Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-08_7fa2692629cdfc8f6cbe7b90f194be3b_avoslocker.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-07-08_7fa2692629cdfc8f6cbe7b90f194be3b_avoslocker.exe
Resource
win10v2004-20240704-en
Target
2024-07-08_7fa2692629cdfc8f6cbe7b90f194be3b_avoslocker
Size
2.7MB
MD5
7fa2692629cdfc8f6cbe7b90f194be3b
SHA1
c2cd5e614dc5d4efadc15e1bbce6b4fb1c935860
SHA256
f87f40b802ba46a564d7d34991648f0cc637a932d5c63b20f707c65263b17951
SHA512
c25a4b9f2aa007bd665a26848b0d08cc7a7710d9f957ba5a8a582d718645aa1d72b14f828c318aeeea477866a74a3872d18b988d389c9e06f76d684990bf22ce
SSDEEP
49152:bElaOFNag4mdXrTTHQ1TPIfLgA6Nb9FlkB7Z/VIckpeEbuB2xVTM4hORR0x2u:4l0ZmdXXTHQNIzghNb9FCrkpNbuB2xb/
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\Jenkins\workspace\ccd-component-utils\main\native\win32\build\msvs_win32_x86\Release\x86\sym\CCTroubleshooter\CCTroubleshooter\CC Troubleshooter.pdb
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
WTSEnumerateSessionsW
WTSFreeMemory
WinHttpReceiveResponse
WinHttpCloseHandle
WinHttpAddRequestHeaders
WinHttpQueryDataAvailable
WinHttpConnect
WinHttpQueryOption
WinHttpSetStatusCallback
WinHttpSetTimeouts
WinHttpSetCredentials
WinHttpSendRequest
WinHttpGetProxyForUrl
WinHttpQueryAuthSchemes
WinHttpGetIEProxyConfigForCurrentUser
WinHttpQueryHeaders
WinHttpSetOption
WinHttpOpenRequest
WinHttpReadData
WinHttpOpen
GetTickCount64
SearchPathW
GetProfileIntW
GetTempFileNameW
GetUserDefaultLCID
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
CompareStringEx
SystemTimeToTzSpecificLocalTime
QueryPerformanceFrequency
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
GetFileAttributesExW
RaiseException
OutputDebugStringW
GetWindowsDirectoryW
WriteConsoleW
SetEnvironmentVariableW
FileTimeToLocalFileTime
SetErrorMode
VirtualProtect
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
ExitProcess
GetStdHandle
GetFileType
SetStdHandle
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
RtlUnwind
GetCPInfo
HeapFree
EnterCriticalSection
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSectionEx
HeapSize
GetLastError
HeapReAlloc
HeapAlloc
DecodePointer
DeleteCriticalSection
GlobalGetAtomNameW
lstrcpyW
GetThreadLocale
UnlockFile
SetEndOfFile
LockFile
GetVolumeInformationW
GlobalFlags
GetSystemDefaultUILanguage
GetLocaleInfoW
GetCurrentDirectoryW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
CompareStringW
GlobalFindAtomW
LoadLibraryA
GetSystemDirectoryW
EncodePointer
MulDiv
GlobalSize
GlobalUnlock
GlobalAddAtomW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GlobalDeleteAtom
GlobalLock
LoadLibraryExW
GetModuleHandleA
OutputDebugStringA
GetProcessHeap
SizeofResource
LockResource
GetFileTime
ResumeThread
SetThreadPriority
GetTimeZoneInformation
WaitForMultipleObjects
OpenMutexW
ReleaseMutex
CreateMutexW
GetDateFormatW
SystemTimeToFileTime
GetTimeFormatW
GetLocalTime
FileTimeToSystemTime
GetFileSizeEx
FreeLibrary
LoadLibraryW
InitializeCriticalSection
GetCurrentThreadId
SetFilePointer
VerifyVersionInfoW
VerSetConditionMask
GetCurrentThread
GetVersionExW
GetUserDefaultUILanguage
GetUserDefaultLangID
FormatMessageW
lstrcmpiW
QueryFullProcessImageNameW
CreateProcessW
GetCurrentProcessId
GetProcAddress
ResetEvent
FindResourceExW
CreateThread
GlobalFree
Process32FirstW
GlobalAlloc
SetEvent
Process32NextW
ProcessIdToSessionId
CreateEventW
CreateToolhelp32Snapshot
OpenProcess
DuplicateHandle
WaitForSingleObject
TerminateProcess
GetCurrentProcess
SetLastError
GetFileInformationByHandle
FlushFileBuffers
lstrcmpW
CopyFileW
GetFileSize
MoveFileExW
LocalFree
DeleteFileW
SetFileAttributesW
GetFileAttributesW
LocalAlloc
FindClose
GetTempPathW
RemoveDirectoryW
FindNextFileW
GetFullPathNameW
FindFirstFileW
ReadFile
IsDBCSLeadByteEx
WideCharToMultiByte
MultiByteToWideChar
Sleep
CloseHandle
CreateFileW
WriteFile
GetModuleHandleW
FindResourceW
LoadResource
MonitorFromPoint
UnionRect
EnableScrollBar
UpdateLayeredWindow
SetMenuDefaultItem
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
SetWindowRgn
GetSystemMenu
IsZoomed
TrackMouseEvent
GetAsyncKeyState
InflateRect
GetMenuItemInfoW
DestroyMenu
EnumDisplayMonitors
SetLayeredWindowAttributes
MessageBeep
GetNextDlgGroupItem
IsRectEmpty
IntersectRect
SetRect
InvalidateRgn
CopyAcceleratorTableW
CharNextW
CharUpperW
GetSysColorBrush
LoadCursorW
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
KillTimer
SetTimer
RealChildWindowFromPoint
DeleteMenu
SystemParametersInfoW
CopyImage
LoadMenuW
OffsetRect
SetRectEmpty
SendDlgItemMessageA
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
ClientToScreen
IsDialogMessageW
RegisterClassW
GetClassInfoW
CharUpperBuffW
SetWindowTextW
BringWindowToTop
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
UnhookWindowsHookEx
GetTopWindow
GetClassLongW
SetWindowLongW
PtInRect
EqualRect
CopyRect
ModifyMenuW
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
CopyIcon
FrameRect
GetIconInfo
HideCaret
InvertRect
GetKeyNameTextW
CallWindowProcW
GetDoubleClickTime
IsCharLowerW
MapVirtualKeyExW
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
CreateMenu
DestroyCursor
LoadAcceleratorsW
ScrollWindow
RedrawWindow
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
RegisterClipboardFormatW
DrawEdge
DrawFrameControl
DrawFocusRect
DrawIconEx
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
MapVirtualKeyW
CreateAcceleratorTableW
DestroyAcceleratorTable
SetCursorPos
SetParent
LockWindowUpdate
SetClassLongW
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
GetClassInfoExW
CreateWindowExW
IsMenu
IsChild
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgCtrlID
SetFocus
GetCapture
GetMenu
GetComboBoxInfo
SetMenu
GetWindowRgn
TrackPopupMenu
UnregisterClassW
EnableWindow
IsIconic
LoadImageW
GetClientRect
DestroyIcon
DrawIcon
GetForegroundWindow
GetSystemMetrics
SendMessageW
PostThreadMessageW
GetWindowThreadProcessId
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
IsWindowVisible
GetActiveWindow
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExW
CallNextHookEx
PostMessageW
PostQuitMessage
ShowOwnedPopups
SetCursor
IsWindowEnabled
MessageBoxW
GetWindowLongW
GetParent
GetLastActivePopup
IsWindow
DestroyWindow
CreateDialogIndirectParamW
EndDialog
GetDlgItem
GetNextDlgTabItem
SetActiveWindow
GetDesktopWindow
SetWindowPos
SetWindowContextHelpId
GetWindow
MapDialogRect
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
GetSysColor
InsertMenuW
AppendMenuW
RemoveMenu
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
DrawStateW
UpdateWindow
InvalidateRect
FillRect
GetClassNameW
RegisterWindowMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
EndPaint
BeginPaint
SetForegroundWindow
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
GetTextExtentPoint32W
GetTextMetricsW
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateRoundRectRgn
CreateDIBSection
CombineRgn
GetMapMode
PatBlt
SetRectRgn
SetPolyFillMode
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
EnumFontFamiliesExW
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
OffsetRgn
Rectangle
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
LPtoDP
RoundRect
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
GetViewportOrgEx
SetPixelV
GetTextFaceW
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
DeleteDC
CopyMetaFileW
CreateDCW
GetDeviceCaps
CreateBitmap
CreateSolidBrush
DeleteObject
GetStockObject
GetObjectW
SetBkColor
SetTextColor
BitBlt
CreateCompatibleDC
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
DPtoLP
GetPixel
SaveDC
TransparentBlt
AlphaBlend
OpenPrinterW
ClosePrinter
DocumentPropertiesW
LookupPrivilegeValueW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
LookupAccountSidW
AdjustTokenPrivileges
RevertToSelf
AllocateAndInitializeSid
ConvertStringSidToSidW
ImpersonateLoggedOnUser
OpenProcessToken
FreeSid
ConvertSidToStringSidW
GetUserNameW
GetTokenInformation
EqualSid
SHBrowseForFolderW
SHAppBarMessage
SHGetDesktopFolder
SHGetSpecialFolderLocation
DragFinish
DragQueryFileW
SHGetFileInfoW
ord51
ord680
SHGetFolderLocation
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHGetKnownFolderPath
SHGetFolderPathW
SHCreateDirectoryExW
ShellExecuteW
InitCommonControlsEx
PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathRenameExtensionW
PathIsFileSpecW
PathAddExtensionW
PathRemoveExtensionW
PathIsDirectoryW
PathIsSystemFolderW
PathAppendW
PathIsRootW
PathFileExistsW
PathFindFileNameW
PathRemoveFileSpecW
StrFormatKBSizeW
IsAppThemed
GetThemePartSize
GetWindowTheme
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeParentBackground
DrawThemeText
IsAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
CoRegisterMessageFilter
CoRevokeClassObject
CreateStreamOnHGlobal
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleUninitialize
OleGetClipboard
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc
CLSIDFromString
OleRun
CLSIDFromProgID
StringFromGUID2
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoCreateGuid
CoInitializeEx
CoTaskMemFree
CoCreateInstance
CoUninitialize
OleTranslateAccelerator
CoInitialize
OleInitialize
VariantInit
VariantCopy
SysAllocStringLen
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
LoadTypeLi
SysFreeString
VarBstrFromDate
SysAllocString
SysStringLen
VariantClear
VariantChangeType
GetErrorInfo
OleUIBusyW
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdiplusShutdown
GdipAlloc
GdipFree
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdipCloneImage
GdipDisposeImage
CertGetNameStringW
CertGetIssuerCertificateFromStore
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
PlaySoundW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ