Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
4cb2915e366b9c689c31175cc528b4f0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4cb2915e366b9c689c31175cc528b4f0N.exe
Resource
win10v2004-20240709-en
Target
4cb2915e366b9c689c31175cc528b4f0N.exe
Size
2.4MB
MD5
4cb2915e366b9c689c31175cc528b4f0
SHA1
3a6d04f482ec0896d396366ce34b2a4c2527c815
SHA256
99561d9a3ec8635fccada2b3f9a99b8b81808f4ff432b97e75d1e38052d81da7
SHA512
6119b2150a5595ea570c529894308ab2b156e0dbcb1732d62e427a72e2054d4078fd5d8224c152e64dc02ccc0f6949b9c47756442df4a7bc6d18fcf3b8bbb18f
SSDEEP
49152:JGk2jryCGylC5piXkqOiaxR9vpzCUPUNBy4s0Yy6gq8v3Zu3dFXt9:Jtz8Xkkmp
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
E:\xml-data\build-dir\CODRU-CL23M-SOURCES\bin\x64\Release\seccenter.pdb
ord266
ord1033
ord265
ord286
ord2350
ord2346
ord267
ord8409
ord2370
ord8167
ord8084
ord12544
ord8023
ord5183
ord2439
ord12222
ord12223
ord14210
ord7650
ord14216
ord9089
ord4011
ord3949
ord12625
ord7668
ord1489
ord1670
ord2011
ord11664
ord11665
ord14088
ord12212
ord7719
ord14288
ord6121
ord14290
ord6123
ord14289
ord6122
ord3731
ord5706
ord11921
ord11929
ord7920
ord10124
ord11901
ord5080
ord5363
ord5552
ord9041
ord5339
ord5555
ord5083
ord5229
ord5062
ord5915
ord7460
ord7461
ord7450
ord5227
ord7922
ord9941
ord8900
ord6614
ord11719
ord6505
ord4445
ord11933
ord7716
ord11709
ord1450
ord983
ord1059
ord365
ord12240
ord4946
ord11718
ord8058
ord12600
ord4511
ord1667
ord4947
ord1034
ord316
ord4658
ord2212
ord2260
ord4181
ord1503
ord2193
ord12443
ord4656
ord296
ord5709
ord285
ord2921
ord2344
ord1491
DeviceIoControl
AreFileApisANSI
SetFileInformationByHandle
SetFileAttributesW
SetEndOfFile
GetFinalPathNameByHandleW
GetFileInformationByHandle
GetFileAttributesExW
QueryDosDeviceW
GetLongPathNameW
VirtualFree
VirtualAlloc
FlushInstructionCache
SetThreadContext
GetThreadContext
ResumeThread
SuspendThread
VirtualQuery
VirtualProtect
GetSystemInfo
K32GetMappedFileNameW
FileTimeToSystemTime
SetSearchPathMode
FormatMessageW
LoadLibraryA
LoadLibraryExA
GetModuleFileNameA
GetWindowsDirectoryW
GetLocalTime
GetCurrentThread
GetProcessTimes
DebugBreak
SetFilePointer
GetFileSizeEx
DeleteFileW
Sleep
CloseHandle
WaitForSingleObject
GetCurrentThreadId
FreeLibrary
CreateProcessW
CreateThread
LoadLibraryW
GetProcAddress
GetTickCount
GetModuleHandleW
GetCurrentProcess
GetEnvironmentVariableW
GetVersionExW
GetLastError
ExpandEnvironmentStringsW
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
SetEvent
GetModuleHandleExW
GetModuleFileNameW
VerSetConditionMask
VerifyVersionInfoW
OpenProcess
LocalFree
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
ProcessIdToSessionId
WaitForMultipleObjects
SetCurrentDirectoryW
WTSGetActiveConsoleSessionId
GetCurrentProcessId
GetFileAttributesW
FormatMessageA
CloseThreadpoolTimer
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryExW
GetTickCount64
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateSemaphoreW
ReleaseSemaphore
OpenEventW
TlsSetValue
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentDirectoryW
CreateDirectoryW
GetCommandLineA
CreateFileW
OutputDebugStringW
LocalAlloc
GetCommandLineW
GetSystemDirectoryW
SetEnvironmentVariableW
WriteFile
UnlockFile
LockFile
TlsFree
TlsAlloc
InitializeCriticalSectionEx
RaiseException
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
OutputDebugStringA
SetLastError
InitializeCriticalSectionAndSpinCount
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
ResetEvent
WaitForSingleObjectEx
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
CreateEventW
GetFileInformationByHandleEx
TlsGetValue
AllowSetForegroundWindow
DispatchMessageW
GetForegroundWindow
IsWindow
SendMessageW
GetMessageW
DestroyWindow
GetDC
GetPropW
SetActiveWindow
EnumChildWindows
SetWindowLongPtrW
GetShellWindow
GetWindowLongPtrW
RegisterClassExW
GetActiveWindow
OpenClipboard
IsDialogMessageW
DefDlgProcW
CloseClipboard
EmptyClipboard
TranslateMessage
ChangeWindowMessageFilterEx
SetParent
SetClipboardData
GetDesktopWindow
CreateDialogIndirectParamW
RegisterWindowMessageW
ReleaseDC
EnableWindow
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExW
FindWindowW
CopyRect
MonitorFromRect
IsWindowEnabled
KillTimer
EnumWindows
EnumThreadWindows
LoadIconW
SetTimer
MonitorFromPoint
GetCursorPos
GetWindowLongW
SetClassLongPtrW
GetClientRect
SetWindowTextW
PostMessageW
SetWindowRgn
SetWindowPos
GetMonitorInfoW
SystemParametersInfoW
BringWindowToTop
AttachThreadInput
GetWindowThreadProcessId
SetForegroundWindow
ShowWindow
IsIconic
MoveWindow
OffsetRect
MapWindowPoints
GetAncestor
GetWindowRect
GetDeviceCaps
DeleteObject
CreateRoundRectRgn
LookupPrivilegeValueW
RegOpenKeyW
ConvertSidToStringSidA
CheckTokenMembership
LookupPrivilegeNameW
CreateRestrictedToken
AllocateAndInitializeSid
FreeSid
RegQueryValueExA
RegOpenKeyExA
InitiateShutdownW
RegSetKeyValueW
LookupAccountSidW
GetAclInformation
GetSidSubAuthorityCount
GetSidSubAuthority
GetSidIdentifierAuthority
GetSecurityDescriptorDacl
GetFileSecurityW
GetAce
RegGetValueW
GetNamedSecurityInfoW
CreateProcessAsUserW
GetLengthSid
ConvertStringSidToSidW
SetTokenInformation
ConvertSidToStringSidW
GetTokenInformation
AdjustTokenPrivileges
OpenProcessToken
RegSetValueExW
RegCreateKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
CoInitializeEx
CoUninitialize
CoCreateInstance
PropVariantClear
OleInitialize
OleUninitialize
CoTaskMemAlloc
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z
?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Xruntime_error@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
_Cnd_timedwait
_Mtx_current_owns
_Cnd_broadcast
_Cnd_destroy_in_situ
_Cnd_init_in_situ
_Query_perf_counter
_Query_perf_frequency
?always_noconv@codecvt_base@std@@QEBA_NXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
_Xtime_get_ticks
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
??Bid@locale@std@@QEAA_KXZ
?widen@?$ctype@_W@std@@QEBA_WD@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?toupper@?$ctype@_W@std@@QEBA_W_W@Z
?_Getname@_Locinfo@std@@QEBAPEBDXZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@HPEBD@Z
_Cnd_do_broadcast_at_thread_exit
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?id@?$ctype@D@std@@2V0locale@2@A
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
_Cnd_wait
_Cnd_signal
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??0_Locinfo@std@@QEAA@PEBD@Z
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?id@?$numpunct@D@std@@2V0locale@2@A
?tolower@?$ctype@D@std@@QEBADD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
?_Xbad_function_call@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Xbad_alloc@std@@YAXXZ
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_id
_Thrd_join
?id@?$ctype@_W@std@@2V0locale@2@A
?uncaught_exception@std@@YA_NXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
__CxxFrameHandler4
__std_exception_copy
__std_terminate
__RTDynamicCast
wcschr
wcsrchr
_purecall
__C_specific_handler
strstr
wcsstr
memset
__current_exception
__current_exception_context
memmove
strchr
_CxxThrowException
memcmp
memcpy
memchr
__std_exception_destroy
_invalid_parameter_noinfo_noreturn
_errno
abort
_initterm
_invalid_parameter_noinfo
_get_wide_winmain_command_line
_initterm_e
_initialize_wide_environment
_exit
_cexit
_configure_wide_argv
_c_exit
_resetstkoflw
_set_app_type
_seh_filter_exe
signal
_crt_atexit
_register_onexit_function
terminate
_initialize_onexit_table
_beginthreadex
_register_thread_local_exe_atexit_callback
exit
_set_fmode
__stdio_common_vfwprintf_s
fread
__stdio_common_vsprintf
fgets
fgetc
fputc
ungetc
fflush
setvbuf
fsetpos
_fseeki64
fgetpos
fwrite
fclose
_get_stream_buffer_pointers
__stdio_common_vfprintf_s
__stdio_common_vsprintf_s
__p__commode
__stdio_common_vswscanf
__stdio_common_vsnprintf_s
__stdio_common_vswprintf
__stdio_common_vswprintf_s
__stdio_common_vsnwprintf_s
_wfsopen
wcsncpy_s
iswspace
_wcsicmp_l
wmemcpy_s
strcpy_s
strncmp
wcscpy_s
_wcsicmp
wcsnlen
wcscspn
wcsspn
wcscat_s
_wcsdup
towlower
_strnicmp
strcmp
_time64
_gmtime64_s
malloc
_set_new_mode
free
realloc
calloc
atoll
strtoull
strtoll
_itoa_s
_wtoi
atol
strtod
wcstoull
_configthreadlocale
_create_locale
localeconv
_free_locale
___lc_codepage_func
__setusermatherr
_ldclass
_finite
_fdclass
_dsign
_fdsign
_ldsign
ceilf
_dclass
modf
_lock_file
_unlock_file
_wdupenv_s
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ