Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2dcc8500314ce65e0eb19f796979cfddfe6ca53d0c277a0a9d12e8fa35daa7be.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2dcc8500314ce65e0eb19f796979cfddfe6ca53d0c277a0a9d12e8fa35daa7be.dll
Resource
win10v2004-20240508-en
Target
2dcc8500314ce65e0eb19f796979cfddfe6ca53d0c277a0a9d12e8fa35daa7be
Size
269KB
MD5
582bb499e8db4b467fd4aba979109753
SHA1
5466fcec054c4fc370da40b427b0ed508c8a83be
SHA256
2dcc8500314ce65e0eb19f796979cfddfe6ca53d0c277a0a9d12e8fa35daa7be
SHA512
976f448de172ce2942fcd01ff7e15be4cc116487f8ef67d5469aec7e90fbad7a3afae623480f109cc04d4f9af5f745120020b027132030ac3c642b1ed9194668
SSDEEP
6144:gAdTNw0h7YAa5IfmWFmQ+oy+x16Hbv+OWmQtiosy:koN5xwBy
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
C:\gl\builds\cfx-fivem\production\redm.inter-build-cache\bin\rdr3\release\dbg\tool-vehrec.pdb
GetCurrentProcess
TerminateProcess
GetModuleHandleW
GetProcAddress
LoadLibraryW
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
AreFileApisANSI
WideCharToMultiByte
OutputDebugStringA
RtlCaptureContext
GetModuleFileNameW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
ExitProcess
GetLastError
CloseHandle
GetFullPathNameW
GetFileAttributesW
CreateDirectoryW
GetCommandLineW
InitializeSListHead
MessageBoxW
??0pgBase@five@rage@@QEAA@XZ
?Allocate@pgStreamManager@five@rage@@SAPEAX_K_NPEAUBlockMap@23@@Z
?EndPacking@pgStreamManager@five@rage@@SAXXZ
?MarkToBePacked@pgStreamManager@five@rage@@SAXPEAUpgPtrRepresentation@23@_NPEAX@Z
?BeginPacking@pgStreamManager@five@rage@@SAPEAUBlockMap@23@XZ
?UnmarkResolved@pgStreamManager@five@rage@@SAXPEBX@Z
?MarkResolved@pgStreamManager@five@rage@@SAXPEBX@Z
?IsResolved@pgStreamManager@five@rage@@SA_NPEBX@Z
?ResolveFilePointer@pgStreamManager@five@rage@@SAPEAXAEAUpgPtrRepresentation@23@PEAUBlockMap@23@@Z
??1pgBase@five@rage@@QEAA@XZ
?SetBlockMap@pgBase@five@rage@@QEAAXXZ
?Save@BlockMap@five@rage@@QEAA_NHV?$fwAction@PEBX_K@@PEAUResourceFlags@23@@Z
?unsetf@ios_base@std@@QEAAXH@Z
?precision@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Xbad_function_call@std@@YAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?id@?$numpunct@D@std@@2V0locale@2@A
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?good@ios_base@std@@QEBA_NXZ
??Bios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??Bid@locale@std@@QEAA_KXZ
?_Xout_of_range@std@@YAXPEBD@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?flags@ios_base@std@@QEAAHH@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?exceptions@ios_base@std@@QEAAXH@Z
__current_exception
__std_type_info_destroy_list
wcsstr
wcsrchr
memcmp
__C_specific_handler
__current_exception_context
__std_terminate
memset
memmove
memcpy
memchr
__CxxFrameHandler3
_CxxThrowException
__std_exception_destroy
_purecall
__std_type_info_compare
__std_exception_copy
__CxxFrameHandler4
_cexit
_initterm
_initterm_e
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_crt_atexit
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
terminate
fclose
fwrite
ftell
fseek
fread
__stdio_common_vfwprintf
__acrt_iob_func
_wfopen
setvbuf
__stdio_common_vfprintf
__stdio_common_vsnprintf_s
free
calloc
malloc
_callnewh
realloc
_ldclass
_dsign
_ldsign
_dclass
_fdclass
_fdsign
strncpy
wcscpy_s
_stricmp
localeconv
getenv
CreateComponent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ