Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
EditionUpgradeManagerObj.dll
Resource
win10v2004-20240508-en
Target
EditionUpgradeManagerObj.dll
Size
214KB
MD5
bade9e71e43c515800e237c26d04bb45
SHA1
a78f98e1095133bc377c8752e1caf8520b375ac8
SHA256
d074be61e8872b0886154b357a35d1d9d27e4673c3602cb6043c5296bc8dba9c
SHA512
8e4629643096054783a114a38ca15d79364da72ab96f61dd971c20b844b3e3dc2e443a357fd13b0326eaa5930abc4a303c6cef898dd1c749845c64ddf5a6d4b9
SSDEEP
3072:pVWuvkN6PbdCpTB+9GuMymIUMxD6CCW7730rvSSKmqnyAJtjUPbUiGJK5Ufq7H63:pciDbeEiBW7730eWqyOVUPbdG4meE
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EditionUpgradeManagerObj.pdb
_initterm_e
_initterm
memset
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o___std_type_info_destroy_list
memmove
_o__wcsicmp
_o_free
_o_malloc
_o_towupper
__CxxFrameHandler3
_except_handler4_common
_CxxThrowException
_o__crt_atexit
_o__configure_narrow_argv
_o___std_exception_destroy
_o___std_exception_copy
_o__cexit
_o__callnewh
wcschr
_o___stdio_common_vswprintf
_o__execute_onexit_table
_o__errno
memcmp
memcpy
GetModuleFileNameA
LoadResource
LockResource
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleExW
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleW
FindResourceExW
LoadLibraryExW
FreeLibrary
SetEvent
OpenSemaphoreW
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
ReleaseMutex
WaitForSingleObject
CreateMutexExW
ReleaseSemaphore
EnterCriticalSection
CreateSemaphoreExW
CreateEventExW
CreateEventW
HeapAlloc
GetProcessHeap
HeapFree
UnhandledExceptionFilter
GetLastError
SetLastError
RaiseException
SetUnhandledExceptionFilter
SetThreadPriority
GetCurrentThreadId
TerminateProcess
GetExitCodeProcess
GetThreadId
GetCurrentProcessId
GetCurrentThread
CreateProcessW
GetCurrentProcess
OpenProcessToken
CreateThread
LCMapStringEx
FormatMessageW
DebugBreak
IsDebuggerPresent
OutputDebugStringW
CloseHandle
EventActivityIdControl
EventRegister
EventWriteTransfer
EventUnregister
EventSetInformation
RoUninitialize
RoGetActivationFactory
RoInitialize
LocalFree
LocalAlloc
CoWaitForMultipleHandles
CoCreateFreeThreadedMarshaler
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
SetRestrictedErrorInfo
RoOriginateError
RoGetMatchingRestrictedErrorInfo
VirtualQuery
RegSetValueExW
RegCreateKeyExW
RegSetKeySecurity
RegQueryInfoKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
RegQueryValueExW
LookupPrivilegeValueW
AdjustTokenPrivileges
InitiateSystemShutdownExW
LoadTypeLi
RegisterTypeLi
UnRegisterTypeLi
GetLocalTime
GetSystemTimeAsFileTime
GetSystemDirectoryW
ExpandEnvironmentStringsW
WriteFile
SetFilePointer
CreateDirectoryW
CreateFileW
WideCharToMultiByte
UuidToStringW
RpcStringFreeW
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference
DecodePointer
EncodePointer
RegDeleteKeyW
RegEnumKeyW
IsProcessorFeaturePresent
QueryPerformanceCounter
InitializeSListHead
SHCreateItemInKnownFolder
SHGetIDListFromObject
ShellExecuteExW
BrandingFormatString
?SetEnabled@Element@DirectUI@@QAEJ_N@Z
?SetXMLFromResource@DUIXmlParser@DirectUI@@QAEJIPAUHINSTANCE__@@0@Z
?CreateElement@DUIXmlParser@DirectUI@@QAEJPBGPAVElement@2@1PAKPAPAV32@@Z
?GetRoot@Element@DirectUI@@QAEPAV12@XZ
?Destroy@DUIXmlParser@DirectUI@@QAEXXZ
?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z
?SetContentString@Element@DirectUI@@QAEJPBG@Z
?SetLayoutPos@Element@DirectUI@@QAEJH@Z
StrToID
?Create@DUIXmlParser@DirectUI@@SGJPAPAV12@P6GPAVValue@2@PBGPAX@Z2P6GX11H2@Z2@Z
SLOpen
SLConsumeRight
SLClose
ord100
IsWow64Process
GetProcessMitigationPolicy
PackageNameAndPublisherIdFromFamilyName
DispatchMessageW
PostQuitMessage
PeekMessageW
TranslateMessage
GetMessageW
PostMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
GetProductKeyFromContentId
CryptReleaseContext
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptAcquireContextW
CryptGetHashParam
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ