5f2cac23b057712b296ee9f0d872add
SHA512
1dab8f0c55f60e3a4f5a7bf670861c7366b9936f0e8c116a4d5bb4761cb1b1e20ac21b8a3f498b52d5eb6c3c34e13c9b9b435a6c65da23cd38ce94c715da4679
SSDEEP
49152:jpsUFlIrqo12pQ4xwckgbjg+4Oqnlx+pw4FlMZ5sTpAbaWlpiYrWRY:mhzsQ6wckgbjg+4pWw4S
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
F:\branches\4.0.2\Rhino\Safe\Bin\Win32\release\pdb\SafeUpdate.pdb
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
GetSystemDirectoryW
GetDiskFreeSpaceExW
GetCurrentProcessId
CloseHandle
GetCurrentProcess
SetThreadExecutionState
CreateFileW
LocalAlloc
DeviceIoControl
GetCurrentThreadId
LocalFree
SetFilePointer
WriteFile
GetModuleFileNameW
GetLocalTime
GetEnvironmentVariableW
GetLogicalDriveStringsW
QueryDosDeviceW
CopyFileExW
FreeLibrary
CreateDirectoryExW
LoadLibraryW
GetProcAddress
RemoveDirectoryW
DeleteFileW
MoveFileWithProgressW
FileTimeToSystemTime
GetDriveTypeW
FileTimeToLocalFileTime
GetComputerNameW
GetUserDefaultLangID
MoveFileW
SetLastError
GetTickCount
GlobalMemoryStatusEx
GetFileSizeEx
LocalFileTimeToFileTime
GetSystemTime
SystemTimeToFileTime
DosDateTimeToFileTime
FileTimeToDosDateTime
FormatMessageW
VirtualFree
GetSystemTimeAsFileTime
WaitForSingleObject
SetEvent
Sleep
ResetEvent
CreateEventW
OpenEventW
ExpandEnvironmentStringsW
SearchPathW
WideCharToMultiByte
GetACP
FindFirstFileW
GetTempPathW
SetFileAttributesW
DeleteCriticalSection
DecodePointer
RaiseException
MultiByteToWideChar
GetFileAttributesW
InitializeCriticalSectionAndSpinCount
InterlockedExchange
WaitForMultipleObjects
GetLastError
MoveFileExW
EncodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
CreateFileMappingW
QueryPerformanceCounter
GetLongPathNameW
GetFileAttributesExW
GetShortPathNameW
FindResourceW
LoadResource
QueryPerformanceFrequency
OutputDebugStringW
GetModuleHandleW
GetVersionExW
LockResource
GetSystemInfo
lstrcmpiW
lstrlenW
CreateProcessW
GetExitCodeProcess
OpenProcess
ResumeThread
TryEnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetFileSize
SetEndOfFile
SetFileTime
ReadFile
GetFileTime
InterlockedExchangeAdd
lstrcatW
lstrcpyW
HeapAlloc
HeapFree
GetProcessHeap
GlobalAlloc
VirtualAlloc
GlobalFree
GetDiskFreeSpaceW
GetVolumeInformationW
CreateMutexW
OpenMutexW
ReleaseMutex
LoadLibraryExW
LoadLibraryA
MapViewOfFile
UnmapViewOfFile
OpenFileMappingW
FindClose
FindNextFileW
GetFullPathNameW
GetTempFileNameW
CreateDirectoryW
CopyFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetWindowsDirectoryW
ShowWindow
IsWindow
SendMessageW
UnregisterClassW
GetWindowLongW
SetForegroundWindow
GetWindowRect
GetFocus
AttachThreadInput
SetFocus
GetForegroundWindow
SetWindowPos
GetShellWindow
GetParent
OpenDesktopW
WindowFromPoint
FindWindowW
ExitWindowsEx
CloseDesktop
GetClassNameW
GetDesktopWindow
SwitchDesktop
FindWindowExW
GetSystemMetrics
IsWindowVisible
GetWindowThreadProcessId
GetWindow
FreeSid
AllocateAndInitializeSid
RegOpenKeyExW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
QueryServiceStatus
OpenServiceW
OpenSCManagerW
CloseServiceHandle
RegSetValueExW
RegCloseKey
RegFlushKey
RegCreateKeyExW
CheckTokenMembership
SHFileOperationW
SHGetPathFromIDListW
ShellExecuteExW
SHChangeNotify
ShellExecuteW
SHGetFolderPathW
CoCreateInstance
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_C_str@?$_Yarn@D@std@@QBEPBDXZ
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?fail@ios_base@std@@QBE_NXZ
?good@ios_base@std@@QBE_NXZ
?rdstate@ios_base@std@@QBEHXZ
??Bios_base@std@@QBE_NXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?_Getname@_Locinfo@std@@QBEPBDXZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@HPBD@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?global@locale@std@@SA?AV12@ABV12@@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
?uncaught_exception@std@@YA_NXZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xruntime_error@std@@YAXPBD@Z
?_BADOFF@std@@3_JB
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??0_Container_base12@std@@QAE@XZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
??1_Container_base12@std@@QAE@XZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
??0id@locale@std@@QAE@I@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
_Nan
_Inf
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??7ios_base@std@@QBE_NXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setf@ios_base@std@@QAEHHH@Z
?setf@ios_base@std@@QAEHH@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
_beginthreadex
_stricmp
_splitpath_s
sprintf
atof
isalnum
wcsncpy
_wtof
wcsrchr
wcstoul
sscanf
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__CxxFrameHandler3
_except_handler4_common
__clean_type_info_names_internal
_wcsnicmp
_vswprintf_c_l
_wtoi
_localtime64
_mktime64
_time64
srand
rand
_lock_file
setvbuf
fsetpos
fgetc
fflush
_fseeki64
fgetpos
ungetc
_unlock_file
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
fputc
toupper
tolower
memchr
strchr
strstr
towupper
wcsstr
towlower
wcschr
_wcsicmp
fwrite
rewind
_wfopen_s
_vsnwprintf
setlocale
fputws
_wfopen
_errno
strtoull
fclose
fseek
ftell
fread
_except1
memcpy_s
swscanf_s
realloc
malloc
_recalloc
atoi
calloc
free
??_V@YAXPAX@Z
?terminate@@YAXXZ
isdigit
swscanf
??2@YAPAXI@Z
_hypot
??3@YAXPAX@Z
_purecall
memmove
abort
modf
sprintf_s
__iob_func
localeconv
fprintf
_dtest
strpbrk
memset
memmove_s
memcpy
_CxxThrowException
__RTDynamicCast
fopen
PathFileExistsW
PathIsNetworkPathW
RCVBusGetModuleCount
RCVBusQueryModule
RCVBusReleaseModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ