Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
0d495a94e29faa4dfded29253322be1b2c534a56c078bea1ad8f1dc1fd23b742.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0d495a94e29faa4dfded29253322be1b2c534a56c078bea1ad8f1dc1fd23b742.dll
Resource
win10v2004-20240802-en
Target
0d495a94e29faa4dfded29253322be1b2c534a56c078bea1ad8f1dc1fd23b742.exe
Size
3.6MB
MD5
8612d97036f5f452bdf3ebb4053d4c81
SHA1
9142068ba30eb8dcac104b499f14f3972b70dcec
SHA256
0d495a94e29faa4dfded29253322be1b2c534a56c078bea1ad8f1dc1fd23b742
SHA512
4bedac3570eb8369c5182e812624176d8c72e6fac38773bb7c73e7068135837cc8f0390bc407289a12f7c5f5485d104a26dd632e7fc29a412e3d025236249055
SSDEEP
49152:dT2PQnvmVQM0eqJAC7YaVVVVVVVVbImRPKB9bjgEge7Co1wl+MhV4Jt8tBNZZd:TIB3slN
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
D:\JenkinsWorkspace\workspace\client_build_installer\client\build\working_directory\RelWithDebInfo\ubiorbitapi_r264.pdb
GetAdaptersAddresses
SHBrowseForFolderW
ord190
SHCreateItemFromParsingName
ShellExecuteW
SHGetFolderPathW
ord155
SHOpenFolderAndSelectItems
SHGetPathFromIDListW
CommandLineToArgvW
ShellExecuteExW
PSGetPropertyKeyFromName
WinHttpGetProxyForUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpCloseHandle
WinHttpOpen
UuidCreate
RpcStringFreeA
UuidToStringA
Direct3DCreate9
RegEnumKeyExW
RegOpenKeyExA
RegQueryValueExA
OpenProcessToken
SetNamedSecurityInfoW
GetNamedSecurityInfoW
GetExplicitEntriesFromAclW
SetEntriesInAclW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCreateKeyW
GetTokenInformation
EqualSid
AllocateAndInitializeSid
GetLastInputInfo
GetForegroundWindow
GetWindowThreadProcessId
SetClipboardData
CloseClipboard
OpenClipboard
SendMessageW
AllowSetForegroundWindow
MessageBoxW
GetMonitorInfoW
EnumDisplayMonitors
SetProcessDPIAware
PostMessageW
SetWindowPos
GetWindowRect
GetParent
MonitorFromPoint
GetWindowInfo
GetSystemMetrics
GetClipboardData
EmptyClipboard
GetStdHandle
FlushFileBuffers
GetACP
HeapReAlloc
SetStdHandle
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetConsoleCtrlHandler
WriteConsoleW
FindFirstFileExA
FindFirstFileExW
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
HeapSize
HeapFree
GetModuleFileNameA
GetConsoleCP
ReadConsoleW
GetConsoleMode
GetFileAttributesExW
GetModuleHandleExW
ResumeThread
ExitThread
SystemTimeToTzSpecificLocalTime
GetFileType
GetFileInformationByHandle
GetCurrentDirectoryA
SetCurrentDirectoryW
SetCurrentDirectoryA
SetEnvironmentVariableW
SetEnvironmentVariableA
GetFullPathNameA
GetDriveTypeW
RtlUnwindEx
LoadLibraryW
UnregisterWaitEx
Sleep
GetCommandLineW
GetCurrentDirectoryW
GetCurrentProcessId
OpenProcess
GetModuleFileNameW
LocalFree
CloseHandle
GetLastError
WaitForSingleObject
TerminateProcess
GetExitCodeProcess
RtlCaptureStackBackTrace
GetProcessId
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
CreateDirectoryW
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetFileSizeEx
GetFileTime
GetFullPathNameW
GetTempFileNameW
GetVolumePathNameW
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
SetFilePointerEx
SetFileTime
SetErrorMode
CopyFileW
MoveFileExW
OutputDebugStringA
GetEnvironmentVariableW
GetDiskFreeSpaceExW
GetVolumeNameForVolumeMountPointW
GetCurrentProcess
ExitProcess
GetSystemInfo
GetTickCount
GetVersionExW
GetNativeSystemInfo
GetPhysicallyInstalledSystemMemory
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetComputerNameA
FileTimeToSystemTime
SystemTimeToFileTime
GetTimeZoneInformation
GetLocaleInfoW
GetUserDefaultUILanguage
SetEvent
ResetEvent
WaitForMultipleObjectsEx
CreateEventW
GetTempPathW
CreateThread
GetCurrentThreadId
RaiseException
SuspendThread
ReadFile
WriteFile
PeekNamedPipe
GetOverlappedResult
GetSystemTimeAsFileTime
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
SetLastError
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
SetProcessAffinityMask
HeapAlloc
CreateProcessW
FormatMessageW
DuplicateHandle
WaitForSingleObjectEx
SwitchToThread
GetCurrentThread
GetExitCodeThread
RtlPcToFileHeader
EncodePointer
DecodePointer
GetStringTypeW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCPInfo
QueryPerformanceCounter
QueryPerformanceFrequency
CompareStringW
LCMapStringW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
OutputDebugStringW
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
LoadLibraryExW
VirtualAlloc
VirtualProtect
VirtualFree
RtlUnwind
CoInitializeEx
CoCreateInstance
CoInitialize
CoUninitialize
GetSaveFileNameW
??0OrbitSession@orbitdll@mg@@QEAA@XZ
??1OrbitSession@orbitdll@mg@@QEAA@XZ
?CheckUpdate@OrbitSession@orbitdll@mg@@QEAAHXZ
?Close@SavegameReader@orbitdll@mg@@QEAAXXZ
?Close@SavegameWriter@orbitdll@mg@@QEAAX_N@Z
?GetLocText@OrbitSession@orbitdll@mg@@QEAAPEBGPEBGPEBD@Z
?GetLoginDetails@OrbitSession@orbitdll@mg@@QEAAXIPEAVIGetLoginDetailsListener@23@@Z
?GetName@SavegameInfo@orbitdll@mg@@QEAAPEBGXZ
?GetNetworkTraffic@OrbitSession@orbitdll@mg@@QEAAXIPEAVIGetNetworkTrafficListener@23@@Z
?GetOrbitServer@OrbitSession@orbitdll@mg@@QEAAXIPEAVIGetOrbitServerListener@23@II@Z
?GetRequestUniqueId@OrbitSession@orbitdll@mg@@QEAAIXZ
?GetSavegameId@SavegameInfo@orbitdll@mg@@QEAAIXZ
?GetSavegameList@OrbitSession@orbitdll@mg@@QEAAXIPEAVIGetSavegameListListener@23@I@Z
?GetSavegameReader@OrbitSession@orbitdll@mg@@QEAAXIPEAVIGetSavegameReaderListener@23@II@Z
?GetSavegameWriter@OrbitSession@orbitdll@mg@@QEAAXIPEAVIGetSavegameWriterListener@23@II_N@Z
?GetSize@SavegameInfo@orbitdll@mg@@QEAAIXZ
?GetUplayId@SavegameInfo@orbitdll@mg@@QEAAIXZ
?Read@SavegameReader@orbitdll@mg@@QEAAXIPEAVISavegameReadListener@23@IPEAXI@Z
?RemoveSavegame@OrbitSession@orbitdll@mg@@QEAAXIPEAVIRemoveSavegameListener@23@II@Z
?SetName@SavegameWriter@orbitdll@mg@@QEAA_NPEAG@Z
?StartLauncher@OrbitSession@orbitdll@mg@@QEAA_NIIPEBD0@Z
?StartProcess@OrbitSession@orbitdll@mg@@QEAAXPEBG00@Z
?Update@OrbitSession@orbitdll@mg@@QEAAXXZ
?Write@SavegameWriter@orbitdll@mg@@QEAAXIPEAVISavegameWriteListener@23@PEAXI@Z
MgOrbitdllCheckUpdate
MgOrbitdllGetFakeSession
MgOrbitdllGetLocText
MgOrbitdllGetLoginDetails
MgOrbitdllGetNetworkTraffic
MgOrbitdllGetOrbitServer
MgOrbitdllGetRequestUniqueId
MgOrbitdllGetSavegameList
MgOrbitdllGetSavegameReader
MgOrbitdllGetSavegameWriter
MgOrbitdllGetSession
MgOrbitdllRemoveSavegame
MgOrbitdllSaveGameInfoGetName
MgOrbitdllSaveGameInfoGetProductId
MgOrbitdllSaveGameInfoGetSavegameId
MgOrbitdllSaveGameInfoGetSize
MgOrbitdllSaveGameReaderClose
MgOrbitdllSaveGameReaderRead
MgOrbitdllSaveGameWriterClose
MgOrbitdllSaveGameWriterSetName
MgOrbitdllSaveGameWriterWrite
MgOrbitdllStartLauncher
MgOrbitdllStartProcess
MgOrbitdllUpdate
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ