Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
81e192575df3d902304f13eaf4687d6bdb3d38e2b01069c4fa0c5b42269cb332N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
81e192575df3d902304f13eaf4687d6bdb3d38e2b01069c4fa0c5b42269cb332N.exe
Resource
win10v2004-20240802-en
Target
81e192575df3d902304f13eaf4687d6bdb3d38e2b01069c4fa0c5b42269cb332N
Size
2.6MB
MD5
a770518adff93f72c47b0cbc87561b80
SHA1
fce8c52741c3f8c4a8a9d0b63bd43549b505afb6
SHA256
81e192575df3d902304f13eaf4687d6bdb3d38e2b01069c4fa0c5b42269cb332
SHA512
c0e428e680e2691414aa2b6f6e9d55a39577c45cbcc2db70e40ec43ba9152e9c3efe396f0c0ca2db2d3296b8f19993e9aa826c74aeff4b73cc1a88993c7a4c77
SSDEEP
24576:clFAdcOwlEMVU4Juz5mgEOY089vGabtRepqBVcNTToH0VIrFntYXaez75UbAAVpn:cgzUgP5avGQCx6te1SUKp2lm
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\ccViews\autobuild1_BR-1305-003V_7.1_Snapshot\AMT_Development\SW\Src\Services\UNS\Release\UNS.pdb
getsockname
getpeername
shutdown
closesocket
ntohl
ntohs
accept
__WSAFDIsSet
bind
listen
WSAStartup
socket
setsockopt
htons
connect
getsockopt
ioctlsocket
gethostbyname
WSACleanup
recv
send
WSAGetLastError
inet_ntoa
select
inet_addr
htonl
CryptProtectData
CryptUnprotectData
CertFindCertificateInStore
CertGetNameStringA
CertOpenStore
CertCloseStore
CertFreeCertificateContext
NotifyAddrChange
GetIpNetTable
GetIpAddrTable
GetPerAdapterInfo
GetAdaptersInfo
GetExtendedTcpTable
GetNetworkParams
CancelIPChangeNotify
WinHttpQueryDataAvailable
WinHttpCloseHandle
WinHttpSetOption
WinHttpDetectAutoProxyConfigUrl
WinHttpGetProxyForUrl
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpQueryAuthSchemes
WinHttpSetStatusCallback
WinHttpReadData
WinHttpAddRequestHeaders
WinHttpCrackUrl
WinHttpConnect
WinHttpOpenRequest
WinHttpSetCredentials
WinHttpOpen
CloseServiceHandle
OpenProcessToken
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
IsValidSid
GetLengthSid
CopySid
SetSecurityDescriptorOwner
InitializeSecurityDescriptor
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
LookupAccountSidW
ConvertSidToStringSidA
EqualSid
ControlService
DeleteService
CreateServiceA
OpenServiceA
ChangeServiceConfigA
ChangeServiceConfig2A
SetServiceStatus
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerExA
RegQueryInfoKeyA
GetTokenInformation
LookupAccountNameA
AddAccessAllowedAce
InitializeAcl
GetAclInformation
AddAce
RegEnumKeyExA
RegCreateKeyExW
RegSetValueExW
AllocateAndInitializeSid
CreateWellKnownSid
SetEntriesInAclA
RegSetKeySecurity
FreeSid
RegDeleteValueA
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
ReportEventA
DeregisterEventSource
RegisterEventSourceA
OpenSCManagerA
EnumServicesStatusExA
GetAce
OpenThreadToken
GetProcessWindowStation
GetUserObjectInformationW
PostThreadMessageA
CharNextW
LoadStringA
MessageBoxA
CharUpperA
GetMessageA
TranslateMessage
DispatchMessageA
CharNextA
wsprintfA
UnregisterDeviceNotification
RegisterDeviceNotificationA
GetDesktopWindow
UuidCreate
UuidToStringA
RpcStringFreeA
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
GetStatusString
?fgXercescDefaultLocale@XMLUni@xercesc_2_7@@2QBDB
?Initialize@XMLPlatformUtils@xercesc_2_7@@SAXQBD0QAVPanicHandler@2@QAVMemoryManager@2@_N@Z
?XMLDecl@AbstractDOMParser@xercesc_2_7@@UAEXQB_W000@Z
?startInputSource@XercesDOMParser@xercesc_2_7@@UAEXABVInputSource@2@@Z
?attDef@AbstractDOMParser@xercesc_2_7@@UAEXABVDTDElementDecl@2@ABVDTDAttDef@2@_N@Z
?doctypeComment@AbstractDOMParser@xercesc_2_7@@UAEXQB_W@Z
?doctypeDecl@AbstractDOMParser@xercesc_2_7@@UAEXABVDTDElementDecl@2@QB_W1_N2@Z
?doctypePI@AbstractDOMParser@xercesc_2_7@@UAEXQB_W0@Z
?doctypeWhitespace@AbstractDOMParser@xercesc_2_7@@UAEXQB_WI@Z
?elementDecl@AbstractDOMParser@xercesc_2_7@@UAEXABVDTDElementDecl@2@_N@Z
?endAttList@AbstractDOMParser@xercesc_2_7@@UAEXABVDTDElementDecl@2@@Z
?endIntSubset@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?endExtSubset@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?entityDecl@AbstractDOMParser@xercesc_2_7@@UAEXABVDTDEntityDecl@2@_N1@Z
?resetDocType@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?notationDecl@AbstractDOMParser@xercesc_2_7@@UAEXABVXMLNotationDecl@2@_N@Z
?startAttList@AbstractDOMParser@xercesc_2_7@@UAEXABVDTDElementDecl@2@@Z
?startIntSubset@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?startExtSubset@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?TextDecl@AbstractDOMParser@xercesc_2_7@@UAEXQB_W0@Z
?handleElementPSVI@AbstractDOMParser@xercesc_2_7@@UAEXQB_W0PAVPSVIElement@2@@Z
?Terminate@XMLPlatformUtils@xercesc_2_7@@SAXXZ
?handleAttributesPSVI@AbstractDOMParser@xercesc_2_7@@UAEXQB_W0PAVPSVIAttributeList@2@@Z
??1XercesDOMParser@xercesc_2_7@@UAE@XZ
?fgDOMXMLDeclaration@XMLUni@xercesc_2_7@@2QB_WB
?startEntityReference@AbstractDOMParser@xercesc_2_7@@UAEXABVXMLEntityDecl@2@@Z
?startElement@AbstractDOMParser@xercesc_2_7@@UAEXABVXMLElementDecl@2@IQB_WABV?$RefVectorOf@VXMLAttr@xercesc_2_7@@@2@I_N3@Z
?startDocument@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?resetDocument@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?ignorableWhitespace@AbstractDOMParser@xercesc_2_7@@UAEXQB_WI_N@Z
?endEntityReference@AbstractDOMParser@xercesc_2_7@@UAEXABVXMLEntityDecl@2@@Z
?endElement@AbstractDOMParser@xercesc_2_7@@UAEXABVXMLElementDecl@2@I_NQB_W@Z
?endDocument@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?docPI@AbstractDOMParser@xercesc_2_7@@UAEXQB_W0@Z
?docComment@AbstractDOMParser@xercesc_2_7@@UAEXQB_W@Z
?docCharacters@AbstractDOMParser@xercesc_2_7@@UAEXQB_WI_N@Z
??0MemBufInputSource@xercesc_2_7@@QAE@QBEIQBD_NQAVMemoryManager@1@@Z
??0XercesDOMParser@xercesc_2_7@@QAE@QAVXMLValidator@1@QAVMemoryManager@1@QAVXMLGrammarPool@1@@Z
?setDoNamespaces@AbstractDOMParser@xercesc_2_7@@QAEX_N@Z
?setDoSchema@AbstractDOMParser@xercesc_2_7@@QAEX_N@Z
?setExternalNoNamespaceSchemaLocation@AbstractDOMParser@xercesc_2_7@@QAEXQBD@Z
?parse@AbstractDOMParser@xercesc_2_7@@QAEXABVInputSource@2@@Z
?getMessage@DOMException@xercesc_2_7@@QBEPB_WXZ
?getMessage@XMLException@xercesc_2_7@@QBEPB_WXZ
?transcode@XMLString@xercesc_2_7@@SAPA_WQBD@Z
?release@XMLString@xercesc_2_7@@SAXPAPA_W@Z
?transcode@XMLString@xercesc_2_7@@SAPADQB_W@Z
?release@XMLString@xercesc_2_7@@SAXPAPAD@Z
?resolveEntity@XercesDOMParser@xercesc_2_7@@UAEPAVInputSource@2@PAVXMLResourceIdentifier@2@@Z
?resetEntities@XercesDOMParser@xercesc_2_7@@UAEXXZ
?expandSystemId@XercesDOMParser@xercesc_2_7@@UAE_NQB_WAAVXMLBuffer@2@@Z
?elementTypeInfo@AbstractDOMParser@xercesc_2_7@@UAEXQB_W0@Z
?setPSVIHandler@AbstractDOMParser@xercesc_2_7@@UAEXQAVPSVIHandler@2@@Z
?createElementNSNode@AbstractDOMParser@xercesc_2_7@@MAEPAVDOMElement@2@PB_W0@Z
?error@XercesDOMParser@xercesc_2_7@@UAEXIQB_WW4ErrTypes@XMLErrorReporter@2@000JJ@Z
?endInputSource@XercesDOMParser@xercesc_2_7@@UAEXABVInputSource@2@@Z
?handlePartialElementPSVI@AbstractDOMParser@xercesc_2_7@@UAEXQB_W0PAVPSVIElement@2@@Z
?resetErrors@XercesDOMParser@xercesc_2_7@@UAEXXZ
?getDocument@AbstractDOMParser@xercesc_2_7@@QAEPAVDOMDocument@2@XZ
??1MemBufInputSource@xercesc_2_7@@UAE@XZ
??3XMemory@xercesc_2_7@@SAXPAX@Z
?getRawBuffer@MemBufFormatTarget@xercesc_2_7@@QBEPBEXZ
??0MemBufFormatTarget@xercesc_2_7@@QAE@HQAVMemoryManager@1@@Z
??2XMemory@xercesc_2_7@@SAPAXI@Z
?fgMemoryManager@XMLPlatformUtils@xercesc_2_7@@2PAVMemoryManager@2@A
?getDOMImplementation@DOMImplementationRegistry@xercesc_2_7@@SAPAVDOMImplementation@2@PB_W@Z
?writeChars@MemBufFormatTarget@xercesc_2_7@@UAEXQBEIQAVXMLFormatter@2@@Z
?flush@XMLFormatTarget@xercesc_2_7@@UAEXXZ
?resolveEntity@XercesDOMParser@xercesc_2_7@@UAEPAVInputSource@2@QB_W00@Z
??1MemBufFormatTarget@xercesc_2_7@@UAE@XZ
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
TlsFree
SetHandleCount
GetACP
VirtualFree
IsValidCodePage
SetStdHandle
GetStringTypeA
GetStringTypeW
HeapCreate
LCMapStringW
LCMapStringA
FindFirstFileW
GetDriveTypeW
ExitProcess
GetOEMCP
UnlockFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
FlushFileBuffers
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
InitializeCriticalSectionAndSpinCount
LockFile
SetConsoleMode
ReadConsoleInputA
ExitThread
FindFirstFileA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
SetConsoleCtrlHandler
GetStartupInfoA
GetFullPathNameW
CreateFileW
GetCurrentDirectoryA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
GetConsoleMode
GetConsoleCP
SetFilePointer
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
GetCPInfo
GetSystemTimeAsFileTime
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
CloseHandle
ReleaseSemaphore
CreateSemaphoreA
TlsGetValue
DuplicateHandle
TlsSetValue
TlsAlloc
InterlockedCompareExchange
CreateMutexA
SetThreadPriority
ResumeThread
InterlockedExchange
FlushConsoleInputBuffer
GetVersionExA
GlobalMemoryStatus
GetCurrentProcessId
QueryPerformanceCounter
GetTickCount
GetStdHandle
GetFileType
GetVersion
OpenEventA
ResetEvent
WaitForMultipleObjects
OpenProcess
CreateThread
GetModuleHandleW
GetCurrentThreadId
GetCommandLineA
SetErrorMode
RaiseException
GetSystemDefaultLCID
IsDBCSLeadByte
lstrcmpiA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
WideCharToMultiByte
lstrlenW
GetComputerNameA
GlobalAlloc
GlobalFree
LocalAlloc
lstrlenA
GetModuleFileNameA
SetEvent
GetSystemTime
GetCurrentThread
MultiByteToWideChar
GetProcessHeap
HeapAlloc
HeapFree
LoadLibraryA
Sleep
CreateFileA
GetLastError
GetOverlappedResult
WaitForSingleObject
ReadFile
CreateEventA
WriteFile
DeviceIoControl
FormatMessageA
GetModuleHandleA
GetProcAddress
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
ReleaseMutex
SetLastError
LocalFree
FreeLibrary
GetCurrentProcess
SHGetFolderPathA
CoCreateInstance
CoUninitialize
CoSetProxyBlanket
CoInitializeEx
CoInitializeSecurity
CoTaskMemAlloc
CoTaskMemRealloc
StringFromGUID2
CoResumeClassObjects
CoRevokeClassObject
CoRegisterClassObject
CoSuspendClassObjects
CoRevertToSelf
CoImpersonateClient
CoTaskMemFree
LoadRegTypeLi
SafeArrayPutElement
SysFreeString
VariantClear
VariantInit
SysAllocString
SysAllocStringLen
SafeArrayCreate
SafeArrayDestroy
SafeArrayUnlock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayLock
VarUI4FromStr
LoadTypeLi
SysStringLen
VariantChangeType
SafeArrayGetVartype
SafeArrayCreateVector
SafeArrayCopy
SysStringByteLen
UnRegisterTypeLi
RegisterTypeLi
WSASetLastError
WSACreateEvent
getnameinfo
OPENSSL_Applink
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ