9ee70802f541cea7afcd8265c11021fe9829876914e9caad3c0d9ef178e41e05

Sharing

Copy URL Twitter E-mail

General

Target

9ee70802f541cea7afcd8265c11021fe9829876914e9caad3c0d9ef178e41e05
Size

1.7MB
MD5

57e38d04d5e880d490336bc5793e83e5
SHA1

cdbb6605c6543b5d6ed83de72fb70dc2a158b64e
SHA256

9ee70802f541cea7afcd8265c11021fe9829876914e9caad3c0d9ef178e41e05
SHA512

23950b6dbafe366149fd72572322b0a6cc60012d3a57673adebd032908f8093e7cf33427b03a169cf27f772a252540181c4e9369ae88b821dd7bde2c1c8786b9
SSDEEP

24576:8lwepwSY8PosPBJi5F65p3P+luBp0bYNQC/UYvxmsmUGCi2+LJdP6XeIo2:HeN+luBp0bYNQC/UY5ms1GCQdP6XeIo2

Score

1^/10

Malware Config

Signatures

Files

9ee70802f541cea7afcd8265c11021fe9829876914e9caad3c0d9ef178e41e05
.dll windows:6 windows x86 arch:x86

db350b69fd62b193f03fbff4f344e911

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

14:06:77:b4:3c:17:69:44:a1:12:98:84:2a:49:71:f6:4c:a8:8d:42:ea:20:04:b0:26:27:bb:96:6a:ea:d7:02
Signer

Actual PE Digest

14:06:77:b4:3c:17:69:44:a1:12:98:84:2a:49:71:f6:4c:a8:8d:42:ea:20:04:b0:26:27:bb:96:6a:ea:d7:02

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\bins\release\x86\protection\mip_protection_sdk.pdb

Imports

rpcrt4

UuidCreate

msvcp140

?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xbad_function_call@std@@YAXXZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
_Xtime_get_ticks
_Query_perf_counter
_Query_perf_frequency
_Mtx_current_owns
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_timedwait
_Cnd_broadcast
?_Throw_Cpp_error@std@@YAXH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?_Xinvalid_argument@std@@YAXPBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z
?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ
?_Assign@_ContextCallback@details@Concurrency@@AAEXPAX@Z
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ
??0task_continuation_context@Concurrency@@AAE@XZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
_Thrd_id
_Thrd_detach
_Cnd_do_broadcast_at_thread_exit
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
_Cnd_signal
_Thrd_join
??1facet@locale@std@@MAE@XZ
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z
??0codecvt_base@std@@QAE@I@Z
??1codecvt_base@std@@UAE@XZ
?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MAE@XZ
?do_encoding@codecvt_base@std@@MBEHXZ
?do_max_length@codecvt_base@std@@MBEHXZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD4@Z
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
?_Syserror_map@std@@YAPBDH@Z
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?exceptions@ios_base@std@@QAEXH@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
??0facet@locale@std@@IAE@I@Z
??Bid@locale@std@@QAEIXZ
?c_str@?$_Yarn@D@std@@QBEPBDXZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
_Strxfrm
_Strcoll
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrCreate@@YAXPAX@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Xbad_alloc@std@@YAXXZ
?__ExceptionPtrRethrow@@YAXPBX@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ

iphlpapi

GetAdaptersAddresses
FreeMibTable
GetIpForwardTable2

ws2_32

inet_ntop

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
InitOnceComplete
InitOnceBeginInitialize
LoadLibraryExA
TerminateProcess
FreeLibrary
VirtualQuery
VirtualProtect
GetSystemInfo
GetModuleHandleW
GetVersion
GetCurrentProcessId
GetLastError
GetCurrentThreadId
RaiseException
DisableThreadLibraryCalls
InitializeSListHead
GetCurrentProcess
IsProcessorFeaturePresent
GetProcAddress
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent

vcruntime140

__std_type_info_destroy_list
__std_terminate
_purecall
memcmp
memcpy
memmove
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
__current_exception_context
memchr
memset
strchr
strstr
__std_type_info_compare
__current_exception
_except_handler4_common

Exports

Exports

?AddRmsCapability@ConsumptionSettings@ProtectionHandler@mipns@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?AddRmsCapability@Settings@ProtectionEngine@mipns@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Create@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@ABUApplicationInfo@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@W4LogLevel@2@_NABV?$shared_ptr@VLoggerDelegate@mipns@@@4@ABV?$shared_ptr@UDiagnosticConfiguration@mipns@@@4@@Z
?Create@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@ABV?$shared_ptr@$$CBVMipConfiguration@mipns@@@4@@Z
?Create@ParsedPublishingLicenseBuilder@mipns@@SA?AV?$shared_ptr@VParsedPublishingLicenseBuilder@mipns@@@std@@XZ
?CreateDelegationLicenseSettings@DelegationLicenseSettings@mipns@@SA?AV?$shared_ptr@VDelegationLicenseSettings@mipns@@@std@@ABV?$shared_ptr@VMipContext@mipns@@@4@ABVPublishingLicenseInfo@2@ABV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@4@_N@Z
?CreateDelegationLicenseSettings@DelegationLicenseSettings@mipns@@SA?AV?$shared_ptr@VDelegationLicenseSettings@mipns@@@std@@ABVPublishingLicenseInfo@2@ABV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@4@_N@Z
?CreateFromLicenseType@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@W4LicenseType@12@ABV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@4@ABV?$vector@VUserRights@mipns@@V?$allocator@VUserRights@mipns@@@std@@@4@@Z
?CreateFromProtectionDescriptor@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@ABVProtectionDescriptor@2@@Z
?CreateFromSerializedTemplate@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@ABV?$vector@EV?$allocator@E@std@@@4@@Z
?CreateFromTemplate@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
?CreateFromUserRights@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@ABV?$vector@VUserRights@mipns@@V?$allocator@VUserRights@mipns@@@std@@@4@@Z
?CreateFromUserRoles@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@ABV?$vector@VUserRoles@mipns@@V?$allocator@VUserRoles@mipns@@@std@@@4@@Z
?CreateGetTemplatesSettings@GetTemplatesSettings@mipns@@SA?AV?$shared_ptr@VGetTemplatesSettings@mipns@@@std@@XZ
?CreatePublishingUseLicenseRequest@PublishingUseLicenseRequest@mipns@@SA?AV?$shared_ptr@VPublishingUseLicenseRequest@mipns@@@std@@XZ
?CreateStreamFromBuffer@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@PAE_J@Z
?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@ABV?$shared_ptr@V?$basic_iostream@DU?$char_traits@D@std@@@std@@@3@@Z
?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@ABV?$shared_ptr@V?$basic_istream@DU?$char_traits@D@std@@@std@@@3@@Z
?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@ABV?$shared_ptr@V?$basic_ostream@DU?$char_traits@D@std@@@std@@@3@@Z
?CreateWithCustomFeatureSettings@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@ABUApplicationInfo@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@W4LogLevel@2@_NABV?$shared_ptr@VLoggerDelegate@mipns@@@4@ABV?$shared_ptr@UDiagnosticConfiguration@mipns@@@4@ABV?$map@W4FlightingFeature@mipns@@_NU?$less@W4FlightingFeature@mipns@@@std@@V?$allocator@U?$pair@$$CBW4FlightingFeature@mipns@@_N@std@@@4@@4@@Z
?GetBlockSize@CustomProtectedStream@mipns@@SA_JV?$shared_ptr@VProtectionHandler@mipns@@@std@@@Z
?GetPublishingLicenseInfo@ProtectionProfile@mipns@@SA?AV?$shared_ptr@VPublishingLicenseInfo@mipns@@@std@@ABV?$vector@EV?$allocator@E@std@@@4@@Z
?GetPublishingLicenseInfo@ProtectionProfile@mipns@@SA?AV?$shared_ptr@VPublishingLicenseInfo@mipns@@@std@@ABV?$vector@EV?$allocator@E@std@@@4@ABV?$shared_ptr@VMipContext@mipns@@@4@@Z
?GetVersion@ProtectionProfile@mipns@@SAPBDXZ
?Load@ProtectionProfile@mipns@@SA?AV?$shared_ptr@VProtectionProfile@mipns@@@std@@ABVSettings@12@@Z
?LoadAsync@ProtectionProfile@mipns@@SA?AV?$shared_ptr@VAsyncControl@mipns@@@std@@ABVSettings@12@ABV?$shared_ptr@X@4@@Z
?RemoveRmsCapability@ConsumptionSettings@ProtectionHandler@mipns@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?RemoveRmsCapability@Settings@ProtectionEngine@mipns@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
MIP_CC_BuildProtectionDescriptor
MIP_CC_CreateDelegationLicenseSettings
MIP_CC_CreateDictionary
MIP_CC_CreateHttpDelegate
MIP_CC_CreateLoggerDelegate
MIP_CC_CreateLoggerDelegateMessageData
MIP_CC_CreateMipContext
MIP_CC_CreateMipContextWithCustomFeatureSettings
MIP_CC_CreateProtectionDescriptorBuilderFromLicenseType
MIP_CC_CreateProtectionDescriptorBuilderFromProtectionDescriptor
MIP_CC_CreateProtectionDescriptorBuilderFromSerializedTemplate
MIP_CC_CreateProtectionDescriptorBuilderFromTemplate
MIP_CC_CreateProtectionDescriptorBuilderFromUserRights
MIP_CC_CreateProtectionDescriptorBuilderFromUserRoles
MIP_CC_CreateProtectionDescriptorFromTemplate
MIP_CC_CreateProtectionDescriptorFromUserRights
MIP_CC_CreateProtectionDescriptorFromUserRoles
MIP_CC_CreateProtectionEngineSettingsWithEngineId
MIP_CC_CreateProtectionEngineSettingsWithEngineIdAndAuthCallback
MIP_CC_CreateProtectionEngineSettingsWithIdentity
MIP_CC_CreateProtectionEngineSettingsWithIdentityAndAuthCallback
MIP_CC_CreateProtectionHandlerConsumptionSettings
MIP_CC_CreateProtectionHandlerConsumptionSettingsWithPreLicense
MIP_CC_CreateProtectionHandlerPublishingSettings
MIP_CC_CreateProtectionProfileSettings
MIP_CC_CreateStream
MIP_CC_CreateStringList
MIP_CC_CreateTaskDispatcherDelegate
MIP_CC_CreateTelemetryConfiguration
MIP_CC_DelegationLicense_GetDynamicWatermark
MIP_CC_DelegationLicense_GetSerializedDelegationJsonLicense
MIP_CC_DelegationLicense_GetSerializedDelegationXrmlLicense
MIP_CC_DelegationLicense_GetSerializedUserLicense
MIP_CC_DelegationLicense_GetUser
MIP_CC_DelegationLicenses_GetLicenses
MIP_CC_Dictionary_GetEntries
MIP_CC_DynamicWatermark_GetFormatString
MIP_CC_DynamicWatermark_GetFormatStringSize
MIP_CC_DynamicWatermark_GetText
MIP_CC_DynamicWatermark_GetTextSize
MIP_CC_ExecuteDispatchedTask
MIP_CC_LicenseInfo_GetDynamicWatermark
MIP_CC_LicenseInfo_GetUserRights
MIP_CC_LoadProtectionProfile
MIP_CC_NotifyHttpDelegateResponse
MIP_CC_ProtectionDescriptorBuilder_SetAllowOfflineAccess
MIP_CC_ProtectionDescriptorBuilder_SetContentValidUntil
MIP_CC_ProtectionDescriptorBuilder_SetDescription
MIP_CC_ProtectionDescriptorBuilder_SetDoubleKeyUrl
MIP_CC_ProtectionDescriptorBuilder_SetEncryptedAppData
MIP_CC_ProtectionDescriptorBuilder_SetLabelInfo
MIP_CC_ProtectionDescriptorBuilder_SetName
MIP_CC_ProtectionDescriptorBuilder_SetReferrer
MIP_CC_ProtectionDescriptorBuilder_SetSignedAppData
MIP_CC_ProtectionDescriptor_DoesAllowOfflineAccess
MIP_CC_ProtectionDescriptor_DoesContentExpire
MIP_CC_ProtectionDescriptor_GetContentId
MIP_CC_ProtectionDescriptor_GetContentValidUntil
MIP_CC_ProtectionDescriptor_GetDescription
MIP_CC_ProtectionDescriptor_GetDescriptionSize
MIP_CC_ProtectionDescriptor_GetDoubleKeyUrl
MIP_CC_ProtectionDescriptor_GetDoubleKeyUrlSize
MIP_CC_ProtectionDescriptor_GetDynamicWatermark
MIP_CC_ProtectionDescriptor_GetEncryptedAppData
MIP_CC_ProtectionDescriptor_GetLabelId
MIP_CC_ProtectionDescriptor_GetName
MIP_CC_ProtectionDescriptor_GetNameSize
MIP_CC_ProtectionDescriptor_GetOwner
MIP_CC_ProtectionDescriptor_GetOwnerSize
MIP_CC_ProtectionDescriptor_GetProtectionType
MIP_CC_ProtectionDescriptor_GetReferrer
MIP_CC_ProtectionDescriptor_GetReferrerSize
MIP_CC_ProtectionDescriptor_GetSignedAppData
MIP_CC_ProtectionDescriptor_GetTemplateId
MIP_CC_ProtectionDescriptor_GetUserRights
MIP_CC_ProtectionDescriptor_GetUserRoles
MIP_CC_ProtectionEngineSettings_AddRmsCapability
MIP_CC_ProtectionEngineSettings_GetRmsCapability
MIP_CC_ProtectionEngineSettings_RemoveRmsCapability
MIP_CC_ProtectionEngineSettings_SetAllowCloudServiceOnly
MIP_CC_ProtectionEngineSettings_SetClientData
MIP_CC_ProtectionEngineSettings_SetCloud
MIP_CC_ProtectionEngineSettings_SetCloudEndpointBaseUrl
MIP_CC_ProtectionEngineSettings_SetCustomSettings
MIP_CC_ProtectionEngineSettings_SetSessionId
MIP_CC_ProtectionEngineSettings_SetTemplateRefreshArgs
MIP_CC_ProtectionEngineSettings_SetUnderlyingApplicationId
MIP_CC_ProtectionEngine_CreateProtectionHandlerForConsumption
MIP_CC_ProtectionEngine_CreateProtectionHandlerForPublishing
MIP_CC_ProtectionEngine_GetClientData
MIP_CC_ProtectionEngine_GetClientDataSize
MIP_CC_ProtectionEngine_GetDelegationLicenses
MIP_CC_ProtectionEngine_GetEngineId
MIP_CC_ProtectionEngine_GetEngineIdSize
MIP_CC_ProtectionEngine_GetLicenseInfoForLabelId
MIP_CC_ProtectionEngine_GetRightsForLabelId
MIP_CC_ProtectionEngine_GetTemplates
MIP_CC_ProtectionEngine_GetTemplatesSize
MIP_CC_ProtectionHandlerConsumptionSettings_AddRmsCapability
MIP_CC_ProtectionHandlerConsumptionSettings_GetRmsCapability
MIP_CC_ProtectionHandlerConsumptionSettings_RemoveRmsCapability
MIP_CC_ProtectionHandlerConsumptionSettings_SetApplicationScenarioId
MIP_CC_ProtectionHandlerConsumptionSettings_SetCustomSettings
MIP_CC_ProtectionHandlerConsumptionSettings_SetDelegatedUserEmail
MIP_CC_ProtectionHandlerConsumptionSettings_SetIsOfflineOnly
MIP_CC_ProtectionHandlerPublishingSettings_SetApplicationScenarioId
MIP_CC_ProtectionHandlerPublishingSettings_SetCustomSettings
MIP_CC_ProtectionHandlerPublishingSettings_SetDelegatedUserEmail
MIP_CC_ProtectionHandlerPublishingSettings_SetIsAuditedExtractionAllowed
MIP_CC_ProtectionHandlerPublishingSettings_SetIsDeprecatedAlgorithmPreferred
MIP_CC_ProtectionHandlerPublishingSettings_SetIsPublishingFormatJson
MIP_CC_ProtectionHandlerPublishingSettings_SetPreLicenseUserEmail
MIP_CC_ProtectionHandler_DecryptBuffer
MIP_CC_ProtectionHandler_DoesUseDeprecatedAlgorithm
MIP_CC_ProtectionHandler_EncryptBuffer
MIP_CC_ProtectionHandler_GetBlockSize
MIP_CC_ProtectionHandler_GetCipherMode
MIP_CC_ProtectionHandler_GetContentId
MIP_CC_ProtectionHandler_GetIssuedUser
MIP_CC_ProtectionHandler_GetIssuedUserSize
MIP_CC_ProtectionHandler_GetOwner
MIP_CC_ProtectionHandler_GetOwnerSize
MIP_CC_ProtectionHandler_GetProtectedContentSize
MIP_CC_ProtectionHandler_GetProtectionDescriptor
MIP_CC_ProtectionHandler_GetRights
MIP_CC_ProtectionHandler_GetSerializedPreLicense
MIP_CC_ProtectionHandler_GetSerializedPreLicenseSize
MIP_CC_ProtectionHandler_GetSerializedPublishingLicense
MIP_CC_ProtectionHandler_GetSerializedPublishingLicenseSize
MIP_CC_ProtectionProfileSettings_SetCanCacheLicenses
MIP_CC_ProtectionProfileSettings_SetCustomSettings
MIP_CC_ProtectionProfileSettings_SetHttpDelegate
MIP_CC_ProtectionProfileSettings_SetSessionId
MIP_CC_ProtectionProfileSettings_SetTaskDispatcherDelegate
MIP_CC_ProtectionProfile_AddEngine
MIP_CC_ReleaseDelegationLicense
MIP_CC_ReleaseDelegationLicenseSettings
MIP_CC_ReleaseDelegationLicenses
MIP_CC_ReleaseDictionary
MIP_CC_ReleaseHttpDelegate
MIP_CC_ReleaseLicenseInfo
MIP_CC_ReleaseLoggerDelegate
MIP_CC_ReleaseMipContext
MIP_CC_ReleaseProtectionDescriptor
MIP_CC_ReleaseProtectionDescriptorBuilder
MIP_CC_ReleaseProtectionEngine
MIP_CC_ReleaseProtectionEngineSettings
MIP_CC_ReleaseProtectionHandler
MIP_CC_ReleaseProtectionHandlerConsumptionSettings
MIP_CC_ReleaseProtectionHandlerPublishingSettings
MIP_CC_ReleaseProtectionProfile
MIP_CC_ReleaseProtectionProfileSettings
MIP_CC_ReleaseStream
MIP_CC_ReleaseStringList
MIP_CC_ReleaseTaskDispatcherDelegate
MIP_CC_ReleaseTelemetryConfiguration
MIP_CC_ReleaseTemplateDescriptor
MIP_CC_ReleaseUserRightsResult
MIP_CC_ReleaseUserRolesResult
MIP_CC_StringList_GetStrings
MIP_CC_TelemetryConfiguration_AddMaskedProperty
MIP_CC_TelemetryConfiguration_SetCustomSettings
MIP_CC_TelemetryConfiguration_SetHostName
MIP_CC_TelemetryConfiguration_SetHttpDelegate
MIP_CC_TelemetryConfiguration_SetIsFastShutdownEnabled
MIP_CC_TelemetryConfiguration_SetIsLocalCachingEnabled
MIP_CC_TelemetryConfiguration_SetIsNetworkDetectionEnabled
MIP_CC_TelemetryConfiguration_SetIsTelemetryOptedOut
MIP_CC_TelemetryConfiguration_SetIsTraceLoggingEnabled
MIP_CC_TelemetryConfiguration_SetLibraryName
MIP_CC_TelemetryConfiguration_SetTaskDispatcherDelegate
MIP_CC_TemplateDescriptor_GetDescription
MIP_CC_TemplateDescriptor_GetDescriptionSize
MIP_CC_TemplateDescriptor_GetId
MIP_CC_TemplateDescriptor_GetName
MIP_CC_TemplateDescriptor_GetNameSize
MIP_CC_UserRights_GetRights
MIP_CC_UserRights_GetUsers
MIP_CC_UserRoles_GetRoles
MIP_CC_UserRoles_GetUsers

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 414KB - Virtual size: 414KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db350b69fd62b193f03fbff4f344e911

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:afCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

14:06:77:b4:3c:17:69:44:a1:12:98:84:2a:49:71:f6:4c:a8:8d:42:ea:20:04:b0:26:27:bb:96:6a:ea:d7:02Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

rpcrt4

msvcp140

iphlpapi

ws2_32

kernel32

vcruntime140

Exports

Exports

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 414KB - Virtual size: 414KB

.data Size: 78KB - Virtual size: 82KB

.didat Size: 512B - Virtual size: 336B

.rsrc Size: 1024B - Virtual size: 856B

.reloc Size: 91KB - Virtual size: 90KB

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

14:06:77:b4:3c:17:69:44:a1:12:98:84:2a:49:71:f6:4c:a8:8d:42:ea:20:04:b0:26:27:bb:96:6a:ea:d7:02
Signer

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 414KB - Virtual size: 414KB

.data
Size: 78KB - Virtual size: 82KB

.didat
Size: 512B - Virtual size: 336B

.rsrc
Size: 1024B - Virtual size: 856B

.reloc
Size: 91KB - Virtual size: 90KB