Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
anion.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
anion.dll
Resource
win10v2004-20240508-en
Target
anion.dll
Size
598KB
MD5
17bb5d5aeef6cf1e2c32e6e4a375c595
SHA1
75bd34dcd08bb2a99f1c440c7c81a1f9754e1b89
SHA256
8dc4fa21180f77ca3b0441d6f9c3b948e65acd4cc55f75871e0006ffb33601f3
SHA512
7d6a801932cdb9c9811658b5d597fe5edb4c3cc6045df9e96cf99146aaf16b9c9ed4946c5255c12645320481cd7b429deff7e4f8160d0de48f55ff5b4ba40574
SSDEEP
6144:xYajO9Y6Oue4n9UhereleIC0AxW6pJ+W43Yfc5cfzw3lTbUFyg++TeZdSYJl85:xYwO9YoLnQe8rCxk6pyqdfz/DT
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
D:\Jenkins\ci_builder\WindowsBuild2_5B9Y8LMQO8F2\Platform\src\BUILD64\BIN\anion.pdb
?isProcess@Thread@core@@UEAA_NXZ
?doStart@Thread@core@@MEAAXXZ
?release@?$Refcountable@VThread@core@@UAtomicCounter@2@@core@@QEAAHXZ
?acquire@?$Refcountable@VThread@core@@UAtomicCounter@2@@core@@QEAAHXZ
?current_thread@core@@YAPEAVThread@1@XZ
?inner@Exception@core@@QEBA?AV?$InterfacePtr@VIExceptionObject@core@@@2@XZ
?isAlive@Thread@core@@QEAA_NXZ
?wait_unique@core@@YA_NPEAVThread@1@I@Z
?join@Thread@core@@QEAAXXZ
?start@Thread@core@@QEAAXXZ
??0IllegalArgumentException@core@@QEAA@PEBDIPEB_SAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEAVIExceptionObject@1@@Z
?unlock@RWMutex@core@@QEAAXXZ
?lock@RWMutex@core@@QEAAXXZ
?unlockShared@RWMutex@core@@QEAAXXZ
?lockShared@RWMutex@core@@QEAAXXZ
??1RWMutex@core@@QEAA@XZ
??0RWMutex@core@@QEAA@XZ
??0IllegalStateException@core@@QEAA@PEBDIPEB_SAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEAVIExceptionObject@1@@Z
??1IllegalStateException@core@@QEAA@XZ
??0IllegalStateException@core@@QEAA@AEBV01@@Z
?string_uito@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@IH@Z
?string_ito@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@HH@Z
??0IllegalStateException@core@@QEAA@PEBDIPEB_SPEAVIExceptionObject@1@@Z
?create_byte_buffer_unsafe@core@@YA?AV?$InterfacePtr@VIByteBuffer@core@@@1@PEAVByteArray@1@PEAEPEBEIHHHHW4ByteOrder@1@@Z
?small_memcpy@core@@YAXPEAXPEBX_K@Z
??0UnsupportedOperationException@core@@QEAA@AEBV01@@Z
?allocate_byte_buffer@core@@YA?AV?$InterfacePtr@VIByteBuffer@core@@@1@IW4ByteOrder@1@@Z
??0UnsupportedOperationException@core@@QEAA@PEBDIPEB_SPEAVIExceptionObject@1@@Z
??1UnsupportedOperationException@core@@QEAA@XZ
??4Exception@core@@QEAAAEAV01@AEBV01@@Z
?descr@Exception@core@@QEAAXAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?inner@Exception@core@@QEAAXPEAVIExceptionObject@2@@Z
?setOnClientFromServer@Exception@core@@QEAAXXZ
?load_wstring@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEAVSCOM_ResourceBundle@1@PEBD@Z
?load_core_wstring@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEBD@Z
??0UnsupportedOperationException@core@@QEAA@PEAVIExceptionObject@1@@Z
?deserialize@Exception@core@@QEAAXPEAVIInPersistenceStorage@2@@Z
?serialize@Exception@core@@QEBAXPEAVIOutPersistenceStorage@2@@Z
??0Exception@core@@IEAA@AEBU_GUID@@PEB_SPEAVIExceptionObject@1@0AEBV?$bitset@$0BG@@std@@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?logDebug@SCOM_LoggerBase@core@@QEBAXIPEB_S00PEAVIExceptionObject@2@@Z
?hash@core@@YAJAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?compare@core@@YAHPEB_S_K01@Z
??0Exception@core@@IEAA@AEBU_GUID@@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEAVIExceptionObject@1@0AEBV?$bitset@$0BG@@std@@1@Z
??1Exception@core@@QEAA@XZ
?get@ListInStream@core@@QEAAXAEAH@Z
??0ForwardOnlyBinFileHolder@core@@QEAA@PEAVIInPersistenceStorage@1@@Z
??1ForwardOnlyBinFileHolder@core@@QEAA@XZ
?file@ForwardOnlyBinFileHolder@core@@QEAAPEAVIFile@2@XZ
?closeForwardOnlyBinFile@ForwardOnlyBinFileHolder@core@@QEAAXXZ
?kUUIDNull@core@@3U_GUID@@B
?log@SCOM_LoggerBase@core@@QEBAXW4SCOM_LogLevel@2@IPEB_SPEBU?$pair@PEB_SV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@std@@_KPEAVIExceptionObject@2@@Z
??0SCOM_ResourceBundle@core@@QEAA@PEBD@Z
?isDebugEnabled@SCOM_LoggerBase@core@@QEBA_NXZ
?isTraceEnabled@SCOM_LoggerBase@core@@QEBA_NXZ
?bin_hex@core@@YAPEB_SH@Z
?to_string@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBU_GUID@@@Z
?string_printf@core@@YAHAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEB_SZZ
?format@DateFormat@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBVDate@2@W4Pattern@12@@Z
??0BufferException@core@@QEAA@W4Error@01@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEAVIExceptionObject@1@@Z
?string_lto@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@JH@Z
?releaseWriterLock@IRWMutexSimpleImpl@core@@UEAAXXZ
?acquireWriterLock@IRWMutexSimpleImpl@core@@UEAAXXZ
?releaseReaderLock@IRWMutexSimpleImpl@core@@UEAAXXZ
?acquireReaderLock@IRWMutexSimpleImpl@core@@UEAAXXZ
??0IRWMutexSimpleImpl@core@@QEAA@XZ
??1IRWMutexSimpleImpl@core@@QEAA@XZ
??1ISemaphoreOneTimeImpl@core@@QEAA@XZ
?eventHandle@ISemaphoreBaseImpl@core@@UEAAPEAXXZ
?unlock@IMutexImpl@core@@UEAAXXZ
?lock@IMutexImpl@core@@UEAAXXZ
??0IMutexImpl@core@@QEAA@XZ
??0ISemaphoreOneTimeImpl@core@@QEAA@XZ
?wait@ISemaphoreBaseImpl@core@@UEAA_NH@Z
?get_milliseconds@core@@YAIXZ
?wait@ISemaphoreBaseImpl@core@@UEAAXXZ
?object@Exception@core@@QEBA?AV?$InterfacePtr@VIExceptionObject@core@@@2@XZ
?raise@ISemaphoreBaseImpl@core@@UEAAXXZ
??1Process@core@@UEAA@XZ
??0Thread@core@@QEAA@W4PoolType@01@@Z
??1Thread@core@@UEAA@XZ
?run@Thread@core@@UEAAXXZ
?wait@Thread@core@@MEAAXPEAV12@@Z
?doStart@Process@core@@MEAAXXZ
?doStartTimer@Thread@core@@MEAAXXZ
?isProcess@Process@core@@UEAA_NXZ
?isServerProcess@Thread@core@@UEAA_NXZ
?isUIThread@Thread@core@@UEAA_NXZ
?construct@Process@core@@AEAAXPEAVSCOM_Module@2@@Z
??1IMutexImpl@core@@QEAA@XZ
?term@Process@core@@QEAAXXZ
?init@Process@core@@QEAAXPEAVSCOM_ProcessData@2@@Z
?current_process_data@core@@YAPEAVSCOM_ProcessData@1@XZ
??1SCOM_ProcessData@core@@QEAA@XZ
?string_len@core@@YA_KPEB_S@Z
?compare_nocase@core@@YAHPEB_S_K01@Z
??0URL@core@@QEAA@XZ
?copy_file@core@@YA_KPEAVIFile@1@0_K@Z
??1BufferException@core@@QEAA@XZ
??0BufferException@core@@QEAA@AEBV01@@Z
??1IllegalArgumentException@core@@QEAA@XZ
??1SCOM_ResourceBundle@core@@QEAA@XZ
?initialize@SCOM_Module@core@@QEAAXXZ
?cleanup@SCOM_Module@core@@QEAAXXZ
?cleanup@SCOM_ResourceBundle@core@@QEAAXXZ
?registerAll@SCOM_Module@core@@QEAAXPEAVSCOM_Process@2@PEAVSCOM_ClassRegistrar@2@@Z
?revokeAll@SCOM_Module@core@@QEAAXPEAVSCOM_Process@2@PEAVSCOM_ClassRegistrar@2@@Z
?format_exception_descr@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV23@0@Z
?widen@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEBD_K@Z
?narrow_std@Converter@core@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?system@Converter@core@@SAAEBV12@XZ
?empty_string@core@@YAAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?widen@Converter@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0ISemaphoreImpl@core@@QEAA@XZ
?hash_nocase@core@@YAJAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
??1ISemaphoreImpl@core@@QEAA@XZ
?sleep@Thread@core@@SAXI@Z
?interrupt@Thread@core@@QEAAXXZ
?get@ListInStream@core@@QEAAXAEAI@Z
?getBeginOfList@ListInStream@core@@QEAAXXZ
?putEndOfList@ListOutStream@core@@QEAAXXZ
?put@ListOutStream@core@@QEAAXH@Z
?put@ListOutStream@core@@QEAAXI@Z
?putBeginOfList@ListOutStream@core@@QEAAXXZ
?maxCharSize@StreamConverterFromUnicode@core@@QEBA_KXZ
??0IllegalArgumentException@core@@QEAA@PEBDIPEB_SPEAVIExceptionObject@1@@Z
??0Exception@core@@QEAA@AEBV01@@Z
?kSCOM_LoggerFuncProp@core@@3QB_SB
??1DateFormat@core@@QEAA@XZ
??0IllegalArgumentException@core@@QEAA@AEBV01@@Z
?current_process@core@@YAPEAVSCOM_Process@1@XZ
?getEndOfList@ListInStream@core@@QEAAXXZ
?skipListContent@ListInStream@core@@QEAAXXZ
?nuke_new_nothrow@@YAPEAX_K@Z
?nuke_new@@YAPEAX_K@Z
?nuke_delete@@YAXPEAX@Z
?nuke_delete_size@@YAXPEAX_K@Z
getsockname
getpeername
getsockopt
connect
bind
accept
htons
ntohs
htonl
ntohl
getnameinfo
freeaddrinfo
getaddrinfo
WSAAddressToStringW
setsockopt
WSASocketW
WSASend
WSARecv
listen
select
shutdown
ioctlsocket
closesocket
WSAGetLastError
__WSAFDIsSet
WSAIoctl
WSASetLastError
WSAStartup
WSACleanup
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
OutputDebugStringW
IsDebuggerPresent
DecodePointer
DeleteCriticalSection
FormatMessageA
FormatMessageW
WideCharToMultiByte
LocalFree
TlsAlloc
EnterCriticalSection
LeaveCriticalSection
PostQueuedCompletionStatus
TlsFree
FreeLibrary
GetProcAddress
GetModuleHandleW
QueryPerformanceCounter
MultiByteToWideChar
WaitForSingleObject
WaitForMultipleObjects
TerminateThread
QueueUserAPC
SetEvent
SleepEx
CreateIoCompletionPort
SetWaitableTimer
GetQueuedCompletionStatus
SetLastError
VerSetConditionMask
VerifyVersionInfoW
CreateWaitableTimerW
CloseHandle
Sleep
TlsGetValue
TlsSetValue
CreateEventW
GetModuleFileNameW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RaiseException
GetLastError
lstrcmpiW
InitializeCriticalSectionAndSpinCount
CharNextW
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
VarUI4FromStr
RegSetValueExW
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
?_Throw_C_error@std@@YAXH@Z
_Mtx_lock
_Mtx_unlock
_Cnd_wait
_Cnd_signal
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Cnd_init_in_situ
_Cnd_destroy_in_situ
?_Xlength_error@std@@YAXPEBD@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
_Query_perf_frequency
_Query_perf_counter
_Cnd_broadcast
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
?_Syserror_map@std@@YAPEBDH@Z
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
GetAcceptExSockaddrs
AcceptEx
__CxxFrameHandler3
__std_terminate
_purecall
__std_exception_copy
__std_exception_destroy
wcsstr
__C_specific_handler
__std_type_info_compare
memmove
memset
__std_type_info_destroy_list
memcmp
_CxxThrowException
memcpy
free
_recalloc
malloc
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initterm_e
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_beginthreadex
terminate
_initterm
_errno
_invalid_parameter_noinfo
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
strerror
wcsncpy_s
strncpy
__stdio_common_vsprintf
SCOM_Main
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ