Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
ba338788621c087d31a8a89b31a9ec877e3946f533fbe3112ba3caa1f82d2fde.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
ba338788621c087d31a8a89b31a9ec877e3946f533fbe3112ba3caa1f82d2fde.dll
Resource
win10v2004-20240611-en
Target
ba338788621c087d31a8a89b31a9ec877e3946f533fbe3112ba3caa1f82d2fde
Size
1.0MB
MD5
2f3f838008bb9c33052c77bc93cc8b07
SHA1
89a4dcba9c771af6a3da1c3675f813ba788908f8
SHA256
ba338788621c087d31a8a89b31a9ec877e3946f533fbe3112ba3caa1f82d2fde
SHA512
02556dcb7c8a029ee098440fa99a411e410a646f8d383589fff20638cfbe8db73df2e792252cd2075980e10ea852e9ed6ba16d32c930d17c630ef8ec4a74e23f
SSDEEP
12288:YLhTXwYg2D2ZKJ1rU/gRT1zRRJgWZwgn6NsUg781AQtA6aHih:YL1XwY7D2Zm1rqAT1zRRCWZweZQF6U
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
C:\gl\builds\cfx-fivem\production\fivem.inter-build-cache\bin\five\release\dbg\gta-net-five.pdb
timeGetTime
bind
getsockname
htonl
htons
inet_addr
ntohl
recvfrom
sendto
WSASetLastError
inet_ntop
CreateEventW
ResetEvent
GetCurrentProcess
TerminateProcess
GetModuleHandleW
GetProcAddress
LoadLibraryW
GetCurrentThreadId
GetModuleFileNameW
GetModuleHandleExW
VirtualProtect
VirtualAlloc
VirtualFree
VirtualQuery
GetTickCount64
GetCommandLineW
CloseHandle
GetLastError
ExitProcess
CreateProcessW
GetTickCount
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
SetUnhandledExceptionFilter
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitOnceComplete
InitOnceBeginInitialize
Thread32Next
RtlLookupFunctionEntry
CreateToolhelp32Snapshot
FlushInstructionCache
SetThreadContext
GetThreadContext
SuspendThread
GetCurrentProcessId
Sleep
HeapFree
HeapReAlloc
HeapAlloc
HeapCreate
ResumeThread
SetEvent
TlsFree
TlsAlloc
CreateSemaphoreExW
WaitForSingleObjectEx
ReleaseSemaphore
GetProcessAffinityMask
GetNativeSystemInfo
GetSystemInfo
OutputDebugStringA
RtlCaptureContext
OpenThread
GetCurrentThread
GetFullPathNameW
GetFileAttributesW
CreateDirectoryW
InitializeSListHead
RtlVirtualUnwind
IsProcessorFeaturePresent
UnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
Thread32First
DisableThreadLibraryCalls
MessageBoxW
??1Buffer@net@@QEAA@XZ
?Seek@Buffer@net@@QEAAX_K@Z
?Read@Buffer@net@@QEAA_NPEAX_K@Z
??0Buffer@net@@QEAA@PEBE_K@Z
??0Buffer@net@@QEAA@XZ
??0Buffer@net@@QEAA@AEBV01@@Z
??0Buffer@net@@QEAA@$$QEAV01@@Z
??0Buffer@net@@QEAA@_K@Z
?ToString@PeerAddress@net@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?FromString@PeerAddress@net@@SA?AV?$optional@VPeerAddress@net@@@boost@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HW4LookupType@12@@Z
?GetRemainingBytes@Buffer@net@@QEBA_KXZ
?IsAtEnd@Buffer@net@@QEBA_NXZ
?Clone@Buffer@net@@QEBA?AV12@XZ
??4Buffer@net@@QEAAAEAV01@$$QEAV01@@Z
?GetData@Buffer@net@@QEBAAEBV?$vector@EV?$allocator@E@std@@@std@@XZ
?GetLength@Buffer@net@@QEBA_KXZ
?GetBuffer@Buffer@net@@QEBAPEBEXZ
?Write@Buffer@net@@QEAAXPEBX_K@Z
?OnNetLibraryCreate@NetLibrary@@2V?$fwEvent@PEAVNetLibrary@@@@A
?SendUnreliableCommand@NetLibrary@@QEAAXPEBD0_K@Z
?GetPing@NetLibrary@@QEAAHXZ
?GetVariance@NetLibrary@@QEAAHXZ
?OnBuildMessage@NetLibrary@@2V?$fwEvent@AEBV?$function@$$A6AXIPEBDH@Z@std@@@@A
?RunMainFrame@NetLibrary@@QEAAXXZ
?WaitForRoutedPacket@NetLibrary@@QEAA_NI@Z
?Create@NetLibrary@@SAPEAV1@XZ
?SendNetEvent@NetLibrary@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0H@Z
?AddReliableHandler@NetLibrary@@QEAAXPEBDAEBV?$function@$$A6AXPEBD_K@Z@std@@_N@Z
?CreateMumbleClient@@YA?AV?$fwRefContainer@VIMumbleClient@@@@XZ
?scrBindCreateNativeMethodStub@@YA?AV?$function@$$A6AXAEAVScriptContext@fx@@@Z@std@@P6AXAEAVScriptContext@fx@@PEAX@Z1@Z
?OnKillNetworkDone@@3V?$fwEvent@$$V@@A
?GetPoolBase@rage@@YAPEAVatPoolBase@@I@Z
?IsControlKeyDown@game@@YA_NH@Z
?SetScInitWaitCallback@@YAXP6A_NXZ@Z
?WaitForRlInit@@YAXXZ
?OnKillNetwork@@3V?$fwEvent@PEBD@@A
?ShouldMuteGameAudio@@YA_NXZ
?PoolAllocate@rage@@YAPEAXPEAVatPoolBase@@@Z
?OnLookAliveFrame@@3V?$fwEvent@$$V@@A
?OnMainGameFrame@@3V?$fwEvent@$$V@@A
?OnCriticalGameFrame@@3V?$fwEvent@$$V@@A
?OnGameFrame@@3V?$fwEvent@$$V@@A
?GetArchetypeFromHashKey@fwArchetypeManager@rage@@SAPEAVfwArchetype@@IAEAUfwModelId@2@@Z
?IsOfType@fwEntity@@QEAA_NI@Z
?GetInstance@Manager@streaming@@SAPEAV12@XZ
?GetStreamingModule@strStreamingModuleMgr@streaming@@QEAAPEAVstrStreamingModule@2@PEBD@Z
?GetPosition@fwEntity@@QEBA?AUXMFLOAT3@DirectX@@XZ
?GetRadius@fwEntity@@QEAAMXZ
?Get@fwExtensionList@@QEAAPEAXI@Z
?GetClassId@fwSceneUpdateExtension@@SAIXZ
?GetStreamingBaseNameForHash@streaming@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z
?GetSeatManager@CVehicle@@QEAAPEAVVehicleSeatManager@@XZ
?GetBaseFromGuid@fwScriptGuid@rage@@SAPEAVfwEntity@@H@Z
?OnAddStreamingResource@fx@@3V?$fwEvent@AEBUStreamingEntryData@fx@@@@A
?IsAsynchronous@StateBagGameInterface@fx@@UEAA_NXZ
?OnInitializeInstance@ResourceManager@fx@@2V?$fwEvent@PEAVResourceManager@fx@@@@A
?Load@RpcConfiguration@@SA?AV?$shared_ptr@VRpcConfiguration@@@std@@V?$basic_string_view@DU?$char_traits@D@std@@@3@@Z
?Create@StateBagComponent@fx@@SA?AV?$fwRefContainer@VStateBagComponent@fx@@@@W4StateBagRole@2@@Z
?QueueTask@StateBagGameInterface@fx@@UEAAX$$QEAV?$function@$$A6AXXZ@std@@@Z
??0StateBagGameInterface@fx@@QEAA@XZ
?QueueEvent@ResourceEventManagerComponent@fx@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00PEAVResourceEventComponent@2@@Z
?GetDevice@vfs@@YA?AV?$fwRefContainer@VDevice@vfs@@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetNativeHandler@ScriptEngine@fx@@SA?AV?$optional@V?$function@$$A6AXAEAVScriptContext@fx@@@Z@std@@@boost@@_K@Z
?RegisterNativeHandler@ScriptEngine@fx@@SAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$function@$$A6AXAEAVScriptContext@fx@@@Z@4@@Z
?RegisterNativeHandler@ScriptEngine@fx@@SAX_KV?$function@$$A6AXAEAVScriptContext@fx@@@Z@std@@@Z
?GetNativeHandler@scrEngine@rage@@SAP6AXPEAVscrNativeCallContext@2@@Z_K@Z
?OnScriptInit@scrEngine@rage@@2V?$fwEvent@$$V@@A
?GetAllocator@rage@@YAPEAVsysMemAllocator@1@XZ
?UpdateAllocatorValue@sysMemAllocator@rage@@SAPEAV12@XZ
?OnShouldDrawGui@ConHost@@3V?$fwEvent@PEA_N@@A
?OnDrawGui@ConHost@@3V?$fwEvent@$$V@@A
?BeginChild@ImGui@@YA_NPEBDAEBUImVec2@@_NH@Z
?EndChild@ImGui@@YAXXZ
?SetNextWindowPos@ImGui@@YAXAEBUImVec2@@H0@Z
?SetNextWindowSize@ImGui@@YAXAEBUImVec2@@H@Z
?SetNextWindowSizeConstraints@ImGui@@YAXAEBUImVec2@@0P6AXPEAUImGuiSizeCallbackData@@@ZPEAX@Z
?SetNextWindowBgAlpha@ImGui@@YAXM@Z
?PushStyleVar@ImGui@@YAXHM@Z
?PopStyleVar@ImGui@@YAXH@Z
?Begin@ImGui@@YA_NPEBDPEA_NH@Z
?GetIO@ImGui@@YAAEAUImGuiIO@@XZ
?GetFontSize@ImGui@@YAMXZ
?Separator@ImGui@@YAXXZ
?GImGui@@3PEAUImGuiContext@@EA
?SameLine@ImGui@@YAXMM@Z
?TreeNodeEx@ImGui@@YA_NPEBXHPEBDZZ
?Text@ImGui@@YAXPEBDZZ
?Button@ImGui@@YA_NPEBDAEBUImVec2@@@Z
?TreeNode@ImGui@@YA_NPEBD@Z
?TreePop@ImGui@@YAXXZ
?NextColumn@ImGui@@YAXXZ
?TreeNodeEx@ImGui@@YA_NPEBDH@Z
?TreeNode@ImGui@@YA_NPEBXPEBDZZ
?BeginDisabled@ImGui@@YAX_N@Z
?EndDisabled@ImGui@@YAXXZ
?IsItemClicked@ImGui@@YA_NH@Z
?GetMainViewport@ImGui@@YAPEAUImGuiViewport@@XZ
??0ImRect@@QEAA@XZ
?GetID@ImGuiWindow@@QEAAIPEBD0@Z
?CalcItemSize@ImGui@@YA?AUImVec2@@U2@MM@Z
?SplitterBehavior@ImGui@@YA_NAEBUImRect@@IW4ImGuiAxis@@PEAM2MMMMI@Z
?End@ImGui@@YAXXZ
?Columns@ImGui@@YAXHPEBD_N@Z
?id@?$numpunct@_W@std@@2V0locale@2@A
?id@?$numpunct@D@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
??0task_continuation_context@Concurrency@@AEAA@XZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
_Mbrtowc
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Xbad_function_call@std@@YAXXZ
?uncaught_exception@std@@YA_NXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
_Query_perf_counter
_Query_perf_frequency
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
_Thrd_detach
_Thrd_yield
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_broadcast
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??Bid@locale@std@@QEAA_KXZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
??0_Concurrent_queue_base_v4@details@Concurrency@@IEAA@_K@Z
?_Internal_pop_if_present@_Concurrent_queue_base_v4@details@Concurrency@@IEAA_NPEAX@Z
?_Internal_empty@_Concurrent_queue_base_v4@details@Concurrency@@IEBA_NXZ
?_Internal_finish_clear@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXXZ
?_Internal_throw_exception@_Concurrent_queue_base_v4@details@Concurrency@@IEBAXXZ
?_Internal_move_push@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXPEAX@Z
??1_Concurrent_queue_base_v4@details@Concurrency@@MEAA@XZ
ord8
ord3
memcmp
__RTDynamicCast
__std_type_info_name
__RTtypeid
__C_specific_handler
wcsrchr
__std_terminate
memset
memmove
memcpy
__std_type_info_destroy_list
wcsstr
memchr
__CxxFrameHandler3
_CxxThrowException
__std_exception_destroy
__std_exception_copy
_purecall
__current_exception_context
__current_exception
__CxxFrameHandler4
_initterm
_cexit
abort
_invalid_parameter_noinfo_noreturn
_errno
terminate
strerror
_beginthreadex
_execute_onexit_table
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_crt_atexit
_register_onexit_function
__stdio_common_vsnprintf_s
fwrite
_wfopen
fclose
__stdio_common_vfprintf
__acrt_iob_func
setvbuf
__stdio_common_vsprintf
_aligned_free
_aligned_malloc
free
malloc
calloc
realloc
_callnewh
_dsign
_fdsign
sqrtf
floorf
floor
_dclass
_ldsign
ceilf
_ldclass
_fdclass
strncat
wcscpy_s
_stricmp
strcmp
strtol
strtoul
strtoull
atoi
rand
getenv
localeconv
?OnHostStateTransition@@3V?$fwEvent@W4HostState@@W41@@@A
CreateComponent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ