Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
0ae693b34d0b5b7bd198b7c4d61554e33b73cd050867efb12a4a4de6a967684c.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0ae693b34d0b5b7bd198b7c4d61554e33b73cd050867efb12a4a4de6a967684c.dll
Resource
win10v2004-20240412-en
Target
0ae693b34d0b5b7bd198b7c4d61554e33b73cd050867efb12a4a4de6a967684c
Size
1.9MB
MD5
cb56896368611f86a709b86ed116712c
SHA1
3821c5952f613dbb3994c36c6329e7d12c8b6a81
SHA256
0ae693b34d0b5b7bd198b7c4d61554e33b73cd050867efb12a4a4de6a967684c
SHA512
4e5ceb31fa86dce82b735909f78fbb1d4b758d50a8ebe820d8aa56fa089404af0be0b9f9af2bce670fad830d1e0a41f5096da6a8ea0b417edfe3ea16258fefb2
SSDEEP
24576:crmWDejQn6tCL6WMDuad0xzlDtjqVTXQrn6odUCCWcq2:am4eMn8IqVTXQL6odhCWcq2
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSACleanup
gethostname
WSAStartup
htonl
ntohl
WSASetLastError
getpeername
freeaddrinfo
getaddrinfo
getsockname
getsockopt
WSAIoctl
listen
accept
inet_ntoa
recvfrom
__WSAFDIsSet
sendto
setsockopt
recv
send
select
connect
gethostbyname
bind
closesocket
ioctlsocket
socket
inet_addr
htons
getnameinfo
WSAGetLastError
ntohs
GetParent
MessageBoxA
RedrawWindow
GetFocus
LoadIconW
LoadBitmapW
GetWindowRect
GetDC
ReleaseDC
GetSysColor
SendMessageA
MessageBeep
GetClientRect
PtInRect
ReleaseCapture
SetCapture
SetCursor
SetWindowLongA
IsWindow
InvalidateRect
InflateRect
LoadCursorA
DestroyCursor
CopyIcon
GetKeyState
DestroyIcon
GetIconInfo
CreateWindowExA
DrawStateA
LoadImageA
KillTimer
GetSystemMetrics
ShowScrollBar
PostMessageA
ClientToScreen
CopyRect
EnableWindow
DrawFocusRect
DrawTextA
OffsetRect
DrawFrameControl
FillRect
FrameRect
SetTimer
GetCapture
?_Id@_CurrentScheduler@details@Concurrency@@SAIXZ
?terminate@@YAXXZ
strtol
_errno
_dupenv_s
free
sprintf_s
strrchr
tolower
strcpy_s
??0exception@std@@QAE@ABV01@@Z
_purecall
fwrite
fputc
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
fflush
setvbuf
fgetpos
_fseeki64
fsetpos
ungetc
fgetc
_unlock_file
_lock_file
strcat_s
_time64
_CxxThrowException
_open
_close
_write
_read
_strdup
isgraph
isprint
islower
isupper
_stat64
getenv
atoi
_fstat64
_lseeki64
_beginthreadex
__sys_nerr
strerror
_gmtime64
isalnum
isspace
isdigit
isxdigit
ftell
fseek
fread
strncpy
_strtoi64
qsort
sscanf
fputs
fopen
fgets
memcpy
memset
realloc
calloc
strftime
_localtime64_s
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
?name@type_info@@QBEPBDPAU__type_info_node@@@Z
memchr
fopen_s
fclose
_stat64i32
??9type_info@@QBE_NABV0@@Z
??8type_info@@QBE_NABV0@@Z
_wassert
printf
strtoul
modf
malloc
strchr
__iob_func
sprintf
_finite
strpbrk
_mbsstr
strstr
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBDH@Z
_aligned_free
_aligned_malloc
isalpha
strncmp
memmove_s
__CxxFrameHandler3
??1type_info@@UAE@XZ
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
_except_handler4_common
memcpy_s
_vscprintf
??_U@YAPAXI@Z
vsprintf_s
??_V@YAXPAX@Z
memmove
??2@YAPAXI@Z
??3@YAXPAX@Z
?wait@Concurrency@@YAXI@Z
ord2291
ord223
ord222
ord248
ord227
ord2454
ord1180
ord1216
ord3214
ord3226
ord3182
ord2254
ord466
ord467
ord2201
ord464
ord421
ord391
ord543
ord544
ord1958
ord566
ord578
ord579
ord2431
ord654
ord657
ord653
ord656
ord869
ord680
ord958
ord556
ord625
ord2596
ord3712
ord3765
ord3479
ord280
ord281
ord298
ord3212
ord18
ord1161
ord2442
ord7
ord979
ord816
ord2075
ord1951
ord2023
ord154
ord151
ord86
ord95
ord52
ord88
ord78
ord181
ord66
ord641
ord624
ord188
ord401
ord1882
ord224
ord4445
ord341
ord342
ord2561
ord3164
ord3025
ord2593
ord2989
ord2971
ord2838
ord3173
ord3020
ord2598
ord2647
ord2844
ord3048
ord1
ord1653
ord1654
ord340
ord180
ord266
ord361
ord387
ord385
ord121
ord15
ord12
ord8
ord127
ord130
ord77
ord87
ord83
ord24
ord407
ord157
ord242
ord141
ord164
ord126
ord49
ord183
ord86
ord96
ord110
ord116
ord58
ord6
ord45
ord108
ord78
ord43
ord48
ord75
ord5
ord235
ord17
ord21
ord60
ord61
ord90
ord31
ord74
ord222
ord30
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
OpenSCManagerA
EnumServicesStatusExA
RegQueryValueExA
QueryServiceConfigA
CloseServiceHandle
GetUserNameA
RegQueryValueA
CryptReleaseContext
CryptAcquireContextA
CryptGenRandom
OpenServiceA
RegCloseKey
ord30
ord46
ord211
ord60
ord50
ord41
ord22
ord26
ord27
ord32
ord33
ord301
ord200
ord143
ord35
ord79
ord2343
ord2242
ord2128
ord2316
ord2211
ord484
ord2354
ord2318
ord2355
ord2352
ord2305
ord1044
ord324
ord1501
ord3783
ord5036
ord13403
ord13395
ord13099
ord13405
ord7878
ord5664
ord7873
ord5524
ord7327
ord4157
ord8940
ord6433
ord7629
ord7631
ord1687
ord2950
ord305
ord5769
ord12336
ord14281
ord1520
ord300
ord1038
ord316
ord4977
ord1517
ord1973
ord7630
ord6804
ord3767
ord13054
ord7471
ord4256
ord1449
ord977
ord2165
ord2236
ord8629
ord12801
ord4804
ord2329
ord13869
ord2806
ord1061
ord6341
ord8936
ord3087
ord4154
ord8556
ord2933
ord3806
ord310
ord2466
ord6403
ord4805
ord2189
ord2159
ord2149
ord6330
ord6410
ord3816
ord2245
ord1043
ord323
ord1171
ord7260
ord4407
ord13397
ord7883
ord5277
ord8566
ord8585
ord6393
ord6688
ord5968
ord11912
ord8848
ord10808
ord11180
ord3341
ord3340
ord3104
ord6064
ord13498
ord2704
ord11953
ord9017
ord6375
ord8947
ord4746
ord1124
ord1451
ord4025
ord4809
ord13875
ord13970
ord10266
ord7311
ord3631
ord1057
ord6334
ord8934
ord3085
ord4151
ord1434
ord994
ord1463
ord6672
ord9016
ord10052
ord8027
ord5264
ord7528
ord7538
ord7537
ord5975
ord5091
ord5266
ord5110
ord5643
ord5380
ord9155
ord5614
ord5404
ord5107
ord11949
ord3203
ord3309
ord3874
ord11905
ord2626
ord5782
ord13449
ord11501
ord6710
ord14328
ord7735
ord14330
ord2995
ord4424
ord9495
ord4432
ord4870
ord4837
ord4831
ord4867
ord4889
ord4846
ord4875
ord4885
ord4854
ord4858
ord4862
ord4850
ord4879
ord4842
ord1724
ord1715
ord1719
ord1711
ord1702
ord12038
ord12040
ord13619
ord3204
ord9063
ord10795
ord6809
ord12001
ord8773
ord14322
ord11719
ord3772
ord11870
ord8943
ord11510
ord11509
ord5507
ord10085
ord10081
ord10083
ord10084
ord10082
ord2705
ord8018
ord3240
ord3243
ord13502
ord6066
ord3195
ord4168
ord1102
ord457
ord7934
ord3234
ord3308
GetVersionExA
GetFileTime
CreateFileA
SetFileTime
CloseHandle
DeleteFileA
LocalAlloc
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetTickCount
FreeLibrary
GetSystemWindowsDirectoryA
LeaveCriticalSection
DeleteCriticalSection
Sleep
SleepEx
VerSetConditionMask
GetSystemDirectoryA
GetModuleHandleA
VerifyVersionInfoA
GetStdHandle
GetFileType
ReadFile
PeekNamedPipe
WaitForMultipleObjects
ExpandEnvironmentStringsA
GetProcAddress
LoadLibraryA
GetFileAttributesA
GetFullPathNameA
GetModuleFileNameA
GetUserDefaultLangID
CopyFileA
SetLastError
WaitForSingleObject
MoveFileA
InitializeCriticalSection
GetVolumeInformationA
GetNativeSystemInfo
GetCurrentProcessId
ProcessIdToSessionId
LocalFree
FormatMessageA
GetLastError
WideCharToMultiByte
MultiByteToWideChar
CreateSemaphoreA
GetCurrentThreadId
ReleaseSemaphore
GetWindowsDirectoryA
lstrcpyA
lstrcatA
lstrlenA
WinExec
QueryPerformanceCounter
EnterCriticalSection
SetBkMode
SetBkColor
SetTextColor
CreateSolidBrush
GetObjectA
DeleteObject
GetStockObject
GetTextExtentPoint32A
CreateFontIndirectA
SHGetFolderPathA
SHGetSpecialFolderPathA
SHCreateDirectoryExA
ShellExecuteExA
ShellExecuteA
CoUninitialize
CoInitialize
SysAllocStringLen
SysFreeString
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Winerror_map@std@@YAPBDH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
?_Xout_of_range@std@@YAXPBD@Z
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
_Mtx_destroy
_Mtx_init
_Mtx_lock
?_Xinvalid_argument@std@@YAXPBD@Z
_Xtime_get_ticks
_Thrd_sleep
_Xtime_diff_to_millis2
xtime_get
?_Launch@_Pad@std@@QAEXPAU_Thrd_imp_t@@@Z
??1_Pad@std@@QAE@XZ
?_Release@_Pad@std@@QAEXXZ
??0_Pad@std@@QAE@XZ
_Thrd_detach
?_Throw_Cpp_error@std@@YAXH@Z
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Syserror_map@std@@YAPBDH@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Add_vtordisp2@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?_BADOFF@std@@3_JB
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
GetAdaptersInfo
ord3
NetApiBufferFree
DsGetDcNameA
GetUserNameExA
DllLocalizationInit
GetCimcoDllPrefix
LicenseDll_ActivateLicense
LicenseDll_ActivateLicenseMem
LicenseDll_ActivateUI
LicenseDll_AddReservation
LicenseDll_ChangeServerPassword
LicenseDll_CheckFile
LicenseDll_CheckFileAutoServer
LicenseDll_CheckServerPassword
LicenseDll_CompiledVersion
LicenseDll_CompressData
LicenseDll_ConnectToServer
LicenseDll_DestroyInstance
LicenseDll_DisconnectServer
LicenseDll_DumpActivationRequest
LicenseDll_DumpLicenseFile
LicenseDll_GetActivationRequest
LicenseDll_GetActivationsList
LicenseDll_GetBackupServerList
LicenseDll_GetComputerIdentification
LicenseDll_GetDemoDaysLeft
LicenseDll_GetDemoLicense
LicenseDll_GetLicenseFile
LicenseDll_GetLicenseInfo
LicenseDll_GetResponse
LicenseDll_GetResponseSize
LicenseDll_GetServerInfo
LicenseDll_GetVirtualClient
LicenseDll_GetVirtualClientProducts
LicenseDll_Init
LicenseDll_IsConnectedToServer
LicenseDll_LoadLocalizationYourself
LicenseDll_MergeLicenseFiles
LicenseDll_MergeLicenseFilesMem
LicenseDll_ReleaseBuffer
LicenseDll_ReleaseProduct
LicenseDll_ReleaseVirtualClient
LicenseDll_ReleaseVirtualClientProduct
LicenseDll_RemoveReservation
LicenseDll_RequestProduct
LicenseDll_ResolveLicense
LicenseDll_ScanForServers
LicenseDll_SelectADObjects
LicenseDll_ShowAboutBox
LicenseDll_ShowFileInfo
LicenseDll_ShowLicenseServerUI
LicenseDll_SpawnInstance
LicenseDll_TranslateErrorCode
LicenseDll_UpdateLicenseFile
PassLocalizationDllHandles
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ