Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
fdacbc814e2839435eeaf8bc9278d3902219a00399e49b5e7f93addcbf1bd151.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fdacbc814e2839435eeaf8bc9278d3902219a00399e49b5e7f93addcbf1bd151.dll
Resource
win10v2004-20240611-en
Target
fdacbc814e2839435eeaf8bc9278d3902219a00399e49b5e7f93addcbf1bd151
Size
975KB
MD5
b2817d53783326416429f04d513edb0e
SHA1
fefdc8912bc6b183a4b538dd81894f476ea1790f
SHA256
fdacbc814e2839435eeaf8bc9278d3902219a00399e49b5e7f93addcbf1bd151
SHA512
31dfe72129f7e73bfd24d5cecb2dd3356bb46f588fce3b01f46d8f40ebb9386dd70eb29404f7d0e2b3e0042662e40b4a05ed7a4ccbc314e4b7b35bbcaf29cbf2
SSDEEP
6144:1AFX/Y59y5IIszZNFSkRzlDwSb6y8m1OHh+dh9vlF9GVaZJS6V6:1AvR5I3Zfllbb8zHh+Nvl8aW64
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
E:\Ship24.1.1\2024_px64\Releasex64\RevitAPIFoundation.pdb
ord2350
ord2346
ord1031
ord1503
ord269
ord2221
ord1033
ord1641
ord474
ord1039
ord323
ord296
ord2336
ord473
ord2234
ord290
ord2212
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
Sleep
InitializeCriticalSectionEx
DecodePointer
OutputDebugStringA
RaiseException
GetLastError
SetLastError
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetModuleFileNameW
GetModuleHandleExW
LoadLibraryW
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
GetProcAddress
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
CloseHandle
LocalFree
LoadLibraryA
OutputDebugStringW
UnregisterClassW
SysStringByteLen
VariantCopy
SysFreeString
SysAllocStringByteLen
?deallo@Native@Allor@@SAXPEAX@Z
?pop@?$ArrStack@UAddInData@@@@QEAAXXZ
?push@?$ArrStack@UAddInData@@@@QEAAXAEBUAddInData@@@Z
?getAddInDataStackForWrite@@YAPEAVAddInDataStack@@XZ
?apiComment@JournalData@@SAXW4APICommentType@1@AEBVAString@@_N2@Z
?format@AString@@QEAAAEAV1@PEBDZZ
?astr@AString@@QEBAPEB_WXZ
??0AString@@QEAA@XZ
?mid@AString@@QEBA?AV1@HH@Z
?find@AString@@QEBAHPEB_WH@Z
?reverseFind@AString@@QEBAH_W@Z
??BAString@@QEBAPEB_WXZ
??0AddInData@@QEAA@AEBU0@@Z
?allocate@TreeNodeAllocator@@QEAAPEAXI_KPEBX@Z
?getFunctionId@ApplicationException@@QEBA?AVFunctionId@@XZ
??1FunctionId@@QEAA@XZ
?getArgument@ArgumentException@@QEBAAEBVAString@@XZ
?getCurrentUser@CentralModelContentionException@@QEBAAEBVAString@@XZ
??1OwnerInterfaceBase@@QEAA@XZ
??0OwnerInterfaceBase@@QEAA@PEAVInterfaceBase@@@Z
?s_GetARunTimeClass@GUIDvalue@@SAPEBVARuntimeClass@@XZ
??0ForeignElemRef@@QEAA@XZ
?getBackgroundLoader@ADynamicLinkLibrary@@SAPEAURevitBackgroundLoaderInterface@@XZ
?getAddInDataStack@@YAPEBVAddInDataStack@@XZ
?empty@?$ArrStack@UAddInData@@@@QEBA_NXZ
?deallocate@TreeNodeAllocator@@QEAAXPEAX@Z
?allo@Native@Allor@@SAPEAX_K0PEBX@Z
?getGUID@ClientApplicationId@@QEBAAEBVGUIDvalue@@XZ
?max_allocations@TreeNodeAllocator@@QEBA_K_K@Z
?getClientApplicationName@ClientApplicationId@@QEBA?AVAString@@XZ
?top@?$ArrStack@UAddInData@@@@QEBAAEBUAddInData@@XZ
?equals@AddInData@@QEAA?B_NAEBU1@@Z
?getDbgWarnDontSuppress@@YAAEBVDbgWarnSuppressKey@@XZ
?dbgWarn@@YAXHAEBVAString@@000W4DbgWarnSeverity@@VDbgWarnSuppressKey@@H_N0@Z
??0AddInData@@QEAA@XZ
??4AddInData@@QEAAAEAU0@AEBU0@@Z
?getMessage@ApplicationException@@QEBA?AVAString@@XZ
?raiseCorruptDataException@Archive@@YAXPEB_W@Z
?getPseudoClass@DDImpl@@YAPEBVARuntimeClass@@W4ADataType@@@Z
??0FunctionId@@QEAA@PEBDH0@Z
?getFile@FunctionId@@QEGBAAEBVAString@@XZ
?getLine@FunctionId@@QEBAHXZ
?getFunction@FunctionId@@QEGBAAEBVAString@@XZ
??0InternalException@@QEAA@AEBVFunctionId@@AEBVAString@@@Z
??1InternalException@@UEAA@XZ
?s_GetARunTimeClass@AString@@SAPEBVARuntimeClass@@XZ
??8ClientApplicationId@@QEBA_NAEBV0@@Z
??0ForgeTypeId@@QEAA@AEBV0@@Z
??1ForgeTypeId@@QEAA@XZ
??0AString@@QEAA@$$QEAV0@@Z
??1AString@@QEAA@XZ
?relocatable@ArrImpl@@SA_NPEAD@Z
?dbgCrash@@YAXPEBDZZ
?ptr@ProxyLink@@QEBAPEAVReferenceableClass@@XZ
?destroy@ArrImpl@@SAXPEAPEADP6AX_KPEAX@Z@Z
?copy@ArrImpl@@SAPEAXPEAPEADP6AXPEAXPEBX_K@ZP6AX31@ZP6AX113_N@ZPEBD@Z
?asReferenceableClass@ReferenceableClass@@QEBAPEAV1@XZ
??0ProxyLink@@QEAA@PEAVReferenceableClass@@@Z
?getActiveAddInData@@YA?AUAddInData@@XZ
?getId@AddInData@@QEBAAEBVGUIDvalue@@XZ
??0AddInId@@QEAA@AEBVGUIDvalue@@@Z
??1AddInData@@QEAA@XZ
?isValid@AddInId@@QEBA_NXZ
?getAddInName@AddInId@@QEBA?AVAString@@XZ
??4AString@@QEAAAEAV0@$$QEAV0@@Z
?getGUID@AddInId@@QEBAAEBVGUIDvalue@@XZ
?asAString@GUIDvalue@@QEBA?AVAString@@XZ
?getActiveClientApplicationId@ClientApplicationId@@SA?AV1@XZ
?getRevitApplicationId@ClientApplicationId@@SA?AV1@XZ
??9ClientApplicationId@@QEBA_NAEBV0@@Z
??1ClientApplicationId@@QEAA@XZ
__CxxQueryExceptionSize
__CxxExceptionFilter
__CxxRegisterExceptionObject
__RTDynamicCast
memmove
__CxxUnregisterExceptionObject
__CxxDetectRethrow
__current_exception_context
__current_exception
__FrameUnwindFilter
__CxxFrameHandler3
_purecall
__std_terminate
memset
__C_specific_handler
_CxxThrowException
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
__CxxFrameHandler4
free
_recalloc
malloc
_callnewh
_initterm_e
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
abort
_invalid_parameter_noinfo
_errno
_initterm
_invalid_parameter_noinfo_noreturn
??0FailureMessageKey@@QEAA@AEBV0@@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?_Xlength_error@std@@YAXPEBD@Z
?purgeReleasedAPIObjects@RevitApplication@@QEAAXXZ
??CMFCDocWriteAccess@@AEBAPEAVMFCDoc@@XZ
??DMFCDocWriteAccess@@AEBAAEAVMFCDoc@@XZ
??BMFCDocWriteAccess@@AEBAPEAVMFCDoc@@XZ
?getApplication_@RevitApplication@@CAPEAV1@XZ
?ptr@MFCDocWriteAccess@@AEBAPEAVMFCDoc@@XZ
?accessDocumentStorage@StorageWriteAccess@@CAPEAVDocumentStorage@@PEAVADocument@@@Z
_CorDllMain
??0APIControlScope@@QEAA@AEBU0@@Z
??0APIControlScope@@QEAA@XZ
??0APIMFCDocWriteAccess@@QEAA@PEBVADocument@@@Z
??0AddInDataScope@@QEAA@AEBUAddInData@@@Z
??0AddInDataScope@@QEAA@U?$gcroot@PE$AAVObject@System@@@@@Z
??0ForceGarbageCollection@@QEAA@XZ
??0InterfaceBridge@@IEAA@U?$gcroot@PE$AAVObject@System@@@@@Z
??0InterfaceBridge@@QEAA@AEBV0@@Z
??0InternalAPIMapsInitializer@@QEAA@PEBVARuntimeClass@@PEAX@Z
??0InternalAPIMapsInitializer@@QEAA@V?$APIUnmanagedBox@VType@System@@VByHashCode@APIUnmanagedBoxComparators@@@APIUnmanagedBoxes@@@Z
??0InternalAPIMapsInitializer@@QEAA@V?$APIUnmanagedBox@VType@System@@VByHashCode@APIUnmanagedBoxComparators@@@APIUnmanagedBoxes@@PEBVARuntimeClass@@@Z
??0InternalAPIMapsInitializer@@QEAA@V?$APIUnmanagedBox@VType@System@@VByHashCode@APIUnmanagedBoxComparators@@@APIUnmanagedBoxes@@V12@@Z
??0InternalAPIObjectRuntimeMap@@QEAA@XZ
??0InternalAPITypeMap@@QEAA@XZ
??1APIControlScope@@UEAA@XZ
??1AddInDataScope@@QEAA@XZ
??1ForceGarbageCollection@@QEAA@XZ
??1InterfaceBridge@@UEAA@XZ
??1InternalAPIObjectRuntimeMap@@QEAA@XZ
??1InternalAPITypeMap@@QEAA@XZ
??4APIControlScope@@QEAAAEAU0@AEBU0@@Z
??4APIEventUtil@@QEAAAEAV0@$$QEAV0@@Z
??4APIEventUtil@@QEAAAEAV0@AEBV0@@Z
??4APIMFCDocWriteAccess@@QEAAAEAV0@$$QEAV0@@Z
??4APIMFCDocWriteAccess@@QEAAAEAV0@AEBV0@@Z
??4AddInDataScope@@QEAAAEAV0@AEBV0@@Z
??4ForceGarbageCollection@@QEAAAEAU0@AEBU0@@Z
??4InterfaceBridge@@QEAAAEAV0@AEBV0@@Z
??4InternalAPIMapsInitializer@@QEAAAEAV0@$$QEAV0@@Z
??4InternalAPIMapsInitializer@@QEAAAEAV0@AEBV0@@Z
??4InternalAPIObjectRuntimeMap@@QEAAAEAV0@AEBV0@@Z
??4InternalAPITypeMap@@QEAAAEAV0@AEBV0@@Z
??BAPIMFCDocWriteAccess@@QEBAPEAVMFCDoc@@XZ
??CAPIMFCDocWriteAccess@@QEBAPEAVMFCDoc@@XZ
??DAPIMFCDocWriteAccess@@QEBAAEAVMFCDoc@@XZ
??_7APIControlScope@@6B@
??_7InterfaceBridge@@6B@
?__autoclassinit2@InterfaceBridge@@QEAAX_K@Z
?apiForceGarbageCollection@@YAXXZ
?apiUnblockFinalizers@@YAXXZ
?clearAddInData@AddInDataScope@@SAXXZ
?dumpCancellingEventInformation@APIEventUtil@@SAXVAString@@@Z
?dumpEventExceptionInformation@APIEventUtil@@SAXVAString@@00@Z
?extractEventName@APIEventUtil@@SA?AVAString@@V2@@Z
?generateLib@@YAXXZ
?getAObjectRuntimeClass@InternalAPIObjectRuntimeMap@@CAPEAVARuntimeClass@@XZ
?getExecutingAppInformation@APIEventUtil@@SAXAEAVAString@@0@Z
?getManagedInterface@InterfaceBridge@@QEBA?AU?$gcroot@PE$AAVObject@System@@@@XZ
?getManagedType@InternalAPITypeMap@@SA?AV?$APIUnmanagedBox@VType@System@@VByHashCode@APIUnmanagedBoxComparators@@@APIUnmanagedBoxes@@PEBVARuntimeClass@@@Z
?getNativeType@InternalAPITypeMap@@SAPEBVARuntimeClass@@V?$APIUnmanagedBox@VType@System@@VByHashCode@APIUnmanagedBoxComparators@@@APIUnmanagedBoxes@@@Z
?getObjectRuntimeMap@InternalAPIObjectRuntimeMap@@CAPEAXXZ
?getTopManagedObject@AddInDataScope@@SA?AU?$gcroot@PE$AAVObject@System@@@@XZ
?getTypeMap@InternalAPITypeMap@@CAPEAV?$Map@V?$APIUnmanagedBox@VType@System@@VByHashCode@APIUnmanagedBoxComparators@@@APIUnmanagedBoxes@@PEBVARuntimeClass@@U?$less@V?$APIUnmanagedBox@VType@System@@VByHashCode@APIUnmanagedBoxComparators@@@APIUnmanagedBoxes@@@std@@V?$tnallc@U?$pair@$$CBV?$APIUnmanagedBox@VType@System@@VByHashCode@APIUnmanagedBoxComparators@@@APIUnmanagedBoxes@@PEBVARuntimeClass@@@std@@@@@crs@@XZ
?initInternalAPITypeMap@InternalAPITypeMap@@CAXXZ
?initializeSlowStatic@@YAXXZ
?ptr@APIMFCDocWriteAccess@@QEBAPEAVMFCDoc@@XZ
?registerAddInData@AddInDataScope@@SA_NU?$gcroot@PE$AAVObject@System@@@@@Z
?registerEventHandler@AddInDataScope@@SA_NU?$gcroot@PE$AAVObject@System@@@@@Z
?registerNativeTypeMap@InternalAPITypeMap@@SAXV?$APIUnmanagedBox@VType@System@@VByHashCode@APIUnmanagedBoxComparators@@@APIUnmanagedBoxes@@PEBVARuntimeClass@@@Z
?registerObjectRuntimeMap@InternalAPIObjectRuntimeMap@@SAXPEBVARuntimeClass@@PEAX@Z
?unRegisterAddInData@AddInDataScope@@SAXU?$gcroot@PE$AAVObject@System@@@@@Z
?unRegisterAddInDataInternal@AddInDataScope@@KAXU?$gcroot@PE$AAVObject@System@@@@_N@Z
?unRegisterEventHandler@AddInDataScope@@SAXU?$gcroot@PE$AAVObject@System@@@@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ