Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
184d3144e80b46c39748c48ba7c25397b0579df35179db64ffb803682e01cb94.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
184d3144e80b46c39748c48ba7c25397b0579df35179db64ffb803682e01cb94.dll
Resource
win10v2004-20240426-en
Target
184d3144e80b46c39748c48ba7c25397b0579df35179db64ffb803682e01cb94
Size
547KB
MD5
1107f5dd64c82bd489889e0817297991
SHA1
f08ce80edecbb93a233d8d7a795f81acc912460b
SHA256
184d3144e80b46c39748c48ba7c25397b0579df35179db64ffb803682e01cb94
SHA512
929c6b92acae60f27a36785b0996086e6fbf994bbc0530c53e55bbfe985a80de2d9afd7f8d22d5454ac441afa24ff0872edf3d0b75771a2f4253a2be86101bb1
SSDEEP
12288:oWPminMfvCr2dki6cD3BEljdwKrikjUXz0jXTzr5Y5ObDKHBjvrEH7aC:vPmino6r46cD3BW+rEH7aC
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
C:\data\cpp\git\hardlinks\Bin\Win32\Release\HardlinkShellExt.pdb
PathCompactPathExW
PathSkipRootW
PathStripToRootW
PathRemoveExtensionW
PathFindExtensionW
PathCombineW
PathCanonicalizeW
PathRemoveFileSpecW
PathRemoveBackslashW
StrStrIW
PathRelativePathToW
PathIsRelativeW
PathFindFileNameW
PathAddBackslashW
PathIsRootW
PathIsUNCW
EmptyClipboard
SetClipboardData
CloseClipboard
GetClipboardData
MessageBoxW
wsprintfW
SendMessageW
GetParent
SetDlgItemTextW
GetDlgItemTextW
GetDlgItem
ShowWindow
UpdateWindow
SetWindowLongW
GetWindowTextLengthW
GetWindowLongW
GetWindowRect
InsertMenuW
RegisterClipboardFormatW
IsClipboardFormatAvailable
OpenClipboard
CreatePopupMenu
InsertMenuItemW
SysAllocString
ReleaseStgMedium
CoCreateInstance
CoUninitialize
CoInitialize
WNetGetUniversalNameW
WNetGetResourceInformationW
NtQuerySecurityObject
NtSetEaFile
NtQueryEaFile
NtQueryInformationFile
NtSetInformationFile
NtSetSecurityObject
NtQueryDirectoryFile
NtOpenFile
RtlDosPathNameToNtPathName_U
NetShareGetInfo
SHGetPathFromIDListW
ord680
SHCreateItemFromParsingName
ShellExecuteW
ShellExecuteExW
DragQueryFileW
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
_Mtx_lock
?_Xout_of_range@std@@YAXPBD@Z
?global@locale@std@@SA?AV12@ABV12@@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?uncaught_exception@std@@YA_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
??0_Locinfo@std@@QAE@HPBD@Z
??1_Locinfo@std@@QAE@XZ
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_Xruntime_error@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
OpenProcessToken
GetTokenInformation
LookupAccountSidW
ConvertSidToStringSidW
ReadEncryptedFileRaw
OpenEncryptedFileRawW
WriteEncryptedFileRaw
CloseEncryptedFileRaw
LookupPrivilegeValueW
PrivilegeCheck
AdjustTokenPrivileges
FindClose
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryExA
VirtualQuery
VirtualProtect
RaiseException
FreeLibrary
GetFileSize
LockResource
LoadResource
FindResourceW
FindResourceExW
FindNextFileNameW
FindFirstFileNameW
UnmapViewOfFile
MapViewOfFileEx
QueryDosDeviceW
MoveFileW
OutputDebugStringA
LoadLibraryW
CreateFileMappingW
SetEndOfFile
SetFilePointerEx
GetFileSizeEx
CreateEventW
SetEvent
WriteFile
FileTimeToSystemTime
SystemTimeToFileTime
GetExitCodeProcess
LoadLibraryA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
SetLastError
GetModuleFileNameW
GetVolumeInformationW
FormatMessageW
LocalFree
DeleteFileW
SetFileAttributesW
CreateDirectoryW
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcpynA
GetLocalTime
WaitForSingleObject
GetFileAttributesW
GetLastError
RemoveDirectoryW
lstrcpynW
GetVersionExW
CreateFileW
GetFileInformationByHandle
CloseHandle
CreateHardLinkW
CreateSymbolicLinkW
FindFirstFileW
FindNextFileW
DeviceIoControl
GetDriveTypeW
GetVolumeNameForVolumeMountPointW
SetVolumeMountPointW
GetVolumePathNamesForVolumeNameW
DeleteVolumeMountPointW
GetFullPathNameW
CreateThread
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
GetFileAttributesExW
GetTempPathW
GetCurrentProcess
LocalAlloc
GetSystemInfo
WaitForMultipleObjects
__CxxFrameHandler3
__std_terminate
wcsstr
wcsrchr
__std_exception_destroy
__std_exception_copy
_except_handler4_common
_CxxThrowException
__std_type_info_destroy_list
memset
memcpy
memmove
wcsncpy_s
strcpy_s
towlower
iswctype
towupper
wcstok_s
wcsncat_s
wcscat_s
wcscpy_s
wcsncpy
_wcsicmp
_wcslwr_s
_towlower_l
wcsncmp
_seh_filter_dll
_initterm_e
_configure_narrow_argv
_register_onexit_function
_errno
_cexit
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_initterm
_initialize_onexit_table
_crt_atexit
_initialize_narrow_environment
fclose
_wfopen_s
__stdio_common_vfwprintf
__stdio_common_vsprintf_s
__stdio_common_vfprintf
__acrt_iob_func
__stdio_common_vswprintf_s
_wstat64i32
_wsplitpath
realloc
free
calloc
malloc
_callnewh
_wtoi
DllCanUnloadNow
DllGetClassObject
DllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ