Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
be3940024c1853a37d5ca2478716117e4f4d92f8c428e5f9820417acda5b75c3.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
be3940024c1853a37d5ca2478716117e4f4d92f8c428e5f9820417acda5b75c3.dll
Resource
win10v2004-20240611-en
Target
be3940024c1853a37d5ca2478716117e4f4d92f8c428e5f9820417acda5b75c3
Size
192KB
MD5
59aa7479516e21ded2aacffc73ab340a
SHA1
c2faf5fce58fb1e916c7f4c39e26ea5f134b25d5
SHA256
be3940024c1853a37d5ca2478716117e4f4d92f8c428e5f9820417acda5b75c3
SHA512
b261e7be36354deaf82ef13ffb987e461c6cb052ca4730c320860fe45612c063318597b215af26b443cda73c30b7cf68cd357d0d9160eb95d3c252a3799bc1a0
SSDEEP
3072:KXXW4GWdOGhfg2T1g8CAQt4KAIkY/xIFIn9mTs5GRQ9O9caMFHt1BWg9RkkBzdk:KHW4GWFhIE45oTs5tRZUmR/dk
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
FactoryGameEGS-SessionServices.pdb
?IsValid@FWeakObjectPtr@@QEBA_N_N0@Z
?GetStructPathName@UStruct@@QEBA?AUFTopLevelAssetPath@@XZ
?Get@FWeakObjectPtr@@QEBAPEAVUObject@@XZ
?StaticStruct@FEngineServicePong@@SAPEAVUScriptStruct@@XZ
?StaticStruct@FEngineServiceExecuteCommand@@SAPEAVUScriptStruct@@XZ
?StaticStruct@FEngineServiceTerminate@@SAPEAVUScriptStruct@@XZ
?StaticStruct@FEngineServicePing@@SAPEAVUScriptStruct@@XZ
?StaticStruct@FSessionServicePong@@SAPEAVUScriptStruct@@XZ
?StaticStruct@FSessionServiceLog@@SAPEAVUScriptStruct@@XZ
?StaticStruct@FSessionServiceLogSubscribe@@SAPEAVUScriptStruct@@XZ
?StaticStruct@FSessionServiceLogUnsubscribe@@SAPEAVUScriptStruct@@XZ
?StaticStruct@FSessionServicePing@@SAPEAVUScriptStruct@@XZ
?Get@FCommandLine@@SAPEB_WXZ
?GCycleStatsShouldEmitNamedEvents@@3HA
?GStartTime@@3NA
?CpuChannel@@3AEAVFChannel@Trace@UE@@EA
?Standalone@FApp@@0_NA
?SessionUsers@FApp@@0V?$TArray@VFString@@V?$TSizedDefaultAllocator@$0CA@@@@@A
?SessionOwner@FApp@@0VFString@@A
?SessionName@FApp@@0VFString@@A
?SessionId@FApp@@0UFGuid@@A
?bIsRawStatsActive@FThreadStats@@0_NA
?bPrimaryDisableForever@FThreadStats@@0_NA
?bPrimaryEnable@FThreadStats@@0_NA
?TlsSlot@FThreadStats@@0IA
?bIsDisabled@FLowLevelMemTracker@@2_NA
?SecondsPerCycle@FGenericPlatformTime@@1NA
??0FName@@QEAA@PEB_WW4EFindName@@@Z
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??1FLogCategoryBase@@QEAA@XZ
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPathDebug@Private@CoreUObject@UE@@EA
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?Stricmp@FGenericPlatformStricmp@@SAHPEB_W0@Z
?HandleAtomicsFailure@FWindowsPlatformAtomics@@KAXPEB_WZZ
?BeginNamedEvent@FWindowsPlatformMisc@@SAXAEBUFColor@@PEBD@Z
?EndNamedEvent@FWindowsPlatformMisc@@SAXXZ
?OutputBeginDynamicEventWithId@FCpuProfilerTrace@@SAXVFName@@PEB_WPEBDI@Z
?OutputEndEvent@FCpuProfilerTrace@@SAXXZ
?CheckVerifyFailedImpl@FDebug@@SA_NPEBD0HPEAXPEB_WZZ
?CheckVerifyImpl@@YA_NAEA_N_NPEBDHPEAX2PEB_WZZ
?Log@FOutputDevice@@QEAAXPEB_W@Z
?LogfImpl@FOutputDevice@@AEAAXPEB_WZZ
?Malloc@FMemory@@SAPEAX_KI@Z
?Realloc@FMemory@@SAPEAXPEAX_KI@Z
?Free@FMemory@@SAXPEAX@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?OnInvalidArrayNum@Private@Core@UE@@YAX_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_KI@Z
?MemCrc_DEPRECATED@FCrc@@SAIPEBXHI@Z
??0FString@@QEAA@PEBD@Z
??0FString@@QEAA@PEB_W@Z
??0FString@@QEAA@HPEB_W@Z
??4FString@@QEAAAEAV0@PEB_W@Z
?RemoveAt@FString@@QEAAXHH_N@Z
?ConcatFF@FString@@CA?AV1@$$QEAV1@AEBV1@@Z
?ConcatFC@FString@@CA?AV1@$$QEAV1@PEB_W@Z
?Find@FString@@QEBAHPEB_WHW4Type@ESearchCase@@W42ESearchDir@@H@Z
?PrintfImpl@FString@@CA?AV1@PEB_WZZ
?FromValidEName@FNameEntryId@@CA?AU1@W4EName@@@Z
?ToString@FName@@QEBA?AVFString@@XZ
??0FName@@QEAA@PEBDW4EFindName@@@Z
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?Command@FParse@@SA_NPEAPEB_WPEB_W_N@Z
?Value@FParse@@SA_NPEB_W0AEAVFString@@_NPEAPEB_W@Z
?Token@FParse@@SA?AVFString@@AEAPEB_W_N@Z
?GetGlobalLogSingleton@@YAPEAVFOutputDeviceRedirector@@XZ
?Get@FCoreTexts@@SAAEBU1@XZ
?GenerateNewID@FDelegateHandle@@CA_KXZ
?StackWalkAndDump@FWindowsPlatformStackWalk@@SAXPEAD_KHPEAX@Z
?ThreadStackWalkAndDump@FWindowsPlatformStackWalk@@SAXPEAD_KHI@Z
?GetDestructionSentinelStackTls@FMRSWRecursiveAccessDetector@@CAAEAV?$TArray@PEAUFDestructionSentinel@FMRSWRecursiveAccessDetector@@V?$TSizedInlineAllocator@$03$0CA@V?$TSizedDefaultAllocator@$0CA@@@@@@@XZ
?GetReadersTls@FMRSWRecursiveAccessDetector@@CAAEAV?$TArray@UFReaderNum@FMRSWRecursiveAccessDetector@@V?$TSizedInlineAllocator@$03$0CA@V?$TSizedDefaultAllocator@$0CA@@@@@@@XZ
?GetCurrentProcessId@FWindowsPlatformProcess@@SAIXZ
?ComputerName@FWindowsPlatformProcess@@SAPEB_WXZ
?UserName@FWindowsPlatformProcess@@SAPEB_W_N@Z
??0FMemScope@@QEAA@W4ELLMTag@@_N@Z
??1FMemScope@@QEAA@XZ
?Init@FLLMScope@@IEAAXW4ELLMTag@@_NW4ELLMTagSet@@W4ELLMTracker@@1@Z
?Destruct@FLLMScope@@IEAAXXZ
?Get@FThreadStatsPool@@SAAEAU1@XZ
?GetFromPool@FThreadStatsPool@@QEAAPEAVFThreadStats@@XZ
?Flush@FThreadStats@@QEAAX_N0@Z
?FlushRawStats@FThreadStats@@QEAAX_N0@Z
?DoSetup@FThreadSafeStaticStatBase@@IEBAPEBUTStatIdData@@PEBDPEB_W001_N2W4Type@EStatDataType@@22W4EMemoryCounterRegion@FWindowsPlatformMemory@@@Z
?CityHash64@@YA_KPEBDI@Z
?AppendString@FGuid@@QEBAXAEAVFString@@W4EGuidFormats@@@Z
?NewGuid@FGuid@@SA?AU1@XZ
?ToString@FText@@QEBAAEBVFString@@XZ
?Now@FDateTime@@SA?AU1@XZ
?UtcNow@FDateTime@@SA?AU1@XZ
?Get@FTaskGraphInterface@@SAAEAV1@XZ
?SerializeRecord@FOutputDevice@@UEAAXAEBVFLogRecord@UE@@@Z
??0FSelfRegisteringExec@@QEAA@XZ
??1FSelfRegisteringExec@@UEAA@XZ
?GetBuildDate@FApp@@SA?AVFString@@XZ
?GetInstanceId@FApp@@SA?AUFGuid@@XZ
?GetCoreTicker@FTSTicker@@SAAEAV1@XZ
?AddTicker@FTSTicker@@QEAA?AV?$TWeakPtr@UFElement@FTSTicker@@$00@@AEBV?$TDelegate@$$A6A_NM@ZUFDefaultDelegateUserPolicy@@@@M@Z
?RemoveTicker@FTSTicker@@SAXV?$TWeakPtr@UFElement@FTSTicker@@$00@@@Z
?AddOutputDevice@FOutputDeviceRedirector@@QEAAXPEAVFOutputDevice@@@Z
?RemoveOutputDevice@FOutputDeviceRedirector@@QEAAXPEAVFOutputDevice@@@Z
?Get@FModuleManager@@SAAEAV1@XZ
?LoadModuleChecked@FModuleManager@@QEAAAEAVIModuleInterface@@VFName@@@Z
?Exec@FExec@@UEAA_NPEAVUWorld@@PEB_WAEAVFOutputDevice@@@Z
?GShouldEmitVerboseNamedEvents@@3_NA
InitializeCriticalSection
SetCriticalSectionSpinCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentThreadId
TlsGetValue
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
InitializeSListHead
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
memcpy
memmove
memset
__C_specific_handler
_purecall
__std_type_info_destroy_list
__current_exception
__current_exception_context
__CxxFrameHandler4
_crt_at_quick_exit
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
terminate
_initterm_e
_initterm
_cexit
_configure_narrow_argv
_seh_filter_dll
InitializeModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ