Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
69d106d1b9b9be21d6a6a6d1fc5205ddef6c3b69cd4fef5bb8e4163f70f64ba6.exe
Resource
win7-20240708-en
Target
69d106d1b9b9be21d6a6a6d1fc5205ddef6c3b69cd4fef5bb8e4163f70f64ba6
Size
538KB
MD5
9af68ba9f96c97b1756ee9a15cb15b75
SHA1
0594948bd97397abec12c1668f428d3e5993737d
SHA256
69d106d1b9b9be21d6a6a6d1fc5205ddef6c3b69cd4fef5bb8e4163f70f64ba6
SHA512
992041e326924c9acc079d5698bee34f3a0648e6a06b604257042991ad4e0171898da9974e29973465276b8284d7ed860793f6cb381273ce5fba56c4f783bc3f
SSDEEP
12288:FA6wUkPYZheQ8cdpwYrtvkj9tkUyGHjuaM8JHO3KkX000013T+BjvrEH7r:FA6wUkzQ8spwY5vIjNyGHjuduOTX000e
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\updater7.0\build-rel\build\build\updaterstartuputility\vc10\outdir-Release\updaterstartuputility.pdb
CoInitializeEx
CoTaskMemFree
CoInitialize
CoInitializeSecurity
CoUninitialize
CoCreateInstance
FreeSid
OpenProcessToken
GetTokenInformation
EqualSid
AllocateAndInitializeSid
CheckTokenMembership
SetNamedSecurityInfoW
NetApiBufferFree
NetWkstaUserGetInfo
SetEndOfFile
GetProcessHeap
CompareStringW
Sleep
SetStdHandle
WriteConsoleW
GetCurrentProcess
CloseHandle
InterlockedDecrement
WaitForSingleObject
TerminateThread
GetLocalTime
GetExitCodeThread
CreateThread
MultiByteToWideChar
LocalFree
GetCommandLineW
SetDllDirectoryW
CreateProcessW
GetLastError
SetEnvironmentVariableA
GetProcAddress
LoadLibraryW
GetVersionExW
FreeEnvironmentStringsW
GetEnvironmentStringsW
DeleteFileW
CreateFileW
MoveFileW
FileTimeToLocalFileTime
GetFileTime
CreateDirectoryW
WideCharToMultiByte
GetACP
ReleaseMutex
InterlockedIncrement
CreateMutexA
GetLongPathNameW
GetTempPathW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetFilePointer
WriteFile
GetFileSizeEx
GetCurrentThreadId
GetDateFormatW
GetTimeFormatW
CreateMutexW
OpenMutexW
InterlockedCompareExchange
InterlockedExchange
GetStringTypeW
EncodePointer
DecodePointer
IsValidLocale
HeapSetInformation
GetStartupInfoW
HeapFree
GetSystemTimeAsFileTime
HeapReAlloc
HeapAlloc
RtlUnwind
RaiseException
GetTimeZoneInformation
GetCPInfo
LCMapStringW
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
GetStdHandle
GetModuleFileNameW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetOEMCP
IsValidCodePage
GetLocaleInfoW
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
SHCreateDirectoryExW
SHGetPathFromIDListW
SHGetMalloc
CommandLineToArgvW
SHGetSpecialFolderLocation
SysFreeString
VariantInit
VariantClear
SysAllocString
PathRenameExtensionW
SHGetValueW
PathFileExistsW
PathIsDirectoryW
PathRemoveFileSpecW
PathIsFileSpecW
PathRemoveExtensionW
PathFindFileNameW
PathAddExtensionW
PathAppendW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ