Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
dbgtgt.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dbgtgt.dll
Resource
win10v2004-20240426-en
Target
dbgtgt.dll
Size
948KB
MD5
32130ad9238c005ae29f9db831f9fddc
SHA1
86da33bc8f8476b021ec1c580117303737e735c2
SHA256
b73c1136f6bf7cde68c52027c7c27456bf385d14c4dd46ffcabb5aa0752d1880
SHA512
a618ea8ea60897122ac884c1a19cfd49510f73799d235fd6bdf2beb7b0e61931ff8f67e8071eac68851634c4a27ec86e2ba36aeccb565e3fcbe027d941f1ac79
SSDEEP
24576:WesXqYgBQ7eb+dRyNac2GxgaHdYFPIlCLYRhpYzzhMf4ja:cGysdgPICYRAhC4u
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
D:\Jenkins\ci_builder\WindowsBuild2_5B9Y8LMQO8F2\Platform\src\BUILD64\BIN\dbgtgt.pdb
?registerAll@SCOM_Module@core@@QEAAXPEAVSCOM_Process@2@PEAVSCOM_ClassRegistrar@2@@Z
?revokeAll@SCOM_Module@core@@QEAAXPEAVSCOM_Process@2@PEAVSCOM_ClassRegistrar@2@@Z
??0SCOM_ResourceBundle@core@@QEAA@PEBD@Z
??1SCOM_ResourceBundle@core@@QEAA@XZ
?compare@core@@YAHPEB_S_K01@Z
?isDebugEnabled@SCOM_LoggerBase@core@@QEBA_NXZ
?getIValue@Value@core@@UEBA?AV?$InterfacePtr@VIValue@core@@@2@XZ
??0URL@core@@QEAA@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_N@Z
?scheme@URL@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?kSCOM_LoggerFuncProp@core@@3QB_SB
?log@SCOM_LoggerBase@core@@QEBAXW4SCOM_LogLevel@2@IPEB_SPEBU?$pair@PEB_SV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@std@@_KPEAVIExceptionObject@2@@Z
??1SCOM_ProcessData@core@@QEAA@XZ
?current_process_data@core@@YAPEAVSCOM_ProcessData@1@XZ
?current_thread@core@@YAPEAVThread@1@XZ
?term@Process@core@@QEAAXXZ
?init@Process@core@@QEAAXPEAVSCOM_ProcessData@2@@Z
??0Numeric@core@@QEAA@H@Z
?create_UUID@core@@YA?AU_GUID@@XZ
?replace_all@core@@YA_KAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV23@1@Z
?hash_nocase@core@@YAJAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?categoryOf@Exception@core@@SA?AV?$bitset@$0BG@@std@@W4Category@12@@Z
??1EventRecipientImplBase@core@@IEAA@XZ
?subscribe@EventRecipientImplBase@core@@QEAAXAEBU_GUID@@@Z
?kProcessDeathEvent@core@@3U_GUID@@B
?unsubscribe@EventRecipientImplBase@core@@QEAAXAEBU_GUID@@@Z
?getResourceLocale@Thread@core@@QEAA?AVLocale@2@XZ
?name@Locale@core@@QEBAPEB_SXZ
?sleep@Thread@core@@SAXI@Z
??0URL@core@@QEAA@XZ
??0URL@core@@QEAA@AEBV01@@Z
??0EventRecipientImplBase@core@@IEAA@PEAVIEventRecipient@1@@Z
?getCurrentVersion@Version@core@@SA?AV12@XZ
??0Thread@core@@QEAA@W4PoolType@01@@Z
??1Thread@core@@UEAA@XZ
?construct@ProcessThread@core@@AEAAXXZ
?isUIThread@Thread@core@@UEAA_NXZ
?isServerProcess@Thread@core@@UEAA_NXZ
?isProcess@Process@core@@UEAA_NXZ
?doStartTimer@ProcessThread@core@@MEAAXXZ
?doStart@ProcessThread@core@@MEAAXXZ
?wait@Thread@core@@MEAAXPEAV12@@Z
?run@Thread@core@@UEAAXXZ
??1Process@core@@UEAA@XZ
?construct@Process@core@@AEAAXPEAVSCOM_Module@2@@Z
?doStartTimer@Thread@core@@MEAAXXZ
?doStart@Process@core@@MEAAXXZ
??1ProcessThread@core@@UEAA@XZ
?interrupt@Thread@core@@QEAAXXZ
?isInterrupted@Thread@core@@QEAA_NXZ
?start@Thread@core@@QEAAXXZ
?isAlive@Thread@core@@QEAA_NXZ
?join@Thread@core@@QEAAXXZ
?acquire@?$Refcountable@VThread@core@@UAtomicCounter@2@@core@@QEAAHXZ
?release@?$Refcountable@VThread@core@@UAtomicCounter@2@@core@@QEAAHXZ
?allocTLS@Thread@core@@SA?AUTLSIndex@12@XZ
?get_milliseconds@core@@YAIXZ
?getTLSValue@Thread@core@@QEAAPEAVTLSData@12@AEBUTLSIndex@12@@Z
?setTLSValue@Thread@core@@QEAAXAEBUTLSIndex@12@PEAVTLSData@12@@Z
?freeTLS@Thread@core@@SAXAEBUTLSIndex@12@@Z
?get@ListInStream@core@@QEAAXAEAI@Z
?getString@Value@core@@QEBA_NAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
??1ListInStream@core@@QEAA@XZ
??0ListInStream@core@@QEAA@PEAVIReader@1@@Z
?widen@Converter@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEBD_K@Z
??1StringInputStream@core@@QEAA@XZ
??0StringInputStream@core@@QEAA@XZ
??4Numeric@core@@QEAAAEAV01@AEBV01@@Z
??4Value@core@@QEAAAEAV01@AEBV01@@Z
?long_time_callback@core@@YAXXZ
?put@ListOutStream@core@@QEAAXAEBVNumeric@2@@Z
?compare@Numeric@core@@QEBAHAEBV12@@Z
??0Exception@core@@IEAA@AEBU_GUID@@PEB_SPEAVIExceptionObject@1@0AEBV?$bitset@$0BG@@std@@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?put@ListOutStream@core@@QEAAXAEBU_GUID@@@Z
?get@ListInStream@core@@QEAAXAEAU_GUID@@@Z
?serialize@GenericValue@core@@QEBAXPEAVIOutPersistenceStorage@2@@Z
?deserialize@GenericValue@core@@SAXPEAVIInPersistenceStorage@2@AEAV12@@Z
?get@ListInStream@core@@QEAAXAEAVNumeric@2@@Z
?isProcess@Thread@core@@UEAA_NXZ
??0Matcher@core@@QEAA@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@0I@Z
??1Matcher@core@@QEAA@XZ
?find@Matcher@core@@QEAA_NXZ
??_0Numeric@core@@QEAAAEAV01@AEBV01@@Z
?doStart@Thread@core@@MEAAXXZ
?port@URL@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?host@URL@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?getBoolean@Value@core@@QEBA_NAEA_N@Z
?serialize@Exception@core@@QEBAXPEAVIOutPersistenceStorage@2@@Z
?string_i64to@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_JH@Z
??BNumeric@core@@QEBA_JXZ
??0RemotingException@core@@IEAA@AEBU_GUID@@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEAVIExceptionObject@1@@Z
??0LSEHelper@core@@QEAA@XZ
??1LSEHelper@core@@QEAA@XZ
??0Numeric@core@@QEAA@I@Z
?load_wstring@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEAVSCOM_ResourceBundle@1@PEBD@Z
?string_ito@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@HH@Z
??0RemotingException@core@@QEAA@AEBV01@@Z
??1RemotingException@core@@QEAA@XZ
??0Date@core@@QEAA@XZ
?get_computer_name@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_N@Z
?string_ito@core@@YAAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@HAEAV23@H@Z
??1IMutexImpl@core@@QEAA@XZ
?deserialize@Exception@core@@QEAAXPEAVIInPersistenceStorage@2@@Z
?get_config_file_URL@core@@YAXPEB_SPEAVSCOM_Process@1@_NAEAV?$vector@VURL@core@@V?$allocator@VURL@core@@@std@@@std@@@Z
?cleanup@SCOM_ResourceBundle@core@@QEAAXXZ
?inner@Exception@core@@QEAAXPEAVIExceptionObject@2@@Z
?descr@Exception@core@@QEAAXAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
??4Exception@core@@QEAAAEAV01@AEBV01@@Z
?string_printf@core@@YAHAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEB_SZZ
?is_valid_name@core@@YA_NPEB_S@Z
?getTypeCode@Type@core@@QEBA?AW4Code@12@XZ
?type@GenericValue@core@@QEBA?AVType@2@XZ
??1Type@core@@QEAA@XZ
?getBoolean@GenericValue@core@@QEBA_NAEA_N@Z
?getNumeric@GenericValue@core@@QEBA_NAEAVNumeric@2@@Z
?toString@Numeric@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?getString@GenericValue@core@@QEBA_NAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?getDate@GenericValue@core@@QEBA_NAEAVDate@2@@Z
?split@Date@core@@QEBAXAEAH00000@Z
??0Value@core@@QEAA@AEBVGenericValue@1@@Z
?undefined@Value@core@@SAAEBV12@XZ
??4Value@core@@QEAAAEAV01@$$QEAV01@@Z
??0Value@core@@QEAA@$$QEAV01@@Z
?set_long_time_callback@core@@YAXPEAVILongTimeCallback@1@@Z
?clear_long_time_callback@core@@YAXPEAVILongTimeCallback@1@@Z
?processData@Process@core@@QEAA?AV?$CountedPtr@VSCOM_ProcessData@core@@V?$ExtrinsicRefcount@VSCOM_ProcessData@core@@UAtomicCounter@2@@2@@2@XZ
??1TLSData@Thread@core@@UEAA@XZ
??0TLSData@Thread@core@@QEAA@XZ
??1URL@core@@QEAA@XZ
?to_binary@core@@YA?AV?$BasicString@D$0A@$0A@Vallocator@std@@@ale@@AEBU_GUID@@@Z
??1FormattedString@core@@QEAA@XZ
??0FormattedString@core@@QEAA@XZ
?k83StandardFont@core@@3UFont@1@B
??0Font@core@@QEAA@AEBU01@@Z
??0Font@core@@QEAA@HAEBUV8LogFont@1@_NHAEBVCompositeID@1@K@Z
??0V8LogFont@core@@QEAA@JJJJJEEEEEEEEPEB_S@Z
??1ShortCut@core@@QEAA@XZ
??0ShortCut@core@@QEAA@GE@Z
?kNullCompositeID@core@@3VCompositeID@1@B
?kControlsBordersClass@core@@3U_GUID@@B
??0V8Border@core@@QEAA@HAEBVCompositeID@1@AEBUBorderDescr@1@I@Z
??0Font@core@@QEAA@HJ@Z
??0Color@core@@QEAA@W4ColorKind@01@AEBVCompositeID@1@@Z
??0IllegalArgumentException@core@@QEAA@PEBDIPEB_SAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEAVIExceptionObject@1@@Z
??BNumeric@core@@QEBA_KXZ
??0Numeric@core@@QEAA@_K@Z
??XNumeric@core@@QEAAAEAV01@AEBV01@@Z
?is_space@core@@YA_N_S@Z
?inner@Exception@core@@QEBA?AV?$InterfacePtr@VIExceptionObject@core@@@2@XZ
?decode_base64@core@@YA_NAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEAV?$BasicString@D$0A@$0A@Vallocator@std@@@3@_N@Z
?decode_base64@core@@YA_NPEAVIReader@1@PEAVIFile@1@_N@Z
?encode_base64@core@@YAXPEAVIFile@1@PEAVIWriter@1@_K_N@Z
?create_std_string_buffer@core@@YA?AV?$InterfacePtr@VIStringBuffer@core@@@1@PEAVIStringFormatter@1@@Z
?from_string@core@@YA_NAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEAU_GUID@@@Z
??0Numeric@core@@QEAA@$$QEAV01@@Z
??BNumeric@core@@QEBAKXZ
??0Numeric@core@@QEAA@K@Z
??0Numeric@core@@QEAA@AEBV01@@Z
??4Numeric@core@@QEAAAEAV01@$$QEAV01@@Z
??1Numeric@core@@QEAA@XZ
??0Numeric@core@@QEAA@XZ
?fromString@Numeric@core@@QEAAAEAV12@PEB_SPEAPEB_S@Z
?get@ListInStream@core@@QEAAXAEA_K@Z
??0Value@core@@QEAA@AEBV01@@Z
?get@ListInStream@core@@QEAAXAEA_N@Z
?put@ListOutStream@core@@QEAAX_N@Z
?put@ListOutStream@core@@QEAAX_K@Z
?get@ListInStream@core@@QEAAXAEAK@Z
?get@ListInStream@core@@QEAAXAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?put@ListOutStream@core@@QEAAXK@Z
?put@ListOutStream@core@@QEAAXAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?getEndOfList@ListInStream@core@@QEAAXXZ
?skipListContent@ListInStream@core@@QEAAXXZ
?get@ListInStream@core@@QEAAXAEAH@Z
?getBeginOfList@ListInStream@core@@QEAAXXZ
?putEndOfList@ListOutStream@core@@QEAAXXZ
?put@ListOutStream@core@@QEAAXH@Z
?putBeginOfList@ListOutStream@core@@QEAAXXZ
??0Exception@core@@IEAA@AEBU_GUID@@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEAVIExceptionObject@1@0AEBV?$bitset@$0BG@@std@@1@Z
??1Exception@core@@QEAA@XZ
?to_string@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBU_GUID@@@Z
?string_len@core@@YA_KPEB_S@Z
??1ISemaphoreImpl@core@@QEAA@XZ
?eventHandle@ISemaphoreBaseImpl@core@@UEAAPEAXXZ
??1RWMutex@core@@QEAA@XZ
??0RWMutex@core@@QEAA@XZ
?unlock@RWMutex@core@@QEAAXXZ
?lock@RWMutex@core@@QEAAXXZ
?unlockShared@RWMutex@core@@QEAAXXZ
?lockShared@RWMutex@core@@QEAAXXZ
??0ISemaphoreImpl@core@@QEAA@XZ
?raise@ISemaphoreBaseImpl@core@@UEAAXXZ
?wait@ISemaphoreBaseImpl@core@@UEAAXXZ
?wait@ISemaphoreBaseImpl@core@@UEAA_NH@Z
?assign@GenericValue@core@@QEAAXAEBV12@@Z
??1IllegalStateException@core@@QEAA@XZ
??0IllegalStateException@core@@QEAA@AEBV01@@Z
??0IllegalStateException@core@@QEAA@PEBDIPEB_SPEAVIExceptionObject@1@@Z
?assign@GenericValue@core@@QEAAXPEAVIValue@2@@Z
??0Value@core@@QEAA@XZ
?descr@Exception@core@@QEBAAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?object@Exception@core@@QEBA?AV?$InterfacePtr@VIExceptionObject@core@@@2@XZ
?load_module_wstring@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEBD0@Z
?compare_nocase@core@@YAHPEB_S_K01@Z
?cleanup@SCOM_Module@core@@QEAAXXZ
?initialize@SCOM_Module@core@@QEAAXXZ
??1IllegalArgumentException@core@@QEAA@XZ
?widen@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEBD@Z
??0URL@core@@QEAA@AEBV?$basic_string_view@_SU?$char_traits@_S@std@@@std@@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_N@Z
??0IllegalArgumentException@core@@QEAA@AEBV01@@Z
?kProfileSrcNull@core@@3U_GUID@@B
??0Value@core@@QEAA@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
??0StringOutputStream@core@@QEAA@XZ
??1StringOutputStream@core@@UEAA@XZ
?open@StringOutputStream@core@@QEAAXPEAVIStringBuffer@2@@Z
??0ListOutStream@core@@QEAA@PEAVIWriter@1@@Z
??1ListOutStream@core@@QEAA@XZ
?put@ListOutStream@core@@QEAAXI@Z
?encode_base64@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV?$basic_string_view@DU?$char_traits@D@std@@@std@@_K_N@Z
?narrow@Converter@core@@QEBA?AV?$BasicString@D$0A@$0A@Vallocator@std@@@ale@@PEB_S_K@Z
?close@StringOutputStream@core@@QEAA?AV?$InterfacePtr@VIStringBuffer@core@@@2@XZ
??0Exception@core@@QEAA@AEBV01@@Z
?setOnClientFromServer@Exception@core@@QEAAXXZ
?utf8@Converter@core@@SAAEBV12@XZ
??0IllegalArgumentException@core@@QEAA@PEBDIPEB_SPEAVIExceptionObject@1@@Z
?current_process@core@@YAPEAVSCOM_Process@1@XZ
?kUUIDNull@core@@3U_GUID@@B
?empty_string@core@@YAAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
??1Value@core@@QEAA@XZ
?open@StringInputStream@core@@QEAAXAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
??1TypeDomainPattern@core@@QEAA@XZ
?nuke_new@@YAPEAX_K@Z
?nuke_new_nothrow@@YAPEAX_K@Z
?nuke_delete@@YAXPEAX@Z
?nuke_delete_size@@YAXPEAX_K@Z
GetCurrentProcessId
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
DecodePointer
DeleteCriticalSection
FreeLibrary
GetProcAddress
GetModuleHandleW
lstrcmpiW
LeaveCriticalSection
GetSystemTimeAsFileTime
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
InitializeSListHead
IsDebuggerPresent
OutputDebugStringW
RtlCaptureContext
UnhandledExceptionFilter
RtlLookupFunctionEntry
GetCurrentThreadId
RtlVirtualUnwind
EnterCriticalSection
CharNextW
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
VarUI4FromStr
RegOpenKeyExW
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
?_Xbad_function_call@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
_Mtx_destroy_in_situ
_Cnd_destroy_in_situ
_Mtx_lock
_Cnd_init_in_situ
_Mtx_init_in_situ
_Cnd_broadcast
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Cnd_wait
_Cnd_signal
_Cnd_timedwait
_Xtime_get_ticks
_Mtx_current_owns
?_Throw_Cpp_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPEBD@Z
__CxxFrameHandler3
__std_terminate
__std_exception_copy
__std_exception_destroy
_purecall
wcsstr
memmove
memset
__C_specific_handler
__std_type_info_destroy_list
memcpy
memcmp
_CxxThrowException
malloc
free
_recalloc
_initialize_onexit_table
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_errno
_invalid_parameter_noinfo
wcsncpy_s
floor
ceil
SCOM_Main
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ