Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
c623480aee3f1ec50eab2e00b4686425991b75f753aeb28e1183811f30ca69c8.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
c623480aee3f1ec50eab2e00b4686425991b75f753aeb28e1183811f30ca69c8.dll
Resource
win10v2004-20240611-en
Target
c623480aee3f1ec50eab2e00b4686425991b75f753aeb28e1183811f30ca69c8
Size
120KB
MD5
c7766a09dfd5fa95613e9dd7d997cd12
SHA1
b803e5a6f531a1e4c4aaee99e865eae38e79edba
SHA256
c623480aee3f1ec50eab2e00b4686425991b75f753aeb28e1183811f30ca69c8
SHA512
f9c79b083eab2dd14966f26215e67c320fbdd68f1bbca24d3406c08abb659f75c0ce5d4c0fee2814baec0969a5d9aa9619b6cf289b9ce07c1576a74ab692fe01
SSDEEP
3072:09tTRtkcomO7HI0O9caMFHt1BWg9RkkBzav:0TRK7HLRZUmR/av
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
FactoryGameEGS-TraceUtilities.pdb
?GetWorld@UObject@@UEBAPEAVUWorld@@XZ
?Rename@UObject@@UEAA_NPEB_WPEAV1@I@Z
?GetPreloadDependencies@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?IsDestructionThreadSafe@UObject@@UEBA_NXZ
?NeedsLoadForTargetPlatform@UObject@@UEBA_NPEBVITargetPlatform@@@Z
?NeedsLoadForServer@UObject@@UEBA_NXZ
?NeedsLoadForClient@UObject@@UEBA_NXZ
?Serialize@UObject@@UEAAXAEAVFArchive@@@Z
?Serialize@UObject@@UEAAXVFStructuredArchiveRecord@@@Z
?FinishDestroy@UObject@@UEAAXXZ
?BeginDestroy@UObject@@UEAAXXZ
?PostLoadSubobjects@UObject@@UEAAXPEAUFObjectInstancingGraph@@@Z
?GetAssetRegistryTags@UObject@@UEBAXAEAV?$TArray@UFAssetRegistryTag@UObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?PreSave@UObject@@UEAAXPEBVITargetPlatform@@@Z
?PreSave@UObject@@UEAAXVFObjectPreSaveContext@@@Z
?PostSaveRoot@UObject@@UEAAX_N@Z
?PostSaveRoot@UObject@@UEAAXVFObjectPostSaveRootContext@@@Z
?PreSaveRoot@UObject@@UEAA_NPEB_W@Z
?PreSaveRoot@UObject@@UEAAXVFObjectPreSaveRootContext@@@Z
?PostReinitProperties@UObject@@UEAAXXZ
?PostInitProperties@UObject@@UEAAXXZ
?CreateCluster@UObjectBaseUtility@@UEAAXXZ
?CanBeInCluster@UObjectBaseUtility@@UEBA_NXZ
?GetFNameForStatID@UObjectBase@@UEBA?AVFName@@XZ
?DeferredRegister@UObjectBase@@MEAAXPEAVUClass@@PEB_W1@Z
?GetResourceSizeEx@UObject@@UEAAXAEAUFResourceSizeEx@@@Z
?IsAsset@UObject@@UEBA_NXZ
?GetPrimaryAssetId@UObject@@UEBA?AUFPrimaryAssetId@@XZ
?IsLocalizedResource@UObject@@UEBA_NXZ
?IsSafeForRootSet@UObject@@UEBA_NXZ
?TagSubobjects@UObject@@UEAAXW4EObjectFlags@@@Z
?GetLifetimeReplicatedProps@UObject@@UEBAXAEAV?$TArray@VFLifetimeProperty@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetReplicatedCustomConditionState@UObject@@UEBAXAEAVFCustomPropertyConditionState@@@Z
?RegisterReplicationFragments@UObject@@UEAAXAEAVFFragmentRegistrationContext@Net@UE@@W4EFragmentRegistrationFlags@34@@Z
?IsNameStableForNetworking@UObject@@UEBA_NXZ
?IsFullNameStableForNetworking@UObject@@UEBA_NXZ
?IsSupportedForNetworking@UObject@@UEBA_NXZ
?PreNetReceive@UObject@@UEAAXXZ
?PostNetReceive@UObject@@UEAAXXZ
?GetTransientPackage@@YAPEAVUPackage@@XZ
?PreDestroyFromReplication@UObject@@UEAAXXZ
?BuildSubobjectMapping@UObject@@UEBAXPEAV1@AEAV?$TMap@PEAVUObject@@PEAV1@VFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@PEAVUObject@@PEAV1@$0A@@@@@@Z
?ProcessEvent@UObject@@UEAAXPEAVUFunction@@PEAX@Z
?CheckDefaultSubobjectsInternal@UObject@@MEBA_NXZ
?StepExplicitProperty@FFrame@@QEAAXQEAXPEAVFProperty@@@Z
?Step@FFrame@@QEAAXPEAVUObject@@QEAX@Z
?StaticClass@FStrProperty@@SAPEAVFFieldClass@@XZ
?StaticClass@FBoolProperty@@SAPEAVFFieldClass@@XZ
?GetPrivateStaticClassBody@@YAXPEB_W0AEAPEAVUClass@@P6AXXZIIW4EClassFlags@@W4EClassCastFlags@@0P6AXAEBVFObjectInitializer@@@ZP6APEAVUObject@@AEAVFVTableHelper@@@Z$$QEAUFUObjectCppClassStaticFunctions@@P6APEAV1@XZP6APEAV1@XZ@Z
?RegisterFunctions@FNativeFunctionRegistrar@@SAXPEAVUClass@@PEBUFNameNativePtrPair@@H@Z
?CallFunctionByNameWithArguments@UObject@@QEAA_NPEB_WAEAVFOutputDevice@@PEAV1@_N@Z
?AddReferencedObjects@UObject@@SAXPEAV1@AEAVFReferenceCollector@@@Z
?GetPrivateStaticClass@UObject@@CAPEAVUClass@@XZ
?GetFullName@UObjectBaseUtility@@QEBA?AVFString@@PEBVUObject@@W4EObjectFullNameFlags@@@Z
?RegisterCompiledInInfo@@YAXPEB_WPEBUFClassRegisterCompiledInInfo@@_KPEBUFStructRegisterCompiledInInfo@@2PEBUFEnumRegisterCompiledInInfo@@2@Z
?RegisterCompiledInInfo@@YAXP6APEAVUPackage@@XZPEB_WAEAU?$TRegistrationInfo@VUPackage@@UFPackageReloadVersionInfo@@@@AEBUFPackageReloadVersionInfo@@@Z
?ConstructUClass@UECodeGen_Private@@YAXAEAPEAVUClass@@AEBUFClassParams@1@@Z
?ConstructUPackage@UECodeGen_Private@@YAXAEAPEAVUPackage@@AEBUFPackageParams@1@@Z
?ConstructUFunction@UECodeGen_Private@@YAXPEAPEAVUFunction@@AEBUFFunctionParams@1@@Z
?Get@FObjectInitializer@@SAAEAV1@XZ
?StaticAllocateObject@@YAPEAVUObject@@PEBVUClass@@PEAV1@VFName@@W4EObjectFlags@@W4EInternalObjectFlags@@_NPEA_NPEAVUPackage@@@Z
?PostLoad@UObject@@UEAAXXZ
?GetPrivateStaticClass@UBlueprintFunctionLibrary@@CAPEAVUClass@@XZ
??0UBlueprintFunctionLibrary@@QEAA@AEBVFObjectInitializer@@@Z
??0UBlueprintFunctionLibrary@@QEAA@AEAVFVTableHelper@@@Z
??1UBlueprintFunctionLibrary@@UEAA@XZ
?GetFunctionCallspace@UBlueprintFunctionLibrary@@UEAAHPEAVUFunction@@PEAUFFrame@@@Z
?Z_Construct_UClass_UBlueprintFunctionLibrary@@YAPEAVUClass@@XZ
?ToggleChannel@Trace@UE@@YA_NPEB_W_N@Z
?EnumerateChannels@Trace@UE@@YAXP6AXPEBD_NPEAX@Z2@Z
?IsChannel@Trace@UE@@YA_NPEB_W@Z
??0FName@@QEAA@PEB_WW4EFindName@@@Z
?FromValidEName@FNameEntryId@@CA?AU1@W4EName@@@Z
??1?$TStringBuilderBase@_W@@QEAA@XZ
?ParseIntoArray@FString@@QEBAHAEAV?$TArray@VFString@@V?$TSizedDefaultAllocator@$0CA@@@@@PEB_W_N@Z
?AppendChars@FString@@QEAAXPEB_WH@Z
??0FString@@QEAA@HPEB_W@Z
??0FString@@QEAA@PEB_W@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_KI@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_K@Z
?OnInvalidArrayNum@Private@Core@UE@@YAX_K@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?Realloc@FMemory@@SAPEAXPEAX_KI@Z
?Malloc@FMemory@@SAPEAX_KI@Z
?CheckVerifyImpl@@YA_NAEA_N_NPEBDHPEAX2PEB_WZZ
?CheckVerifyFailedImpl@FDebug@@SA_NPEBD0HPEAXPEB_WZZ
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPathDebug@Private@CoreUObject@UE@@EA
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?DoSetup@FThreadSafeStaticStatBase@@IEBAPEBUTStatIdData@@PEBDPEB_W001_N2W4Type@EStatDataType@@22W4EMemoryCounterRegion@FWindowsPlatformMemory@@@Z
??1FLogCategoryBase@@QEAA@XZ
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??0FName@@QEAA@PEBDW4EFindName@@@Z
?Free@FMemory@@SAXPEAX@Z
?HandleAtomicsFailure@FWindowsPlatformAtomics@@KAXPEB_WZZ
?OutputBookmarkSpec@FMiscTrace@@SAXPEBXPEBDHPEB_W@Z
?OutputBeginRegion@FMiscTrace@@SAXPEB_W@Z
?OutputEndRegion@FMiscTrace@@SAXPEB_W@Z
?OutputBookmarkInternal@FMiscTrace@@CAXPEBXGPEAE@Z
?Start@FTraceAuxiliary@@SA_NW4EConnectionType@1@PEB_W1PEAUFOptions@1@AEBUFLogCategoryBase@@@Z
?Stop@FTraceAuxiliary@@SA_NXZ
?Pause@FTraceAuxiliary@@SA_NXZ
?Resume@FTraceAuxiliary@@SA_NXZ
?IsConnected@FTraceAuxiliary@@SA_NXZ
?GetActiveChannelsString@FTraceAuxiliary@@SAXAEAV?$TStringBuilderBase@_W@@@Z
?LogCore@@3UFLogCategoryLogCore@@A
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
memmove
__current_exception
__current_exception_context
memset
memcpy
__std_type_info_destroy_list
__C_specific_handler
__CxxFrameHandler4
_seh_filter_dll
_crt_atexit
_initialize_narrow_environment
_initialize_onexit_table
_crt_at_quick_exit
terminate
_initterm_e
_initterm
_execute_onexit_table
_configure_narrow_argv
_cexit
_register_onexit_function
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
??$StaticClass@VUTraceUtilLibrary@@@@YAPEAVUClass@@XZ
??0UTraceUtilLibrary@@QEAA@AEAVFVTableHelper@@@Z
??0UTraceUtilLibrary@@QEAA@AEBVFObjectInitializer@@@Z
??1UTraceUtilLibrary@@UEAA@XZ
??2UTraceUtilLibrary@@SAPEAX_KPEAW4EInternal@@@Z
??2UTraceUtilLibrary@@SAPEAX_KW4EInternal@@PEAVUObject@@VFName@@W4EObjectFlags@@@Z
??3UTraceUtilLibrary@@SAXPEAX@Z
??_7UTraceUtilLibrary@@6B@
??_FUTraceUtilLibrary@@QEAAXXZ
?GetAllChannels@UTraceUtilLibrary@@SA?AV?$TArray@VFString@@V?$TSizedDefaultAllocator@$0CA@@@@@XZ
?GetEnabledChannels@UTraceUtilLibrary@@SA?AV?$TArray@VFString@@V?$TSizedDefaultAllocator@$0CA@@@@@XZ
?GetPrivateStaticClass@UTraceUtilLibrary@@CAPEAVUClass@@XZ
?IsChannelEnabled@UTraceUtilLibrary@@SA_NAEBVFString@@@Z
?IsTracing@UTraceUtilLibrary@@SA_NXZ
?PauseTracing@UTraceUtilLibrary@@SA_NXZ
?ResumeTracing@UTraceUtilLibrary@@SA_NXZ
?StartTraceSendTo@UTraceUtilLibrary@@SA_NAEBVFString@@AEBV?$TArray@VFString@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?StartTraceToFile@UTraceUtilLibrary@@SA_NAEBVFString@@AEBV?$TArray@VFString@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?StaticClass@UTraceUtilLibrary@@SAPEAVUClass@@XZ
?StaticClassCastFlags@UTraceUtilLibrary@@SA?AW4EClassCastFlags@@XZ
?StaticClassFlags@UTraceUtilLibrary@@2W4EClassFlags@@B
?StaticPackage@UTraceUtilLibrary@@SAPEB_WXZ
?StaticRegisterNativesUTraceUtilLibrary@UTraceUtilLibrary@@CAXXZ
?StopTracing@UTraceUtilLibrary@@SA_NXZ
?ToggleChannel@UTraceUtilLibrary@@SA_NAEBVFString@@_N@Z
?TraceBookmark@UTraceUtilLibrary@@SAXAEBVFString@@@Z
?TraceMarkRegionEnd@UTraceUtilLibrary@@SAXAEBVFString@@@Z
?TraceMarkRegionStart@UTraceUtilLibrary@@SAXAEBVFString@@@Z
?Z_Construct_UClass_UTraceUtilLibrary@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UTraceUtilLibrary_NoRegister@@YAPEAVUClass@@XZ
?__DefaultConstructor@UTraceUtilLibrary@@SAXAEBVFObjectInitializer@@@Z
?__VTableCtorCaller@UTraceUtilLibrary@@SAPEAVUObject@@AEAVFVTableHelper@@@Z
?execGetAllChannels@UTraceUtilLibrary@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execGetEnabledChannels@UTraceUtilLibrary@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execIsChannelEnabled@UTraceUtilLibrary@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execIsTracing@UTraceUtilLibrary@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execPauseTracing@UTraceUtilLibrary@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execResumeTracing@UTraceUtilLibrary@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execStartTraceSendTo@UTraceUtilLibrary@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execStartTraceToFile@UTraceUtilLibrary@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execStopTracing@UTraceUtilLibrary@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execToggleChannel@UTraceUtilLibrary@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execTraceBookmark@UTraceUtilLibrary@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execTraceMarkRegionEnd@UTraceUtilLibrary@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execTraceMarkRegionStart@UTraceUtilLibrary@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
InitializeModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ