Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-08-05_cd0bf8e31a612ac11375c62378cef654_avoslocker.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2024-08-05_cd0bf8e31a612ac11375c62378cef654_avoslocker.exe
Resource
win10v2004-20240802-en
Target
2024-08-05_cd0bf8e31a612ac11375c62378cef654_avoslocker
Size
3.0MB
MD5
cd0bf8e31a612ac11375c62378cef654
SHA1
8df843fe83310bcbc49cc9202960720cc8554840
SHA256
89da58c997f3f71215a970550bc0735307d32c08d6fba6f509644027897fd45d
SHA512
b304911774e3bf08187ff6f67ef72a4e7e7332693def9dd92b382686f1433bed3fdf81f815d55ef867643d885c2b5729cdc5873de8f37b2adfb89b7ddc0049ae
SSDEEP
49152:TmGq5doD1Gecu+qJ3zPtgLuDDNzzybjeTLkffcyF+0fe/SPer7fKD:CpdC1Gm7JDPKLutzOHeTLkHcyo0fe/Sp
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
c:\jenkinswork\workspace\CC_CI_Compile_ArcClientQt_PQA\src\Bin\Pdb\ArcUpdate.pdb
GetSonicUI
ord211
ord301
ord200
ord30
ord79
ord60
ord45
ord50
ord41
ord22
ord26
ord27
ord32
ord33
ord46
ord35
ord217
ord143
LCMapStringEx
GetCPInfo
SleepEx
GetSystemDirectoryA
MoveFileExA
GetEnvironmentVariableA
GetStdHandle
GetFileType
PeekNamedPipe
CreateFileA
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
GetCommandLineW
GetCommandLineA
GetFileInformationByHandle
GetDriveTypeW
RtlUnwind
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
GetStartupInfoW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
GetUserDefaultLCID
GetTempFileNameW
SearchPathW
GetProfileIntW
GetTempPathW
VerifyVersionInfoW
VerSetConditionMask
FindResourceExW
lstrcpyW
GetWindowsDirectoryW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileAttributesExW
FileTimeToLocalFileTime
SetErrorMode
VirtualProtect
FileTimeToSystemTime
GlobalGetAtomNameW
GetThreadLocale
lstrcmpiW
DuplicateHandle
UnlockFile
LockFile
GetVolumeInformationW
GetFullPathNameW
FlushFileBuffers
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
QueryPerformanceFrequency
GetLocaleInfoW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CompareStringW
GlobalFindAtomW
LoadLibraryA
GetSystemDirectoryW
EncodePointer
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalSize
GlobalFree
GlobalUnlock
GlobalAddAtomW
lstrcmpW
lstrcmpA
GlobalDeleteAtom
GlobalLock
GlobalAlloc
LoadLibraryExW
GetModuleHandleA
GetVersionExW
GetCurrentThread
SetLastError
ResumeThread
SetThreadPriority
SetEnvironmentVariableW
MapViewOfFile
CreateFileMappingW
GetModuleHandleW
FindResourceW
LoadResource
LockResource
FindClose
FindNextFileW
FindFirstFileW
SizeofResource
GetCurrentProcessId
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
OpenProcess
K32GetProcessImageFileNameW
GetProcessId
TerminateProcess
GetCurrentProcess
QueryDosDeviceW
ResetEvent
ReleaseMutex
CreateMutexW
WaitForMultipleObjects
SystemTimeToFileTime
GetCurrentDirectoryW
LocalFileTimeToFileTime
SetFileTime
IsDebuggerPresent
CreateThread
TerminateThread
TryEnterCriticalSection
GetProcAddress
GetTickCount
GetDiskFreeSpaceExW
GetFileSizeEx
FreeLibrary
MoveFileExW
LoadLibraryW
DeleteFileW
SetEvent
Sleep
CreateEventW
SetFileAttributesW
OpenEventW
GetFileAttributesW
WaitForSingleObject
GetProcessHeap
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionAndSpinCount
HeapFree
GetPrivateProfileStringW
GetPrivateProfileIntW
WritePrivateProfileStringW
CreateDirectoryW
WideCharToMultiByte
DeleteCriticalSection
GetFileSize
CloseHandle
GetTickCount64
MultiByteToWideChar
GetCurrentThreadId
CreateFileW
SetEndOfFile
SetFilePointer
InitializeCriticalSection
LeaveCriticalSection
GetModuleFileNameW
OutputDebugStringA
WriteFile
EnterCriticalSection
ReadFile
GetLocalTime
OutputDebugStringW
SetStdHandle
ExitProcess
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
WriteConsoleW
FreeEnvironmentStringsW
GetStringTypeW
GetNextDlgGroupItem
IsRectEmpty
IntersectRect
SetRect
InvalidateRgn
CopyAcceleratorTableW
CharNextW
OffsetRect
SetRectEmpty
SendDlgItemMessageA
CharUpperW
DestroyIcon
GetSysColorBrush
GetSystemMetrics
LoadCursorW
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
RealChildWindowFromPoint
DeleteMenu
SystemParametersInfoW
CopyImage
FillRect
ClientToScreen
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
UnhookWindowsHookEx
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
EndPaint
BeginPaint
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
PostThreadMessageW
SetFocus
GetDlgCtrlID
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DestroyMenu
GetMenuItemInfoW
InflateRect
GetAsyncKeyState
UnregisterClassW
PeekMessageW
MsgWaitForMultipleObjects
TranslateMessage
DefWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
RegisterClipboardFormatW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
MapDialogRect
GetWindow
SetWindowContextHelpId
GetDesktopWindow
SetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
GetLastActivePopup
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
LoadMenuW
CreatePopupMenu
InsertMenuItemW
LoadImageW
UnpackDDElParam
ReuseDDElParam
GetMenuDefaultItem
TrackMouseEvent
GetKeyNameTextW
MapVirtualKeyW
GetParent
GetWindowLongW
UnionRect
GetSystemMenu
SetParent
DrawFocusRect
DrawIconEx
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
DispatchMessageW
wsprintfW
IsWindow
SendMessageW
EnableWindow
InvalidateRect
SetForegroundWindow
PostQuitMessage
KillTimer
GetClientRect
LoadIconW
GetForegroundWindow
AttachThreadInput
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
FrameRect
SetClipboardData
EmptyClipboard
SetTimer
ShowWindow
SetWindowPos
PostMessageW
GetWindowThreadProcessId
GetMessageW
IsWindowVisible
GetActiveWindow
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExW
CallNextHookEx
ShowOwnedPopups
SetCursor
IsWindowEnabled
MessageBoxW
DrawStateW
SetClassLongW
SetWindowRgn
DrawEdge
DrawFrameControl
IsZoomed
SetCursorPos
CopyIcon
MessageBeep
DestroyCursor
GetWindowRgn
CreateMenu
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffW
ModifyMenuW
GetDoubleClickTime
SetMenuDefaultItem
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
GetComboBoxInfo
MonitorFromPoint
UpdateLayeredWindow
LockWindowUpdate
DrawIcon
GetCapture
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
GetTextExtentPoint32W
GetTextMetricsW
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
CombineRgn
GetMapMode
PatBlt
SetRectRgn
DPtoLP
CreateCompatibleBitmap
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
SetTextAlign
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
GetObjectW
SetTextColor
SetBkColor
CreateBitmap
CreateDCW
CopyMetaFileW
GetPaletteEntries
GetDeviceCaps
AddFontResourceExW
TransparentBlt
AlphaBlend
DocumentPropertiesW
OpenPrinterW
ClosePrinter
CryptCreateHash
RegOpenKeyExW
RegCloseKey
GetTokenInformation
OpenProcessToken
LookupPrivilegeNameW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegEnumValueW
RegEnumKeyExW
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptDestroyHash
CryptHashData
RegQueryValueExW
CryptGenRandom
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteW
ShellExecuteExW
SHGetFileInfoW
DragQueryFileW
DragFinish
SHAppBarMessage
SHBrowseForFolderW
SHGetDesktopFolder
InitCommonControlsEx
PathFileExistsW
PathIsDirectoryW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
StrFormatKBSizeW
DrawThemeBackground
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemeColor
GetCurrentThemeName
GetThemePartSize
GetWindowTheme
IsAppThemed
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
OleDuplicateData
ReleaseStgMedium
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoDisconnectObject
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoCreateGuid
CoUninitialize
CoCreateInstance
CoTaskMemFree
RegisterDragDrop
RevokeDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoGetClassObject
CoInitialize
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantChangeType
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
LoadTypeLi
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
SysAllocString
OleUIBusyW
InternetGetConnectedState
socket
setsockopt
WSAIoctl
WSAStartup
WSACleanup
select
accept
htonl
listen
getaddrinfo
recvfrom
sendto
ioctlsocket
gethostname
WSASetLastError
__WSAFDIsSet
send
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAResetEvent
WSAWaitForMultipleEvents
closesocket
WSAGetLastError
recv
bind
connect
getpeername
getsockname
getsockopt
htons
ntohs
freeaddrinfo
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptStringToBinaryA
PFXImportCertStore
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertFindExtension
CertGetNameStringA
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
IsNetworkAlive
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipCreateBitmapFromScan0
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
PlaySoundW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ