Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
b2ecbd9fecfaf0de2a2b14d5cc86d357b5d0a3ae848e272a4745779321c1d1d5.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b2ecbd9fecfaf0de2a2b14d5cc86d357b5d0a3ae848e272a4745779321c1d1d5.dll
Resource
win10v2004-20240508-en
Target
b2ecbd9fecfaf0de2a2b14d5cc86d357b5d0a3ae848e272a4745779321c1d1d5
Size
81KB
MD5
cd5a54209ceefeb5ff0433416412b156
SHA1
61be583ae7456ab4d90ea74481c39765dcce7390
SHA256
b2ecbd9fecfaf0de2a2b14d5cc86d357b5d0a3ae848e272a4745779321c1d1d5
SHA512
855213571dbb20888b63be0cf259c3cf244779c079dca9c17f851ca479298258e0cc01fa7064a8f3bef6331476c7df0d43ae83c32204507894afd7d8d735b2f2
SSDEEP
1536:FhTPJzW1GO87nzXGUttDmfYykjTNXWO7Lil43hYtYn7L53hg7:FJhW1Gl6yjTJWO3sbtYn3A7
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
E:\staging\driver\bin\Families\Release-x64\Seagull_PrintModule_NEI.pdb
??6prtstream@@QEAAAEAV0@AEBVOString@@@Z
?Unregister@DriverFactory@@YAXPEBD@Z
?Register@DriverFactory@@YAXPEBDP6APEAXXZ@Z
??0PrinterModel@@IEAA@XZ
??1PrinterModel@@UEAA@XZ
?IsFeatureLicensed@PrinterModel@@UEBA_NHPEA_N@Z
?GetDefaultLinerWidth@PrinterModel@@UEBA?AVMeasurement@@XZ
?CreatePrinterSpecificStock@PrinterModel@@UEBAPEAVStock@@AEBVOString@@@Z
?CanValidateStocks@PrinterModel@@UEBA_NXZ
?ValidateStocks@PrinterModel@@UEBA_NAEAV?$vector@V?$shared_ptr@VStock@@@std@@V?$allocator@V?$shared_ptr@VStock@@@std@@@2@@std@@@Z
?PrinterOriginAdjustable@PrinterModel@@UEBA_NXZ
?GetDefaultOrientation@PrinterModel@@UEBAHXZ
?SupportsFreeDrawToOverlayPanel@PrinterModel@@UEBA_NXZ
?DrawOverlayFullCoverage@PrinterModel@@UEBA_NXZ
?InstallZXPPrinterDll@PrinterModel@@UEBA_NXZ
?RequiresZXPPrinterDll@PrinterModel@@UEBA_NXZ
?RequiresZSmartCardToZXP7@PrinterModel@@UEBA_NXZ
?GetFontRestrictions@PrinterModel@@UEBA?AVOString@@AEBV2@@Z
?GetStockSpecificFonts@PrinterModel@@UEBA_NAEBVOString@@AEAV?$vector@VPrinterModelFont@@V?$allocator@VPrinterModelFont@@@std@@@std@@AEAV2@@Z
?CanViewCacheGraphics@PrinterModel@@UEBA_NXZ
?GetAvailableEncodings@PrinterModel@@UEBAHAEAVOStringArray@@@Z
?ReadRFIDStartBlockEnabled@PrinterModel@@UEBA_NK@Z
?GetRFIDTagReadSegments@PrinterModel@@UEBAGK@Z
?ReadPCWord@PrinterModel@@UEBA_NXZ
?RequiresPermalockPassword@PrinterModel@@UEBA_NH@Z
?HasEPCGen2UMISettings@PrinterModel@@UEBA_NXZ
?GetEPCGen2ChipBasedSecurities@PrinterModel@@UEBA_NAEAKH@Z
?ValidateBarcodeSymbology@PrinterModel@@UEBAXPEAUUTSymbologyData@@H@Z
?UseArialForI2Of5HumanReadable@PrinterModel@@UEBA_NXZ
?IsPrinterResolutionValid@PrinterModel@@UEBA_NAEBVStock@@HH@Z
?UseFormNameForTestPrint@PrinterModel@@UEBA_NXZ
?VerifyVendorID@PrinterModel@@UEBA_NAEBVOString@@0@Z
?AllowsVendorIDVerification@PrinterModel@@UEBA_NXZ
?GetCutIntervalMaxDefaultValue@PrinterModel@@UEBAJXZ
?SupportsIrregularPrintArea@PrinterModel@@UEBA_NXZ
?CreateIrregularPrintAreaEnhFile@PrinterModel@@UEBA_NAEAVOString@@PEBVStock@@K@Z
?SupportsBarcodeXdimensionRange@PrinterModel@@UEBA_NXZ
?GetBarcodeXdimensionRangeData@PrinterModel@@UEBAHAEAV?$OPointerArray@PEAUUTBarcodeXdimensionData@@@@@Z
?GetClockCapabilities@PrinterModel@@UEBAXAEAPEAUUTClockCapabilities@@@Z
?PrintTicketGetPrivateUri@PrinterModel@@UEBA?AVOString@@XZ
?PrintTicketGetSupportedVersions@PrinterModel@@UEBAHAEAV?$OTypedArray@H@@@Z
?PrintTicketGetDeviceNameSpace@PrinterModel@@UEBA?AVOString@@XZ
?GetDitherCapabilities@PrinterModel@@UEBAXAEAUDitherCapabilities@@@Z
?GetPrinterClockSetCommand@PrinterModel@@UEAA?AVOString@@PEBU_SYSTEMTIME@@@Z
?GetPrinterClockTestData@PrinterModel@@UEBAXPEAUClockTestFormatData@@@Z
?GetPrinterClockDateSeparators@PrinterModel@@UEBAXAEAV?$OBuffer@E@@@Z
?GetPrinterClockTimeSeparators@PrinterModel@@UEBAXAEAV?$OBuffer@E@@@Z
?PrinterClockSubstringsClockEntitiesOnly@PrinterModel@@UEBA_NXZ
?PrinterClockBarcodeSubstringsMultiAiNumericOnly@PrinterModel@@UEBA_NXZ
?ValidateDownloadFont@PrinterModel@@UEBAHPEBVDownloadedFont@@@Z
?IsPrinterCommandFieldSupported@PrinterModel@@UEBA_NXZ
?SupportsCleaningFeatures@PrinterModel@@UEBA_NXZ
?IsCleaningDriverInitiated@PrinterModel@@UEBA_NXZ
?GetCleaningInterval@PrinterModel@@UEBAJXZ
?GetCleaningReminderCountDefault@PrinterModel@@UEBAJXZ
?GetCleaningReminderCountMinimum@PrinterModel@@UEBAJXZ
?GetCleaningReminderCountMaximum@PrinterModel@@UEBAJXZ
?GetCleaningRemindersEnabledDefault@PrinterModel@@UEBA_NXZ
?GetCleaningReminderFrequencyDefault@PrinterModel@@UEBAJXZ
??6prtstream@@QEAAAEAV0@D@Z
?IsCleaningBlockRequiredWhenCountSourcePrinter@PrinterModel@@UEBA_NXZ
?GetCleaningBlockAllowDisable@PrinterModel@@UEBA_NXZ
?IsCleaningBlockForcedDisabled@PrinterModel@@UEBA_NXZ
?IsCleaningBlockSupported@PrinterModel@@UEBA_NXZ
?GetUsageCountSourceDefault@PrinterModel@@UEBA?AW4UsageCountSource@UsageCountSourceNS@@_N@Z
?GetSupportedUsageCountSources@PrinterModel@@UEBAXAEAV?$OTypedArray@W4UsageCountSource@UsageCountSourceNS@@@@@Z
?SetCleaningDefaults@PrinterModel@@UEAAXXZ
?ValidateCleaningSettings@PrinterModel@@UEBAXAEAVPrinterCleaningSettings@@@Z
?GetTcpPortDefaultDisconnectTimeout@PrinterModel@@UEBAKXZ
??4OString@@QEAAAEAV0@PEBD@Z
??8OString@@QEBA_NPEBD@Z
??6prtstream@@QEAAAEAV0@J@Z
??6prtstream@@QEAAAEAV0@P6AAEAV0@AEAV0@@Z@Z
?endl@@YAAEAVprtstream@@AEAV1@@Z
??0Measurement@@QEAA@XZ
?SetDots@Measurement@@QEAAXHJ@Z
?Microns@Measurement@@QEBAJXZ
?TranslateVerticalPosition@prtstream@@QEBAJJ@Z
?WriteBYTE@prtstream@@QEAAXE@Z
?write@prtstream@@QEAA_NPEBXJ@Z
?Reset@prtconfig@@QEAAXPEBVPrinterModel@@@Z
?Validate@prtconfig@@QEAAXPEBVPrinterModel@@@Z
?validate_range@prtconfig@@QEAA_NAEAJJJ@Z
?GetYResolution@PrinterModel@@QEBAJXZ
??0Measurement@@QEAA@J@Z
??0prtstream@@QEAA@XZ
??0PrinterRegistry@@QEAA@AEBV0@@Z
?GetByte@ORegistry@@QEAAEAEBVOString@@E@Z
??0OString@@QEAA@PEBD@Z
??1ORegistry@@UEAA@XZ
??1OMutex@@UEAA@XZ
?GetXResolution@PrinterModel@@QEBAJXZ
?SetMicrons@Measurement@@QEAAXJ@Z
?Dots@Measurement@@QEBAJH@Z
?GetPrintTimePageHeightInDots@prtstream@@QEBAJXZ
?write_packet@prtstream@@UEAAXPEBDH@Z
?CacheStart@prtstream@@UEAAXXZ
?CacheStop@prtstream@@UEAAXXZ
?GetCachedMemory@prtstream@@UEBAJXZ
?write_endl@prtstream@@UEAAXXZ
?GetPropertyBool@PrinterModel@@QEBA_NAEBVOString@@0_N@Z
?GetModelName@PrinterModel@@QEBAAEBVOString@@XZ
?GetPropertyInt@PrinterModel@@QEBAJAEBVOString@@0J@Z
??0OStringArray@@QEAA@XZ
??1OStringArray@@UEAA@XZ
?GetPropertyStringArray@PrinterModel@@QEBAXAEBVOString@@0AEAVOStringArray@@@Z
?SetText@Measurement@@QEAA_NAEBVOString@@_N@Z
?Left@OString@@QEBA?AV1@H@Z
?Find@OString@@QEBAHPEBDH@Z
?GetPropertyString@PrinterModel@@QEBA?AVOString@@AEBV2@00@Z
??AOString@@QEBA_WH@Z
?GetLength@OString@@QEBAHXZ
??0OString@@QEAA@AEBV0@@Z
?GetModel@prtstream@@QEBAPEAVPrinterModel@@XZ
??6prtstream@@QEAAAEAV0@PEBD@Z
?IsEmpty@OString@@QEBA_NXZ
??1OString@@QEAA@XZ
??0OString@@QEAA@XZ
?TMemRealloc@MemoryUtility@@YAPEAXPEAX_K@Z
?TMemAlloc@MemoryUtility@@YAPEAX_K@Z
?RemoveAt@?$OBaseArray@$07@@QEAAXHH@Z
?print_user@prtconfig@@QEAAXAEAVprtstream@@H@Z
?TMemFree@MemoryUtility@@YAXPEAX@Z
??1prtstream@@UEAA@XZ
?Destroy@PrinterModel@@SAXPEAPEAV1@@Z
?GetCleaningBlockCount@PrinterModel@@UEBAJXZ
?Create@PrinterModel@@SAPEAV1@AEBVPrinterInfo@@W4ModuleType@1@@Z
?ResetDCW@prtdev@@UEAAXPEAV1@0@Z
?Enable@prtdev@@UEAAXXZ
?ValidatePrinterRelativeBottomMargin@prtdev@@MEBAHH@Z
?Draw@prtdev@@UEAAXAEBVPath@@@Z
?Draw@prtdev@@UEAAXAEBVPath_Image@@@Z
?Draw@prtdev@@UEAAXAEAVMagneticStripeData@@@Z
?Draw@prtdev@@UEAAXAEAVRFIDData@@@Z
?DoCustomDrawImage@prtdev@@UEAA_NK@Z
?CustomDrawImage@prtdev@@UEAA_NAEAVPath_Image@@@Z
?Phase@prtdev@@UEAAXHH@Z
?DrawPrinterCommandFont@prtdev@@UEAAXAEBVOString@@@Z
?ExecuteDriverCommand@prtdev@@UEAAXAEBVDriverCommand@@@Z
?VerifyOptimizations@prtdev@@UEAAJJ@Z
?VerifyOptimizationsAll@prtdev@@UEAAJJ@Z
?UpdateOptimizations@prtdev@@UEAAXXZ
?GetConfiguration@prtdev@@UEAAXAEAUUTPrinterConfiguration@@@Z
?UpdateConfiguration@prtdev@@UEAAXAEBUUTPrinterConfiguration@@@Z
?SuppressControlledMediaHandling@prtdev@@UEBA_NXZ
?CancelBatch@prtdev@@UEAAXXZ
?DownloadFont@prtdev@@UEAAXAEBUUTDownloadedFontInfo@@@Z
?DownloadFontData@prtdev@@UEAAXPEBXK@Z
?DownloadBitmapChar@prtdev@@UEAAXAEBUUTDownloadBitmapChar@@@Z
?ColorRegistration@prtdev@@UEAAXAEBUUTColorRegistration@@@Z
?ColorRegistrationTest@prtdev@@UEAAXAEBUUTColorRegistrationTest@@@Z
?ColorRegistrationSample@prtdev@@UEAAXAEBUUTColorRegistrationSample@@@Z
?GetPostPrintActionData@prtdev@@UEBAXPEAUUTPostPrintActionData@@@Z
?DeviceConvertMonochrome@prtdev@@UEBA_NXZ
?GetTextClippingType@prtdev@@UEBA?AW4TextClipEnum@1@XZ
?AllowFontForRaster@prtdev@@UEBA_NPEBVFontMetrics@@@Z
?GetLargestAllowableFontForRaster@prtdev@@UEBAPEBVFontMetrics@@PEAVFontManager@@@Z
??0FieldData@@QEAA@XZ
??1FieldData@@UEAA@XZ
?NewParseData@FieldData@@IEAAXXZ
?NewIsPCTData@FieldData@@IEBA_NXZ
?NewIsRTCData@FieldData@@IEBA_NXZ
?SetData@FieldSubString@@QEAAXAEBVOString@@@Z
??0FieldSubString@@QEAA@XZ
??1FieldSubString@@UEAA@XZ
?GetData@FieldData@@UEBAAEBVOString@@XZ
?GetPrintData@FieldData@@UEBAAEBVOString@@XZ
?Init@FieldSubString@@QEAAXXZ
??0prtfield_barcode@@QEAA@AEBVBarcodeData1D@@PEAVFieldCollection@@@Z
?Set@FieldData@@QEAAXPEBVprtfield_barcode@@@Z
?GetNarrowBar@prtfield_barcode@@QEBAHXZ
?GetBarcode@BarcodeData1D@@QEAAAEAV?$shared_ptr@UUTBarCodeData@@@std@@XZ
?GetBarcode@BarcodeData2D@@QEAAAEAV?$shared_ptr@UUT2DBarCodeData@@@std@@XZ
?Code128_IsUCCEAN@prtfield_barcode@@QEBA_NXZ
??0prtfield_barcode@@QEAA@AEBVBarcodeData2D@@PEAVFieldCollection@@@Z
?GetRotation@prtfield_barcode@@QEBAHXZ
?GetY@prtfield_barcode@@UEBAHXZ
?GetWidth@prtfield_barcode@@QEBAHXZ
?GetHeight@prtfield_barcode@@UEBAHXZ
?GetStream@prtfield@@IEAAPEAVprtstream@@XZ
?GetModel@prtfield@@IEAAPEAVPrinterModel@@XZ
?GetX@prtfield_barcode@@QEBAHXZ
?PDF417_GetRowHeight@prtfield_barcode@@QEBAHXZ
?PDF417_GetColumns@prtfield_barcode@@QEBAHXZ
?PDF417_GetErrorLevel@prtfield_barcode@@QEBAHXZ
?Aztec_GetErrorCorrection@prtfield_barcode@@QEBAHXZ
?QRCode_GetECLevel@prtfield_barcode@@QEBAGXZ
?QRCode_GetMask@prtfield_barcode@@QEBAGXZ
?IsCode128@prtfield_barcode@@QEBA_NXZ
??0FormatCode128@@QEAA@XZ
?HasExternalSource@FieldData@@QEBA_NXZ
?Code128_GetMode@prtfield_barcode@@QEBAHXZ
?SetStartingCodeset@FormatCode128@@QEAAXG@Z
?GetSubStrings@FieldData@@QEBAXAEAV?$OPointerArray@PEAVFieldSubString@@@@@Z
?IsExternalSource@FieldSubString@@QEBA_NXZ
?Encode@FormatCode128@@QEAA?AVOString@@AEBV2@@Z
?SetPrintData@FieldSubString@@QEAAXAEBVOString@@@Z
?IsTextField@prtfield@@UEBA_NXZ
?IsGraphicsField@prtfield@@UEBA_NXZ
?IsBarCodeField@prtfield_barcode@@UEBA_NXZ
?IsLineField@prtfield@@UEBA_NXZ
?UpdateCacheEngine@prtfield@@UEAAXPEAVCacheEngineBase@@@Z
?GetBounds@prtfield_barcode@@UEBA?AVORect@@XZ
?GetTextDescent@prtfield@@MEBAHXZ
??1FormatCode128@@QEAA@XZ
??1prtfield_barcode@@UEAA@XZ
??1prtcachegfx@@UEAA@XZ
??0TransformGraphics@@QEAA@AEBVprtdev@@AEAVSBITMAP@@H@Z
??1TransformGraphics@@QEAA@XZ
?GetX@TransformGraphics@@QEBAJH@Z
?GetY@TransformGraphics@@QEBAJH@Z
?StealData@SBITMAP@@QEAAXAEAV1@@Z
??0prtfield_image@@QEAA@PEAVFieldCollection@@@Z
??1prtfield_image@@UEAA@XZ
?Process@SBITMAP@@QEAA_NXZ
?SetBounds@prtfield_image@@IEAAXHHHH@Z
?AdjustX_ByteBoundary@prtcachegfx@@UEAAXXZ
?Phase@prtfield@@UEAAXH@Z
?IsGraphicsField@prtfield_image@@UEBA_NXZ
?IsBarCodeField@prtfield@@UEBA_NXZ
?UpdateCacheEngine@prtfield_image@@UEAAXPEAVCacheEngineBase@@@Z
?GetBounds@prtfield_image@@UEBA?AVORect@@XZ
?GetStoredSize@prtfield_image@@UEBAJXZ
?GetChecksum@prtfield_image@@UEBAKXZ
??0prtcachegfx@@QEAA@XZ
??0prtfield_line@@QEAA@AEBUUTLineData@@PEAVFieldCollection@@@Z
?IsLineField@prtfield_line@@UEBA_NXZ
?GetBounds@prtfield_line@@UEBA?AVORect@@XZ
?GetBoundsDiagonal@prtfield_line@@UEBA?AVORect@@XZ
??1prtfield_line@@UEAA@XZ
??0prtfield_text@@QEAA@AEBVTextData@@PEAVFieldCollection@@@Z
?Set@FieldData@@QEAAXPEBVprtfield_text@@@Z
?GetFileID@prtfield_text@@QEBA?AVOString@@XZ
?GetFontSelect@prtfield_text@@QEBAPEBDXZ
?GetMagX@prtfield_text@@QEBAHXZ
?GetMagY@prtfield_text@@QEBAHXZ
?IsTextField@prtfield_text@@UEBA_NXZ
?GetBounds@prtfield_text@@UEBA?AVORect@@XZ
?GetTextDescent@prtfield_text@@UEBAHXZ
??1prtfield_text@@UEAA@XZ
?AddField@prtdev@@QEAAXPEAVprtfield@@H@Z
?GetFields@FieldCollection@@QEBAXAEAV?$OPointerArray@PEAVprtfield@@@@@Z
?ClearFields@prtdev@@QEAAXXZ
?InitializeVariablePageLengthParameters@prtdev@@QEAAXXZ
?page_type@prtdev@@QEBAGXZ
?Monitor_EndJob@prtdev@@QEAAXXZ
?Monitor_EndPage@prtdev@@QEAAXXZ
?Monitor_StartPage@prtdev@@QEAAXJ@Z
?GetRegistry@prtdev@@QEBAAEBVPrinterRegistry@@XZ
?get_cfg@prtdev@@QEBAPEAVprtconfig@@XZ
??1prtdev@@UEAA@XZ
??0prtdev@@QEAA@PEAVPrinterModel@@@Z
?Reset@prtdev@@UEAAXXZ
?InitDoc@prtdev@@UEAAXXZ
__CxxFrameHandler4
memcpy
__std_type_info_destroy_list
__std_terminate
__C_specific_handler
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memset
free
_callnewh
malloc
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_narrow_environment
RtlCaptureContext
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
CreatePrinterModel
CreatePrtDev
DestroyPrinterModel
DestroyPrtDev
DllMain
GetDriverConfigDependencies
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ