Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
ec3b97cf120d513fe95927c4db3d266e0d31ef3cc97f31c4add63dc54470a016.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ec3b97cf120d513fe95927c4db3d266e0d31ef3cc97f31c4add63dc54470a016.dll
Resource
win10v2004-20240508-en
Target
ec3b97cf120d513fe95927c4db3d266e0d31ef3cc97f31c4add63dc54470a016
Size
39KB
MD5
989501df40acff84b47cb0112771ff11
SHA1
ff39e45e01dbfb90a05f8572d838c2cb2056713f
SHA256
ec3b97cf120d513fe95927c4db3d266e0d31ef3cc97f31c4add63dc54470a016
SHA512
45e28a13b32d623da26296ab93d2b626a02f7f33959cbdc2e4ba05d71f29aa19bbf9966608b912cb2eadd5f8e79045b0bece9b9208a302b22f967ad578e66560
SSDEEP
384:Ie35CYora/UKcNLswsKLOsNcS7hOdjQhYX1bG25+d1lFwKPQG1AdNlI2ge7wzIDr:Ie39DUVNLswsKy0IsjzwvJVYNFRKhp
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
DisableThreadLibraryCalls
GetModuleHandleA
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrW
RaiseException
Sleep
DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
TlsGetValue
VirtualProtect
VirtualQuery
_amsg_exit
_initterm
_lock
_unlock
_vsnprintf
__iob_func
_strdup
abort
calloc
fputs
free
fwrite
getenv
strncmp
vfprintf
_snprintf
memcmp
memmove
sprintf
strchr
strcmp
strcpy
strcspn
strlen
??0CVssJetWriter@@QAE@XZ
??0CVssWriter@@QEAA@XZ
??1CVssJetWriter@@UAE@XZ
??1CVssWriter@@UEAA@XZ
?AreComponentsSelected@CVssJetWriter@@IBG_NXZ
?AreComponentsSelected@CVssWriter@@IBG_NXZ
?CreateVssBackupComponents@@YGJPAPAVIVssBackupComponents@@@Z
?CreateVssExamineWriterMetadata@@YGJPAGPAPAVIVssExamineWriterMetadata@@@Z
?CreateVssSnapshotSetDescription@@YGJU_GUID@@JPAPAVIVssSnapshotSetDescription@@@Z
?GetBackupType@CVssJetWriter@@IBG?AW4_VSS_BACKUP_TYPE@@XZ
?GetBackupType@CVssWriter@@IBG?AW4_VSS_BACKUP_TYPE@@XZ
?GetContext@CVssJetWriter@@IBGJXZ
?GetContext@CVssWriter@@IBGJXZ
?GetCurrentLevel@CVssJetWriter@@IBG?AW4_VSS_APPLICATION_LEVEL@@XZ
?GetCurrentLevel@CVssWriter@@IBG?AW4_VSS_APPLICATION_LEVEL@@XZ
?GetCurrentSnapshotSetId@CVssJetWriter@@IBG?AU_GUID@@XZ
?GetCurrentSnapshotSetId@CVssWriter@@IBG?AU_GUID@@XZ
?GetCurrentVolumeArray@CVssJetWriter@@IBGPAPBGXZ
?GetCurrentVolumeArray@CVssWriter@@IBGPAPBGXZ
?GetCurrentVolumeCount@CVssJetWriter@@IBGIXZ
?GetCurrentVolumeCount@CVssWriter@@IBGIXZ
?GetRestoreType@CVssJetWriter@@IBG?AW4_VSS_RESTORE_TYPE@@XZ
?GetRestoreType@CVssWriter@@IBG?AW4_VSS_RESTORE_TYPE@@XZ
?GetSnapshotDeviceName@CVssJetWriter@@IBGJPBGPAPBG@Z
?GetSnapshotDeviceName@CVssWriter@@IBGJPBGPAPBG@Z
?Initialize@CVssJetWriter@@QAGJU_GUID@@PBG_N211K@Z
?Initialize@CVssWriter@@QEAAJU_GUID@@PEBGW4VSS_USAGE_TYPE@@W4VSS_SOURCE_TYPE@@W4_VSS_APPLICATION_LEVEL@@KW4VSS_ALTERNATE_WRITER_STATE@@_N1@Z
?InstallAlternateWriter@CVssWriter@@QAGJU_GUID@@0@Z
?IsBootableSystemStateBackedUp@CVssJetWriter@@IBG_NXZ
?IsBootableSystemStateBackedUp@CVssWriter@@IBG_NXZ
?IsPartialFileSupportEnabled@CVssJetWriter@@IBG_NXZ
?IsPartialFileSupportEnabled@CVssWriter@@IBG_NXZ
?IsPathAffected@CVssJetWriter@@IBG_NPBG@Z
?IsPathAffected@CVssWriter@@IBG_NPBG@Z
?LoadVssSnapshotSetDescription@@YGJPBGPAPAVIVssSnapshotSetDescription@@U_GUID@@@Z
?OnAbortBegin@CVssJetWriter@@UAGXXZ
?OnAbortEnd@CVssJetWriter@@UAGXXZ
?OnBackOffIOOnVolume@CVssWriter@@UAG_NPAGU_GUID@@1@Z
?OnBackupComplete@CVssWriter@@UAG_NPAVIVssWriterComponents@@@Z
?OnBackupCompleteBegin@CVssJetWriter@@UAG_NPAVIVssWriterComponents@@@Z
?OnBackupCompleteEnd@CVssJetWriter@@UAG_NPAVIVssWriterComponents@@_N@Z
?OnBackupShutdown@CVssWriter@@UAG_NU_GUID@@@Z
?OnContinueIOOnVolume@CVssWriter@@UAG_NPAGU_GUID@@1@Z
?OnFreezeBegin@CVssJetWriter@@UAG_NXZ
?OnFreezeEnd@CVssJetWriter@@UAG_N_N@Z
?OnIdentify@CVssJetWriter@@UAG_NPAVIVssCreateWriterMetadata@@@Z
?OnIdentify@CVssWriter@@UAG_NPAVIVssCreateWriterMetadata@@@Z
?OnPostRestore@CVssWriter@@UAG_NPAVIVssWriterComponents@@@Z
?OnPostRestoreBegin@CVssJetWriter@@UAG_NPAVIVssWriterComponents@@@Z
?OnPostRestoreEnd@CVssJetWriter@@UAG_NPAVIVssWriterComponents@@_N@Z
?OnPostSnapshot@CVssJetWriter@@UAG_NPAVIVssWriterComponents@@@Z
?OnPostSnapshot@CVssWriter@@UAG_NPAVIVssWriterComponents@@@Z
?OnPreRestore@CVssWriter@@UAG_NPAVIVssWriterComponents@@@Z
?OnPreRestoreBegin@CVssJetWriter@@UAG_NPAVIVssWriterComponents@@@Z
?OnPreRestoreEnd@CVssJetWriter@@UAG_NPAVIVssWriterComponents@@_N@Z
?OnPrepareBackup@CVssWriter@@UAG_NPAVIVssWriterComponents@@@Z
?OnPrepareBackupBegin@CVssJetWriter@@UAG_NPAVIVssWriterComponents@@@Z
?OnPrepareBackupEnd@CVssJetWriter@@UAG_NPAVIVssWriterComponents@@_N@Z
?OnPrepareSnapshotBegin@CVssJetWriter@@UAG_NXZ
?OnPrepareSnapshotEnd@CVssJetWriter@@UAG_N_N@Z
?OnThawBegin@CVssJetWriter@@UAG_NXZ
?OnThawEnd@CVssJetWriter@@UAG_N_N@Z
?OnVSSApplicationStartup@CVssWriter@@UAG_NXZ
?OnVSSShutdown@CVssWriter@@UAG_NXZ
?SetWriterFailure@CVssJetWriter@@IAGJJ@Z
?SetWriterFailure@CVssWriter@@IAGJJ@Z
?Subscribe@CVssWriter@@QEAAJK@Z
?Uninitialize@CVssJetWriter@@QAGXXZ
?Unsubscribe@CVssWriter@@QEAAJXZ
CreateVssBackupComponentsInternal
CreateVssExamineWriterMetadataInternal
CreateVssExpressWriterInternal
CreateWriter
CreateWriterEx
DllCanUnloadNow
DllGetClassObject
GetProviderMgmtInterface
GetProviderMgmtInterfaceInternal
IsVolumeSnapshotted
IsVolumeSnapshottedInternal
ShouldBlockRevert
ShouldBlockRevertInternal
VssFreeSnapshotProperties
VssFreeSnapshotPropertiesInternal
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ