Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
10-08-2024 15:54
240810-tb657awfjr 1Static task
static1
Target
ashUpd.exe
Size
629KB
MD5
e4f46de423cde970b54e2c65cd5856bc
SHA1
1db3dca0f881663239dbd9b2eb43ea8797a6ff9b
SHA256
0acca41d3efaaad6b37fc96ef8a6bd5a6ea1b6f375b0a562e849181c62469241
SHA512
548d5c56a7b91801690c6379a232c7fd1c0f0ef0ba7b5355d13045b666bd82bd73a13e71e1a6b18945d72f0208b02e3d5819ba72aeb403238fe1622bdb7f06d8
SSDEEP
12288:1dtVMWe4h6/nCcF8kph0lhSMXliFs9gY:1tMd4o/nBF86h0lhSMXlSs9gY
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
C:\BUILD\work\e0dd96435fde7cb0\BUILDS\Release\x64\ashUpd.pdb
tskFreeLibrary
tskInitLibrary
RpcBindingFromStringBindingW
RpcStringFreeW
RpcSsDestroyClientContext
NdrClientCall3
RpcStringBindingComposeW
?load_dll@dll_loader@asw@@YAPEAUHINSTANCE__@@PEB_W0@Z
?free_dll@dll_loader@asw@@YA_NPEAUHINSTANCE__@@@Z
SHGetFolderPathW
dep_secSetPrivilege
cmnosMiniInit
secPreventHookDllInjection
GetHardwareId
NtQueryKey
NtOpenKey
NtClose
RtlVirtualUnwind
NtDeleteKey
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryExW
SetDllDirectoryW
GetModuleFileNameW
Sleep
HeapAlloc
GetProcessHeap
HeapFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleExW
GetCurrentThreadId
CloseHandle
SetLastError
CompareFileTime
WideCharToMultiByte
FreeLibrary
GetFileAttributesExW
WaitForSingleObject
GetCurrentProcessId
TerminateProcess
GetSystemDirectoryW
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
CreateFileW
CompareStringW
GetCurrentProcess
WriteFile
ReadFile
GetModuleHandleW
CreateEventW
SetEvent
UnlockFileEx
LockFileEx
GetFileSizeEx
GetFileAttributesW
CreateDirectoryW
ExpandEnvironmentStringsW
GetDiskFreeSpaceExW
K32GetMappedFileNameW
GetWindowsDirectoryW
FindFirstVolumeW
QueryDosDeviceW
FindNextVolumeW
GetVolumePathNamesForVolumeNameW
FindVolumeClose
GetSystemTimeAsFileTime
GlobalMemoryStatusEx
GetSystemTimes
QueryPerformanceCounter
GetTickCount64
GetEnvironmentVariableW
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
InitOnceComplete
InitOnceBeginInitialize
GetProcAddress
LoadLibraryA
GetLastError
MultiByteToWideChar
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
RegisterClassExW
GetClassInfoExW
CryptGenRandom
RegDeleteTreeW
RegEnumKeyExW
CryptReleaseContext
CryptAcquireContextW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
InitiateSystemShutdownExW
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
_Thrd_sleep
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
_Mbrtowc
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?classic@locale@std@@SAAEBV12@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
?id@?$numpunct@D@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?_Xlength_error@std@@YAXPEBD@Z
_Mtx_destroy_in_situ
?__ExceptionPtrDestroy@@YAXPEAX@Z
_Mtx_lock
_Mtx_init_in_situ
_Mtx_unlock
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBADD@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??Bid@locale@std@@QEAA_KXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
?id@?$numpunct@_W@std@@2V0locale@2@A
_Xtime_get_ticks
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?_Xinvalid_argument@std@@YAXPEBD@Z
?fail@ios_base@std@@QEBA_NXZ
?write@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@PEB_W_J@Z
_Query_perf_counter
_Query_perf_frequency
?eof@ios_base@std@@QEBA_NXZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
__CxxFrameHandler4
memcpy
memmove
memset
__std_terminate
__RTDynamicCast
__current_exception
__current_exception_context
_CxxThrowException
__C_specific_handler
__std_exception_destroy
__std_exception_copy
_purecall
_set_se_translator
__std_type_info_name
_set_new_mode
malloc
free
calloc
_callnewh
_dsign
_fdsign
__setusermatherr
_dclass
_ldsign
_fdclass
_ldclass
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_errno
abort
_c_exit
_exit
_seh_filter_exe
_cexit
exit
_register_thread_local_exe_atexit_callback
_initterm
_initterm_e
_crt_atexit
__p___argc
__p___wargv
_get_initial_wide_environment
_set_app_type
_initialize_wide_environment
terminate
_configure_wide_argv
_register_onexit_function
wcscat_s
wcsncmp
_wcsnicmp
_wcsicmp
strcpy_s
__p__commode
_set_fmode
__acrt_iob_func
__stdio_common_vfwprintf
wcstoul
_wtoi
_wtoi64
wcstol
wcstoll
_time64
_configthreadlocale
asw_process_storage_allocate_connector
asw_process_storage_deallocate_connector
on_avast_dll_unload
onexit_register_connector_avast_2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ