Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
hp-plugin-executor.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
hp-plugin-executor.exe
Resource
win10v2004-20240426-en
Target
hp-plugin-executor.exe
Size
89KB
MD5
91b755e02cefa20ae3f72eb8d9a4694b
SHA1
18beea6b531469c26d814c954fa97464fbdf2239
SHA256
9134459ae1708c519fcca8b5f27df74f595c61372af18d8c46e7138b1947d997
SHA512
d4e77e837af91b3c39d1ef664ef1ee1ae131ebf6b9c18da7364206549273af967a1c4a2b046adab2b49abccb8e60b1d18c4b8f2b70256550bb4c138da1103408
SSDEEP
1536:e22A2+d4CerBv9inyJ+D9tl/OPsfN8zd68S0BnM1B7HKxZ:e22pkO6D9PpfN6nMzDK
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
C:\agent\_work\5\s\hp-shared-plugin-manager\OUTPUT\x64\Release\hp-plugin-executor.pdb
PathFileExistsA
WinVerifyTrust
LocalFree
FormatMessageA
GetModuleHandleExW
GetModuleFileNameW
CreateToolhelp32Snapshot
FormatMessageW
GetLastError
CloseHandle
Module32FirstW
GetProcAddress
LoadLibraryExA
FreeLibrary
Module32NextW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetCurrentThreadId
MultiByteToWideChar
DeleteCriticalSection
WideCharToMultiByte
MoveFileW
GetCurrentProcessId
GetModuleFileNameA
AreFileApisANSI
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
GetLocaleInfoEx
CryptStringToBinaryA
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?good@ios_base@std@@QEBA_NXZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
??Bid@locale@std@@QEAA_KXZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Syserror_map@std@@YAPEBDH@Z
?_Xlength_error@std@@YAXPEBD@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Xbad_function_call@std@@YAXXZ
?_Winerror_map@std@@YAHH@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
__CxxFrameHandler4
__current_exception_context
__current_exception
__C_specific_handler
wcsrchr
memset
_purecall
__std_exception_copy
__std_exception_destroy
__RTDynamicCast
_CxxThrowException
memcmp
__std_terminate
memcpy
memmove
wcsncpy_s
wcscpy_s
wcsnlen
_close
__stdio_common_vsnwprintf_s
_write
_wsopen_s
_set_fmode
__p__commode
_lseeki64
_set_new_mode
free
malloc
_callnewh
_localtime64_s
_ftime64
_fullpath
_wunlink
_get_initial_narrow_environment
_initterm
_set_app_type
_initterm_e
_cexit
_exit
_register_onexit_function
_seh_filter_exe
_initialize_narrow_environment
_configure_narrow_argv
__p___argv
terminate
exit
_initialize_onexit_table
_crt_atexit
_c_exit
_invalid_parameter_noinfo_noreturn
__p___argc
_register_thread_local_exe_atexit_callback
___lc_codepage_func
_configthreadlocale
__setusermatherr
??0IValidator@plugin@shared@hp@@QEAA@$$QEAV0123@@Z
??0IValidator@plugin@shared@hp@@QEAA@AEBV0123@@Z
??0IValidator@plugin@shared@hp@@QEAA@XZ
??0Validator@plugin@shared@hp@@QEAA@$$QEAV0123@@Z
??0Validator@plugin@shared@hp@@QEAA@AEBV0123@@Z
??0Validator@plugin@shared@hp@@QEAA@XZ
??4IValidator@plugin@shared@hp@@QEAAAEAV0123@$$QEAV0123@@Z
??4IValidator@plugin@shared@hp@@QEAAAEAV0123@AEBV0123@@Z
??4Validator@plugin@shared@hp@@QEAAAEAV0123@$$QEAV0123@@Z
??4Validator@plugin@shared@hp@@QEAAAEAV0123@AEBV0123@@Z
??_7IValidator@plugin@shared@hp@@6B@
??_7Validator@plugin@shared@hp@@6B@
?ValidateSignature@Validator@plugin@shared@hp@@UEAAKPEBD@Z
?VersionDelimiter@IValidator@plugin@shared@hp@@2PEBDEB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ