Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
b7ee8641b94ceab5f1dc7f40336f8987a045dd8b0e408279d30b3a011acbd8c5.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b7ee8641b94ceab5f1dc7f40336f8987a045dd8b0e408279d30b3a011acbd8c5.dll
Resource
win10v2004-20240226-en
Target
b7ee8641b94ceab5f1dc7f40336f8987a045dd8b0e408279d30b3a011acbd8c5
Size
460KB
MD5
36b8ddef9d6f06691a543c2f2c16b2e0
SHA1
c4bdaaabd4786da379a80adfbd86e1ff1e314ec8
SHA256
b7ee8641b94ceab5f1dc7f40336f8987a045dd8b0e408279d30b3a011acbd8c5
SHA512
19c7062119c821bf92efb554bf56eb0139dd4584a1b747f5b440c529068886141057bcd00f611b52704bce2153d305d959fded8811c5a06898a974f840ba4fe6
SSDEEP
6144:Ln4qPqB1FBYzyE0+LAASdoxuMXtB7duF9Yv4EwLFUGi41KFtXARG2K9WxfmrR+C:LmBAyE0iieuMsW0KfuG268Sd
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
C:\gl\builds\cfx-fivem\beta\fivem.inter-build-cache\bin\five\release\dbg\citizen-level-loader-five.pdb
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
InitializeSListHead
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoEx
FormatMessageA
LocalFree
InitOnceComplete
InitOnceBeginInitialize
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
VirtualQuery
VirtualFree
VirtualAlloc
GetSystemInfo
Thread32Next
Thread32First
QueryPerformanceCounter
VirtualProtect
FlushInstructionCache
SetThreadContext
GetThreadContext
ResumeThread
SuspendThread
GetCurrentThreadId
GetCurrentProcessId
Sleep
HeapFree
HeapReAlloc
HeapAlloc
HeapCreate
OutputDebugStringA
RtlCaptureContext
GetModuleFileNameW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
OpenThread
ExitProcess
GetLastError
CloseHandle
GetFullPathNameW
GetFileAttributesW
CreateDirectoryW
GetCommandLineW
GetSystemTimeAsFileTime
LoadLibraryW
GetCurrentProcess
GetProcAddress
GetModuleHandleW
TerminateProcess
CreateToolhelp32Snapshot
DisableThreadLibraryCalls
MessageBoxW
?Mount@fiDeviceRelative@rage@@QEAAXPEBD@Z
?SetPath@fiDeviceRelative@rage@@QEAAXPEBDPEAVfiDevice@2@_N@Z
??0fiDeviceRelative@rage@@QEAA@XZ
?GetDevice@fiDevice@rage@@SAPEAV12@PEBD_N@Z
?OnInitialMount@fiDevice@rage@@2V?$fwEvent@$$V@@A
??2sysUseAllocator@rage@@SAPEAX_K@Z
??3sysUseAllocator@rage@@SAXPEAX@Z
?GetDevice@vfs@@YA?AV?$fwRefContainer@VDevice@vfs@@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?CfxCollection_AddStreamingFileByTag@@YAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0UResourceFlags@rage@@@Z
?AddDataFileToLoadList@streaming@@YAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?Kill@GtaThread@@UEAAXXZ
?OnScriptInit@scrEngine@rage@@2V?$fwEvent@$$V@@A
?Tick@GtaThread@@UEAA?AW4eThreadState@rage@@I@Z
?Reset@GtaThread@@UEAA?AW4eThreadState@rage@@IPEAXI@Z
?Run@GtaThread@@UEAA?AW4eThreadState@rage@@I@Z
?CreateThread@scrEngine@rage@@SAXPEAVGtaThread@@@Z
?GetNativeHandler@scrEngine@rage@@SAP6AXPEAVscrNativeCallContext@2@@Z_K@Z
?LoadMetaData@ResourceMetaDataComponent@fx@@QEAA?AV?$optional@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
??0task_continuation_context@Concurrency@@AEAA@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Syserror_map@std@@YAPEBDH@Z
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?id@?$numpunct@D@std@@2V0locale@2@A
?id@?$numpunct@_W@std@@2V0locale@2@A
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_Winerror_map@std@@YAHH@Z
?classic@locale@std@@SAAEBV12@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
_Mbrtowc
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?uncaught_exception@std@@YA_NXZ
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?_Xout_of_range@std@@YAXPEBD@Z
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_broadcast
?_Throw_C_error@std@@YAXH@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??Bid@locale@std@@QEAA_KXZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?width@ios_base@std@@QEAA_J_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Xbad_function_call@std@@YAXXZ
?_Internal_empty@_Concurrent_queue_base_v4@details@Concurrency@@IEBA_NXZ
??1_Concurrent_queue_base_v4@details@Concurrency@@MEAA@XZ
?_Internal_move_push@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXPEAX@Z
?_Internal_pop_if_present@_Concurrent_queue_base_v4@details@Concurrency@@IEAA_NPEAX@Z
?_Internal_finish_clear@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXXZ
?_Internal_throw_exception@_Concurrent_queue_base_v4@details@Concurrency@@IEBAXXZ
??0_Concurrent_queue_base_v4@details@Concurrency@@IEAA@_K@Z
__current_exception
__std_type_info_destroy_list
__current_exception_context
_purecall
__std_exception_copy
__std_exception_destroy
memmove
memcmp
_CxxThrowException
memset
__std_terminate
memchr
__CxxFrameHandler3
memcpy
wcsrchr
wcsstr
__C_specific_handler
__CxxFrameHandler4
_crt_atexit
_initterm_e
abort
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_cexit
_execute_onexit_table
terminate
_initterm
fclose
__stdio_common_vfprintf
__acrt_iob_func
fwrite
_wfopen
__stdio_common_vsprintf
setvbuf
__stdio_common_vsnprintf_s
free
malloc
realloc
_callnewh
calloc
_dsign
floor
pow
_dclass
_ldsign
_ldclass
_fdclass
_fdsign
localeconv
wcscpy_s
getenv
strtoull
strtoul
?SetNextLevelPath@streaming@@YAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
CreateComponent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ