Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
LanguageOverlayUtil.dll
Resource
win10v2004-20240426-en
Target
LanguageOverlayUtil.dll
Size
186KB
MD5
6855bdf934ab453ce8d45ccd89734b7d
SHA1
4516d4875c9dd0d5c8a2ce3f7d9d6b0c0c4af441
SHA256
59c847f26d15e6631bd59995dea751480bde6895d3d03dc139cbde83ce971beb
SHA512
7080ba7dacb1ef741606b766559f3ddd2ed750842d1c02598b10cc55fadfc01f76be6fc03cd22849fc850a12ed64a904f67d4b2785ed0b26190c50407387b7a6
SSDEEP
3072:0dL5ga/qeqUJhvAr3lq/7LjieeAGIvZr4pvjbzWdyhtWFovWYqJuyuffrme:Egg7bvAry7Lj5hGsr4xvpeGWYq0h9
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LanguageOverlayUtil.pdb
_initterm_e
_initterm
_o__callnewh
_o__cexit
_o__configure_narrow_argv
_o__crt_atexit
_o__errno
_o__execute_onexit_table
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
__std_terminate
_o___stdio_common_vsprintf_s
memmove
_o__wcsicmp
_o__wcslwr_s
_o__wcsnicmp
_o_ceil
_o_free
_o_malloc
_o_realloc
_o_toupper
_o_towlower
_o_towupper
_o_wcscat_s
_o_wcscpy_s
_o_wcstol
_o_wcstoul
_except_handler4_common
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
__CxxFrameHandler3
wcsstr
_o___stdio_common_vswprintf
memcmp
memcpy
_CxxThrowException
strchr
memset
GetModuleFileNameA
GetProcAddress
GetModuleHandleExW
DisableThreadLibraryCalls
FreeLibrary
GetModuleHandleW
InitOnceComplete
Sleep
InitOnceBeginInitialize
EnterCriticalSection
InitializeCriticalSectionEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
DeleteCriticalSection
CreateMutexExW
OpenSemaphoreW
WaitForSingleObjectEx
ReleaseMutex
WaitForSingleObject
ReleaseSemaphore
CreateSemaphoreExW
LeaveCriticalSection
HeapReAlloc
HeapAlloc
GetProcessHeap
HeapFree
SetUnhandledExceptionFilter
RaiseException
SetLastError
GetLastError
UnhandledExceptionFilter
EventUnregister
EventSetInformation
EventRegister
EventWriteTransfer
EventProviderEnabled
EventActivityIdControl
GetCurrentProcessId
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
GetSystemPreferredUILanguages
FormatMessageW
GetUserPreferredUILanguages
DebugBreak
OutputDebugStringW
IsDebuggerPresent
CloseHandle
IsProcessorFeaturePresent
QueryPerformanceCounter
GetTickCount64
GetTickCount
GetSystemTimeAsFileTime
InitializeSListHead
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z
?tolower@?$ctype@G@std@@QBEGG@Z
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??1_Locinfo@std@@QAE@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
_Wcsxfrm
?id@?$ctype@G@std@@2V0locale@2@A
?_Xbad_function_call@std@@YAXXZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Xout_of_range@std@@YAXPBD@Z
?id@?$collate@G@std@@2V0locale@2@A
?_Xbad_alloc@std@@YAXXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?is@?$ctype@G@std@@QBE_NFG@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
??1facet@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
??0_Locinfo@std@@QAE@PBD@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
??Bid@locale@std@@QAEIXZ
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?_Xlength_error@std@@YAXPBD@Z
_Wcscoll
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
??1?$codecvt@GDU_Mbstatet@@@std@@MAE@XZ
??0?$codecvt@GDU_Mbstatet@@@std@@QAE@I@Z
?in@?$codecvt@GDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAG3AAPAG@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?tolower@?$ctype@G@std@@QBEPBGPAGPBG@Z
GetSystemDefaultUILanguage
NotifyRedirectedStringChange
ResolveDelayLoadedAPI
EnumUILanguagesW
GetUserDefaultUILanguage
RegEnumKeyExW
RegDeleteTreeW
RegOpenCurrentUser
RegQueryInfoKeyW
RegCopyTreeW
RegDeleteKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegEnumValueW
RegOpenKeyExW
RegGetValueW
CloseThreadpoolTimer
SetThreadpoolTimer
CreateThreadpoolTimer
WaitForThreadpoolTimerCallbacks
LocalFree
LocalAlloc
VariantInit
DelayLoadFailureHook
RtlpSetPreferredUILanguages
RtlLCIDToCultureName
RtlLocaleNameToLcid
RtlIsStateSeparationEnabled
RtlConvertLCIDToString
NtQueryValueKey
NtOpenKey
RtlFreeHeap
RtlGetNtSystemRoot
NtClose
RtlQueryEnvironmentVariable_U
RtlInitUnicodeString
NtGetMUIRegistryInfo
RtlGetThreadPreferredUILanguages
RtlGetPersistedStateLocation
RtlAppendUnicodeToString
RtlAllocateHeap
LdrStandardizeSystemPath
RegSetKeyValueW
UuidCreate
GetTokenInformation
LoadLibraryW
lstrcmpiW
GetPersistedRegistryLocationW
AddLanguageToMachineLanguageList
CloseOverlayPaths
DeleteLanguageInstallationRequest
DeleteLanguageInstallationState
EnumOverlayPaths
EnumerateInstalledLanguageFeatures
EnumerateInstalledLanguages
EnumerateInstalledLocalExperiencePacks
EnumerateInstalledMachineLanguagePacks
EnumerateQueuedLanguageInstallations
EnumerateSupportedUILanguages
FetchLanguageOverlayPackageForFirstLogon
GetBcp47TagFromPackageFamilyName
GetLanguageDataForLogging
GetLanguageInstallationState
GetLanguageOverlayPackageFamilyName
GetLanguagesInUse
GetLanguagesNotInUse
GetOverlayFilePath
GetSystemPreferredUILanguage
GetWindowsUpdateServer
GroupUserLanguages
InvalidateLanguageResourceCaches
IsGroupingUserLanguagesNeeded
IsLegacyLanguagePackInstalledForLanguage
IsLocalExperiencePackReadyForRemoval
OnMachineUILanguageInit
OnMachineUILanguageSwitch
OpenOverlayPaths
OverlaySetPreferredUILanguages
RemoveLanguageFromMachineLanguageList
SetLanguageInstallationState
SetSystemPreferredUILanguage
StartLanguageInstallation
StartLanguageUninstallation
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ