Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
EpicGamesLauncher.exe
Resource
win10-20220812-en
Target
EpicGamesLauncher.exe
Size
31.2MB
MD5
ed644adf881f16e46ec0b9c1727c51be
SHA1
5763f4801a21ea2183e491c5096ca303d71d4056
SHA256
629ff508d7f95c72301d06f8f75c1ebc58d2d6d814b20c5d1cabb52b6b632a01
SHA512
6b24d951848f8576105a9d7fedbf8f5f452575397e5974ee9b069796b7ab749aa47b69c1b936a34576bcd3ad85807ff2e2a72ff7896eafc0252110f6e4979b49
SSDEEP
393216:/y9z7T1JjJgOktY3c9UR4RF4GQ6IkOeB55wVFRn5ePLC34IVSM9QVB+JTlyqWK:/E/mF4oOeC6qQKyzK
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
socket
gethostname
WSAStartup
WSACleanup
accept
InetNtopW
inet_addr
getnameinfo
freeaddrinfo
WSAEventSelect
WSAResetEvent
WSASetEvent
WSAIoctl
__WSAFDIsSet
getaddrinfo
gethostbyname
WSAWaitForMultipleEvents
WSASetLastError
shutdown
setsockopt
sendto
WSAAddressToStringW
WSAStringToAddressW
send
select
recvfrom
recv
ntohs
ntohl
listen
htons
htonl
getsockopt
getsockname
getpeername
ioctlsocket
connect
closesocket
bind
WSAGetLastError
getprotobyname
timeBeginPeriod
timeEndPeriod
timeGetTime
CreateThread
GetCurrentThread
SetThreadPriority
SuspendThread
ResumeThread
GetProcessId
InitializeProcThreadAttributeList
DeleteProcThreadAttributeList
UpdateProcThreadAttribute
OpenProcess
GlobalMemoryStatusEx
GetSystemInfo
GetVersionExW
GetLogicalProcessorInformation
GetNativeSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FreeLibrary
GetModuleFileNameW
GetModuleHandleExW
GetProcAddress
LoadResource
LockResource
SizeofResource
FindResourceW
LoadLibraryW
SetThreadAffinityMask
FormatMessageW
lstrlenW
QueryFullProcessImageNameW
SetDllDirectoryW
GetDllDirectoryW
MoveFileW
GetComputerNameW
VerifyVersionInfoW
FileTimeToSystemTime
SystemTimeToFileTime
GetSystemPowerStatus
GetUserPreferredUILanguages
GetUserDefaultLocaleName
SetConsoleCtrlHandler
GetConsoleWindow
K32EnumProcessModules
K32GetProcessMemoryInfo
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
RtlCaptureStackBackTrace
GetProcessTimes
OpenThread
GetThreadContext
GetSystemTime
GetSystemTimeAsFileTime
GetLocalTime
InitializeSRWLock
AcquireSRWLockShared
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GlobalAlloc
GlobalFree
CancelIoEx
WaitForSingleObjectEx
ReadDirectoryChangesW
SetWaitableTimer
CreateWaitableTimerW
GetProcessHandleCount
GetVersion
GlobalUnlock
GlobalLock
GetLocaleInfoW
GetSystemDefaultLCID
GetConsoleScreenBufferInfo
SetConsoleScreenBufferSize
SetConsoleWindowInfo
SetConsoleTextAttribute
FreeConsole
AttachConsole
AllocConsole
MulDiv
GetExitCodeProcess
LocalAlloc
LocalFree
GetBinaryTypeW
CreateJobObjectW
AssignProcessToJobObject
SetInformationJobObject
QueryInformationJobObject
Module32FirstW
LoadLibraryExA
ConvertFiberToThread
RtlVirtualUnwind
WideCharToMultiByte
MultiByteToWideChar
CreateFiber
DeleteFiber
SwitchToFiber
InitializeCriticalSectionAndSpinCount
GetTimeFormatW
GetDateFormatW
SystemTimeToTzSpecificLocalTime
GetCurrencyFormatW
GetNumberFormatW
GetUserGeoID
GetGeoInfoA
GetTimeZoneInformation
GetLocaleInfoA
CreateFileMappingA
CreateFileA
GetThreadLocale
GetACP
VirtualQuery
InitializeSListHead
SwitchToThread
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlLookupFunctionEntry
RtlCaptureContext
SetFilePointerEx
GetFileSize
CreateSemaphoreA
lstrlenA
ExitProcess
VerifyVersionInfoA
GetModuleHandleA
GetSystemDirectoryA
ExpandEnvironmentStringsA
WaitForMultipleObjects
SleepEx
InitializeCriticalSectionEx
GetTickCount64
FormatMessageA
ReadConsoleW
ReadConsoleA
GetTickCount
SetConsoleMode
GetConsoleMode
LoadLibraryA
ConvertThreadToFiber
GetCurrentThreadId
CreateFileW
GetDriveTypeW
GetLogicalDrives
CloseHandle
GetLastError
SetErrorMode
DeviceIoControl
QueryPerformanceCounter
GetCommandLineW
ReleaseMutex
WaitForSingleObject
CreateMutexW
GetModuleHandleW
InitializeCriticalSection
SetCriticalSectionSpinCount
TryEnterCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
TlsGetValue
TlsSetValue
GetFileAttributesW
CreateProcessW
GetStdHandle
GetFileType
WriteConsoleW
TlsAlloc
TlsFree
TerminateProcess
GetCurrentProcessId
GetCurrentProcess
Sleep
CreateEventW
ReleaseSemaphore
ResetEvent
SetEvent
QueryPerformanceFrequency
PeekNamedPipe
SetThreadErrorMode
SetLastError
RaiseException
OutputDebugStringW
GetTempPathW
SetFileTime
SetFileAttributesW
SetEndOfFile
RemoveDirectoryW
GetLongPathNameW
GetFinalPathNameByHandleW
GetFileSizeEx
GetFileAttributesExW
GetDiskFreeSpaceExW
SetHandleInformation
FlushFileBuffers
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
CreateDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetEnvironmentVariableW
GetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
VerSetConditionMask
ReadFile
WriteFile
GetOverlappedResult
CreatePipe
GetRawInputDeviceList
SendMessageW
GetRawInputDeviceInfoA
RegisterRawInputDevices
GetRawInputData
GetWindowInfo
EnumDisplayMonitors
GetMonitorInfoW
RegisterWindowMessageW
MoveWindow
GetUserObjectInformationW
MonitorFromWindow
MonitorFromRect
MonitorFromPoint
SystemParametersInfoW
CreateIconIndirect
LoadImageW
LoadCursorFromFileW
SetWindowLongW
GetWindowLongW
ClipCursor
WindowFromPoint
ClientToScreen
GetCursorPos
SetCursor
MessageBoxW
MsgWaitForMultipleObjects
SetRect
DefWindowProcW
GetWindowRect
ScreenToClient
EnumWindows
GetTopWindow
GetWindowThreadProcessId
EnumDisplayDevicesW
MapVirtualKeyW
MsgWaitForMultipleObjectsEx
GetKeyboardLayout
DisableProcessWindowsGhosting
TranslateMessage
DispatchMessageW
SetForegroundWindow
RegisterClassExW
CreateWindowExW
DestroyWindow
RegisterClassW
UnregisterClassW
IsWindow
GetWindowLongPtrW
IsChild
VkKeyScanExW
GetParent
SetParent
GetLastInputInfo
GetShellWindow
SwitchToThisWindow
SetWindowTextW
SetWindowLongPtrW
LoadCursorW
LoadIconW
AllowSetForegroundWindow
PeekMessageW
RegisterHotKey
UnregisterHotKey
PostQuitMessage
SetWindowPos
IsWindowVisible
DialogBoxParamW
EndDialog
GetDlgItem
SetDlgItemTextW
GetProcessWindowStation
ShowWindow
SetLayeredWindowAttributes
FlashWindowEx
GetWindowPlacement
GetSystemMetrics
SetCursorPos
ShowCursor
AdjustWindowRectEx
GetClientRect
SetWindowPlacement
SetWindowRgn
ReleaseDC
GetDC
GetForegroundWindow
SetActiveWindow
UpdateWindow
EnableMenuItem
GetSystemMenu
IsWindowEnabled
EnableWindow
ReleaseCapture
SetCapture
GetCapture
RegisterTouchWindow
CloseTouchInputHandle
GetTouchInputInfo
SendInput
GetAsyncKeyState
GetKeyState
GetFocus
GetActiveWindow
SetFocus
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
IsZoomed
IsIconic
CreateRoundRectRgn
CreateRectRgn
CreateFontIndirectW
CreateBitmap
GetTextExtentPoint32W
DeleteDC
CreateCompatibleDC
GetTextMetricsW
CreateFontW
SwapBuffers
SetPixelFormat
ChoosePixelFormat
DeleteObject
GetDeviceCaps
PtInRegion
SelectObject
ChooseFontW
OpenProcessToken
SetSecurityDescriptorDacl
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
CryptAcquireContextW
CryptReleaseContext
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptDestroyKey
SetNamedSecurityInfoW
GetNamedSecurityInfoW
SetEntriesInAclW
RegQueryInfoKeyW
CreateProcessWithTokenW
LookupPrivilegeValueW
GetSidSubAuthority
DuplicateTokenEx
DuplicateToken
CreateWellKnownSid
CheckTokenMembership
AdjustTokenPrivileges
RegDeleteTreeW
RegDeleteKeyExW
GetTokenInformation
FreeSid
EqualSid
AllocateAndInitializeSid
CryptSetHashParam
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
GetUserNameW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
CryptGetProvParam
InitializeSecurityDescriptor
Shell_NotifyIconW
SHGetFolderPathW
SHGetKnownFolderPath
ShellExecuteW
SHGetSpecialFolderLocation
SHQueryUserNotificationState
ShellExecuteExW
SHCreateItemFromParsingName
SHChangeNotify
CoUninitialize
CoCreateInstance
CoCreateGuid
CoInitialize
GetRunningObjectTable
CreateBindCtx
CoSetProxyBlanket
ReleaseStgMedium
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
CoTaskMemFree
VariantClear
VariantCopy
SysFreeString
SysAllocString
IcmpCreateFile
GetAdaptersAddresses
IcmpCloseHandle
IcmpSendEcho
GetAdaptersInfo
CM_Get_Device_IDW
SetupDiOpenDevRegKey
SetupDiGetClassDevsExW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
DwmGetCompositionTimingInfo
DwmIsCompositionEnabled
DwmSetWindowAttribute
DwmExtendFrameIntoClientArea
ImmNotifyIME
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmAssociateContext
ImmReleaseContext
ImmGetContext
ImmDestroyContext
ImmCreateContext
ImmGetProperty
ImmGetIMEFileNameW
ImmGetDescriptionW
CertOpenStore
CertGetCertificateContextProperty
CryptMsgClose
CertOpenSystemStoreW
CertEnumCertificatesInStore
CertDuplicateCertificateContext
CertGetNameStringW
CryptMsgGetParam
CryptQueryObject
CertFreeCertificateContext
CertFindCertificateInStore
CertCloseStore
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetDefaultProxyConfiguration
ord211
ord60
ord46
ord143
ord50
ord41
ord22
ord26
ord27
ord32
ord33
ord35
ord79
ord301
ord200
ord30
IdnToAscii
ord2
ord3
glStencilFunc
glStencilMask
glScissor
glPolygonMode
glTexParameteri
glTexSubImage2D
glViewport
glTexEnvi
glGetString
glGenTextures
glEnable
glDisable
glDeleteTextures
glBlendFunc
glBindTexture
glAlphaFunc
wglMakeCurrent
wglGetProcAddress
wglDeleteContext
wglCreateContext
glStencilOp
glPixelStorei
glTexImage2D
glGetIntegerv
CreateDXGIFactory1
CreateDXGIFactory
D3D11CreateDevice
D3DReflect
D3DCompile
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
_Inf
?_Xbad_alloc@std@@YAXXZ
?uncaught_exception@std@@YA_NXZ
?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?_BADOFF@std@@3_JB
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
CallNtPowerInformation
WinVerifyTrust
ord141
ord88
BCryptGenRandom
memmove
memset
__C_specific_handler
wcsstr
memcmp
strrchr
wcsrchr
wcschr
strstr
memchr
__std_terminate
longjmp
_CxxThrowException
__CxxFrameHandler3
strchr
__RTtypeid
__std_type_info_compare
__RTDynamicCast
__std_exception_copy
__std_exception_destroy
__intrinsic_setjmp
memcpy
_set_purecall_handler
_purecall
wcstod
wcstoul
_wtoi
_wtof
_wcstoui64
_wtoi64
atoll
_strtoi64
strtoll
atoi
wcstombs
atol
strtol
strtod
strtoul
sinf
__setusermatherr
fabs
powf
fmod
floor
modf
asin
atan
atan2
cos
sin
sqrt
tan
_isnan
logf
ceil
pow
log
_finite
iswpunct
strcmp
strcpy
strncmp
wcsncpy
strlen
isgraph
islower
isupper
iswdigit
strtok_s
iswspace
isalnum
iswupper
strpbrk
wcsncmp
isalpha
tolower
iswalpha
iswxdigit
iswlower
isxdigit
isprint
_strdup
strspn
strcspn
_strnicmp
_stricmp
isspace
iswalnum
strcat
isdigit
wcslen
strncpy
strncat
_isatty
_open
clearerr
setbuf
_lseeki64
fputc
_close
_write
fputs
_read
_wfopen
__p__commode
__stdio_common_vsscanf
__stdio_common_vfprintf
ftell
fseek
feof
_fileno
fopen
__stdio_common_vsprintf
_setmode
fgets
fflush
__stdio_common_vfwprintf
__acrt_iob_func
__stdio_common_vswprintf
fwrite
fread
ferror
_set_fmode
fclose
bsearch
srand
rand
qsort
_set_new_mode
malloc
free
realloc
calloc
raise
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
strerror_s
_register_onexit_function
signal
_crt_atexit
strerror
__sys_nerr
_endthreadex
exit
_cexit
_errno
terminate
_seh_filter_exe
_beginthreadex
_getpid
_set_app_type
_invalid_parameter_noinfo_noreturn
_get_narrow_winmain_command_line
_initterm
_initterm_e
_c_exit
_exit
_register_thread_local_exe_atexit_callback
getenv
_time64
_gmtime64_s
_localtime64
_gmtime64
clock
_mktime64
__tzname
__daylight
_tzset
__timezone
_stat64
_stat32i64
_stat64i32
_fstat64i32
_fstat64
rename
_configthreadlocale
NvOptimusEnablement
PrintScriptCallstack
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ