Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
796824b4240d8ec77e739d4611a79ceda4a9b618143b2c6a3d0d12f20053e1f3.dll
Resource
win10v2004-20240802-en
Target
796824b4240d8ec77e739d4611a79ceda4a9b618143b2c6a3d0d12f20053e1f3
Size
4.5MB
MD5
f3e7e0f26f7b44239f025e014ff7f67f
SHA1
6ee448271f8716547147674ced00c9c89c8270dc
SHA256
796824b4240d8ec77e739d4611a79ceda4a9b618143b2c6a3d0d12f20053e1f3
SHA512
1a590c313b56bd04e8f945650a13600c9eddc4bc33f252fd7eb8a7cf42ae285de906c93265e962229326dd24279db658351e7fff6446536e374a74c12f33915d
SSDEEP
49152:uTs++X5VAMPLfOyim8XTyNow3xGzSzio9+aXtvIA2SuaAmNJgp33bk+fZJ8mj5n4:WuVAwiiQGiobtv2wNJgh3o+fZJ8mjc
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
wininet.pdb
_amsg_exit
_initterm
_except_handler4_common
_lock
_unlock
__dllonexit
_onexit
strchr
memmove
_XcptFilter
wcsncmp
bsearch
memcpy_s
_itoa_s
wcsstr
_atoi64
malloc
iscntrl
_wcsnicmp
wcschr
tolower
_vscwprintf
_itow_s
wcstok_s
qsort
_wtoi
memmove_s
_itow
_strnicmp
_strlwr
memcpy
memcmp
memchr
_ftol2
ispunct
isalnum
isspace
isalpha
isxdigit
isdigit
__isascii
strncmp
_vsnwprintf
iswdigit
strcspn
wcscpy_s
?terminate@@YAXXZ
_wcslwr_s
__CxxFrameHandler3
strpbrk
wcsrchr
_vsnprintf
_stricmp
_wcsicmp
_purecall
free
wcsncpy_s
memset
OpenFileMappingW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
VirtualFree
VirtualAlloc
GetSystemTime
GetSystemDirectoryW
GetTickCount
GetTickCount64
GetSystemTimeAsFileTime
CompareStringW
MultiByteToWideChar
WideCharToMultiByte
SetLastError
SetUnhandledExceptionFilter
GetLastError
UnhandledExceptionFilter
InitializeSRWLock
CreateEventExA
ResetEvent
InitializeCriticalSectionAndSpinCount
ReleaseSemaphore
CreateMutexExW
CreateSemaphoreExW
ReleaseMutex
OpenSemaphoreW
WaitForSingleObjectEx
TryAcquireSRWLockExclusive
CreateEventW
EnterCriticalSection
LeaveCriticalSection
ReleaseSRWLockExclusive
SetEvent
WaitForSingleObject
CreateEventA
InitializeCriticalSection
ReleaseSRWLockShared
WaitForMultipleObjectsEx
AcquireSRWLockExclusive
AcquireSRWLockShared
DeleteCriticalSection
InitializeCriticalSectionEx
GetModuleHandleW
GetModuleFileNameA
GetModuleFileNameW
LoadStringW
LoadStringA
GetModuleHandleExA
FreeLibrary
LoadLibraryExA
GetProcAddress
FreeLibraryAndExitThread
GetModuleHandleExW
LoadLibraryExW
HeapFree
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapDestroy
HeapSize
InitOnceExecuteOnce
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
InitializeConditionVariable
Sleep
CreateFileA
SetFileAttributesW
GetDriveTypeW
GetFileSizeEx
FindFirstFileW
GetVolumeInformationW
WriteFile
SetFilePointer
CreateFileW
FindNextFileW
GetFileSize
GetVolumePathNameW
GetDiskFreeSpaceExW
RemoveDirectoryW
GetLongPathNameW
FindFirstFileExW
GetShortPathNameW
GetFileAttributesW
CompareFileTime
GetFileAttributesExW
GetDiskFreeSpaceExA
SetFileInformationByHandle
CreateDirectoryW
GetFileTime
SetEndOfFile
ReadFile
FindClose
DeleteFileW
SetFilePointerEx
EventActivityIdControl
EventWrite
EventSetInformation
EventUnregister
EventRegister
EventWriteTransfer
CloseHandle
DuplicateHandle
FileTimeToSystemTime
SystemTimeToFileTime
TraceMessageVa
QueryPerformanceFrequency
QueryPerformanceCounter
RegQueryValueExW
RegGetValueA
RegGetValueW
RegDeleteValueW
RegOpenCurrentUser
RegCloseKey
RegOpenKeyExW
RegNotifyChangeKeyValue
RegDeleteTreeW
RegCreateKeyExW
RegQueryValueExA
RegSetValueExA
RegDeleteTreeA
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExA
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
GlobalFree
LocalAlloc
LocalFree
GlobalAlloc
IsDBCSLeadByte
FormatMessageA
IsValidCodePage
GetCPInfoExW
FormatMessageW
IdnToUnicode
IdnToAscii
GetLocaleInfoW
GetCPInfo
IsDBCSLeadByteEx
GetCurrentThread
OpenThreadToken
OpenProcessToken
GetCurrentProcess
GetCurrentProcessId
CreateThread
TlsFree
TlsGetValue
TlsSetValue
TlsAlloc
SwitchToThread
ProcessIdToSessionId
GetCurrentThreadId
TerminateProcess
GetTimeFormatA
GetDateFormatA
CharLowerW
CloseThreadpoolTimer
TrySubmitThreadpoolCallback
WaitForThreadpoolWaitCallbacks
CallbackMayRunLong
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolWait
FreeLibraryWhenCallbackReturns
CreateThreadpoolWait
WaitForThreadpoolWorkCallbacks
SubmitThreadpoolWork
SetThreadpoolWait
CloseThreadpoolWork
CreateThreadpoolWork
StartThreadpoolIo
CloseThreadpoolIo
WaitForThreadpoolTimerCallbacks
CancelThreadpoolIo
CreateThreadpoolIo
IsWow64Process
GetSystemTimePreciseAsFileTime
GetNativeSystemInfo
GetProductInfo
OutputDebugStringW
DebugBreak
IsDebuggerPresent
GetOverlappedResult
GetQueuedCompletionStatus
PostQueuedCompletionStatus
DeviceIoControl
CreateIoCompletionPort
MoveFileExW
CreateHardLinkW
QueryUnbiasedInterruptTime
InterlockedPushEntrySList
InterlockedFlushSList
InitializeSListHead
GetVolumeNameForVolumeMountPointW
CopyFileW
RtlCaptureContext
RaiseFailFastException
LoadLibraryW
GetAppContainerNamedObjectPath
ResolveDelayLoadedAPI
DelayLoadFailureHook
SetFileCompletionNotificationModes
GetComputerNameW
MoveFileW
WTSGetActiveConsoleSessionId
QueueUserWorkItem
PathAddBackslashA
CharUpperA
CharNextA
CharLowerA
StrStrA
StrToIntA
StrCmpNA
StrChrA
StrCmpICA
StrChrNW
StrCmpNICA
StrCmpNICW
StrChrW
StrStrIA
StrRChrW
StrCmpNIW
StrCmpNIA
StrStrIW
StrRChrA
CompareStringA
lstrcmpiA
lstrcmpW
lstrcmpA
GlobalLock
GlobalUnlock
GlobalReAlloc
PathCreateFromUrlW
UrlCanonicalizeA
UrlCombineA
UrlCombineW
UrlCanonicalizeW
UrlUnescapeA
InternetTimeFromSystemTimeW
InternetTimeToSystemTimeA
InternetTimeToSystemTimeW
InternetTimeFromSystemTimeA
NtQueryInformationToken
RtlQueryPackageClaims
RtlGetDeviceFamilyInfoEnum
RtlIpv6AddressToStringExW
RtlIpv4AddressToStringExW
RtlFreeSid
RtlGetAppContainerParent
RtlGetAppContainerSidType
NtQueryLicenseValue
RtlInitUnicodeString
RtlGetPersistedStateLocation
RtlGetLastNtStatus
RtlReportExceptionEx
NtSetInformationFile
NtSetInformationObject
RtlIpv6AddressToStringW
RtlIpv4AddressToStringW
RtlIpv6AddressToStringExA
RtlIpv6AddressToStringA
RtlIpv4AddressToStringA
RtlIpv6StringToAddressExW
RtlIpv4StringToAddressExW
RtlIpv6StringToAddressExA
RtlIpv4StringToAddressExA
EtwUnregisterTraceGuids
EtwRegisterTraceGuidsW
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
RtlNtStatusToDosError
NtQueryWnfStateData
NtClose
NtQueryVolumeInformationFile
NtCreateFile
RtlPublishWnfStateData
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlSubscribeWnfStateChangeNotification
RtlQueryWnfStateData
RtlGetVersion
GetIsEdpEnabled
SubscribeEdpEnabledStateChange
UnsubscribeEdpEnabledStateChange
GetIsWdagEnabled
SubscribeWdagEnabledStateChange
UnsubscribeWdagEnabledStateChange
GetPackageSecurityContext
GetPackageSecurityProperty
ApiSetQueryApiSetPresence
AppCacheCheckManifest
AppCacheCloseHandle
AppCacheCreateAndCommitFile
AppCacheDeleteGroup
AppCacheDeleteIEGroup
AppCacheDuplicateHandle
AppCacheFinalize
AppCacheFreeDownloadList
AppCacheFreeGroupList
AppCacheFreeIESpace
AppCacheFreeSpace
AppCacheGetDownloadList
AppCacheGetFallbackUrl
AppCacheGetGroupList
AppCacheGetIEGroupList
AppCacheGetInfo
AppCacheGetManifestUrl
AppCacheLookup
CommitUrlCacheEntryA
CommitUrlCacheEntryBinaryBlob
CommitUrlCacheEntryW
CreateMD5SSOHash
CreateUrlCacheContainerA
CreateUrlCacheContainerW
CreateUrlCacheEntryA
CreateUrlCacheEntryExW
CreateUrlCacheEntryW
CreateUrlCacheGroup
DeleteIE3Cache
DeleteUrlCacheContainerA
DeleteUrlCacheContainerW
DeleteUrlCacheEntry
DeleteUrlCacheEntryA
DeleteUrlCacheEntryW
DeleteUrlCacheGroup
DeleteWpadCacheForNetworks
DetectAutoProxyUrl
DispatchAPICall
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
FindCloseUrlCache
FindFirstUrlCacheContainerA
FindFirstUrlCacheContainerW
FindFirstUrlCacheEntryA
FindFirstUrlCacheEntryExA
FindFirstUrlCacheEntryExW
FindFirstUrlCacheEntryW
FindFirstUrlCacheGroup
FindNextUrlCacheContainerA
FindNextUrlCacheContainerW
FindNextUrlCacheEntryA
FindNextUrlCacheEntryExA
FindNextUrlCacheEntryExW
FindNextUrlCacheEntryW
FindNextUrlCacheGroup
ForceNexusLookup
ForceNexusLookupExW
FreeUrlCacheSpaceA
FreeUrlCacheSpaceW
FtpCommandA
FtpCommandW
FtpCreateDirectoryA
FtpCreateDirectoryW
FtpDeleteFileA
FtpDeleteFileW
FtpFindFirstFileA
FtpFindFirstFileW
FtpGetCurrentDirectoryA
FtpGetCurrentDirectoryW
FtpGetFileA
FtpGetFileEx
FtpGetFileSize
FtpGetFileW
FtpOpenFileA
FtpOpenFileW
FtpPutFileA
FtpPutFileEx
FtpPutFileW
FtpRemoveDirectoryA
FtpRemoveDirectoryW
FtpRenameFileA
FtpRenameFileW
FtpSetCurrentDirectoryA
FtpSetCurrentDirectoryW
GetProxyDllInfo
GetUrlCacheConfigInfoA
GetUrlCacheConfigInfoW
GetUrlCacheEntryBinaryBlob
GetUrlCacheEntryInfoA
GetUrlCacheEntryInfoExA
GetUrlCacheEntryInfoExW
GetUrlCacheEntryInfoW
GetUrlCacheGroupAttributeA
GetUrlCacheGroupAttributeW
GetUrlCacheHeaderData
GopherCreateLocatorA
GopherCreateLocatorW
GopherFindFirstFileA
GopherFindFirstFileW
GopherGetAttributeA
GopherGetAttributeW
GopherGetLocatorTypeA
GopherGetLocatorTypeW
GopherOpenFileA
GopherOpenFileW
HttpAddRequestHeadersA
HttpAddRequestHeadersW
HttpCheckDavCompliance
HttpCloseDependencyHandle
HttpDuplicateDependencyHandle
HttpEndRequestA
HttpEndRequestW
HttpGetServerCredentials
HttpGetTunnelSocket
HttpIndicatePageLoadComplete
HttpIsHostHstsEnabled
HttpOpenDependencyHandle
HttpOpenRequestA
HttpOpenRequestW
HttpPushClose
HttpPushEnable
HttpPushWait
HttpQueryInfoA
HttpQueryInfoW
HttpSendRequestA
HttpSendRequestExA
HttpSendRequestExW
HttpSendRequestW
HttpWebSocketClose
HttpWebSocketCompleteUpgrade
HttpWebSocketQueryCloseStatus
HttpWebSocketReceive
HttpWebSocketSend
HttpWebSocketShutdown
IncrementUrlCacheHeaderData
InternetAlgIdToStringA
InternetAlgIdToStringW
InternetAttemptConnect
InternetAutodial
InternetAutodialCallback
InternetAutodialHangup
InternetCanonicalizeUrlA
InternetCanonicalizeUrlW
InternetCheckConnectionA
InternetCheckConnectionW
InternetClearAllPerSiteCookieDecisions
InternetCloseHandle
InternetCombineUrlA
InternetCombineUrlW
InternetConfirmZoneCrossing
InternetConfirmZoneCrossingA
InternetConfirmZoneCrossingW
InternetConnectA
InternetConnectW
InternetConvertUrlFromWireToWideChar
InternetCrackUrlA
InternetCrackUrlW
InternetCreateUrlA
InternetCreateUrlW
InternetDial
InternetDialA
InternetDialW
InternetEnumPerSiteCookieDecisionA
InternetEnumPerSiteCookieDecisionW
InternetErrorDlg
InternetFindNextFileA
InternetFindNextFileW
InternetFortezzaCommand
InternetFreeCookies
InternetFreeProxyInfoList
InternetGetCertByURL
InternetGetCertByURLA
InternetGetConnectedState
InternetGetConnectedStateEx
InternetGetConnectedStateExA
InternetGetConnectedStateExW
InternetGetCookieA
InternetGetCookieEx2
InternetGetCookieExA
InternetGetCookieExW
InternetGetCookieW
InternetGetLastResponseInfoA
InternetGetLastResponseInfoW
InternetGetPerSiteCookieDecisionA
InternetGetPerSiteCookieDecisionW
InternetGetProxyForUrl
InternetGetSecurityInfoByURL
InternetGetSecurityInfoByURLA
InternetGetSecurityInfoByURLW
InternetGoOnline
InternetGoOnlineA
InternetGoOnlineW
InternetHangUp
InternetInitializeAutoProxyDll
InternetLockRequestFile
InternetOpenA
InternetOpenUrlA
InternetOpenUrlW
InternetOpenW
InternetQueryDataAvailable
InternetQueryFortezzaStatus
InternetQueryOptionA
InternetQueryOptionW
InternetReadFile
InternetReadFileExA
InternetReadFileExW
InternetSecurityProtocolToStringA
InternetSecurityProtocolToStringW
InternetSetCookieA
InternetSetCookieEx2
InternetSetCookieExA
InternetSetCookieExW
InternetSetCookieW
InternetSetDialState
InternetSetDialStateA
InternetSetDialStateW
InternetSetFilePointer
InternetSetOptionA
InternetSetOptionExA
InternetSetOptionExW
InternetSetOptionW
InternetSetPerSiteCookieDecisionA
InternetSetPerSiteCookieDecisionW
InternetSetSecureLegacyServersAppCompat
InternetSetStatusCallback
InternetSetStatusCallbackA
InternetSetStatusCallbackW
InternetShowSecurityInfoByURL
InternetShowSecurityInfoByURLA
InternetShowSecurityInfoByURLW
InternetTimeFromSystemTime
InternetTimeFromSystemTimeA
InternetTimeFromSystemTimeW
InternetTimeToSystemTime
InternetTimeToSystemTimeA
InternetTimeToSystemTimeW
InternetUnlockRequestFile
InternetWriteFile
InternetWriteFileExA
InternetWriteFileExW
IsHostInProxyBypassList
IsUrlCacheEntryExpiredA
IsUrlCacheEntryExpiredW
LoadUrlCacheContent
ParseX509EncodedCertificateForListBoxEntry
PrivacyGetZonePreferenceW
PrivacySetZonePreferenceW
ReadUrlCacheEntryStream
ReadUrlCacheEntryStreamEx
RegisterUrlCacheNotification
ResumeSuspendedDownload
RetrieveUrlCacheEntryFileA
RetrieveUrlCacheEntryFileW
RetrieveUrlCacheEntryStreamA
RetrieveUrlCacheEntryStreamW
RunOnceUrlCache
SetUrlCacheConfigInfoA
SetUrlCacheConfigInfoW
SetUrlCacheEntryGroup
SetUrlCacheEntryGroupA
SetUrlCacheEntryGroupW
SetUrlCacheEntryInfoA
SetUrlCacheEntryInfoW
SetUrlCacheGroupAttributeA
SetUrlCacheGroupAttributeW
SetUrlCacheHeaderData
ShowCertificate
ShowClientAuthCerts
ShowSecurityInfo
ShowX509EncodedCertificate
UnlockUrlCacheEntryFile
UnlockUrlCacheEntryFileA
UnlockUrlCacheEntryFileW
UnlockUrlCacheEntryStream
UpdateUrlCacheContentPath
UrlCacheCheckEntriesExist
UrlCacheCloseEntryHandle
UrlCacheContainerSetEntryMaximumAge
UrlCacheCreateContainer
UrlCacheFindFirstEntry
UrlCacheFindNextEntry
UrlCacheFreeEntryInfo
UrlCacheFreeGlobalSpace
UrlCacheGetContentPaths
UrlCacheGetEntryInfo
UrlCacheGetGlobalCacheSize
UrlCacheGetGlobalLimit
UrlCacheReadEntryStream
UrlCacheReloadSettings
UrlCacheRetrieveEntryFile
UrlCacheRetrieveEntryStream
UrlCacheServer
UrlCacheSetGlobalLimit
UrlCacheUpdateEntryExtraData
UrlZonesDetach
_GetFileExtensionFromUrl
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ