Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
163e49ba7af60f920ac5ef15cad5bb7076607a2d187e4be98ff0c4a7afb129e7.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
163e49ba7af60f920ac5ef15cad5bb7076607a2d187e4be98ff0c4a7afb129e7.dll
Resource
win10v2004-20240508-en
Target
163e49ba7af60f920ac5ef15cad5bb7076607a2d187e4be98ff0c4a7afb129e7
Size
140KB
MD5
6440b9d546cca37b6866f8cc497ebc2c
SHA1
f37f64e9c2f7067432c9d01ab5ab001ccece3358
SHA256
163e49ba7af60f920ac5ef15cad5bb7076607a2d187e4be98ff0c4a7afb129e7
SHA512
efa9eee330df914f0c60ac14bdf7bbe37ab3119fff035b4c1ad6b44e3544d7b61f844e4137659c12c7327b65161ee5ecb5b4120ffdb53eb28fda4a4d3ae79854
SSDEEP
3072:oIJy4ZtZlyC2Yrh9VtfabCwO9caMFHt1BWg9RkkBzvG:oeH6RZUmR/vG
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
FactoryGameEGS-CookOnTheFly-Win64-Shipping.pdb
??0FName@@QEAA@PEB_WW4EFindName@@@Z
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??1FLogCategoryBase@@QEAA@XZ
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPathDebug@Private@CoreUObject@UE@@EA
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?Stricmp@FGenericPlatformStricmp@@SAHPEB_WPEBD@Z
?GetPlatformHostCommunication@FGenericPlatformMisc@@SAAEAVIPlatformHostCommunication@@XZ
?GetValidTargetPlatforms@FGenericPlatformMisc@@SAXAEAV?$TArray@VFString@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?CheckVerifyFailedImpl@FDebug@@SA_NPEBD0HPEAXPEB_WZZ
?Malloc@FMemory@@SAPEAX_KI@Z
?Free@FMemory@@SAXPEAX@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?OnInvalidArrayNum@Private@Core@UE@@YAX_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_KI@Z
??0FArchiveState@@AEAA@XZ
??1FArchiveState@@EEAA@XZ
?SetError@FArchiveState@@QEAAXXZ
??6@YAAEAVFArchive@@AEAV0@AEAVFString@@@Z
?SerializeByteOrderSwapped@FArchive@@AEAAAEAV1@AEAG@Z
?SerializeByteOrderSwapped@FArchive@@AEAAAEAV1@AEAI@Z
?SerializeByteOrderSwapped@FArchive@@AEAAAEAV1@AEA_K@Z
??0FString@@QEAA@PEBD@Z
??0FString@@QEAA@PEB_W@Z
?RemoveFromStart@FString@@QEAA_NPEB_WHW4Type@ESearchCase@@@Z
?ConcatCF@FString@@CA?AV1@PEB_W$$QEAV1@@Z
?PrintfImpl@FString@@CA?AV1@PEB_WZZ
?StartsWith@FString@@QEBA_NPEB_WHW4Type@ESearchCase@@@Z
?ParseIntoArray@FString@@QEBAHAEAV?$TArray@VFString@@V?$TSizedDefaultAllocator@$0CA@@@@@PEB_W_N@Z
?FromValidEName@FNameEntryId@@CA?AU1@W4EName@@@Z
?ToString@FName@@QEBA?AVFString@@XZ
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?Value@FParse@@SA_NPEB_W0AEAN@Z
?Value@FParse@@SA_NPEB_W0AEAVFString@@_NPEAPEB_W@Z
?Param@FParse@@SA_NPEB_W0@Z
?BasicLog@Private@Logging@UE@@YAXAEBUFLogCategoryBase@@PEBUFStaticBasicLogRecord@123@ZZ
?BasicFatalLog@Private@Logging@UE@@YAXAEBUFLogCategoryBase@@PEBUFStaticBasicLogRecord@123@ZZ
?GenerateNewID@FDelegateHandle@@CA_KXZ
?GetDestructionSentinelStackTls@FMRSWRecursiveAccessDetector@@CAAEAV?$TArray@PEAUFDestructionSentinel@FMRSWRecursiveAccessDetector@@V?$TSizedInlineAllocator@$03$0CA@V?$TSizedDefaultAllocator@$0CA@@@@@@@XZ
?GetReadersTls@FMRSWRecursiveAccessDetector@@CAAEAV?$TArray@UFReaderNum@FMRSWRecursiveAccessDetector@@V?$TSizedInlineAllocator@$03$0CA@V?$TSizedDefaultAllocator@$0CA@@@@@@@XZ
?GetSynchEventFromPool@FGenericPlatformProcess@@SAPEAVFEvent@@_N@Z
?ReturnSynchEventToPool@FGenericPlatformProcess@@SAXPEAVFEvent@@@Z
?SupportsMultithreading@FGenericPlatformProcess@@SA_NXZ
?Sleep@FWindowsPlatformProcess@@SAXM@Z
??0FThread@@QEAA@PEB_W$$QEAV?$TUniqueFunction@$$A6AXXZ@@1IW4EThreadPriority@@UFThreadAffinity@@W4EForkable@0@@Z
??1FThread@@QEAA@XZ
?Join@FThread@@QEAAXXZ
?UtcNow@FDateTime@@SA?AU1@XZ
?Get@FCommandLine@@SAPEB_WXZ
??0FScopedEvent@@QEAA@XZ
??1FScopedEvent@@QEAA@XZ
??6@YAAEAVFArchive@@AEAV0@AEAVFPackageId@@@Z
??6@YAAEAVFArchive@@AEAV0@AEAUFPackageStoreEntryResource@@@Z
?EngineNetVer@FArchiveState@@UEBAIXZ
?GameNetVer@FArchiveState@@UEBAIXZ
?GetCustomVersions@FArchiveState@@UEBAAEBVFCustomVersionContainer@@XZ
?SetCustomVersions@FArchiveState@@UEAAXAEBVFCustomVersionContainer@@@Z
?ResetCustomVersions@FArchiveState@@UEAAXXZ
?SetSerializedPropertyChain@FArchiveState@@UEAAXPEBUFArchiveSerializedPropertyChain@@PEAVFProperty@@@Z
?Reset@FArchiveState@@UEAAXXZ
?SetIsLoading@FArchiveState@@UEAAX_N@Z
?SetIsLoadingFromCookedPackage@FArchiveState@@UEAAX_N@Z
?SetIsSaving@FArchiveState@@UEAAX_N@Z
?SetIsTransacting@FArchiveState@@UEAAX_N@Z
?SetIsTextFormat@FArchiveState@@UEAAX_N@Z
?SetWantBinaryPropertySerialization@FArchiveState@@UEAAX_N@Z
?SetUseUnversionedPropertySerialization@FArchiveState@@UEAAX_N@Z
?SetForceUnicode@FArchiveState@@UEAAX_N@Z
?SetIsPersistent@FArchiveState@@UEAAX_N@Z
?SetUEVer@FArchiveState@@UEAAXUFPackageFileVersion@@@Z
?SetLicenseeUEVer@FArchiveState@@UEAAXH@Z
?SetEngineVer@FArchiveState@@UEAAXAEBVFEngineVersionBase@@@Z
?SetEngineNetVer@FArchiveState@@UEAAXI@Z
?SetGameNetVer@FArchiveState@@UEAAXI@Z
??6FArchive@@UEAAAEAV0@AEAUFWeakObjectPtr@@@Z
??6FArchive@@UEAAAEAV0@AEAUFSoftObjectPath@@@Z
??6FArchive@@UEAAAEAV0@AEAUFSoftObjectPtr@@@Z
??6FArchive@@UEAAAEAV0@AEAUFObjectPtr@@@Z
??6FArchive@@UEAAAEAV0@AEAUFLazyObjectPtr@@@Z
??6FArchive@@UEAAAEAV0@AEAVFText@@@Z
?SerializeIntPacked@FArchive@@UEAAXAEAI@Z
?SerializeIntPacked64@FArchive@@UEAAXAEA_K@Z
?UsingCustomVersion@FArchive@@UEAAXAEBUFGuid@@@Z
?PushSerializedProperty@FArchive@@UEAAXPEAVFProperty@@_N@Z
?PopSerializedProperty@FArchive@@UEAAXPEAVFProperty@@_N@Z
?LogSerialization@@3UFLogCategoryLogSerialization@@A
?SecondsPerCycle@FGenericPlatformTime@@1NA
?OnEnginePreExit@FCoreDelegates@@2V?$TMulticastDelegate@$$A6AXXZUFDefaultDelegateUserPolicy@@@@A
?ReceivePayload@FNFSMessageHeader@@SA_NAEAVFArrayReader@@AEBVFSimpleAbstractSocket@@@Z
?LogMultichannelTCP@@3UFLogCategoryLogMultichannelTCP@@A
?Receive@FSimpleAbstractSocket_FSocket@@UEBA_NPEAEH@Z
?WrapAndSendPayload@FNFSMessageHeader@@SA_NAEBV?$TArray@EV?$TSizedDefaultAllocator@$0CA@@@@@AEBVFSimpleAbstractSocket@@@Z
?Get@ISocketSubsystem@@SAPEAV1@AEBVFName@@@Z
?Send@FSimpleAbstractSocket_FSocket@@UEBA_NPEBEH@Z
?Parse@FIPv4Endpoint@@SA_NAEBVFString@@AEAU1@@Z
?FromHostAndPort@FIPv4Endpoint@@SA_NAEBVFString@@AEAU1@@Z
InitializeCriticalSection
SetCriticalSectionSpinCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentThreadId
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
InitializeSListHead
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
memcpy
memmove
memset
__C_specific_handler
_purecall
__std_type_info_destroy_list
__CxxFrameHandler4
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_initterm_e
_initterm
_cexit
_seh_filter_dll
_configure_narrow_argv
??6Cook@UE@@YAAEAVFArchive@@AEAV2@AEAUFCookOnTheFlyMessageHeader@01@@Z
??6Cook@UE@@YAAEAVFArchive@@AEAV2@AEAVFCookOnTheFlyMessage@01@@Z
??6Messaging@ZenCookOnTheFly@UE@@YAAEAVFArchive@@AEAV3@AEAUFCompletedPackages@012@@Z
??6Messaging@ZenCookOnTheFly@UE@@YAAEAVFArchive@@AEAV3@AEAUFCookPackageRequest@012@@Z
??6Messaging@ZenCookOnTheFly@UE@@YAAEAVFArchive@@AEAV3@AEAUFRecookPackagesRequest@012@@Z
??6Messaging@ZenCookOnTheFly@UE@@YAAEAVFArchive@@AEAV3@AEAUFRecookPackagesResponse@012@@Z
?LogCookOnTheFly@@3UFLogCategoryLogCookOnTheFly@@A
?ReadBody@FCookOnTheFlyMessage@Cook@UE@@QEBA?AV?$TUniquePtr@VFArchive@@U?$TDefaultDelete@VFArchive@@@@@@XZ
?SetBody@FCookOnTheFlyMessage@Cook@UE@@QEAAXV?$TArray@EV?$TSizedDefaultAllocator@$0CA@@@@@@Z
?ToString@FCookOnTheFlyMessageHeader@Cook@UE@@QEBA?AVFString@@XZ
?WriteBody@FCookOnTheFlyMessage@Cook@UE@@QEAA?AV?$TUniquePtr@VFArchive@@U?$TDefaultDelete@VFArchive@@@@@@XZ
InitializeModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ