Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
radmin.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
radmin.dll
Resource
win10v2004-20240508-en
Target
radmin.dll
Size
1.1MB
MD5
d17fd629e04221f42849a3c57366cb80
SHA1
6fd1834becbc1c23287ca55c24ad063755f5bf75
SHA256
ab96628d1cd81b2fee97eb1c54d10009d288cde6d1091c861830268c9229a34d
SHA512
2239e7b2d233afeedd45059b1f03cb8396a853805e2339d5424d01394abfec32b65b43892647cf3e4eb06166b0e75956ae1965862365b21ff323f24736e3b860
SSDEEP
12288:7WO5FnZaT5Nn0lzMKO8foOFw+6/Q2CZBQThQC1D0tcRbnuE:7WIZ85XKO8faJC7GN1Dcwbn1
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
D:\Jenkins\ci_builder\WindowsBuild2_5B9Y8LMQO8F2\Platform\src\BUILD64\BIN\radmin.pdb
?compare_nocase@core@@YAHPEB_S_K01@Z
?encode_base64@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV?$basic_string_view@DU?$char_traits@D@std@@@std@@_K_N@Z
?load_wstring@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEAVSCOM_ResourceBundle@1@PEBD@Z
?compare@core@@YAHPEB_S_K01@Z
?term_string@core@@YAPEB_SQEBQEB_SH@Z
?kBase64StringTerm@core@@3PAPEB_SA
??1SCOM_ResourceBundle@core@@QEAA@XZ
??0SCOM_ResourceBundle@core@@QEAA@PEBD@Z
??0Date@core@@QEAA@HHHHHH@Z
?broken@URL@core@@QEBA_NXZ
??0URL@core@@QEAA@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_N@Z
?string_printf@core@@YAHPEA_SPEB_SZZ
?widen@Converter@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV?$BasicString@D$0A@$0A@Vallocator@std@@@4@@Z
?utf8@Converter@core@@SAAEBV12@XZ
?narrow@Converter@core@@QEBA?AV?$BasicString@D$0A@$0A@Vallocator@std@@@ale@@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@4@@Z
?handle@ModuleLoader@core@@QEAAPEAUHINSTANCE__@@XZ
??1ModuleLoader@core@@QEAA@XZ
??0ModuleLoader@core@@QEAA@PEB_S@Z
?is_alnum@core@@YA_N_S@Z
?string_i64to@core@@YAAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_JAEAV23@H@Z
?string_toi64@core@@YA_JPEB_SPEAPEB_S@Z
?string_toui64@core@@YA_KPEB_SPEAPEB_S@Z
?string_ui64to@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_KH@Z
??1ParamsWString@core@@UEAA@XZ
??0ParamsWString@core@@QEAA@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?param@ParamsWString@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEB_S@Z
?string_uito@core@@YAAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@IAEAV23@H@Z
??1ListInStream@core@@QEAA@XZ
??0ListInStream@core@@QEAA@PEAVIReader@1@@Z
?open@InputFileStream@core@@QEAAXPEAVIFile@2@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_NPEB_S@Z
??1InputFileStream@core@@QEAA@XZ
??0InputFileStream@core@@QEAA@XZ
??1LSEHelper@core@@QEAA@XZ
??0LSEHelper@core@@QEAA@XZ
??1ListOutStream@core@@QEAA@XZ
??0ListOutStream@core@@QEAA@PEAVIWriter@1@@Z
?kUTF8Encoding@core@@3QB_SB
?kWindowsLineSeparator@core@@3QB_SB
?open@OutputFileStream@core@@QEAAXPEAVIFile@2@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_NPEB_S@Z
??1OutputFileStream@core@@UEAA@XZ
??0OutputFileStream@core@@QEAA@XZ
??4URL@core@@QEAAAEAV01@AEBV01@@Z
??0URL@core@@QEAA@AEBV?$basic_string_view@_SU?$char_traits@_S@std@@@std@@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_N@Z
?kPropDirLocalAppData@core@@3QB_SB
??0URL@core@@QEAA@XZ
?create_UUID@core@@YA?AU_GUID@@XZ
?format@DateFormat@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBVDate@2@W4Pattern@12@@Z
??0Exception@core@@QEAA@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEAVIExceptionObject@1@@Z
?forceWithBraces@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV23@@Z
??1URL@core@@QEAA@XZ
?forceWithoutBraces@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV23@@Z
?string_len@core@@YA_KPEB_S@Z
?get@ListInStream@core@@QEAAXAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?put@ListOutStream@core@@QEAAXAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?get@ListInStream@core@@QEAAXAEAI@Z
?put@ListOutStream@core@@QEAAX_K@Z
?getEndOfList@ListInStream@core@@QEAAXXZ
?skipListContent@ListInStream@core@@QEAAXXZ
?get@ListInStream@core@@QEAAXAEAH@Z
?getBeginOfList@ListInStream@core@@QEAAXXZ
?putEndOfList@ListOutStream@core@@QEAAXXZ
?is_space@core@@YA_N_S@Z
?decode_base64@core@@YA_NAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEAV?$BasicString@D$0A@$0A@Vallocator@std@@@3@_N@Z
?kUUIDNull@core@@3U_GUID@@B
?current_process@core@@YAPEAVSCOM_Process@1@XZ
?current_thread@core@@YAPEAVThread@1@XZ
?string_printf@core@@YAHAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEB_SZZ
?empty_string@core@@YAAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
??1DateFormat@core@@QEAA@XZ
??0DateFormat@core@@QEAA@AEBVLocale@1@@Z
?acquire@?$Refcountable@VThread@core@@UAtomicCounter@2@@core@@QEAAHXZ
?put@ListOutStream@core@@QEAAXH@Z
?putBeginOfList@ListOutStream@core@@QEAAXXZ
??0Exception@core@@QEAA@PEB_SPEAVIExceptionObject@1@@Z
?get_computer_name@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_N@Z
??1Exception@core@@QEAA@XZ
??1TimeZone@core@@QEAA@XZ
?string_tol@core@@YAJPEB_SPEAPEB_S@Z
?string_uito@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@IH@Z
?system@Locale@core@@SA?AV12@XZ
?fromXMLString@Date@core@@QEAAAEAV12@PEB_SPEAPEA_S@Z
?replace_all@core@@YA_KAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV23@1@Z
?toXMLString@Date@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
??9Date@core@@QEBA_NAEBV01@@Z
??0Locale@core@@QEAA@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?displayName@Locale@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV12@@Z
?availableLocales@Locale@core@@SA?AV?$vector@V?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@V?$allocator@V?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@std@@@std@@XZ
?from_string@core@@YA_NAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEAU_GUID@@@Z
?to_string@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBU_GUID@@@Z
??0Date@core@@QEAA@XZ
??0Numeric@core@@QEAA@_J@Z
?format@NumericFormat@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBVNumeric@2@@Z
??0Numeric@core@@QEAA@_K@Z
?format@NumericFormat@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBVNumeric@2@IIII@Z
??1Numeric@core@@QEAA@XZ
??0Numeric@core@@QEAA@N@Z
??1NumericFormat@core@@QEAA@XZ
?getNumericFormat@Thread@core@@QEAA?AVNumericFormat@2@XZ
?string_ito@core@@YAAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@HAEAV23@H@Z
?release@?$Refcountable@VThread@core@@UAtomicCounter@2@@core@@QEAAHXZ
?term@Process@core@@QEAAXXZ
?processData@Process@core@@QEAA?AV?$CountedPtr@VSCOM_ProcessData@core@@V?$ExtrinsicRefcount@VSCOM_ProcessData@core@@UAtomicCounter@2@@2@@2@XZ
?inner@Exception@core@@QEBA?AV?$InterfacePtr@VIExceptionObject@core@@@2@XZ
?set_component_directory@core@@YAXXZ
?init@Process@core@@QEAAXPEAVSCOM_ProcessData@2@@Z
??1Process@core@@UEAA@XZ
??0Thread@core@@QEAA@W4PoolType@01@@Z
??1SCOM_ProcessData@core@@QEAA@XZ
?looksLikeIPv6@core@@YA_NAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
??1Value@core@@QEAA@XZ
??1Thread@core@@UEAA@XZ
?run@Thread@core@@UEAAXXZ
?wait@Thread@core@@MEAAXPEAV12@@Z
?doStart@Process@core@@MEAAXXZ
?doStartTimer@Thread@core@@MEAAXXZ
?isProcess@Process@core@@UEAA_NXZ
?isServerProcess@Thread@core@@UEAA_NXZ
?isUIThread@Thread@core@@UEAA_NXZ
??0Exception@core@@QEAA@AEBV01@@Z
?construct@Process@core@@AEAAXPEAVSCOM_Module@2@@Z
??1TypeDomainPattern@core@@QEAA@XZ
CreatePropertySheetPageW
?nuke_new@@YAPEAX_K@Z
?nuke_new_nothrow@@YAPEAX_K@Z
?nuke_delete@@YAXPEAX@Z
?nuke_delete_size@@YAXPEAX_K@Z
RtlCaptureContext
OutputDebugStringW
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
RaiseException
DecodePointer
DeleteCriticalSection
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
RtlVirtualUnwind
LocalFree
FreeLibrary
GetModuleHandleW
lstrcmpiW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
RtlLookupFunctionEntry
GetProcAddress
DisableThreadLibraryCalls
EncodePointer
IsBadReadPtr
InitializeCriticalSection
GetCurrentThreadId
GetLastError
GetCurrentProcessId
DefWindowProcW
SetWindowLongW
MessageBoxW
GetParent
SendMessageW
SendDlgItemMessageW
SetWindowTextW
RegisterClipboardFormatW
CheckDlgButton
CharNextW
LoadIconW
DestroyIcon
LoadBitmapW
GetDlgItem
ShowWindow
IsDlgButtonChecked
DialogBoxParamW
EndDialog
SetDlgItemInt
GetDlgItemInt
SetDlgItemTextW
EnableWindow
GetDlgItemTextW
DeleteObject
CreateStreamOnHGlobal
StringFromCLSID
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance
CoInitialize
CoUninitialize
SysStringLen
UnRegisterTypeLi
VarUI4FromStr
SysFreeString
SysAllocString
RegisterTypeLi
LoadTypeLi
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
?_Xlength_error@std@@YAXPEBD@Z
__std_terminate
_purecall
__std_exception_copy
__std_exception_destroy
wcsstr
__CxxFrameHandler3
memmove
memset
__C_specific_handler
memcpy
__std_type_info_destroy_list
_CxxThrowException
memcmp
free
malloc
_recalloc
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initialize_onexit_table
_errno
_invalid_parameter_noinfo
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_crt_atexit
_initterm
_initterm_e
_cexit
wcsncpy_s
wcscpy_s
_wcsnicmp
wcscat_s
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ