Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
48b36ad5da7150b23c0a826d0f4d2777455b1e8498588c2c6c4d308947e3ff0a.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
48b36ad5da7150b23c0a826d0f4d2777455b1e8498588c2c6c4d308947e3ff0a.exe
Resource
win10v2004-20240226-en
Target
48b36ad5da7150b23c0a826d0f4d2777455b1e8498588c2c6c4d308947e3ff0a
Size
288KB
MD5
a079905a809026c1fe8202e6c4fd056d
SHA1
ad7b528dfaba85bf8a46f5d9981c6d0e70892aa2
SHA256
48b36ad5da7150b23c0a826d0f4d2777455b1e8498588c2c6c4d308947e3ff0a
SHA512
16cd12cffb7002133bc2f4d9331226ce66533836da11d5e5c225239a07e7cf2edcaa6895becf97e03ef1c7216f241c7ca32bd34b1eb6a0354e2bc86dcb431af5
SSDEEP
3072:6JQi68YKr7jXgj0awZaxnw99+oR/ClP9b/gLwziCMz2W2jW2F:FitYLSTRaR9bYLw5M21L
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
c:\jenkins\workspace\Client\Client\Windows\release\Bin\Release\ZoomOutlookMAPI.pdb
?Lock@CEvent@Cmm@@QAE?AW4ESyncRet@@K@Z
??1CEvent@Cmm@@QAE@XZ
??0CEvent@Cmm@@QAE@XZ
?GenChannelName@CIPCChannelThread@ssb_ipc@@SAXABV?$CStringT@_W@Cmm@@IAAV34@@Z
?ThreadProc@CIPCChannelThread@ssb_ipc@@UAEIXZ
?SendMessageW@CIPCChannelThread@ssb_ipc@@QAEHPAVCmmMQ_Msg@Cmm@@@Z
?Stop@CIPCChannelThread@ssb_ipc@@QAEHXZ
?Start@CIPCChannelThread@ssb_ipc@@QAEHXZ
?IsServerGood@CIPCChannelThread@ssb_ipc@@QAEHXZ
??1CIPCChannelThread@ssb_ipc@@UAE@XZ
??0CIPCChannelThread@ssb_ipc@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4ChannelMode@1@PAVListener@Channel@1@H@Z
?Now@Time@Cmm@@SA?AV12@XZ
?InSeconds@TimeDelta@Cmm@@QBE_JXZ
??1CCmmArchiveObjHelper@Cmm@@QAE@XZ
??0CCmmArchiveObjHelper@Cmm@@QAE@PBD@Z
?FlatternToMsg@CCmmMessageHelper@Cmm@@YAPAVCmmMQ_Msg@2@PAVCCmmArchiveObjHelper@2@H@Z
?AddPackageDefine0@CCmmArchiveServiceImp@Archive@Cmm@@QAEHPBD@Z
?GetImp@CCmmArchiveServiceImp@Archive@Cmm@@SAAAV123@XZ
??0?$CStringT@D@Cmm@@QAE@XZ
??0?$CStringT@D@Cmm@@QAE@PBD@Z
??1?$CStringT@D@Cmm@@UAE@XZ
?c_str@?$CStringT@D@Cmm@@QBEPBDXZ
?AssignOther@?$CStringT@D@Cmm@@QAEAAV12@PB_W@Z
??0Listener@Channel@ssb_ipc@@QAE@XZ
?OnChannelDisconnected@Listener@Channel@ssb_ipc@@UAEXH@Z
?Signal@CEvent@Cmm@@QAEXXZ
??1CSBMBMessage_OutlookOnGetDefaultProfileNotify@@UAE@XZ
?Set_count@CSBMBMessage_OutlookOnGetDefaultProfileNotify@@QAEXAB_K@Z
?Set_strDefaultProfile@CSBMBMessage_OutlookOnGetDefaultProfileNotify@@QAEXABV?$CStringT@_W@Cmm@@@Z
??0CSBMBMessage_OutlookOnGetDefaultProfileNotify@@QAE@XZ
??1CSBMBMessage_OutlookMAPIEventChangeNotify@@UAE@XZ
?Set_EventID@CSBMBMessage_OutlookMAPIEventChangeNotify@@QAEXABV?$CStringT@_W@Cmm@@@Z
?Set_NotifyType@CSBMBMessage_OutlookMAPIEventChangeNotify@@QAEXABI@Z
??0CSBMBMessage_OutlookMAPIEventChangeNotify@@QAE@XZ
?Unlock@CCritical@Cmm@@QAEXXZ
?Lock@CCritical@Cmm@@QAEXXZ
??1CCritical@Cmm@@QAE@XZ
??0CCritical@Cmm@@QAE@XZ
?cmm_str_convert@@YAIHPA_WIPBDI@Z
?GetBuffer@?$CStringT@_W@Cmm@@QAEPA_WI@Z
?SetLength@?$CStringT@_W@Cmm@@QAEXI@Z
?length@?$CStringT@D@Cmm@@QBEIXZ
??4?$CStringT@D@Cmm@@QAEAAV01@PBD@Z
?GetLength@?$CStringT@D@Cmm@@QBEIXZ
??4?$CStringT@_W@Cmm@@QAEAAV01@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??4?$CStringT@_W@Cmm@@QAEAAV01@ABV01@@Z
??4?$CStringT@_W@Cmm@@QAEAAV01@$$QAV01@@Z
?GetLength@?$CStringT@_W@Cmm@@QBEIXZ
?c_str@?$CStringT@_W@Cmm@@QBEPB_WXZ
??4?$CStringT@_W@Cmm@@QAEAAV01@PB_W@Z
??1?$CStringT@_W@Cmm@@UAE@XZ
??0?$CStringT@_W@Cmm@@QAE@PB_W@Z
??1Listener@Channel@ssb_ipc@@UAE@XZ
??0?$CStringT@_W@Cmm@@QAE@XZ
ReleaseSemaphore
WriteFile
TerminateProcess
EnterCriticalSection
WaitForMultipleObjects
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
ResumeThread
GetModuleHandleA
OpenProcess
CreateToolhelp32Snapshot
CreateEventW
Process32NextW
CreateFileA
SetEvent
Process32FirstW
CreateThread
HeapAlloc
GetWindowsDirectoryW
GetProcAddress
VerSetConditionMask
GetProcessHeap
GetModuleHandleW
CreateSemaphoreW
FlushInstructionCache
VerifyVersionInfoW
CreateDirectoryA
SetDllDirectoryW
VirtualQuery
LoadLibraryExW
FlushFileBuffers
CreateDirectoryW
SetErrorMode
GetPrivateProfileStringW
DeleteFileW
GetTempFileNameW
CreateFileW
OutputDebugStringW
IsWow64Process
HeapFree
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
VirtualProtect
ExitProcess
CloseHandle
TerminateThread
Sleep
GetCurrentProcessId
DeleteCriticalSection
GetLastError
GetCurrentThreadId
InitializeCriticalSectionEx
SetConsoleCtrlHandler
GetCurrentProcess
IsDebuggerPresent
GetModuleFileNameW
DispatchMessageW
GetMessageW
GetProcessWindowStation
TranslateMessage
GetUserObjectInformationA
MessageBoxW
PostThreadMessageW
SetTimer
FreeSid
GetTokenInformation
RegGetValueW
RegOpenKeyExW
OpenProcessToken
RegEnumKeyExW
RegCloseKey
DuplicateTokenEx
SetTokenInformation
CreateRestrictedToken
ImpersonateLoggedOnUser
CreateWellKnownSid
AllocateAndInitializeSid
RevertToSelf
SHGetKnownFolderPath
SHGetSpecialFolderPathW
SHGetSpecialFolderPathA
CoTaskMemFree
?_Xlength_error@std@@YAXPBD@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
PathIsRelativeW
PathAppendW
ord140
ord17
ord11
ord21
ord23
ord19
EnumProcessModules
GetModuleFileNameExW
GetModuleInformation
WTHelperGetProvCertFromChain
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WinVerifyTrust
CertGetNameStringW
__std_exception_destroy
__CxxFrameHandler3
__std_terminate
_purecall
memmove
memset
_except_handler4_common
_CxxThrowException
__current_exception
__current_exception_context
__std_exception_copy
memcpy
_set_new_mode
free
_callnewh
malloc
terminate
_controlfp_s
_beginthreadex
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_invalid_parameter_noinfo_noreturn
_configure_wide_argv
_initialize_wide_environment
_get_initial_wide_environment
_initterm
_initterm_e
exit
_exit
__p___argc
__p___wargv
_c_exit
_register_thread_local_exe_atexit_callback
_wcsnicmp
strcat_s
wcscat_s
_wcsicmp
towlower
towupper
_wstat64i32
__p__commode
_set_fmode
__setusermatherr
_configthreadlocale
ord7
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ