Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
TabTip.exe
Resource
win11-20240508-en
Target
TabTip.exe
Size
562KB
MD5
9d8953cca4ea39ff09296763aa341458
SHA1
1456dd56db95a4d51bc4c55d5d1aa74a635a26e7
SHA256
ba8936b197e8d325678f4c90e531587e2262bb29002bc6e5189d2d6773dfbcf6
SHA512
8de5a38671552f3172448315b86efcce7cdf1f70bbcfbf976298a0c291d195e7958ddecf7d821027ec38c541523f692569c56afb7a1258a952c2333c005112c4
SSDEEP
12288:hwmI1I2rUM372COoAsqIfOkrUoNWSnyWq9paK8Dh:gUM372CThqIfOkHNWmyxoK8Dh
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
TabTip.pdb
MessageBoxW
CharNextW
GetForegroundWindow
GetAncestor
RealGetWindowClassW
GetUserObjectInformationW
OpenInputDesktop
CloseDesktop
SetProcessDPIAware
GetSystemMetrics
FindWindowW
SetTimer
SetWinEventHook
UnhookWinEvent
GetClassNameW
SendInput
GetWindowThreadProcessId
GetKeyboardLayout
MapVirtualKeyExW
MapVirtualKeyW
WaitForInputIdle
GetDlgCtrlID
GetWindow
PostMessageW
PostThreadMessageW
DispatchMessageW
TranslateMessage
KillTimer
GetMessageW
SetThreadDesktop
UnregisterClassA
GetThreadDesktop
CharUpperW
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_Xlength_error@std@@YAXPEBD@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
strncmp
wcscmp
wcsncmp
memset
_c_exit
_register_thread_local_exe_atexit_callback
_initterm_e
_initterm
_o__errno
_o__exit
_o__get_wide_winmain_command_line
_o__initialize_onexit_table
_o__initialize_wide_environment
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__itow
_o__purecall
_o__recalloc
_o__register_onexit_function
_o__seh_filter_exe
_o__set_app_type
_o__set_fmode
_o__set_new_mode
_o__wcsicmp
_o__wcsnicmp
_o__wtoi
_o_abort
_o_calloc
_o_exit
_o_free
_o_iswspace
_o_malloc
_o_memcpy_s
_o_qsort
_o_realloc
_o_terminate
_o_towupper
_o_wcstol
_o_wmemcpy_s
__current_exception
__current_exception_context
__CxxFrameHandler3
_o___p__commode
_o__crt_atexit
_o__configure_wide_argv
_o__configthreadlocale
_o__cexit
_o__callnewh
_o__beginthreadex
wcsrchr
wcsstr
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
__C_specific_handler
__std_terminate
_o___stdio_common_vsnwprintf_s
__CxxFrameHandler4
wcschr
_o___stdio_common_vsnprintf_s
_CxxThrowException
__C_specific_handler_noexcept
memcmp
_o___std_exception_destroy
_o___std_exception_copy
memcpy
memmove
NtQuerySystemInformation
RtlPublishWnfStateData
EtwEventUnregister
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WinSqmAddToStream
NtQueryWnfStateData
RtlGetDeviceFamilyInfoEnum
EtwEventActivityIdControl
EtwEventWriteTransfer
EtwEventSetInformation
EtwEventRegister
GetModuleHandleW
FreeLibrary
GetModuleFileNameA
FindResourceExW
GetModuleFileNameW
GetModuleHandleExW
GetProcAddress
LoadResource
LockResource
SizeofResource
WaitForSingleObject
CreateEventExW
ReleaseSemaphore
OpenEventW
WaitForMultipleObjectsEx
CreateMutexW
CreateSemaphoreExW
InitializeCriticalSectionEx
ReleaseSRWLockShared
AcquireSRWLockShared
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
OpenMutexW
SetEvent
CreateEventW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
CreateMutexExW
OpenSemaphoreW
WaitForSingleObjectEx
ResetEvent
ReleaseMutex
HeapSetInformation
GetProcessHeap
HeapReAlloc
HeapSize
HeapFree
HeapDestroy
HeapAlloc
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetLastError
TerminateProcess
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
OpenProcessToken
GetCurrentThread
OpenThreadToken
SetProcessShutdownParameters
GetStartupInfoW
ProcessIdToSessionId
CreateThread
CreateProcessAsUserW
GetExitCodeProcess
FormatMessageW
IsDebuggerPresent
DebugBreak
OutputDebugStringW
CloseHandle
CreateThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
SetThreadpoolTimer
CompareStringW
MultiByteToWideChar
WideCharToMultiByte
AddAce
InitializeAcl
EqualSid
IsValidSid
GetLengthSid
CopySid
GetSecurityDescriptorOwner
InitializeSid
GetSidLengthRequired
GetSecurityDescriptorDacl
SetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetTokenInformation
InitializeSecurityDescriptor
MakeAbsoluteSD
GetSecurityDescriptorControl
GetSecurityDescriptorSacl
GetAclInformation
SetSecurityDescriptorGroup
GetSidSubAuthority
SetSecurityDescriptorDacl
DuplicateTokenEx
RegQueryValueExW
RegOpenKeyExW
RegGetValueW
RegCloseKey
InitOnceComplete
InitOnceBeginInitialize
Sleep
SetThreadDescription
GetCommandLineW
GetSystemInfo
GetTickCount
GetSystemTimeAsFileTime
K32EnumProcessModules
K32GetModuleBaseNameW
K32GetProcessImageFileNameW
K32GetModuleFileNameExW
K32EnumProcesses
OpenProcess
GetProcessMitigationPolicy
IsProcessorFeaturePresent
GetFileTime
CreateFileW
CompareFileTime
GetFileVersionInfoExW
GetFileVersionInfoSizeExW
VerQueryValueW
LoadLibraryW
QueryPerformanceCounter
InterlockedPushEntrySList
InitializeSListHead
UnregisterWait
RegisterWaitForSingleObject
QueueUserWorkItem
DeleteTimerQueueTimer
CreateTimerQueueTimer
PathFileExistsW
PathFindFileNameW
SHCreateThreadWithHandle
RegisterApplicationRestart
UnregisterApplicationRestart
ApiSetQueryApiSetPresence
LocalAlloc
LocalFree
ResolveDelayLoadedAPI
DelayLoadFailureHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ