Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
e0cbe4b0eacf12d21f1195c3d45edec93ab2d490397cdfc3d03c5e9a1594e705.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e0cbe4b0eacf12d21f1195c3d45edec93ab2d490397cdfc3d03c5e9a1594e705.dll
Resource
win10v2004-20240611-en
Target
e0cbe4b0eacf12d21f1195c3d45edec93ab2d490397cdfc3d03c5e9a1594e705
Size
123KB
MD5
c6ebfae98215eea7829ee9643d6da275
SHA1
1461f844a3897675fdeeee9d86ac69e06fe402b6
SHA256
e0cbe4b0eacf12d21f1195c3d45edec93ab2d490397cdfc3d03c5e9a1594e705
SHA512
e7a24488e1e8c9089a152a604749c3e7bc04efe6f5ab6d4b9de04773a323bb3a74b89bb8bcba672aeb2b201400480a0b1f2ac01b2f17c25b59ada170b383d470
SSDEEP
3072:AkNydwSRY9eYUZJ10cPtXfI4tUS7TO9caMFHt1BWg9RkkBzYMH:7NydwS9qc0aRZUmR/Y6
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
FactoryServer-Json-Win64-Shipping.pdb
??0FName@@QEAA@PEB_WW4EFindName@@@Z
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??1FLogCategoryBase@@QEAA@XZ
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPathDebug@Private@CoreUObject@UE@@EA
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?Stricmp@FGenericPlatformStricmp@@SAHPEB_W0@Z
?CheckVerifyFailedImpl@FDebug@@SA_NPEBD0HPEAXPEB_WZZ
?Malloc@FMemory@@SAPEAX_KI@Z
?Free@FMemory@@SAXPEAX@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?OnInvalidArrayNum@Private@Core@UE@@YAX_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_KI@Z
?RoundHalfFromZero@FMath@@SANN@Z
??0FString@@QEAA@PEB_W@Z
??0FString@@QEAA@HPEB_W@Z
??4FString@@QEAAAEAV0@PEB_W@Z
?AppendChars@FString@@QEAAXPEB_WH@Z
?IsNumeric@FString@@QEBA_NXZ
?PrintfImpl@FString@@CA?AV1@PEB_WZZ
?ParseIntoArray@FString@@QEBAHAEAV?$TArray@VFString@@V?$TSizedDefaultAllocator@$0CA@@@@@PEB_W_N@Z
?Replace@FString@@QEGBA?AV1@PEB_W0W4Type@ESearchCase@@@Z
?Replace@FString@@QEHAA?AV1@PEB_W0W4Type@ESearchCase@@@Z
?ToBool@FString@@QEBA_NXZ
?SanitizeFloat@FString@@SA?AV1@NH@Z
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?BasicLog@Private@Logging@UE@@YAXAEBUFLogCategoryBase@@PEBUFStaticBasicLogRecord@123@ZZ
?CRCTable_DEPRECATED@FCrc@@2PAIA
__std_type_info_destroy_list
_purecall
memcpy
memmove
__C_specific_handler
memset
__CxxFrameHandler4
wcstod
_wtoi
_wtoi64
_wcstoui64
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit
_execute_onexit_table
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
ReleaseSRWLockExclusive
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
??0FJsonPointer@Json@UE@@QEAA@$$QEAV012@@Z
??0FJsonPointer@Json@UE@@QEAA@AEBV012@@Z
??0FJsonPointer@Json@UE@@QEAA@V?$TStringView@_W@@@Z
?Append@FJsonPointer@Json@UE@@QEAAXV?$TStringView@_W@@@Z
?AsArray@FJsonValue@@QEBAAEBV?$TArray@V?$TSharedPtr@VFJsonValue@@$00@@V?$TSizedDefaultAllocator@$0CA@@@@@XZ
?AsBool@FJsonValue@@QEBA_NXZ
?AsNumber@FJsonValue@@QEBANXZ
?AsObject@FJsonValue@@UEBAAEBV?$TSharedPtr@VFJsonObject@@$00@@XZ
?AsString@FJsonValue@@QEBA?AVFString@@XZ
?CompareEqual@FJsonValue@@SA_NAEBV1@0@Z
?Duplicate@FJsonObject@@SAXAEBV?$TSharedPtr@$$CBVFJsonObject@@$00@@AEBV?$TSharedPtr@VFJsonObject@@$00@@@Z
?Duplicate@FJsonObject@@SAXAEBV?$TSharedPtr@VFJsonObject@@$00@@AEAV2@@Z
?Duplicate@FJsonValue@@SA?AV?$TSharedPtr@VFJsonValue@@$00@@AEBV2@@Z
?ErrorMessage@FJsonValue@@IEBAXAEBVFString@@@Z
?EscapePart@FJsonPointer@Json@UE@@SA?AVFString@@AEBV4@@Z
?GetArrayField@FJsonObject@@QEBAAEBV?$TArray@V?$TSharedPtr@VFJsonValue@@$00@@V?$TSizedDefaultAllocator@$0CA@@@@@AEBVFString@@@Z
?GetBoolField@FJsonObject@@QEBA_NAEBVFString@@@Z
?GetNumberField@FJsonObject@@QEBANAEBVFString@@@Z
?GetObjectField@FJsonObject@@QEBAAEBV?$TSharedPtr@VFJsonObject@@$00@@AEBVFString@@@Z
?GetStringField@FJsonObject@@QEBA?AVFString@@AEBV2@@Z
?GetSubPath@FJsonPointer@Json@UE@@QEBA?AV123@H@Z
?LogJson@@3UFLogCategoryLogJson@@A
?ParsePath@FJsonPointer@Json@UE@@AEAA_NAEBVFString@@@Z
?RemoveField@FJsonObject@@QEAAXAEBVFString@@@Z
?SetArrayField@FJsonObject@@QEAAXAEBVFString@@AEBV?$TArray@V?$TSharedPtr@VFJsonValue@@$00@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?SetArrayIndex@FJsonPointer@Json@UE@@QEAAXH@Z
?SetBoolField@FJsonObject@@QEAAXAEBVFString@@_N@Z
?SetField@FJsonObject@@QEAAXAEBVFString@@AEBV?$TSharedPtr@VFJsonValue@@$00@@@Z
?SetNumberField@FJsonObject@@QEAAXAEBVFString@@N@Z
?SetObjectField@FJsonObject@@QEAAXAEBVFString@@AEBV?$TSharedPtr@VFJsonObject@@$00@@@Z
?SetStringField@FJsonObject@@QEAAXAEBVFString@@0@Z
?ToString@FJsonPointer@Json@UE@@QEBA?AVFString@@XZ
?TryGet@FJsonPointer@Json@UE@@QEBA_NAEBV?$TArray@V?$TSharedPtr@VFJsonValue@@$00@@V?$TSizedDefaultAllocator@$0CA@@@@@AEAV?$TSharedPtr@VFJsonValue@@$00@@@Z
?TryGet@FJsonPointer@Json@UE@@QEBA_NAEBV?$TSharedPtr@VFJsonObject@@$00@@AEAV?$TSharedPtr@VFJsonValue@@$00@@@Z
?TryGet@FJsonPointer@Json@UE@@QEBA_NAEBV?$TSharedPtr@VFJsonValue@@$00@@AEAV4@@Z
?TryGetArrayField@FJsonObject@@QEBA_NAEBVFString@@AEAPEBV?$TArray@V?$TSharedPtr@VFJsonValue@@$00@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?TryGetBoolField@FJsonObject@@QEBA_NAEBVFString@@AEA_N@Z
?TryGetNumber@FJsonValue@@UEBA_NAEAC@Z
?TryGetNumber@FJsonValue@@UEBA_NAEAE@Z
?TryGetNumber@FJsonValue@@UEBA_NAEAF@Z
?TryGetNumber@FJsonValue@@UEBA_NAEAG@Z
?TryGetNumber@FJsonValue@@UEBA_NAEAH@Z
?TryGetNumber@FJsonValue@@UEBA_NAEAI@Z
?TryGetNumber@FJsonValue@@UEBA_NAEAM@Z
?TryGetNumber@FJsonValue@@UEBA_NAEA_J@Z
?TryGetNumber@FJsonValue@@UEBA_NAEA_K@Z
?TryGetNumberField@FJsonObject@@QEBA_NAEBVFString@@AEAC@Z
?TryGetNumberField@FJsonObject@@QEBA_NAEBVFString@@AEAE@Z
?TryGetNumberField@FJsonObject@@QEBA_NAEBVFString@@AEAF@Z
?TryGetNumberField@FJsonObject@@QEBA_NAEBVFString@@AEAG@Z
?TryGetNumberField@FJsonObject@@QEBA_NAEBVFString@@AEAH@Z
?TryGetNumberField@FJsonObject@@QEBA_NAEBVFString@@AEAI@Z
?TryGetNumberField@FJsonObject@@QEBA_NAEBVFString@@AEAM@Z
?TryGetNumberField@FJsonObject@@QEBA_NAEBVFString@@AEAN@Z
?TryGetNumberField@FJsonObject@@QEBA_NAEBVFString@@AEA_J@Z
?TryGetNumberField@FJsonObject@@QEBA_NAEBVFString@@AEA_K@Z
?TryGetObjectField@FJsonObject@@QEBA_NAEBVFString@@AEAPEBV?$TSharedPtr@VFJsonObject@@$00@@@Z
?TryGetStringArrayField@FJsonObject@@QEBA_NAEBVFString@@AEAV?$TArray@VFString@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?TryGetStringField@FJsonObject@@QEBA_NAEBVFString@@AEAV2@@Z
?UnescapePart@FJsonPointer@Json@UE@@SA?AVFString@@AEBV4@@Z
InitializeModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ