Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
help.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
help.dll
Resource
win10v2004-20240508-en
Target
help.dll
Size
648KB
MD5
8901c62eb83edea865b02f06e52a1c75
SHA1
64b86cb7054c8f2a3fd80b79eb1782504688a159
SHA256
00423fe4b55e4fe37ce097cd9e7a00088f87672a307befb2a7271667ab340555
SHA512
329dfd863d089047710f6b4a10e3b47cf3135b7af5b94b2bdde1a3bfab0d165d3dbe959852e168f53a949ae53c1dff5dd208dd045fb9311ad8a57f9dacdc5f38
SSDEEP
12288:WfNMrUvho52J7fZAPUUdkWjeDf5WD8HUG:WfNMwvho52J7fZAPUUdkvr5/T
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
D:\Jenkins\ci_builder\WindowsBuild2_5B9Y8LMQO8F2\Platform\src\BUILD64\BIN\help.pdb
?compatibility_mode_to_wstring@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@W4CompatibilityMode@1@@Z
?get_milliseconds@core@@YAIXZ
??0FileException@core@@QEAA@W4Error@01@PEB_SIAEBVURL@1@PEAVIExceptionObject@1@@Z
?setOnClientFromServer@Exception@core@@QEAAXXZ
?inner@Exception@core@@QEAAXPEAVIExceptionObject@2@@Z
?descr@Exception@core@@QEAAXAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?hash_nocase@core@@YAJAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?string_split@core@@YA?AV?$vector@V?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@V?$allocator@V?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@std@@@std@@PEB_S000@Z
??4Exception@core@@QEAAAEAV01@AEBV01@@Z
??0OutputFileStream@core@@QEAA@XZ
??1SchemeBase@core@@QEAA@XZ
??0SchemeBase@core@@QEAA@AEBV?$basic_string_view@_SU?$char_traits@_S@std@@@std@@@Z
??0SCOM_ResourceBundle@core@@QEAA@PEBD@Z
??1SCOM_ResourceBundle@core@@QEAA@XZ
??0ModuleLoader@core@@QEAA@PEB_S@Z
??1ModuleLoader@core@@QEAA@XZ
?handle@ModuleLoader@core@@QEAAPEAUHINSTANCE__@@XZ
?initialize@SCOM_Module@core@@QEAAXXZ
?cleanup@SCOM_Module@core@@QEAAXXZ
?cleanup@SCOM_ResourceBundle@core@@QEAAXXZ
?unload@ModuleLoader@core@@QEAAXXZ
?registerAll@SCOM_Module@core@@QEAAXPEAVSCOM_Process@2@PEAVSCOM_ClassRegistrar@2@@Z
?revokeAll@SCOM_Module@core@@QEAAXPEAVSCOM_Process@2@PEAVSCOM_ClassRegistrar@2@@Z
?IScheme_schemeName@SchemeBase@core@@QEAA?AV?$basic_string_view@_SU?$char_traits@_S@std@@@std@@XZ
?IScheme_createURLString@SchemeBase@core@@QEAA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV?$basic_string_view@_SU?$char_traits@_S@std@@@std@@@Z
?IScheme_parseURL@SchemeBase@core@@QEAA?AVURL@2@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_N@Z
?IScheme_normalizeURL@SchemeBase@core@@QEAA?AVURL@2@AEBV32@@Z
?IScheme_equal@SchemeBase@core@@QEAA_NAEBVURL@2@0_N@Z
?IScheme_escape@SchemeBase@core@@QEAA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV34@_N@Z
?IScheme_reservedSymbols@SchemeBase@core@@QEAAXAEAV?$vector@_SV?$allocator@_S@std@@@std@@_N@Z
?pathSeparator@SchemeBase@core@@MEBAXAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?reservedSymbols@SchemeBase@core@@MEBAAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_N@Z
?parseScheme@SchemeBase@core@@MEAA_NAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEA_KAEAV?$vector@_KV?$allocator@_K@std@@@std@@1@Z
?parseAuthority@SchemeBase@core@@MEAA_NAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEA_KAEAV?$vector@_KV?$allocator@_K@std@@@std@@1_N@Z
?parsePath@SchemeBase@core@@MEAA_NAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEA_KAEAV?$vector@_KV?$allocator@_K@std@@@std@@1_N_K@Z
?compatibility_mode_from_wstring@core@@YA?AW4CompatibilityMode@1@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?parseFragment@SchemeBase@core@@MEAA_NAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEA_KAEAV?$vector@_KV?$allocator@_K@std@@@std@@1@Z
?part@URL@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@HH@Z
?scheme@URL@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?normalize@URL@core@@QEBA?AV12@XZ
?equal@URL@core@@QEBA_NAEBV12@@Z
?kAllFilesMask@core@@3QB_SB
?assign@GenericValue@core@@QEAAXAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?open@InputFileStream@core@@QEAAXPEAVIFile@2@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_NPEB_S@Z
?read_stream@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEAVIReader@1@_K@Z
?narrow@core@@YA?AV?$BasicString@D$0A@$0A@Vallocator@std@@@ale@@PEB_S@Z
?kPropDirLocalAppData@core@@3QB_SB
?get@ListInStream@core@@QEAAXAEAV?$BasicString@D$0A@$0A@Vallocator@std@@@ale@@@Z
?put@ListOutStream@core@@QEAAXAEBV?$BasicString@D$0A@$0A@Vallocator@std@@@ale@@@Z
?load_utf8@core@@YAXPEAVIFile@1@AEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
??1InputFileStream@core@@QEAA@XZ
??0InputFileStream@core@@QEAA@XZ
?to_lower@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEB_S0@Z
??0URL@core@@QEAA@AEBV?$basic_string_view@_SU?$char_traits@_S@std@@@std@@PEB_S_N@Z
?subscribe@EventRecipientImplBase@core@@QEAAXAEBU_GUID@@@Z
?kProcessDeathEvent@core@@3U_GUID@@B
?unsubscribe@EventRecipientImplBase@core@@QEAAXAEBU_GUID@@@Z
?save_utf8@core@@YAXPEAVIFile@1@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?to_string@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBVObjectVersion@1@@Z
??1EventRecipientImplBase@core@@IEAA@XZ
??0EventRecipientImplBase@core@@IEAA@PEAVIEventRecipient@1@@Z
??1IMutexImpl@core@@QEAA@XZ
??0IMutexImpl@core@@QEAA@XZ
?lock@IMutexImpl@core@@UEAAXXZ
?unlock@IMutexImpl@core@@UEAAXXZ
?widen@Converter@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEBD_K@Z
??BNumeric@core@@QEBAIXZ
?fromString@Numeric@core@@QEAAAEAV12@PEBDPEAPEBD@Z
?compareExt@LocalWString@core@@QEBA_NAEBV12@AEBVLocaleKeySet@2@@Z
?compare@core@@YAHPEBD_K01@Z
??1LSEHelper@core@@QEAA@XZ
??0LSEHelper@core@@QEAA@XZ
?filePath@URL@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?fullPathName@URL@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?params@URL@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
??6BaseOutputStream@core@@QEAAAEAV01@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?kUTF8Encoding@core@@3QB_SB
?kWindowsLineSeparator@core@@3QB_SB
?open@OutputFileStream@core@@QEAAXPEAVIFile@2@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_NPEB_S@Z
??1OutputFileStream@core@@UEAA@XZ
?broken@URL@core@@QEBA_NXZ
?host@URL@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?load_wstring@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEAVSCOM_ResourceBundle@1@PEBD@Z
?string_tol@core@@YAJPEB_SPEAPEB_S@Z
?fileName@URL@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?current_thread@core@@YAPEAVThread@1@XZ
?getResourceLocale@Thread@core@@QEAA?AVLocale@2@XZ
?name@Locale@core@@QEBAPEB_SXZ
?deserialize@Exception@core@@QEAAXPEAVIInPersistenceStorage@2@@Z
?serialize@Exception@core@@QEBAXPEAVIOutPersistenceStorage@2@@Z
??0Exception@core@@IEAA@AEBU_GUID@@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEAVIExceptionObject@1@0AEBV?$bitset@$0BG@@std@@1@Z
?compare_nocase@core@@YAHPEB_S_K01@Z
?extractSchemeName@SchemeBase@core@@SA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV34@@Z
??0Numeric@core@@QEAA@H@Z
??YNumeric@core@@QEAAAEAV01@AEBV01@@Z
?create_buffered_file@core@@YA?AV?$InterfacePtr@VIFileEx@core@@@1@PEAVIFile@1@_K@Z
??0URL@core@@QEAA@AEBV01@@Z
??0FileException@core@@QEAA@W4Error@01@PEB_SIAEBVURL@1@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?object@Exception@core@@QEBA?AV?$InterfacePtr@VIExceptionObject@core@@@2@XZ
??0URL@core@@QEAA@PEB_S_N@Z
?combinePath@URL@core@@QEBA?AV12@AEBV12@@Z
?put@ListOutStream@core@@QEAAX_K@Z
?getComma@ListInStream@core@@QEAA_NXZ
?copy_file@core@@YA_KPEAVIFile@1@0_K@Z
??0Numeric@core@@QEAA@I@Z
?system@Converter@core@@SAAEBV12@XZ
?narrow@Converter@core@@QEBA?AV?$BasicString@D$0A@$0A@Vallocator@std@@@ale@@PEB_S_K@Z
?serialize@LocalWString@core@@QEBAXAEAVListOutStream@2@@Z
?put@ListOutStream@core@@QEAAX_N@Z
?deserialize@LocalWString@core@@QEAAXAEAVListInStream@2@@Z
?get@ListInStream@core@@QEAAXAEA_N@Z
??0Date@core@@QEAA@XZ
?fromString@Numeric@core@@QEAAAEAV12@PEB_SPEAPEB_S@Z
??1Numeric@core@@QEAA@XZ
??0Exception@core@@QEAA@AEBV01@@Z
?toString@Numeric@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?getEndOfList@ListInStream@core@@QEAAXXZ
?skipListContent@ListInStream@core@@QEAAXXZ
?get@ListInStream@core@@QEAAXAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?get@ListInStream@core@@QEAAXAEAI@Z
?get@ListInStream@core@@QEAAXAEAH@Z
?getBeginOfList@ListInStream@core@@QEAAXXZ
?putEndOfList@ListOutStream@core@@QEAAXXZ
?put@ListOutStream@core@@QEAAXAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?put@ListOutStream@core@@QEAAXI@Z
?put@ListOutStream@core@@QEAAXH@Z
?putBeginOfList@ListOutStream@core@@QEAAXXZ
??1Exception@core@@QEAA@XZ
??4URL@core@@QEAAAEAV01@AEBV01@@Z
?string_tokenize@core@@YA?AV?$vector@V?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@V?$allocator@V?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@std@@@std@@PEB_S000@Z
?getString@LocalWString@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEB_S@Z
??0URL@core@@QEAA@AEBV?$basic_string_view@_SU?$char_traits@_S@std@@@std@@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_N@Z
?getBoolean@Value@core@@QEBA_NAEA_N@Z
??0LocalWString@core@@QEAA@AEBV?$vector@VLocalWStringItem@core@@V?$allocator@VLocalWStringItem@core@@@std@@@std@@@Z
?replace_all@core@@YA_KAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV23@1@Z
?getString@LocalWString@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV34@@Z
?getString@Value@core@@QEBA_NAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
??0CompositeID@core@@QEAA@AEBU_GUID@@@Z
??0LocalWString@core@@QEAA@$$QEAV01@@Z
??4LocalWString@core@@QEAAAEAV01@$$QEAV01@@Z
?setString@LocalWString@core@@QEAAXAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@0@Z
??0LocalWString@core@@QEAA@AEBV01@@Z
?content@LocalWString@core@@QEBA?AV?$vector@VLocalWStringItem@core@@V?$allocator@VLocalWStringItem@core@@@std@@@std@@XZ
?getIValue@Value@core@@UEBA?AV?$InterfacePtr@VIValue@core@@@2@XZ
??4LocalWString@core@@QEAAAEAV01@AEBV01@@Z
??0Value@core@@QEAA@XZ
??1LocalWString@core@@QEAA@XZ
??0LocalWString@core@@QEAA@XZ
??0URL@core@@QEAA@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_N@Z
??0URL@core@@QEAA@XZ
?compare@core@@YAHPEB_S_K01@Z
?current_process@core@@YAPEAVSCOM_Process@1@XZ
??1Value@core@@QEAA@XZ
??1TypeDomainPattern@core@@QEAA@XZ
?empty_string@core@@YAAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?string_len@core@@YA_KPEB_S@Z
??1URL@core@@QEAA@XZ
?parseParams@SchemeBase@core@@MEAA_NAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEA_KAEAV?$vector@_KV?$allocator@_K@std@@@std@@1@Z
?kUUIDNull@core@@3U_GUID@@B
nuke_free
nuke_realloc
nuke_malloc
?nuke_new@@YAPEAX_K@Z
?nuke_delete_size@@YAXPEAX_K@Z
?nuke_delete@@YAXPEAX@Z
?nuke_new_nothrow@@YAPEAX_K@Z
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
DecodePointer
DeleteCriticalSection
FreeLibrary
GetProcAddress
GetModuleHandleW
IsProcessorFeaturePresent
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
SizeofResource
LoadLibraryExW
GetModuleFileNameW
RtlLookupFunctionEntry
RtlCaptureContext
OutputDebugStringW
FindResourceW
IsDebuggerPresent
LoadResource
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
InitializeSListHead
lstrcmpiW
CharNextW
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
VarUI4FromStr
RegQueryInfoKeyW
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
?_Xlength_error@std@@YAXPEBD@Z
_purecall
__C_specific_handler
memcmp
memmove
__std_terminate
__std_exception_destroy
memcpy
__CxxFrameHandler3
__std_exception_copy
memset
__std_type_info_destroy_list
wcsstr
_CxxThrowException
free
malloc
_recalloc
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo
_errno
_initterm_e
_initterm
_resetstkoflw
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
srand
rand
wcsncpy_s
SCOM_Main
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ