Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
e05790a7d8ca6a9b1b475655a59bff59.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e05790a7d8ca6a9b1b475655a59bff59.dll
Resource
win10v2004-20231215-en
Target
e05790a7d8ca6a9b1b475655a59bff59
Size
358KB
MD5
e05790a7d8ca6a9b1b475655a59bff59
SHA1
806211af8d2e95f23739338bf0308b2ce690c6da
SHA256
126119ac0a8cbaeb68c6be16b968e410ebc623991f4bf885b672c4740b997af7
SHA512
efb8a10a92b536ad091665f30738ffcf828915f721b9751bcca06e97195b6a11008441c5ae917d52f1de6fb4865eca32788b013ed055e989b01579d5de9a5150
SSDEEP
6144:psqz/ih1SvqpsadXaPeO90b2AUPXX4s+A7k7aUZc68yCqt2kTo:pseKvpsQXJOzNXX4s+A7kdjTjo
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\Build\isafe\branches\5.9\bin\iSafeCheckEngine.pdb
?IsNvdVersion@func@elex@@YAHXZ
?getProgramRunDir@filepath@elex@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?DB_GetSqliteDBVersion@uphlp@elex@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@KABV34@@Z
?CFG_UpdateVersion@uphlp@elex@@YAHKABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?VerifyFile@CWinTrustVerifier@@QAEKPB_WPAV?$list@VCWinTrustSignerInfo@@V?$allocator@VCWinTrustSignerInfo@@@std@@@std@@@Z
??0MD5@safe@elex@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?toString@MD5@safe@elex@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetInstance@CWinTrustVerifier@@SAPAV1@XZ
?GetRegInstallPath@func@elex@@YAHPA_WK@Z
?RequestURL@LibCurlClient@elex@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV34@K@Z
?GetUserGuid@func@elex@@YAHPA_WKHPAH@Z
?GetProgramVersion@func@elex@@YAHQAK@Z
?GetNationLanguage@ReportUtilities@ReportLog@Utilities@elex@@SAXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
?unZipFile@zipHelper@@QAE_NPB_WPA_W@Z
?Init@zipHelper@@QAE_N_NPB_W0@Z
??1zipHelper@@QAE@XZ
??0zipHelper@@QAE@XZ
?Encode@CeBase64@safe@elex@@SA_NPBEKAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1CeBase64@safe@elex@@QAE@XZ
??0CeBase64@safe@elex@@QAE@XZ
??1CppSQLite3Query@@UAE@XZ
?eof@CppSQLite3Query@@QAE_NXZ
?getIntField@CppSQLite3Query@@QAEHPBDH@Z
?execQuery@CppSQLite3DB@@QAE?AVCppSQLite3Query@@PBD@Z
??1CppSQLite3DB@@UAE@XZ
?open@CppSQLite3DB@@QAEXPBDPBXH@Z
?close@CppSQLite3DB@@QAEXXZ
??0CppSQLite3DB@@QAE@XZ
?execScalar@CppSQLite3DB@@QAEHPBD@Z
?getStringField@CppSQLite3Query@@QAEPBDPBD0@Z
EncodePointer
AreFileApisANSI
DeviceIoControl
RemoveDirectoryW
GetModuleHandleW
LoadLibraryW
GetProcAddress
FreeLibrary
LocalFree
MoveFileExW
GetLastError
GetSystemTimeAsFileTime
WaitForSingleObject
ReleaseSemaphore
GetSystemInfo
CreateEventA
SetEvent
CloseHandle
CreateEventW
ResetEvent
GetModuleFileNameW
FormatMessageA
CreateFileMappingA
OpenFileMappingA
Sleep
SwitchToThread
GetModuleHandleA
MapViewOfFileEx
GetCurrentProcess
DuplicateHandle
DecodePointer
CreateSemaphoreA
GetCurrentThreadId
GetCurrentProcessId
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
WaitForMultipleObjects
CreateFileW
LoadLibraryExW
CreateDirectoryW
GetTickCount
TerminateThread
SetThreadPriority
GetCurrentThread
SetErrorMode
OpenProcess
GetProcessHeap
HeapFree
HeapAlloc
GetLocalTime
SystemTimeToFileTime
FileTimeToSystemTime
FindFirstFileW
FindNextFileW
MultiByteToWideChar
FindClose
GetFileAttributesExW
DeleteFileW
GetFileAttributesW
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
TlsAlloc
TlsFree
WideCharToMultiByte
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
OpenEventA
CreateWaitableTimerA
TlsSetValue
TlsGetValue
ResumeThread
SetWaitableTimer
UnmapViewOfFile
SetEntriesInAclW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
AllocateAndInitializeSid
SetSecurityDescriptorSacl
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
FreeSid
RegSetValueExW
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
??0?$codecvt@_WDH@std@@QAE@I@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
??_7_Facet_base@std@@6B@
??_7facet@locale@std@@6B@
??_7codecvt_base@std@@6B@
??_7?$codecvt@_WDH@std@@6B@
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
?_BADOFF@std@@3_JB
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_Add_vtordisp2@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z
?id@?$codecvt@_WDH@std@@2V0locale@2@A
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?_Add_vtordisp1@?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?write@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PB_W_J@Z
PathFileExistsW
WSACleanup
WSAStartup
memset
_except_handler4_common
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_initterm_e
_initterm
_malloc_crt
??3@YAXPAX@Z
wcscpy_s
??2@YAPAXI@Z
memmove
sprintf_s
sscanf_s
_purecall
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
_gmtime64
tolower
??0exception@std@@QAE@ABQBDH@Z
??_V@YAXPAX@Z
swprintf_s
rand
??0exception@std@@QAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
_lock_file
_unlock_file
fputc
fwrite
ungetc
fgetc
memcpy_s
_fseeki64
fgetpos
fsetpos
setvbuf
fflush
fclose
_wcsnicmp
fputwc
ungetwc
fgetwc
wcsncpy_s
?name@type_info@@QBEPBDPAU__type_info_node@@@Z
_wfopen_s
fseek
ftell
fread
_beginthreadex
_CxxThrowException
__CxxFrameHandler3
memcpy
strerror
_stricmp
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
free
ISAFE_WriteProgramLogNoMask
CreatCheckEngineModule
CreatCheckVersionModule
CreatHotSpotPath
CreatQuarantineArea
CreatTrustedArea
CreatVirusLibSrvModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ