Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
12ae0fc2c58426d468f5688dd4fc20152a03a156264c247da9e658d15e5fdd29.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
12ae0fc2c58426d468f5688dd4fc20152a03a156264c247da9e658d15e5fdd29.dll
Resource
win10v2004-20240412-en
Target
12ae0fc2c58426d468f5688dd4fc20152a03a156264c247da9e658d15e5fdd29
Size
1.3MB
MD5
75f8ab94fc74515eb9223a0412cb2831
SHA1
f7d74d03f7366d74f7c489be60924e2d58e4144d
SHA256
12ae0fc2c58426d468f5688dd4fc20152a03a156264c247da9e658d15e5fdd29
SHA512
1649bb1c8270a52dab953ef604d64ce634c2782cd9d5e24a61b42d89ad0d8ed312e21a470015d74a98b65f9ca429f67da19f15f6942987418eba73ef7cb9742e
SSDEEP
24576:SZU56budiN4bJYwUG4v+Rj7POyODDenGWAJr8yoRHnrAWe5rEH7q:0b+hjWeGWAJIxH4d
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
d:\winapps\mh\trunk\Build\AntiVirus\Release\AntiVirus.pdb
ord2676
ord2479
ord4518
ord4519
ord1557
ord702
ord453
ord933
ord2145
ord3191
ord3355
ord6411
ord1754
ord1751
ord4345
ord1493
ord4664
ord5602
ord2074
ord5512
ord6800
ord4603
ord5664
ord3743
ord5154
ord4702
ord1728
ord6466
ord5685
ord5683
ord960
ord965
ord969
ord967
ord971
ord2615
ord2635
ord2619
ord2625
ord2623
ord2621
ord2638
ord2633
ord2617
ord2640
ord2628
ord2610
ord2612
ord2630
ord2375
ord2368
ord1641
ord6802
ord4174
ord6804
ord3682
ord5404
ord6376
ord3226
ord1442
ord5625
ord2139
ord1792
ord1727
ord5650
ord3140
ord4910
ord1791
ord1220
ord3868
ord1070
ord5788
ord1298
ord310
ord324
ord608
ord1542
ord6528
ord2539
ord3221
ord305
ord2829
ord1608
ord6633
ord1137
ord4044
ord797
ord595
ord3953
ord911
ord6531
ord316
ord601
ord266
ord265
ord935
ord939
ord2370
ord5770
ord2696
ord6116
ord1034
ord2327
ord6079
ord580
ord782
ord1248
ord946
ord6171
ord6013
ord2478
ord6687
ord2523
ord1243
ord2458
ord582
ord784
ord1250
ord392
ord802
ord322
ord1076
ord1145
ord1249
ord5853
ord406
ord665
ord2490
ord5939
ord6164
ord6529
ord6022
ord321
ord1271
ord1273
ord5553
ord3071
ord690
ord441
ord1211
ord4442
ord2326
ord6415
ord4490
ord452
ord1254
ord3187
ord4324
ord938
ord1603
ord6659
ord5979
ord6686
ord4405
ord1607
ord285
ord3220
ord1599
ord4448
ord4423
ord6801
ord4173
ord6803
ord4747
ord2251
ord2206
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord2087
ord3217
ord5674
ord5676
ord4347
ord4996
ord5680
ord5663
ord6018
ord2771
ord2983
ord3112
ord4728
ord2966
ord3115
ord2774
ord2893
ord2764
ord4080
ord4081
ord4071
ord2891
ord4348
ord4905
ord4681
ord3670
ord3500
ord6813
ord1064
ord4309
ord4351
ord2447
ord4211
ord794
ord589
ord4043
ord2537
ord2702
ord5851
ord811
ord296
ord280
ord1855
ord600
ord3185
ord2694
ord2828
ord6630
ord813
ord1152
ord391
ord1233
ord1180
ord942
ord821
ord818
ord300
ord5852
ord4325
ord1088
ord4494
ord6359
ord6514
ord3186
ord286
ord909
ord799
ord2084
ord1552
ord1261
ord320
ord5535
ord1264
ord1239
ord2695
ord814
ord6660
ord3406
ord663
ord404
ord1241
ord1274
ord605
ord801
_stricmp
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
memmove_s
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
wcsrchr
_wcsicmp
wcstol
_time64
wcsftime
_localtime64_s
?what@exception@std@@UBEPBDXZ
_purecall
wcscpy_s
_beginthreadex
printf
free
_recalloc
calloc
_wfopen_s
fwprintf_s
fflush
fclose
_vsnwprintf_s
malloc
wcsncpy_s
wprintf
_wtoi
fprintf
__iob_func
_wcstoi64
strtol
_strtoi64
_wfopen
fread
ferror
feof
fwrite
memcpy_s
_gmtime64
wcsncpy
wcsstr
strncpy
srand
rand
fputc
strncmp
isspace
putc
_pclose
_isatty
_access
_popen
fgetc
isalnum
tolower
isprint
fgets
fopen
isalpha
isdigit
realloc
getenv
exit
memmove
wcschr
_wcsnicmp
swprintf_s
_wcsdup
strstr
wcsncmp
sscanf
sprintf
strchr
sprintf_s
strpbrk
__CxxFrameHandler3
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_CxxThrowException
_except_handler4_common
__clean_type_info_names_internal
memset
memcpy
?_type_info_dtor_internal_method@type_info@@QAEXXZ
FindNextFileW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
CloseHandle
InterlockedExchange
WaitForSingleObject
GetPrivateProfileStringW
MultiByteToWideChar
LoadLibraryW
FreeLibrary
InterlockedExchangeAdd
GetTempFileNameW
lstrlenA
lstrlenW
WideCharToMultiByte
GetVersionExW
CreatePipe
CreateProcessW
ResumeThread
ReadFile
TerminateProcess
GetExitCodeProcess
OpenProcess
GetTickCount
CreateFileW
DeviceIoControl
GetDriveTypeW
LocalAlloc
ExpandEnvironmentStringsW
QueryPerformanceCounter
GetCurrentThreadId
QueryPerformanceFrequency
GetLogicalDrives
GetDiskFreeSpaceExW
Sleep
WaitForMultipleObjects
LoadLibraryA
MoveFileExW
FileTimeToSystemTime
SystemTimeToFileTime
MoveFileW
GetFileAttributesW
GetFileTime
SetFileAttributesW
SetFileTime
GetPrivateProfileSectionNamesW
GetPrivateProfileSectionW
GetFileType
SetFilePointer
GetCurrentDirectoryW
DosDateTimeToFileTime
CreateDirectoryW
WriteFile
GetFileInformationByHandle
EnterCriticalSection
GetLocalTime
GetFullPathNameW
GetFullPathNameA
HeapReAlloc
CreateFileA
CreateMutexW
SetEndOfFile
HeapAlloc
HeapFree
InterlockedCompareExchange
UnlockFile
LockFile
OutputDebugStringW
UnlockFileEx
GetProcessHeap
GetProcAddress
GetLastError
GetSystemTimeAsFileTime
DeleteFileW
LocalFree
FormatMessageW
GetModuleFileNameW
GetLongPathNameW
GetCurrentProcess
GetModuleHandleW
FindClose
CreateThread
FindFirstFileW
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
DuplicateHandle
GetFileSize
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetVolumeInformationW
QueryDosDeviceW
GetOverlappedResult
ReadDirectoryChangesW
CreateEventW
SetEvent
Process32NextW
Process32FirstW
Module32NextW
Module32FirstW
CreateToolhelp32Snapshot
GetVersion
DeleteFileA
AreFileApisANSI
GetSystemTime
GetTempPathA
GetCurrentProcessId
GetVersionExA
OutputDebugStringA
GetFileAttributesExW
GetSystemInfo
GetDiskFreeSpaceA
CreateFileMappingA
GetDiskFreeSpaceW
LockFileEx
HeapSize
GetTempPathW
FlushFileBuffers
HeapValidate
HeapCreate
GetFileAttributesA
HeapDestroy
FormatMessageA
CreateWindowExW
PeekMessageW
DispatchMessageW
wsprintfW
DefWindowProcW
LoadIconW
LoadCursorW
EnableWindow
TranslateAcceleratorW
GetMessageW
MsgWaitForMultipleObjects
RegisterClassExW
GetDesktopWindow
TranslateMessage
RegCloseKey
RegEnumKeyW
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptDestroyHash
CryptEncrypt
CryptDestroyKey
CryptReleaseContext
CryptDecrypt
CryptGetHashParam
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegOpenKeyW
RegQueryInfoKeyW
ord165
SHGetSpecialFolderPathW
ShellExecuteW
SHFileOperationW
CommandLineToArgvW
PathRemoveFileSpecW
SHGetValueW
PathFindExtensionW
StrCmpLogicalW
PathFileExistsW
PathUnExpandEnvStringsW
StrFormatByteSizeW
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
SysAllocString
SysStringLen
VariantClear
SysAllocStringLen
VariantInit
SysFreeString
URLDownloadToFileW
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IPB_WI@Z
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@D@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?uncaught_exception@std@@YA_NXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?width@ios_base@std@@QAEHH@Z
?width@ios_base@std@@QBEHXZ
?setf@ios_base@std@@QAEHHH@Z
?setf@ios_base@std@@QAEHH@Z
?flags@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
?rdstate@ios_base@std@@QBEHXZ
?eof@?$char_traits@D@std@@SAHXZ
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?length@?$char_traits@D@std@@SAIPBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IBEPBDXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IBEPB_WXZ
_SetBlacklistFile@12
_SetFilterRegKey@16
_SetProcessProtectReg@12
_SetProcessProtectFile@8
_UpdateFileLastOpenMask@0
_SetFilterExcludePID@12
_SetProcessProtectPID@12
_UnregisterMHFilterCallback@8
_RegisterMHFilterCallback@12
ord5
ord4
ord3
ord2
ord1
_QueryRegPath@16
GetDLFileInfo
GAGetThreadStackModule
GAUninit
GAInit
DeleteUrlCacheEntryW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
GetProcessImageFileNameW
EnumProcesses
WinVerifyTrust
CertFreeCertificateContext
CryptMsgClose
CertCloseStore
CryptQueryObject
CertGetNameStringW
CertFindCertificateInStore
CryptMsgGetParam
uncompress
CloseShortcuts
GetShortcutsTargetPath
CreateShortcuts
GetModuleUpdateInfo
SfcIsFileProtected
AVAddAnalysisFile
AVAddAnalysisFiles
AVAddExcludePath
AVAddScanLocation
AVAddScanObjectLocation
AVAddToList
AVAddToListItem
AVClearAnalysisHistoryList
AVClearQuarantineFile
AVCloudSetOption
AVCreateInstance
AVCreateScanObject
AVDeleteExcludePath
AVDeleteLog
AVDeleteMultiToList
AVDeleteQuarantineFile
AVDeleteToList
AVDestroyInstance
AVEnableEngine
AVEnumAnalysisHistoryList
AVEnumEngine
AVEnumLogList
AVEnumLogRecord
AVEnumQuarantine
AVEnumToList
AVEnumToListItem
AVGetAnalysisFileStatus
AVGetDataDetailInfo
AVGetDataInfo
AVGetDataProperty
AVGetEngineDataVersion
AVGetEngineVersion
AVGetExcludePaths
AVGetScanEngines
AVGetScanTime
AVGetToList
AVGetValidInstallerPath
AVInitialize
AVInstall
AVInstallEngine
AVIsUpdateEngine
AVProtectSetCallback
AVProtectSetOption
AVProtectStart
AVProtectStop
AVQuarantineFile
AVReleaseExcludePaths
AVRepair
AVRestoreQuarantineFile
AVSaveLog
AVScan
AVScanAddToList
AVSetCallBack
AVSetDataProperty
AVSetObjectOption
AVSetOption
AVStop
AVStopUpdate
AVSuspend
AVUninitialize
AVUninstall
AVUninstallEngine
AVUpdate
AVUpdateDate
AVUpdateEngine
AVWriteLog
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ