Extended Key Usages
ExtKeyUsageTimeStamping
Static task
static1
Behavioral task
behavioral1
Sample
fb662eea8e09f819738d7d07a8b72b876d0b58f6cd44ec56140c005ad4a026efN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb662eea8e09f819738d7d07a8b72b876d0b58f6cd44ec56140c005ad4a026efN.exe
Resource
win10v2004-20240802-en
Target
fb662eea8e09f819738d7d07a8b72b876d0b58f6cd44ec56140c005ad4a026efN
Size
9.7MB
MD5
2b824c0142540e5ee27ee33b97bdb2a0
SHA1
6fa9dbc115845ee0efbb7d65b8dc97a4d97b7872
SHA256
fb662eea8e09f819738d7d07a8b72b876d0b58f6cd44ec56140c005ad4a026ef
SHA512
d88a0483c345296221cb1b79b4f9ea60682d69932839067a0e5a9adf0c0e2c5bb6423805144a82063171715e2a21d442f4baf9dc8591ad2a199d1192da5eaa1d
SSDEEP
196608:+LqYqUBMGjACEq5wqY0QbSsTq0fzPfS7gJ0qLwoOELx5M00:iq+MnCJwqETry8M6rB0
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
P:\Target\x86\ship\groove\x-none\groove.pdb
__std_terminate
memcmp
memset
_CxxThrowException
memmove
memcpy
__CxxFrameHandler3
wcsrchr
wcsstr
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
__vcrt_InitializeCriticalSectionEx
_except_handler4_common
wcschr
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_initterm_e
_set_app_type
_seh_filter_exe
_resetstkoflw
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_register_onexit_function
_exit
_crt_atexit
_invalid_parameter_noinfo
_cexit
_controlfp_s
_beginthread
_c_exit
_register_thread_local_exe_atexit_callback
_set_invalid_parameter_handler
_beginthreadex
_get_errno
_errno
terminate
exit
_set_errno
_endthreadex
wcsncat_s
wcstok_s
wcsncpy_s
wcscat_s
wcscpy_s
_wcsrev
strncpy_s
isprint
_wcsnicmp
_wcsicmp
wcspbrk
towlower
wcsncmp
malloc
calloc
_recalloc
_set_new_mode
free
realloc
_localtime64_s
_ftime64_s
__stdio_common_vsnwprintf_s
_wsopen_s
_close
_lseek
_read
_write
__stdio_common_vfwprintf_s
_set_fmode
__p__commode
__acrt_iob_func
__stdio_common_vfwprintf
__stdio_common_vswprintf_s
__stdio_common_vsnprintf_s
__stdio_common_vsprintf_s
__stdio_common_vswscanf
_wtoi
_ultow_s
_wcstoui64
_ui64tow_s
wcstoul
_ltow_s
wcstod
wcstol
_wtof
__initialize_lconv_for_unsigned_char
localeconv
_configthreadlocale
div
qsort
_except1
_libm_sse2_sqrt_precise
floor
__setusermatherr
_wfullpath
_wsplitpath_s
_wremove
RegEnumValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCloseKey
RegNotifyChangeKeyValue
RegOpenKeyExW
RegQueryInfoKeyW
OpenProcessToken
GetTokenInformation
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
RegEnumKeyExW
RegQueryValueExW
RegSetValueExW
CryptAcquireContextA
RegGetValueW
RegOpenKeyExA
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CloseServiceHandle
OpenSCManagerW
OpenServiceW
QueryServiceConfigW
StartTraceW
ControlTraceW
EnableTraceEx2
GetLengthSid
IsValidSid
ConvertSidToStringSidW
LsaClose
LsaOpenPolicy
LsaQueryInformationPolicy
RegOverridePredefKey
EventRegister
EventUnregister
DeregisterEventSource
RegisterEventSourceW
ReportEventW
EventWrite
ord13
ord21
ord14
ord22
ord11
ord10
ord23
ord20
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
CreateRectRgn
DeleteObject
EnumFontFamiliesExW
GetClipBox
GetClipRgn
GetDeviceCaps
TranslateCharsetInfo
SelectObject
SetLayout
GetLayout
LPtoDP
SetViewportOrgEx
CreateFontIndirectW
GetStockObject
SetBkMode
SetTextColor
GetTextMetricsW
GetObjectW
SetBkColor
CreateSolidBrush
GdiGradientFill
CopyMetaFileW
CreateFontW
GetCurrentObject
RestoreDC
SaveDC
StretchBlt
CreateDIBSection
SetDIBColorTable
ExtTextOutW
CreateBitmap
CreatePatternBrush
GetTextColor
IntersectClipRect
SetBrushOrgEx
CreateDIBitmap
SetPixel
SelectClipRgn
BitBlt
GdipAlloc
GdipCloneImage
GdiplusShutdown
GdipDisposeImage
GdiplusStartup
GdipFree
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipGetImageGraphicsContext
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
ImmNotifyIME
GetDiskFreeSpaceExW
ReadDirectoryChangesW
WritePrivateProfileStringW
CancelThreadpoolIo
StartThreadpoolIo
SubmitThreadpoolWork
DisassociateCurrentThreadFromCallback
DeviceIoControl
GetVolumeNameForVolumeMountPointW
GetVolumeInformationW
GetDriveTypeW
LocalFileTimeToFileTime
SetFileTime
ReleaseSemaphore
CreateFileMappingW
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
LockResource
GlobalMemoryStatus
OpenFileMappingW
GetSystemTimeAsFileTime
GetFileTime
FileTimeToDosDateTime
GlobalAlloc
GlobalHandle
GlobalFree
lstrcmpW
RegisterApplicationRestart
GetCurrentThread
GlobalSize
EncodePointer
AddAtomW
HeapSetInformation
VirtualProtect
WerRegisterMemoryBlock
WaitForSingleObjectEx
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
GetStartupInfoW
InterlockedPopEntrySList
InterlockedPushEntrySList
VirtualAlloc
VirtualFree
LoadLibraryExA
GetFileInformationByHandle
GetFinalPathNameByHandleW
GetLongPathNameW
ReadFile
SetEndOfFile
SetFilePointer
WriteFile
GetTempPathW
DebugBreak
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
InitializeCriticalSection
TryEnterCriticalSection
ReleaseMutex
WaitForSingleObject
CreateMutexW
WaitForMultipleObjects
CreateSemaphoreW
GetFileSizeEx
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
OpenProcess
GlobalMemoryStatusEx
GetSystemTime
GetVersionExA
GetVersionExW
CreateThreadpoolWork
GetCurrentProcessId
CloseThreadpoolWork
CreateThreadpoolTimer
SetThreadpoolTimer
CloseThreadpoolTimer
CreateThreadpoolIo
CloseThreadpoolIo
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
IsWow64Process
LoadResource
SizeofResource
FindResourceW
GlobalLock
GlobalUnlock
MulDiv
lstrlenA
MoveFileW
FlsAlloc
MoveFileExW
VerifyVersionInfoW
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
FlsFree
GetModuleHandleExW
FormatMessageA
FileTimeToSystemTime
GetDateFormatW
lstrlenW
LoadLibraryA
ExitProcess
SetUnhandledExceptionFilter
K32GetProcessImageFileNameW
K32EnumProcesses
EnumSystemLocalesW
ConvertDefaultLocale
GetCurrencyFormatW
GetNumberFormatW
GetLocaleInfoW
GetStringTypeW
GetTimeFormatW
OpenFileById
GetFileInformationByHandleEx
GetTimeZoneInformation
GetLocalTime
GetCurrentDirectoryW
CompareFileTime
TlsAlloc
FileTimeToLocalFileTime
OutputDebugStringA
DecodePointer
RaiseException
GetLastError
SetLastError
HeapAlloc
HeapFree
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LoadLibraryW
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
GetTickCount
CreateDirectoryW
DeleteFileW
RemoveDirectoryW
lstrcmpiW
GetTempFileNameW
Beep
WideCharToMultiByte
GetCommandLineW
GetFileAttributesExW
CloseHandle
SetEvent
ResetEvent
CreateEventW
OpenEventW
Sleep
LocalFree
GetCurrentProcess
TerminateProcess
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationW
FindFirstFileW
FindNextChangeNotification
FindNextFileW
CreateFileW
GetFileAttributesW
GetFileSize
GetShortPathNameW
SetFileAttributesW
GetVersion
GetSystemInfo
GetSystemDirectoryW
GetWindowsDirectoryW
FormatMessageW
CopyFileW
FlushInstructionCache
VirtualQuery
FreeLibrary
SetDllDirectoryW
FindAtomW
SetProcessDEPPolicy
LoadLibraryExW
CompareStringW
MultiByteToWideChar
LCMapStringW
GetUserDefaultLCID
VerSetConditionMask
FindFirstFileExW
FlushFileBuffers
SystemTimeToFileTime
AlphaBlend
GradientFill
CoCreateInstance
CoInitializeSecurity
ReleaseStgMedium
OleDuplicateData
DoDragDrop
WriteClassStg
StgCreateDocfile
OleSetClipboard
CoGetClassObject
CreateStreamOnHGlobal
OleGetClipboard
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
ProgIDFromCLSID
CoCreateGuid
CoSetProxyBlanket
StgOpenStorageOnILockBytes
PropVariantClear
CreateBindCtx
IsAccelerator
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
CoTaskMemAlloc
StringFromGUID2
StringFromCLSID
CoCreateFreeThreadedMarshaler
CoDisconnectObject
CoRevokeClassObject
CoRegisterClassObject
CoInitializeEx
CoUninitialize
CLSIDFromString
CoTaskMemFree
IIDFromString
StringFromIID
CLSIDFromProgID
OleLockRunning
LoadRegTypeLi
VariantChangeType
SysAllocStringLen
SysReAllocStringLen
SafeArrayCreate
SafeArrayCopyData
SafeArrayDestroy
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
LoadTypeLi
SafeArrayCopy
SafeArrayPtrOfIndex
SafeArrayGetVartype
SafeArrayCreateVector
VariantClear
VariantCopy
VariantCopyInd
VariantChangeTypeEx
LoadTypeLibEx
SetErrorInfo
GetErrorInfo
VariantTimeToSystemTime
VarDateFromStr
CreateErrorInfo
OleCreateFontIndirect
RegisterTypeLi
UnRegisterTypeLi
RegisterTypeLibForUser
UnRegisterTypeLibForUser
SysStringLen
SysAllocString
VariantInit
SysFreeString
SafeArrayPutElement
?DumpBinary@@YGXPAUIGrooveByteInputStream@@@Z
?DumpBinary@@YGXXZ
?DumpCommand@@YGXPAUIGrooveUICommand2@@@Z
?DumpCommandContainer@@YGXPAUIGrooveUICommandContainer3@@@Z
?DumpDisseminatedDesign@@YGXXZ
?DumpDynamicsDocument@@YGXPAVGCoDynamics@@@Z
?DumpElement@@YGXPAUIGrooveElement@@@Z
?DumpElement@@YGXXZ
?DumpElementToFile@@YGXPAUIGrooveElement@@@Z
?DumpElementToFile@@YGXXZ
?DumpFileSystemRecords@@YGXXZ
?DumpFileSystemSchema@@YGXXZ
?DumpRAFPropertyList@@YGXXZ
?DumpRecord3@@YGXPAUIGrooveRecord3@@@Z
?DumpRecord3@@YGXXZ
?DumpRecord3ToString@@YGXAAVGCStackStrBase@@@Z
?DumpRecord3ToString@@YGXPAUIGrooveRecord3@@AAVGCStackStrBase@@@Z
?DumpRecord@@YGXPAUIGrooveRecord@@@Z
?DumpRecord@@YGXXZ
?DumpSandboxedDesign@@YGXXZ
?DumpSiteCatalog@@YGXXZ
?DumpSiteCatalogToolEntry@@YGXXZ
?DumpSystemRecords@@YGXXZ
?DumpTable@@YGXPAUIGrooveTable@@@Z
?DumpTable@@YGXXZ
?DumpUserDataRecords@@YGXXZ
?DumpUserDataSchema@@YGXXZ
?DumpWSSHostCache@@YGXXZ
?DumpWSSSiteCache@@YGXXZ
?FormatDateTime@@YGXXZ
?GetBinaryDumpString@@YGXAAVGCStackStrBase@@@Z
?GetBinaryDumpString@@YGXPAUIGrooveByteInputStream@@AAVGCStackStrBase@@@Z
?g_pDumpTable@@3PAUIGrooveTable@@A
SPWChainCoCreateInstance
SPWChainGetGlobalInterfacePtrAddress
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ