Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
fmtdui.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fmtdui.dll
Resource
win10v2004-20240508-en
Target
fmtdui.dll
Size
381KB
MD5
fe371d053379074dd0b4eec45dfcd55a
SHA1
e84634f4d9ec52d6feef8d18472d11f935595f8d
SHA256
ee00fe8c0d4218e8ce2b72371664816e76a5b088d2bbfe9d99b5ff831f753d6b
SHA512
141e999ea13dec9546f0b2880a8e0d5aa9bbd1dac7dbc345010c653cff73748220a3b5253f77f6c186833205133fb8dfe2b15d08883ba837e762ac912fc6bc23
SSDEEP
6144:xDX7PHTP/Jq2K5eZzAOSEtca6jKPhH2gbVOxo+6q4czzx3G+:xDXfP/JqwZzAOSSzPhHBBLQ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
D:\Jenkins\ci_builder\WindowsBuild2_5B9Y8LMQO8F2\Platform\src\BUILD64\BIN\fmtdui.pdb
?getContextDPI@wbase@@YAHXZ
?isAltPressed@wbase@@YA_NXZ
?isCtrlPressed@wbase@@YA_NXZ
?getPureString@FormattedString@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV34@@Z
??0FormattedString@core@@QEAA@XZ
?content@LocalWString@core@@QEBA?AV?$vector@VLocalWStringItem@core@@V?$allocator@VLocalWStringItem@core@@@std@@@std@@XZ
?string_ulto@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@KH@Z
?pureData@FormattedString@core@@QEAAXXZ
?encodeData@FormattedString@core@@QEAAXXZ
?encode_to_formatted_string@core@@YAXAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?setIType@ValueImplBase@core@@QEAAXPEAVIType@2@@Z
??0ObjectTypeCore@core@@QEAA@XZ
?getIType@ValueImplBase@core@@UEAAPEAVIType@2@XZ
?getDataPtr@ObjectValueCore@core@@UEAAPEAXXZ
?getBoolean@ObjectValueCore@core@@UEAA_NAEA_N@Z
?getNumeric@ObjectValueCore@core@@UEAA_NAEAVNumeric@2@@Z
?getString@ValueImplBase@core@@UEAA_NAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?getDate@ObjectValueCore@core@@UEAA_NAEAVDate@2@@Z
?isEqual@ObjectValueCore@core@@UEAA_NPEAVIValue@2@@Z
?hashCode@ObjectValueCore@core@@UEAAJXZ
?getTypeCode@ObjectTypeCore@core@@UEAA?AW4Code@Type@2@XZ
?getTypeString@ObjectTypeCore@core@@UEAAPEB_SH@Z
?getString@ObjectTypeCore@core@@UEAAXAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?isCOMType@ObjectTypeCore@core@@UEAA_NXZ
??0FormattedString@core@@QEAA@AEBV01@@Z
??0ValueImplBase@core@@QEAA@XZ
??1ValueImplBase@core@@QEAA@XZ
?getString@Value@core@@QEBA_NAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
??0Value@core@@QEAA@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
??1Exception@core@@QEAA@XZ
??0Exception@core@@IEAA@AEBU_GUID@@PEB_SPEAVIExceptionObject@1@0AEBV?$bitset@$0BG@@std@@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
??0Value@core@@QEAA@AEBVNumeric@1@@Z
??1Type@core@@QEAA@XZ
?type@Value@core@@QEBA?AVType@2@XZ
?getTypeCode@Type@core@@QEBA?AW4Code@12@XZ
??0Numeric@core@@QEAA@J@Z
??1OutputFileStream@core@@UEAA@XZ
?open@OutputFileStream@core@@QEAAXPEAVIFile@2@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_NPEB_S@Z
?write@BaseOutputStream@core@@QEAAXAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?close@OutputFileStream@core@@QEAAXXZ
??0OutputFileStream@core@@QEAA@XZ
??BNumeric@core@@QEBANXZ
??0Value@core@@QEAA@N@Z
?load_module_wstring@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEBD0@Z
?value_list_item@core@@YA?AV?$InterfacePtr@VIValueListItem@core@@@1@AEBVValue@1@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@W4CheckState@1@AEBVV8Picture@1@J_N1@Z
??0Value@core@@QEAA@H@Z
??0Exception@core@@IEAA@AEBU_GUID@@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEAVIExceptionObject@1@0AEBV?$bitset@$0BG@@std@@1@Z
??1TypeDomainPattern@core@@QEAA@XZ
??4V8Picture@core@@QEAAAEAV01@$$QEAV01@@Z
?assign@GenericValue@core@@QEAAXPEAVIValue@2@@Z
??4TypeDomainPattern@core@@QEAAAEAV01@$$QEAV01@@Z
??0TypeDomainPattern@core@@QEAA@AEBU_GUID@@@Z
?getString@LocalWString@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV34@@Z
?getFormatted@FormattedString@core@@QEBA_NXZ
??0Font@core@@QEAA@HJ@Z
??4FormattedString@core@@QEAAAEAV01@AEBV01@@Z
?getIValue@Value@core@@UEBA?AV?$InterfacePtr@VIValue@core@@@2@XZ
??0Numeric@core@@QEAA@I@Z
??4Numeric@core@@QEAAAEAV01@$$QEAV01@@Z
??0InputFileStream@core@@QEAA@XZ
??1InputFileStream@core@@QEAA@XZ
??0IllegalArgumentException@core@@QEAA@PEBDIPEB_SPEAVIExceptionObject@1@@Z
?getCurrentVersion@Version@core@@SA?AV12@XZ
??0URL@core@@QEAA@PEB_S_N@Z
?extractSchemeName@SchemeBase@core@@SA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV34@@Z
??4URL@core@@QEAAAEAV01@AEBV01@@Z
??0Font@core@@QEAA@XZ
??0Color@core@@QEAA@XZ
??0Value@core@@QEAA@$$QEAV01@@Z
??1IllegalArgumentException@core@@QEAA@XZ
??0IllegalArgumentException@core@@QEAA@AEBV01@@Z
?from_stream@core@@YAXAEAVListInStream@1@AEAUFont@1@@Z
?from_stream@core@@YAXAEAVListInStream@1@AEAUColor@1@@Z
?to_stream@core@@YAXAEAVListOutStream@1@AEBUFont@1@@Z
?to_stream@core@@YAXAEAVListOutStream@1@AEBUColor@1@@Z
??0Value@core@@QEAA@PEAVIValue@1@@Z
??0Value@core@@QEAA@J@Z
??0Value@core@@QEAA@I@Z
?assign@GenericValue@core@@QEAAXAEBV12@@Z
?assign@GenericValue@core@@QEAAXPEAUIUnknown@@@Z
?kLastPixel@core@@3UPoint@1@B
??1FormattedString@core@@QEAA@XZ
?create_v8_picture_with_copy_file@core@@YA?AV?$InterfacePtr@VIV8Picture@core@@@1@PEAVIFile@1@@Z
??BNumeric@core@@QEBAGXZ
?kEmptyRect@core@@3URect@1@B
?open@InputFileStream@core@@QEAAXPEAVIFile@2@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_NPEB_S@Z
?kInvalidV8StyleEntryId@core@@3VCompositeID@1@B
?copyAttributes@Font@core@@QEAAXAEBU12@K@Z
??0Color@core@@QEAA@W4ColorKind@01@AEBVCompositeID@1@@Z
??8Color@core@@QEBA_NAEBU01@@Z
??1V8Picture@core@@QEAA@XZ
??0V8Picture@core@@QEAA@XZ
??4Font@core@@QEAAAEAU01@AEBU01@@Z
??4Color@core@@QEAAAEAU01@AEBU01@@Z
??0Value@core@@QEAA@_N@Z
?assign@GenericValue@core@@QEAAX_N@Z
?getBoolean@Value@core@@QEBA_NAEA_N@Z
??BNumeric@core@@QEBAJXZ
?getNumeric@Value@core@@QEBA_NAEAVNumeric@2@@Z
?widen@Converter@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?close@InputFileStream@core@@QEAAXXZ
?read@BaseInputStream@core@@QEAA_KPEAVIStringBuffer@2@_K@Z
?create_std_string_buffer@core@@YA?AV?$InterfacePtr@VIStringBuffer@core@@@1@PEAVIStringFormatter@1@@Z
?getData@FormattedString@core@@QEBAAEBVLocalWString@2@XZ
?string_tod@core@@YANPEB_SPEAPEB_S@Z
??0URL@core@@QEAA@AEBV?$basic_string_view@_SU?$char_traits@_S@std@@@std@@PEB_S_N@Z
?kUTF8Encoding@core@@3QB_SB
?kWindowsLineSeparator@core@@3QB_SB
?open@InputFileStream@core@@QEAAXAEBVURL@2@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_NPEB_S@Z
?narrow@Converter@core@@QEBA?AV?$BasicString@D$0A@$0A@Vallocator@std@@@ale@@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@4@@Z
?system@Converter@core@@SAAEBV12@XZ
?widen@Converter@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEBD@Z
??0URL@core@@QEAA@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_N@Z
?replace_all@core@@YA_KAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV23@1@Z
?string_len@core@@YA_KPEB_S@Z
??0Exception@core@@QEAA@AEBV01@@Z
?utf8@Converter@core@@SAAEBV12@XZ
??0URL@core@@QEAA@XZ
??0Numeric@core@@QEAA@XZ
??1Numeric@core@@QEAA@XZ
?compare_nocase@core@@YAHPEB_S_K01@Z
?load_wstring@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEAVSCOM_ResourceBundle@1@PEBD@Z
?string_printf@core@@YAHAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEB_SZZ
?empty_string@core@@YAAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?skipListContent@ListInStream@core@@QEAAXXZ
?get@ListInStream@core@@QEAAXAEAH@Z
?get@ListInStream@core@@QEAAXAEA_N@Z
?put@ListOutStream@core@@QEAAXH@Z
?put@ListOutStream@core@@QEAAX_N@Z
?getEndOfList@ListInStream@core@@QEAAXXZ
?getBeginOfList@ListInStream@core@@QEAAXXZ
?putEndOfList@ListOutStream@core@@QEAAXXZ
?putBeginOfList@ListOutStream@core@@QEAAXXZ
?is_space@core@@YA_N_S@Z
?setString@FormattedString@core@@QEAAXAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@0@Z
??1Value@core@@QEAA@XZ
??0Value@core@@QEAA@XZ
??1SCOM_ResourceBundle@core@@QEAA@XZ
??0SCOM_ResourceBundle@core@@QEAA@PEBD@Z
??0URL@core@@QEAA@AEBV?$basic_string_view@_SU?$char_traits@_S@std@@@std@@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_N@Z
?kPropDirBin@core@@3QB_SB
?widen@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEBD@Z
?current_process@core@@YAPEAVSCOM_Process@1@XZ
?revokeAll@SCOM_Module@core@@QEAAXPEAVSCOM_Process@2@PEAVSCOM_ClassRegistrar@2@@Z
?registerAll@SCOM_Module@core@@QEAAXPEAVSCOM_Process@2@PEAVSCOM_ClassRegistrar@2@@Z
?cleanup@SCOM_ResourceBundle@core@@QEAAXXZ
?cleanup@SCOM_Module@core@@QEAAXXZ
?initialize@SCOM_Module@core@@QEAAXXZ
?kEmptySize@core@@3USize@1@B
?name@SCOM_ResourceBundle@core@@QEBAPEBDXZ
??1URL@core@@QEAA@XZ
?kUUIDNull@core@@3U_GUID@@B
?isValueMutable@ObjectTypeCore@core@@UEAA_NXZ
nuke_realloc
nuke_malloc
nuke_free
?nuke_new@@YAPEAX_K@Z
?nuke_new_nothrow@@YAPEAX_K@Z
?nuke_delete_size@@YAXPEAX_K@Z
?nuke_delete@@YAXPEAX@Z
JSValueToNumber
JSObjectGetPrivate
JSValueMakeUndefined
JSValueIsNumber
JSStringCreateWithUTF8CString
JSValueMakeString
JSStringRelease
JSValueIsString
JSValueToStringCopy
JSStringGetMaximumUTF8CStringSize
JSValueMakeBoolean
JSStringGetUTF8CString
OutputDebugStringW
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlCaptureContext
RtlLookupFunctionEntry
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
TerminateProcess
DeleteCriticalSection
FreeLibrary
GetProcAddress
GetModuleHandleW
lstrcmpiW
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
GetCurrentThreadId
IsProcessorFeaturePresent
GetCurrentProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcessId
DecodePointer
IsDebuggerPresent
GetKeyState
CharNextW
ShellExecuteW
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
VarUI4FromStr
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryInfoKeyW
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
_CxxThrowException
memcpy
__CxxFrameHandler3
__std_terminate
_purecall
wcsstr
__C_specific_handler
__std_exception_copy
__std_exception_destroy
memcmp
memmove
memset
__std_type_info_destroy_list
malloc
free
_recalloc
_resetstkoflw
terminate
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_errno
_configure_narrow_argv
_initterm_e
wcsncpy_s
_dtest
SCOM_Main
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ