Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
62af787137b767867d12c2ebb767c41e.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
62af787137b767867d12c2ebb767c41e.dll
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
62af787137b767867d12c2ebb767c41e.dll
Resource
win11-20240412-en
Target
62af787137b767867d12c2ebb767c41e
Size
597KB
MD5
62af787137b767867d12c2ebb767c41e
SHA1
545065be052ed64f9158e9e80747fb8a744f94d9
SHA256
b18801ae430d1623822ce1d6f933afa0ce04923493dfbab5050b5c591d9c9a77
SHA512
e1484d2afb7b14a7f6ba89167c3d7e0749e167faa1f9301d1286b9de873401c43d66a48f5aa18fe17e1a1685cc18a0e30f16daf70e49cd8b80f2d3b85b2a1f80
SSDEEP
12288:2SdK4MVDr7vRgndOBBtggdMvk2CqvAmYac+MRGM4h/qofkKBw3:2Sd38r7ZgdOBHFt2CqvAic+MRGJ/qofO
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PathRemoveBackslashW
PathIsDirectoryW
PathAppendW
PathRemoveFileSpecW
PathAddBackslashW
PathFindFileNameW
PathFileExistsW
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
ord3826
ord826
ord600
ord1571
ord6466
ord1250
ord1248
ord5710
ord2977
ord3142
ord3254
ord4459
ord3131
ord3257
ord2980
ord3076
ord2971
ord3396
ord3825
ord3820
ord3074
ord4075
ord4616
ord4418
ord3733
ord561
ord825
ord815
ord3948
ord2717
ord941
ord535
ord861
ord540
ord800
ord922
ord4124
ord5679
ord2606
ord858
ord538
ord942
ord823
ord4273
ord940
ord2810
ord925
ord2756
ord5568
ord2910
ord6868
ord4199
ord537
ord6655
ord5706
ord4197
ord860
ord1115
ord1173
ord1568
ord1165
ord1570
ord1179
ord342
ord1240
ord1194
ord1563
ord6371
ord4480
ord2546
ord2504
ord5727
ord3917
ord1089
ord5193
ord2388
ord3341
ord5296
ord5298
ord4074
ord4692
ord5303
ord5285
ord6279
ord1567
ord6278
ord269
_strcmpi
__CxxFrameHandler
wcslen
memset
strlen
_wtol
wcschr
wcsncpy
_snwprintf
wcscmp
wcscpy
memcpy
swprintf
_itoa
sprintf
_wtoi
atoi
_purecall
_ftol
_wcslwr
rand
wcsstr
isprint
isspace
tolower
free
malloc
isalnum
_callnewh
strncpy
swscanf
strncmp
_snprintf
_wstati64
_wmkdir
_wsplitpath
wcstoul
_itow
_ultow
_ui64tow
srand
time
_wcsicmp
_except_handler3
_CxxThrowException
??0exception@@QAE@ABV0@@Z
strcpy
strcmp
memcmp
strchr
strrchr
strtoul
atof
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
_beginthreadex
memmove
fopen
_wfopen
fprintf
fclose
fread
ftell
fseek
fputc
sscanf
isalpha
wcscat
wcsrchr
calloc
wcsncat
_wcsnicmp
strncat
fwrite
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_onexit
__dllonexit
towlower
_getpid
fflush
wprintf
GetTempPathW
LocalAlloc
InitializeCriticalSectionAndSpinCount
DuplicateHandle
GetModuleFileNameA
ResetEvent
IsBadReadPtr
GetFileInformationByHandle
FileTimeToSystemTime
SetFileTime
GetFileAttributesW
LocalFileTimeToFileTime
SetFilePointer
LoadLibraryA
VirtualQuery
GetSystemInfo
GetSystemDefaultLangID
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetLocalTime
VirtualAllocEx
VirtualAlloc
SetUnhandledExceptionFilter
ReadProcessMemory
WriteProcessMemory
WaitForMultipleObjects
TerminateProcess
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
SetErrorMode
UnhandledExceptionFilter
SetEvent
CreateEventW
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
lstrcmpiW
GetVersion
OpenSemaphoreW
CreateNamedPipeW
OpenEventW
OpenMutexW
TlsFree
TlsGetValue
TlsAlloc
TlsSetValue
InterlockedDecrement
ResumeThread
GetFullPathNameW
ExpandEnvironmentStringsW
GetSystemDirectoryW
GetWindowsDirectoryW
GetCurrentDirectoryW
WritePrivateProfileStructW
WritePrivateProfileStringW
WritePrivateProfileSectionW
GetPrivateProfileStructW
GetPrivateProfileSectionNamesW
GetPrivateProfileSectionW
GetPrivateProfileStringW
lstrlenW
FindFirstFileW
FindClose
GetFileSize
ReadFile
GetLogicalDrives
GetDriveTypeW
QueryDosDeviceW
DeviceIoControl
GetDiskFreeSpaceExW
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
CreateThread
FindResourceW
SizeofResource
LoadResource
LockResource
CreateFileW
WriteFile
RaiseException
TerminateThread
InterlockedCompareExchange
CreateMutexW
lstrcpynA
lstrcpyA
OutputDebugStringA
GlobalAlloc
lstrcpyW
GlobalFree
OutputDebugStringW
SleepEx
InterlockedExchange
GetCommandLineW
LocalFree
GetPrivateProfileIntW
DeleteFileW
EnterCriticalSection
LeaveCriticalSection
GetTickCount
GetModuleHandleW
CopyFileW
Sleep
GetCurrentProcessId
GetCurrentProcess
GetProcessTimes
GetSystemTime
SystemTimeToFileTime
GetVersionExW
CreateProcessW
WaitForSingleObject
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
CloseHandle
FreeLibrary
lstrcpynW
WideCharToMultiByte
MultiByteToWideChar
CreateDirectoryW
GetProcAddress
GetLastError
GetModuleFileNameW
LoadLibraryW
FindWindowA
IsIconic
SetWindowLongW
UnregisterClassW
RegisterClassExW
DefWindowProcW
DestroyWindow
ShowWindow
CreateWindowExW
SetTimer
PostQuitMessage
RemovePropW
SendMessageW
GetMessageW
TranslateMessage
DispatchMessageW
SetPropW
GetDesktopWindow
GetWindow
GetPropW
IsWindowVisible
GetWindowThreadProcessId
GetClassNameW
SendMessageTimeoutW
FindWindowW
EnumWindows
PostMessageW
IsWindow
CharUpperW
RegEnumKeyExW
RegOpenKeyW
QueryServiceConfigW
OpenSCManagerW
OpenServiceW
CloseServiceHandle
GetSecurityInfo
BuildExplicitAccessWithNameW
SetEntriesInAclW
SetSecurityInfo
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
RegCloseKey
OpenProcessToken
GetTokenInformation
LookupAccountSidW
RegDeleteKeyW
RegDeleteValueW
LookupAccountNameW
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
CommandLineToArgvW
SHGetSpecialFolderPathW
ShellExecuteW
CoInitialize
CoUninitialize
CLSIDFromProgID
CoInitializeEx
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoLoadLibrary
CoFreeLibrary
CoCreateGuid
SysFreeString
SysAllocStringByteLen
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADHD@Z
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?nothrow@std@@3Unothrow_t@1@B
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??_7out_of_range@std@@6B@
??1out_of_range@std@@UAE@XZ
??0out_of_range@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIABV12@II@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?resize@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEPAGPAG@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find_first_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?find_last_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHIIPBGI@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAH@Z
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEGXZ
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??_7bad_cast@std@@6B@
??_D?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
??0bad_cast@std@@QAE@ABV01@@Z
?_Doraise@bad_cast@std@@MBEXXZ
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
ntohl
htonl
htons
ntohs
NetApiBufferFree
NetWkstaTransportEnum
Netbios
InternetGetConnectedState
InternetReadFile
InternetCloseHandle
InternetOpenUrlW
InternetOpenW
HttpQueryInfoW
CancelDetector
GetDectectorResult
GetDectectorResultEx
InitDetector
InitDownloader
InitLoadLoadParam
NsisGetDectectorResult
NsisGetDectectorResultA
NsisGetDectectorResultEx
NsisRunDetector
NsisRunDetectorA
NsisRunDetectorEx
NsisWaitDetectorComplete
NsisWaitDetectorCompleteA
NsisWaitDetectorCompleteEx
QQBrowserModuleEntry
QQBrowserProcessParamVersion
ReleaseDR
RunDetector
RunDetectorEx
RunDetectorWithNotification
SetDriverService
SetGroupId
UnInitDetector
WaitDetectorComplete
WaitDetectorCompleteEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ