Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
3457f305d5dd11b3eb454b31496f83775549ade225e32a0c901ac80cef177aa8.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3457f305d5dd11b3eb454b31496f83775549ade225e32a0c901ac80cef177aa8.dll
Resource
win10v2004-20240802-en
Target
3457f305d5dd11b3eb454b31496f83775549ade225e32a0c901ac80cef177aa8
Size
616KB
MD5
849e35d0b864aaf0e42c79a4ed3ae953
SHA1
92a1e235cd46fc2e056b5ad40c25735061b48995
SHA256
3457f305d5dd11b3eb454b31496f83775549ade225e32a0c901ac80cef177aa8
SHA512
b966db83d04f24885603a2d098ae1deff41005606903d15ed7390a57840f495bdf40d36d84dcbb36c1d71e3460ea1b83e861cbf015b1275757e57d5d030efcca
SSDEEP
12288:8ZfFUio7o9lltYpKS2JCi7Ls/WVxWfKrgAlQu:8Znyo902J77Ls/WVxzhqu
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
C:\Build\TeamAgent\_work\1\s\0\OCRT\TextRendering\WinFinal.x64\TextRendering.pdb
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
MulDiv
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
GetModuleHandleW
CloseHandle
InitializeCriticalSectionAndSpinCount
GetSysColor
??1CString@FObj@@QEAA@XZ
?EndStaticPart@FObj@@YAXXZ
?HasStaticPartError@FObj@@YA_NXZ
?BeginStaticPart@FObj@@YAXXZ
?UnregisterModule@FObj@@YAXPEAUHINSTANCE__@@@Z
?GetFineObjectsVersion@FObj@@YAHXZ
??0CUnicodeString@FObj@@QEAA@PEB_W@Z
??1CUnicodeString@FObj@@QEAA@XZ
?GenerateInternalError@FObj@@YA_NW4TInternalErrorType@1@PEB_W11HK@Z
??0rational@FObj@@QEAA@HH@Z
?DoCreateObject@FObj@@YA?AV?$CPtr@VIObject@FObj@@@1@AEBVCUnicodeString@1@P6APEAUHINSTANCE__@@XZ@Z
??0CRect@FObj@@QEAA@UtagPOINT@@UtagSIZE@@@Z
?UnionRect@CRect@FObj@@QEAA_NAEBUtagRECT@@0@Z
??0CPoint@FObj@@QEAA@XZ
??0CSize@FObj@@QEAA@XZ
??0CSize@FObj@@QEAA@HH@Z
?TopLeft@CRect@FObj@@QEBA?AVCPoint@2@XZ
??0CPoint@FObj@@QEAA@HH@Z
??GCPoint@FObj@@QEBA?AVCSize@1@UtagPOINT@@@Z
?doFree@FObj@@YAXPEAX@Z
?doAlloc@FObj@@YAPEAX_K@Z
??0CRect@FObj@@QEAA@HHHH@Z
?safeMake@rational@FObj@@CA?AV12@_J0@Z
??0CRect@FObj@@QEAA@XZ
?SetRectEmpty@CRect@FObj@@QEAAXXZ
?OffsetRect@CRect@FObj@@QEAAXHH@Z
??9CRect@FObj@@QEBA_NAEBUtagRECT@@@Z
?Warning@FObj@@YAXPEBVCException@1@@Z
?Delete@CException@FObj@@QEAAXXZ
?Value@FObj@@YA_NAEBVCUnicodeString@1@AEAU_GUID@@@Z
??0CRect@FObj@@QEAA@UtagPOINT@@0@Z
?NormalizeRect@CRect@FObj@@QEAAXXZ
??8CPoint@FObj@@QEBA_NUtagPOINT@@@Z
?TopRight@CRect@FObj@@QEBA?AVCPoint@2@XZ
?BottomLeft@CRect@FObj@@QEBA?AVCPoint@2@XZ
?BottomRight@CRect@FObj@@QEBA?AVCPoint@2@XZ
??0CUnicodeString@FObj@@QEAA@AEBV01@@Z
?IntersectRect@CRect@FObj@@QEAA_NAEBUtagRECT@@0@Z
?DeflateRect@CRect@FObj@@QEAAXHH@Z
?SetRect@CRect@FObj@@QEAAXUtagPOINT@@UtagSIZE@@@Z
?UnicodeStr@FObj@@YA?AVCUnicodeString@1@AEBU_GUID@@@Z
??0CUnicodeString@FObj@@QEAA@XZ
??4CUnicodeString@FObj@@QEAAAEAV01@AEBV01@@Z
?make@rational@FObj@@CA?AV12@_J0@Z
?Mid@CUnicodeString@FObj@@QEBA?AV12@HH@Z
?Find@CUnicodeString@FObj@@QEBAH_WH@Z
??0CUnicodeString@FObj@@QEAA@_WH@Z
?IncludesRect@CRect@FObj@@QEBA_NAEBUtagRECT@@@Z
?CenterPoint@CRect@FObj@@QEBA?AVCPoint@2@XZ
?ReplaceAll@CUnicodeString@FObj@@QEAAX_W0@Z
??GCUnicodeSet@FObj@@QEBA?AV01@AEBV01@@Z
??1CUnicodeSet@FObj@@QEAA@XZ
??UCUnicodeSet@FObj@@QEBA?AV01@AEBV01@@Z
?Has@CUnicodeSet@FObj@@QEBA_N_W@Z
?SetAt@CUnicodeString@FObj@@QEAAXH_W@Z
?Empty@CUnicodeString@FObj@@QEAAXXZ
??0rational@FObj@@QEAA@H@Z
?StrIns@CUnicodeString@FObj@@QEAAXAEBV12@H@Z
?FindOneOf@CUnicodeString@FObj@@QEBAHPEB_WH@Z
?StrDel@CUnicodeString@FObj@@QEAAXHH@Z
?Append@CUnicodeString@FObj@@QEAAX_W@Z
?RegisterCreateObjectFunction@FObj@@YAXP6A?AV?$CPtr@VIObject@FObj@@@1@XZAEBVtype_info@@AEBVCUnicodeString@1@@Z
?UnregisterCreateObjectFunction@FObj@@YAXAEBVtype_info@@@Z
?UpperPrimeNumber@FObj@@YAHH@Z
??0CString@FObj@@QEAA@PEBD@Z
??0CUnicodeSet@FObj@@QEAA@XZ
?Set@?$CPagedBitSet@$0BAAAA@$0EAA@VCUnicodeSetAllocator@FObj@@@FObj@@QEAAXHH@Z
??Xrational@FObj@@QEAAXV01@@Z
?Set@?$CPagedBitSet@$0BAAAA@$0EAA@VCUnicodeSetAllocator@FObj@@@FObj@@QEAAXH@Z
??0CMemoryManagerSwitcher@FObj@@QEAA@PEAVIMemoryManager@1@@Z
??1CMemoryManagerSwitcher@FObj@@QEAA@XZ
?RemoveResourceModule@FObj@@YAXPEAUHINSTANCE__@@@Z
?AddNotUnloadingResourceModule@FObj@@YAXPEAUHINSTANCE__@@@Z
?RegisterModule@FObj@@YAXPEAUHINSTANCE__@@P6AXXZ1@Z
?GetId@UnicodeScripts@@YAFPEBD@Z
?GetRange@UnicodeScripts@@YAXFAEA_W0@Z
?ConnectorPunctuationMarks@LettersSets@@3VCUnicodeSet@FObj@@B
?DashPunctuationMarks@LettersSets@@3VCUnicodeSet@FObj@@B
?ConvertToUpperCase@Unicode@@YA_W_WGW4TSymbolPosition@@@Z
?GetAlphabet@Languages@@YAAEBVCUnicodeSet@FObj@@G@Z
?GetId@Languages@@YAGPEBD@Z
?GetInterwordPunctuators@Languages@@YAAEBVCUnicodeSet@FObj@@G@Z
?IsValidId@Languages@@YA_NG@Z
__CxxFrameHandler4
__RTDynamicCast
memcpy
__std_type_info_destroy_list
memset
__current_exception_context
__current_exception
memmove
_purecall
__std_terminate
__C_specific_handler
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
terminate
_initterm
_initterm_e
__FineObjUsed
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ