Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
693b7a9dc3fb96e52995969cbfba45f7c787309e2c91dc8df3866849b12fa81d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
693b7a9dc3fb96e52995969cbfba45f7c787309e2c91dc8df3866849b12fa81d.exe
Resource
win10v2004-20240508-en
Target
693b7a9dc3fb96e52995969cbfba45f7c787309e2c91dc8df3866849b12fa81d
Size
2.3MB
MD5
c9df5309d66dd33d0360fdba333d2df4
SHA1
0acdd5aa5a1a42868f6526da27361b278aff4b6c
SHA256
693b7a9dc3fb96e52995969cbfba45f7c787309e2c91dc8df3866849b12fa81d
SHA512
294f00f739c9f47faf0f201023234d7db0affd5b2d1722d46db80c6407c00fb9f3d7503fa6095606f267b96bb8b740d6484915f91bd27a23472188c3155d5ed6
SSDEEP
49152:rc4Dw0dExEqN+e+hEgH4AnJo69iz8Ba6aaCjDuy:rFdRdXiz8BBan
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
C:\jenkins\workspace\Client\Client\Windows\release\Bin\x64\Release\aomhost64.pdb
GetTempFileNameW
SizeofResource
GetCurrentProcess
GetModuleHandleExW
TerminateProcess
GetCurrentThreadId
FreeResource
MultiByteToWideChar
K32GetProcessMemoryInfo
LockResource
GetSystemInfo
LoadResource
FindResourceW
GlobalMemoryStatusEx
GetProcessTimes
LocalAlloc
UnmapViewOfFile
CreateFileMappingA
LocalFree
OpenFileMappingA
MapViewOfFile
VirtualQuery
QueryPerformanceFrequency
QueryPerformanceCounter
VerSetConditionMask
FileTimeToLocalFileTime
GetFileAttributesW
lstrcmpA
lstrcpyW
VerifyVersionInfoW
FileTimeToSystemTime
HeapAlloc
HeapFree
GetProcessHeap
GetSystemDirectoryW
GetModuleHandleA
GetModuleHandleW
LoadLibraryExW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetFileSize
CreateFileMappingW
SetLastError
FreeLibrary
CreateDirectoryA
ResetEvent
GetTickCount64
GetLastError
VirtualProtect
ReleaseSemaphore
WriteFile
SetFilePointer
CreateFileA
CreateThread
GetWindowsDirectoryW
CreateSemaphoreW
FlushInstructionCache
SetDllDirectoryW
FlushFileBuffers
OutputDebugStringW
GetProcAddress
IsDebuggerPresent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LoadLibraryW
InitializeSListHead
EnterCriticalSection
GetCommandLineW
GetModuleFileNameW
WaitForMultipleObjects
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
InitializeCriticalSection
InitializeCriticalSectionEx
WaitForSingleObject
CreateFileW
OpenEventW
ResumeThread
OpenProcess
CreateEventW
ProcessIdToSessionId
DeleteFileW
GetPrivateProfileStringW
GetVersionExW
SetErrorMode
CreateDirectoryW
CreateEventA
WideCharToMultiByte
GetCurrentProcessId
DeleteCriticalSection
UnregisterWaitEx
CloseHandle
LoadLibraryA
SetEvent
IsProcessorFeaturePresent
GetStartupInfoW
GetSystemTimeAsFileTime
GetSystemMetrics
GetProcessWindowStation
MessageBoxW
GetUserObjectInformationA
CommandLineToArgvW
SHGetSpecialFolderPathA
SHGetKnownFolderPath
SHGetSpecialFolderPathW
CoTaskMemFree
GetTokenInformation
RegEnumKeyExW
RegGetValueW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
SetSecurityDescriptorDacl
AllocateAndInitializeSid
SetEntriesInAclW
FreeSid
InitializeSecurityDescriptor
??0_Locinfo@std@@QEAA@PEBD@Z
_Strxfrm
_Strcoll
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??Bid@locale@std@@QEAA_KXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
_Query_perf_frequency
_Thrd_sleep
_Query_perf_counter
_Xtime_get_ticks
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
_Cnd_signal
_Cnd_init_in_situ
?_Throw_Cpp_error@std@@YAXH@Z
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Throw_C_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPEBD@Z
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_init_in_situ
_Cnd_do_broadcast_at_thread_exit
_Cnd_wait
_Thrd_id
_Thrd_join
_Mtx_unlock
_Cnd_destroy_in_situ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
_Cnd_broadcast
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
PathFindFileNameW
PathRemoveFileSpecW
PathAppendW
PathIsRelativeW
RpcServerUseProtseqEpW
NdrClientCall3
NdrServerCallAll
NdrServerCall2
RpcBindingFree
RpcBindingFromStringBindingW
RpcStringFreeW
RpcServerRegisterIf2
I_RpcBindingInqLocalClientPID
RpcStringBindingComposeW
RpcServerUnregisterIfEx
GetModuleFileNameExW
GetProcessImageFileNameW
EnumProcessModules
GetModuleInformation
WinVerifyTrust
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain
CertGetNameStringW
__CxxFrameHandler4
__current_exception_context
__current_exception
__C_specific_handler
__std_exception_destroy
__std_exception_copy
_purecall
__std_terminate
_CxxThrowException
memcmp
memcpy
memmove
memset
strchr
memchr
_set_fmode
__p__commode
__stdio_common_vsprintf_s
__stdio_common_vsnprintf_s
__stdio_common_vswprintf_s
__stdio_common_vsscanf
_resetstkoflw
terminate
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo
_errno
_register_thread_local_exe_atexit_callback
_c_exit
_exit
exit
_initterm_e
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_initterm
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_beginthreadex
strtoll
atoi
_wtoi64
_wtoi
strtod
strtol
isdigit
wcscpy_s
strncmp
_wcsicmp
wcscat_s
wcsncmp
_wcsupr_s
towupper
_wcsnicmp
strcat_s
towlower
wcsncpy_s
tolower
rand
srand
realloc
_aligned_free
_aligned_malloc
_callnewh
malloc
_set_new_mode
calloc
_recalloc
free
_wstat64i32
cos
cosf
exp
floorf
__setusermatherr
ceil
pow
powf
sin
atanf
atan2f
sinf
fmaxf
fminf
atan2
sqrt
sqrtf
expf
asinf
_fdclass
acosf
acos
_time64
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ