Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2017M.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2017M.exe
Resource
win10v2004-20240426-en
Target
2017M.exe
Size
15.9MB
MD5
6c10c85e250629d18ac4e533d9e51c41
SHA1
961412fde939193727a4f68fedc69f001509b3e8
SHA256
b1a1ecac172f26a52d7dd5a2a8149652c1c6698b551f3757bf04992143f56376
SHA512
50c3eb9518a248037d1a3b3bf819bd413bf05d1698b8a0e900b95dcdff36b1c1d0894ba9c245198bbc214b467c98c3029e20f8ce90d04b7cb47b1a7801c19202
SSDEEP
196608:NANlIFDzjma1v4aZLf/iWpJHPg89o6FCq5nEkn3vHd:Vfmev4aZLf/iSHPg89o6FEkn3V
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
D:\BuildAgent\work\aa75b25f660b5db2\build.msvc\Win32\RCCService-Release\RCCService\RCCService.pdb
GetComputerNameA
QueueUserWorkItem
GetGeoInfoA
GetUserGeoID
SetConsoleTextAttribute
SetConsoleCtrlHandler
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
GetShortPathNameW
GetModuleFileNameW
GetVersionExA
IsWow64Process
SetLastError
FormatMessageA
GetModuleFileNameA
GetStdHandle
WaitForSingleObject
DebugBreak
RemoveVectoredExceptionHandler
AddVectoredExceptionHandler
WriteProcessMemory
GetCurrentProcess
VirtualProtect
GetProcAddress
FindNextFileA
FindFirstFileA
CreateFileA
CompareFileTime
FileTimeToSystemTime
SystemTimeToFileTime
GetSystemTime
WriteFile
WideCharToMultiByte
MoveFileA
DeleteFileA
FindResourceExW
FindResourceW
SizeofResource
LoadResource
LockResource
GetCurrentThreadId
CreateMutexA
GetModuleHandleA
ResetEvent
SetEvent
GetCurrentProcessId
WaitForSingleObjectEx
CloseHandle
ReplaceFileW
GetEnvironmentVariableA
GetModuleHandleExA
LoadLibraryExA
SearchPathW
OpenEventW
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
GetFileSizeEx
GetTempPathA
SetThreadContext
OpenEventA
CreateEventA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
WriteConsoleW
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindFirstFileExA
SetStdHandle
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetConsoleCP
ReadConsoleW
GetACP
GetCommandLineW
GetCommandLineA
ExitThread
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
GetDriveTypeW
ReadFile
GetModuleHandleExW
ExitProcess
GetTimeZoneInformation
SetConsoleMode
ReadConsoleInputA
HeapDestroy
DecodePointer
PeekConsoleInputA
GetNumberOfConsoleInputEvents
GetConsoleMode
RtlUnwind
LoadLibraryW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
GetVersionExW
LoadLibraryExW
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetThreadPriority
CreateThread
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
TerminateProcess
GetStartupInfoW
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
GetModuleHandleW
CreateEventW
GetCPInfo
EncodePointer
TryEnterCriticalSection
GetNativeSystemInfo
OutputDebugStringW
InterlockedDecrement
SetThreadPriority
GetLocalTime
GetCurrentThread
GetProcessAffinityMask
FreeConsole
GetThreadContext
CreateProcessA
SetUnhandledExceptionFilter
VirtualFree
VirtualAlloc
MoveFileExW
FindNextFileW
FindFirstFileW
DeleteFileW
GetFileAttributesW
CreateFileW
GetFullPathNameW
RemoveDirectoryW
CreateDirectoryW
GetDiskFreeSpaceExW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetTempPathW
SetFileTime
GetFileTime
OutputDebugStringA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
Sleep
CreateSemaphoreA
ReleaseSemaphore
DuplicateHandle
GlobalMemoryStatusEx
GetProcessHeaps
HeapSetInformation
MultiByteToWideChar
GlobalLock
GlobalUnlock
VirtualQuery
VerSetConditionMask
FreeLibrary
GetVersion
SleepEx
LoadLibraryA
ExpandEnvironmentStringsA
VerifyVersionInfoA
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseMutex
IsDebuggerPresent
GetSystemInfo
OpenProcess
LocalFree
WaitForMultipleObjectsEx
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateWaitableTimerA
SetWaitableTimer
GetLogicalProcessorInformation
DeviceIoControl
SetEndOfFile
SetFilePointerEx
FindClose
GetDC
SendMessageA
GetWindowTextA
EnumWindows
GetClassNameA
GetWindowThreadProcessId
GetWindowInfo
GetClientRect
GetWindowLongA
PostMessageA
GetAsyncKeyState
DestroyWindow
MessageBoxA
EnumDisplayDevicesA
GetClipboardData
RegisterClassA
PostQuitMessage
CloseClipboard
OpenClipboard
DefWindowProcA
CreateWindowExA
ControlService
DeregisterEventSource
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptGenRandom
CryptImportKey
CryptVerifySignatureA
RegisterEventSourceA
ReportEventA
RegCloseKey
StartServiceA
StartServiceCtrlDispatcherA
SetServiceStatus
RegisterServiceCtrlHandlerA
OpenServiceA
OpenSCManagerA
DeleteService
CreateServiceA
RegCreateKeyExA
CloseServiceHandle
ChangeServiceConfig2A
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
PathAppendA
PathIsRelativeA
PathAddBackslashA
PathStripPathA
PathRemoveFileSpecA
PathFileExistsA
MiniDumpWriteDump
GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoSizeW
shutdown
getsockname
gethostname
socket
gethostbyname
WSAStartup
WSACleanup
sendto
send
select
recvfrom
recv
ntohs
ntohl
listen
ioctlsocket
htons
WSAGetLastError
setsockopt
WSASetLastError
inet_addr
getpeername
__WSAFDIsSet
accept
bind
closesocket
connect
inet_ntoa
getsockopt
htonl
VMProtectIsDebuggerPresent
VMProtectBeginVirtualization
VMProtectEnd
VMProtectBeginMutation
GetModuleBaseNameA
GetProcessMemoryInfo
GetModuleInformation
timeSetEvent
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
timeGetTime
getnameinfo
WSAIoctl
freeaddrinfo
getaddrinfo
FMOD_System_Create
FMOD_Memory_GetStats
FMOD_Memory_Initialize
?getRecordPosition@System@FMOD@@QAG?AW4FMOD_RESULT@@HPAI@Z
?release@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?isRecording@System@FMOD@@QAG?AW4FMOD_RESULT@@HPA_N@Z
?lock@Sound@FMOD@@QAG?AW4FMOD_RESULT@@IIPAPAX0PAI1@Z
?unlock@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAX0II@Z
?setUserData@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?recordStart@System@FMOD@@QAG?AW4FMOD_RESULT@@HPAVSound@2@_N@Z
?setOutput@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_OUTPUTTYPE@@@Z
?getNumDrivers@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getDriverInfo@System@FMOD@@QAG?AW4FMOD_RESULT@@HPADHPAUFMOD_GUID@@PAHPAW4FMOD_SPEAKERMODE@@2@Z
?setDriver@System@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?getDriver@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?setSoftwareFormat@System@FMOD@@QAG?AW4FMOD_RESULT@@HW4FMOD_SPEAKERMODE@@H@Z
?init@System@FMOD@@QAG?AW4FMOD_RESULT@@HIPAX@Z
?update@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?set3DSettings@System@FMOD@@QAG?AW4FMOD_RESULT@@MMM@Z
?set3DListenerAttributes@System@FMOD@@QAG?AW4FMOD_RESULT@@HPBUFMOD_VECTOR@@000@Z
?getVersion@System@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?getChannelsPlaying@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH0@Z
?getCPUUsage@System@FMOD@@QAG?AW4FMOD_RESULT@@PAM0000@Z
?createDSPByType@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_DSP_TYPE@@PAPAVDSP@2@@Z
?createChannelGroup@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAPAVChannelGroup@2@@Z
?setReverbProperties@System@FMOD@@QAG?AW4FMOD_RESULT@@HPBUFMOD_REVERB_PROPERTIES@@@Z
?getSystemObject@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSystem@2@@Z
?setVolume@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?getVolume@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?setMute@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?getMute@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?addDSP@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@HPAVDSP@2@@Z
?addGroup@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAV12@_NPAPAVDSPConnection@2@@Z
?release@DSP@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?setBypass@DSP@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?setParameterFloat@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HM@Z
?getParameterFloat@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HPAMPADH@Z
FMOD_Sound_Release
FMOD_Sound_GetUserData
?createSound@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAUFMOD_CREATESOUNDEXINFO@@PAPAVSound@2@@Z
?playSound@System@FMOD@@QAG?AW4FMOD_RESULT@@PAVSound@2@PAVChannelGroup@2@_NPAPAVChannel@2@@Z
?release@Sound@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?getDefaults@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAMPAH@Z
?getLength@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAII@Z
?getOpenState@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAW4FMOD_OPENSTATE@@PAIPA_N2@Z
?stop@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?setPaused@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?getPaused@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?setMode@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@I@Z
?getMode@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?getDSP@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAVDSP@2@@Z
?removeDSP@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAVDSP@2@@Z
?getNumDSPs@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?set3DAttributes@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@00@Z
?set3DMinMaxDistance@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@MM@Z
?setFrequency@Channel@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setPosition@Channel@FMOD@@QAG?AW4FMOD_RESULT@@II@Z
?getPosition@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAII@Z
?setChannelGroup@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAVChannelGroup@2@@Z
?setLoopCount@Channel@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?getCurrentSound@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSound@2@@Z
?release@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?addInput@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAV12@PAPAVDSPConnection@2@W4FMOD_DSPCONNECTION_TYPE@@@Z
?disconnectFrom@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAV12@PAVDSPConnection@2@@Z
?setParameterData@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HPAXI@Z
?setMeteringEnabled@DSP@FMOD@@QAG?AW4FMOD_RESULT@@_N0@Z
?getMeteringEnabled@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PA_N0@Z
?getMeteringInfo@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_DSP_METERING_INFO@@0@Z
?getRecordNumDrivers@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH0@Z
?getRecordDriverInfo@System@FMOD@@QAG?AW4FMOD_RESULT@@HPADHPAUFMOD_GUID@@PAHPAW4FMOD_SPEAKERMODE@@2PAI@Z
SHGetFolderPathAndSubDirW
SHGetFolderPathW
CoUninitialize
CoInitialize
CoCreateGuid
StringFromGUID2
CoCreateInstance
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SwapBuffers
ChoosePixelFormat
SetPixelFormat
wglGetCurrentDC
wglMakeCurrent
wglGetCurrentContext
wglDeleteContext
wglCreateContext
glReadPixels
glTexSubImage2D
glTexParameteri
glTexParameterf
glTexImage2D
glPixelStorei
glGetTexImage
glGenTextures
glDeleteTextures
glDrawElements
glDrawArrays
glViewport
glStencilOp
wglGetProcAddress
glStencilFunc
glReadBuffer
glPolygonOffset
glEnable
glDisable
glDepthMask
glDepthFunc
glCullFace
glCopyTexSubImage2D
glColorMask
glClearStencil
glClearDepth
glClearColor
glClear
glBlendFunc
glBindTexture
glGetString
glGetIntegerv
glStencilMask
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ