Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
WindowsTH-KB2693643-x64.cab
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
rsatcustominstaller.exe
Resource
win10v2004-20240426-en
Target
WindowsTH-KB2693643-x64.msu
Size
54.2MB
MD5
921c2acc4c9a7f474ab50c243ccd5a42
SHA1
8f632c03b22b95fe8f32b9613ac410e6ccf7bd7e
SHA256
c01b90a7b79a4d5ac4ad89b404368e9053657d8e86bcbd60ee69fa1a6bc402c7
SHA512
4825b4bbf2f50777d48101be2be7b264ba4ce190ac175935aac1f65e75f365b4c7ce0de611492bd28dc942871bcc2e719e32da9862dc1d2d79b380b95778e9af
SSDEEP
1572864:C92KWZ/BAWaGn6BH+FlfKDpQtUV8euxzt:CAJoYRIVNutt
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
rsatcustominstaller.pdb
QueryServiceStatusEx
OpenServiceW
RegSetValueExW
EnumDependentServicesW
ControlServiceExW
RegCreateKeyExW
OpenSCManagerW
CloseServiceHandle
RegCloseKey
CreateDirectoryW
ExpandEnvironmentStringsW
Sleep
GetLastError
OutputDebugStringW
HeapSetInformation
GetLocalTime
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetTickCount
SendNotifyMessageW
malloc
??0exception@@QEAA@AEBQEBDH@Z
??0exception@@QEAA@AEBV0@@Z
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
_callnewh
_CxxThrowException
_XcptFilter
_amsg_exit
__wgetmainargs
__set_app_type
exit
_exit
_cexit
__setusermatherr
_initterm
vfwprintf
_fmode
_commode
_lock
_unlock
__dllonexit
_onexit
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
__CxxFrameHandler3
??3@YAXPEAX@Z
_wsplitpath_s
fclose
wcsstr
??8type_info@@QEBAHAEBV0@@Z
_wfopen_s
_vsnwprintf
??_V@YAXPEAX@Z
__C_specific_handler
_purecall
fwprintf
memset
RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ