Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
e8b0f850e34938d66a80afd9456e3c8cb6dfc234b2171f9615dfc2aa625d82e8.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e8b0f850e34938d66a80afd9456e3c8cb6dfc234b2171f9615dfc2aa625d82e8.dll
Resource
win10v2004-20240426-en
Target
e8b0f850e34938d66a80afd9456e3c8cb6dfc234b2171f9615dfc2aa625d82e8
Size
547KB
MD5
811da4f2cb4e42329b8ea41f76389a53
SHA1
471a111df3e1eed8488a98d9e3369389b94510fa
SHA256
e8b0f850e34938d66a80afd9456e3c8cb6dfc234b2171f9615dfc2aa625d82e8
SHA512
9cedea5e27a04aee01b0c5a24aefd9e57a4ca4a249466e05c749dce50d09652fd1290513db0126fb17ba98caba2f818a04cf1c3d95eeaaec08f83f45d7b50218
SSDEEP
12288:oWPminMSPr2dki6cD3/EljdwKrikjUXz0jXTzr5Y5ObDKHBjvrEH7A:vPmin/r46cD3/W+rEH7A
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
C:\data\cpp\git\hardlinks\Bin\Win32\Release\HardlinkShellExt.pdb
PathCompactPathExW
PathSkipRootW
PathStripToRootW
PathRemoveExtensionW
PathFindExtensionW
PathCombineW
PathCanonicalizeW
PathRemoveFileSpecW
PathRemoveBackslashW
StrStrIW
PathRelativePathToW
PathIsRelativeW
PathFindFileNameW
PathAddBackslashW
PathIsRootW
PathIsUNCW
EmptyClipboard
SetClipboardData
CloseClipboard
GetClipboardData
MessageBoxW
wsprintfW
SendMessageW
GetParent
SetDlgItemTextW
GetDlgItemTextW
GetDlgItem
ShowWindow
UpdateWindow
SetWindowLongW
GetWindowTextLengthW
GetWindowLongW
GetWindowRect
InsertMenuW
RegisterClipboardFormatW
IsClipboardFormatAvailable
OpenClipboard
CreatePopupMenu
InsertMenuItemW
SysAllocString
ReleaseStgMedium
CoCreateInstance
CoUninitialize
CoInitialize
WNetGetUniversalNameW
WNetGetResourceInformationW
NtQuerySecurityObject
NtSetEaFile
NtQueryEaFile
NtQueryInformationFile
NtSetInformationFile
NtSetSecurityObject
NtQueryDirectoryFile
NtOpenFile
RtlDosPathNameToNtPathName_U
NetShareGetInfo
SHGetPathFromIDListW
ord680
SHCreateItemFromParsingName
ShellExecuteW
ShellExecuteExW
DragQueryFileW
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
_Mtx_lock
?_Xout_of_range@std@@YAXPBD@Z
?global@locale@std@@SA?AV12@ABV12@@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?uncaught_exception@std@@YA_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
??0_Locinfo@std@@QAE@HPBD@Z
??1_Locinfo@std@@QAE@XZ
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_Xruntime_error@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
OpenProcessToken
GetTokenInformation
LookupAccountSidW
ConvertSidToStringSidW
ReadEncryptedFileRaw
OpenEncryptedFileRawW
WriteEncryptedFileRaw
CloseEncryptedFileRaw
LookupPrivilegeValueW
PrivilegeCheck
AdjustTokenPrivileges
FindClose
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryExA
VirtualQuery
VirtualProtect
RaiseException
FreeLibrary
GetFileSize
LockResource
LoadResource
FindResourceW
FindResourceExW
FindNextFileNameW
FindFirstFileNameW
UnmapViewOfFile
MapViewOfFileEx
QueryDosDeviceW
MoveFileW
OutputDebugStringA
LoadLibraryW
CreateFileMappingW
SetEndOfFile
SetFilePointerEx
GetFileSizeEx
CreateEventW
SetEvent
WriteFile
FileTimeToSystemTime
SystemTimeToFileTime
GetExitCodeProcess
LoadLibraryA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
SetLastError
GetModuleFileNameW
GetVolumeInformationW
FormatMessageW
LocalFree
DeleteFileW
SetFileAttributesW
CreateDirectoryW
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcpynA
GetLocalTime
WaitForSingleObject
GetFileAttributesW
GetLastError
RemoveDirectoryW
lstrcpynW
GetVersionExW
CreateFileW
GetFileInformationByHandle
CloseHandle
CreateHardLinkW
CreateSymbolicLinkW
FindFirstFileW
FindNextFileW
DeviceIoControl
GetDriveTypeW
GetVolumeNameForVolumeMountPointW
SetVolumeMountPointW
GetVolumePathNamesForVolumeNameW
DeleteVolumeMountPointW
GetFullPathNameW
CreateThread
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
GetFileAttributesExW
GetTempPathW
GetCurrentProcess
LocalAlloc
GetSystemInfo
WaitForMultipleObjects
__CxxFrameHandler3
__std_terminate
wcsstr
wcsrchr
__std_exception_destroy
__std_exception_copy
_except_handler4_common
_CxxThrowException
__std_type_info_destroy_list
memset
memcpy
memmove
wcsncpy_s
strcpy_s
towlower
iswctype
towupper
wcstok_s
wcsncat_s
wcscat_s
wcscpy_s
wcsncpy
_wcsicmp
_wcslwr_s
_towlower_l
wcsncmp
_seh_filter_dll
_initterm_e
_configure_narrow_argv
_register_onexit_function
_errno
_cexit
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_initterm
_initialize_onexit_table
_crt_atexit
_initialize_narrow_environment
fclose
_wfopen_s
__stdio_common_vfwprintf
__stdio_common_vsprintf_s
__stdio_common_vfprintf
__acrt_iob_func
__stdio_common_vswprintf_s
_wstat64i32
_wsplitpath
realloc
free
calloc
malloc
_callnewh
_wtoi
DllCanUnloadNow
DllGetClassObject
DllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ