Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
fcaa0378381cab0011c6349ff0c282db6d7b5108bdc2b0ab84e1bb695212192e.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
fcaa0378381cab0011c6349ff0c282db6d7b5108bdc2b0ab84e1bb695212192e.exe
Resource
win10v2004-20240611-en
Target
fcaa0378381cab0011c6349ff0c282db6d7b5108bdc2b0ab84e1bb695212192e
Size
2.6MB
MD5
cb8fb9f3f847d2b93d9c6dacd3286b58
SHA1
66952e3286baad2a9431b44ad407b53b5bac0cf3
SHA256
fcaa0378381cab0011c6349ff0c282db6d7b5108bdc2b0ab84e1bb695212192e
SHA512
e723be9124ab665c172827ce2354f1003bccfb49343c0fb0f64dd820a283cc9aca08eeae981407cdd9ba221f9bebbcc021306c32911372d966fc02acc3c88722
SSDEEP
24576:FmZn4jMQ6JzqgrrcVNSa5hOTT9i8Il3iHvyPbtjYvoqiLZxKvf+9qbZ4CWILH/pe:njDNdIK9/KvWgCCZTpUBSC
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\ccViews\autobuild1_BR-1005-00PS_6.1_Snapshot\AMT_Development\SW\Src\Services\UNS\Release\UNS.pdb
accept
ntohs
ntohl
closesocket
__WSAFDIsSet
getsockname
getpeername
htonl
bind
listen
WSAStartup
socket
setsockopt
htons
connect
getsockopt
ioctlsocket
gethostbyname
WSACleanup
recv
send
inet_ntoa
select
WSAGetLastError
shutdown
inet_addr
CryptProtectData
CryptUnprotectData
CertFindCertificateInStore
CertGetNameStringA
CertOpenStore
GetNetworkParams
GetExtendedTcpTable
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpQueryAuthSchemes
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpSetStatusCallback
WinHttpCrackUrl
WinHttpConnect
WinHttpOpenRequest
WinHttpSetCredentials
WinHttpOpen
WinHttpSetOption
WinHttpCloseHandle
RegisterServiceCtrlHandlerExA
OpenServiceA
ChangeServiceConfigA
ChangeServiceConfig2A
CloseServiceHandle
SetServiceStatus
GetTokenInformation
OpenThreadToken
OpenProcessToken
SetSecurityDescriptorGroup
IsValidSid
RegCreateKeyExW
RegSetValueExW
AllocateAndInitializeSid
SetEntriesInAclA
RegSetKeySecurity
FreeSid
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
EnumServicesStatusExA
GetAce
AddAce
GetAclInformation
InitializeAcl
AddAccessAllowedAce
GetLengthSid
CopySid
SetSecurityDescriptorOwner
InitializeSecurityDescriptor
RegQueryValueExA
RegOpenKeyExA
LookupAccountNameA
SetSecurityDescriptorDacl
CreateWellKnownSid
LookupAccountSidW
ConvertSidToStringSidA
EqualSid
ControlService
DeleteService
CreateServiceA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegCloseKey
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryInfoKeyA
StartServiceCtrlDispatcherA
OpenSCManagerA
GetProcessWindowStation
GetUserObjectInformationW
DispatchMessageA
UnregisterDeviceNotification
RegisterDeviceNotificationA
wsprintfA
PostThreadMessageA
CharNextW
LoadStringA
MessageBoxA
CharUpperA
CharNextA
GetMessageA
TranslateMessage
GetDesktopWindow
UuidCreate
UuidToStringA
RpcStringFreeA
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
GetStatusString
?getMessage@DOMException@xercesc_2_7@@QBEPB_WXZ
?Terminate@XMLPlatformUtils@xercesc_2_7@@SAXXZ
?fgXercescDefaultLocale@XMLUni@xercesc_2_7@@2QBDB
?Initialize@XMLPlatformUtils@xercesc_2_7@@SAXQBD0QAVPanicHandler@2@QAVMemoryManager@2@_N@Z
?resolveEntity@XercesDOMParser@xercesc_2_7@@UAEPAVInputSource@2@QB_W00@Z
?createElementNSNode@AbstractDOMParser@xercesc_2_7@@MAEPAVDOMElement@2@PB_W0@Z
?attDef@AbstractDOMParser@xercesc_2_7@@UAEXABVDTDElementDecl@2@ABVDTDAttDef@2@_N@Z
?doctypeComment@AbstractDOMParser@xercesc_2_7@@UAEXQB_W@Z
?doctypeDecl@AbstractDOMParser@xercesc_2_7@@UAEXABVDTDElementDecl@2@QB_W1_N2@Z
?doctypePI@AbstractDOMParser@xercesc_2_7@@UAEXQB_W0@Z
?doctypeWhitespace@AbstractDOMParser@xercesc_2_7@@UAEXQB_WI@Z
?elementDecl@AbstractDOMParser@xercesc_2_7@@UAEXABVDTDElementDecl@2@_N@Z
?endAttList@AbstractDOMParser@xercesc_2_7@@UAEXABVDTDElementDecl@2@@Z
?endIntSubset@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?endExtSubset@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?entityDecl@AbstractDOMParser@xercesc_2_7@@UAEXABVDTDEntityDecl@2@_N1@Z
?resetDocType@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?notationDecl@AbstractDOMParser@xercesc_2_7@@UAEXABVXMLNotationDecl@2@_N@Z
?startAttList@AbstractDOMParser@xercesc_2_7@@UAEXABVDTDElementDecl@2@@Z
?startIntSubset@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?startExtSubset@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?TextDecl@AbstractDOMParser@xercesc_2_7@@UAEXQB_W0@Z
?handleElementPSVI@AbstractDOMParser@xercesc_2_7@@UAEXQB_W0PAVPSVIElement@2@@Z
?getMessage@XMLException@xercesc_2_7@@QBEPB_WXZ
?handleAttributesPSVI@AbstractDOMParser@xercesc_2_7@@UAEXQB_W0PAVPSVIAttributeList@2@@Z
??1XercesDOMParser@xercesc_2_7@@UAE@XZ
?fgDOMXMLDeclaration@XMLUni@xercesc_2_7@@2QB_WB
?setPSVIHandler@AbstractDOMParser@xercesc_2_7@@UAEXQAVPSVIHandler@2@@Z
?elementTypeInfo@AbstractDOMParser@xercesc_2_7@@UAEXQB_W0@Z
?XMLDecl@AbstractDOMParser@xercesc_2_7@@UAEXQB_W000@Z
?startEntityReference@AbstractDOMParser@xercesc_2_7@@UAEXABVXMLEntityDecl@2@@Z
?startElement@AbstractDOMParser@xercesc_2_7@@UAEXABVXMLElementDecl@2@IQB_WABV?$RefVectorOf@VXMLAttr@xercesc_2_7@@@2@I_N3@Z
?startDocument@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?resetDocument@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?ignorableWhitespace@AbstractDOMParser@xercesc_2_7@@UAEXQB_WI_N@Z
?endEntityReference@AbstractDOMParser@xercesc_2_7@@UAEXABVXMLEntityDecl@2@@Z
?endElement@AbstractDOMParser@xercesc_2_7@@UAEXABVXMLElementDecl@2@I_NQB_W@Z
?endDocument@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?docPI@AbstractDOMParser@xercesc_2_7@@UAEXQB_W0@Z
?docComment@AbstractDOMParser@xercesc_2_7@@UAEXQB_W@Z
?docCharacters@AbstractDOMParser@xercesc_2_7@@UAEXQB_WI_N@Z
??0MemBufInputSource@xercesc_2_7@@QAE@QBEIQBD_NQAVMemoryManager@1@@Z
??0XercesDOMParser@xercesc_2_7@@QAE@QAVXMLValidator@1@QAVMemoryManager@1@QAVXMLGrammarPool@1@@Z
?setDoNamespaces@AbstractDOMParser@xercesc_2_7@@QAEX_N@Z
?setDoSchema@AbstractDOMParser@xercesc_2_7@@QAEX_N@Z
?setExternalNoNamespaceSchemaLocation@AbstractDOMParser@xercesc_2_7@@QAEXQBD@Z
?parse@AbstractDOMParser@xercesc_2_7@@QAEXABVInputSource@2@@Z
?transcode@XMLString@xercesc_2_7@@SAPA_WQBD@Z
?release@XMLString@xercesc_2_7@@SAXPAPA_W@Z
?transcode@XMLString@xercesc_2_7@@SAPADQB_W@Z
?release@XMLString@xercesc_2_7@@SAXPAPAD@Z
??3XMemory@xercesc_2_7@@SAXPAX@Z
?getRawBuffer@MemBufFormatTarget@xercesc_2_7@@QBEPBEXZ
??0MemBufFormatTarget@xercesc_2_7@@QAE@HQAVMemoryManager@1@@Z
??2XMemory@xercesc_2_7@@SAPAXI@Z
?resolveEntity@XercesDOMParser@xercesc_2_7@@UAEPAVInputSource@2@PAVXMLResourceIdentifier@2@@Z
?resetEntities@XercesDOMParser@xercesc_2_7@@UAEXXZ
?expandSystemId@XercesDOMParser@xercesc_2_7@@UAE_NQB_WAAVXMLBuffer@2@@Z
?error@XercesDOMParser@xercesc_2_7@@UAEXIQB_WW4ErrTypes@XMLErrorReporter@2@000JJ@Z
?resetErrors@XercesDOMParser@xercesc_2_7@@UAEXXZ
?handlePartialElementPSVI@AbstractDOMParser@xercesc_2_7@@UAEXQB_W0PAVPSVIElement@2@@Z
?endInputSource@XercesDOMParser@xercesc_2_7@@UAEXABVInputSource@2@@Z
?getDocument@AbstractDOMParser@xercesc_2_7@@QAEPAVDOMDocument@2@XZ
??1MemBufInputSource@xercesc_2_7@@UAE@XZ
?fgMemoryManager@XMLPlatformUtils@xercesc_2_7@@2PAVMemoryManager@2@A
?getDOMImplementation@DOMImplementationRegistry@xercesc_2_7@@SAPAVDOMImplementation@2@PB_W@Z
?writeChars@MemBufFormatTarget@xercesc_2_7@@UAEXQBEIQAVXMLFormatter@2@@Z
?flush@XMLFormatTarget@xercesc_2_7@@UAEXXZ
?startInputSource@XercesDOMParser@xercesc_2_7@@UAEXABVInputSource@2@@Z
??1MemBufFormatTarget@xercesc_2_7@@UAE@XZ
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
LCMapStringA
LCMapStringW
TlsFree
GetACP
GetOEMCP
IsValidCodePage
FindFirstFileW
VirtualFree
HeapSize
SetHandleCount
SetStdHandle
GetDriveTypeW
HeapCreate
ExitProcess
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetFullPathNameA
InitializeCriticalSectionAndSpinCount
GetFullPathNameW
GetUserDefaultLCID
UnlockFile
LockFile
SetConsoleMode
ReadConsoleInputA
ExitThread
FindFirstFileA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
SetConsoleCtrlHandler
GetStartupInfoA
GetCurrentDirectoryA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
GetCPInfo
HeapReAlloc
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapAlloc
HeapFree
RtlUnwind
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateFileW
GetCurrentThreadId
ReleaseSemaphore
CreateSemaphoreA
TlsGetValue
DuplicateHandle
TlsSetValue
TlsAlloc
CreateMutexA
SetThreadPriority
ResumeThread
InterlockedExchange
FlushConsoleInputBuffer
GetVersionExA
GlobalMemoryStatus
GetCurrentProcessId
QueryPerformanceCounter
GetTickCount
GetStdHandle
GetFileType
GetVersion
SetErrorMode
LoadLibraryA
GetComputerNameA
GlobalAlloc
GlobalFree
SetLastError
ReleaseMutex
FormatMessageA
DeviceIoControl
WriteFile
ReadFile
GetOverlappedResult
CreateFileA
OpenEventA
ResetEvent
LocalAlloc
LocalFree
WaitForMultipleObjects
OpenProcess
GetSystemTime
InterlockedDecrement
InterlockedIncrement
CreateEventA
CreateThread
RaiseException
IsDBCSLeadByte
lstrcmpiA
LoadLibraryExA
FindResourceA
LoadResource
Sleep
GetCommandLineA
GetLastError
CloseHandle
GetCurrentProcess
GetCurrentThread
GetSystemDefaultLCID
lstrlenW
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
GetModuleHandleW
lstrlenA
GetModuleFileNameA
MultiByteToWideChar
WaitForSingleObject
SetEvent
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
SizeofResource
SHGetFolderPathA
CoInitializeSecurity
CoCreateInstance
CoResumeClassObjects
CoRevokeClassObject
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoInitializeEx
CoUninitialize
CoRegisterClassObject
CoSuspendClassObjects
CoRevertToSelf
CoImpersonateClient
StringFromGUID2
SafeArrayCopy
SafeArrayPutElement
SysFreeString
RegisterTypeLi
SysStringLen
SysAllocString
LoadTypeLi
VarUI4FromStr
UnRegisterTypeLi
LoadRegTypeLi
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
SysStringByteLen
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayUnlock
SafeArrayCreateVector
SafeArrayLock
SafeArrayDestroy
SafeArrayCreate
SafeArrayGetVartype
WSASetLastError
AtpStateNTimer
OPENSSL_Applink
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE