Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
helpui.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
helpui.dll
Resource
win10v2004-20240426-en
Target
helpui.dll
Size
414KB
MD5
6e10a32796d0c8b301fa67fcc9f0f478
SHA1
b1a7be3c7d1ace841606fbfd76beb8d9f4fadb18
SHA256
9438f779648a4ae728b7056e9d5b80c2e3cb2afe702041e9a77167f668f547a4
SHA512
f33d76208e6a66dad9dd16f60a9615ed2de4c22155e8ea6c3ad8d6a5971a3d70cf0ab32da41c6904f66fb4baebae85ed015ca67ef01f7ce354728f3d275031bd
SSDEEP
6144:80TKQg6Rx6ldn/lSnSsfHBVqP0dzUfH9P5Y8TThn+i:DTKuRx4/lteq
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
D:\Jenkins\ci_builder\WindowsBuild2_5B9Y8LMQO8F2\Platform\src\BUILD64\BIN\helpui.pdb
?isAltPressed@wbase@@YA_NXZ
?V8SetWindowPos@@YAHPEAUHWND__@@0HHHHI@Z
?isCtrlPressed@wbase@@YA_NXZ
??1SCOM_ResourceBundle@core@@QEAA@XZ
?name@SCOM_ResourceBundle@core@@QEBAPEBDXZ
??0ModuleLoader@core@@QEAA@PEB_S@Z
??1ModuleLoader@core@@QEAA@XZ
?handle@ModuleLoader@core@@QEAAPEAUHINSTANCE__@@XZ
?unload@ModuleLoader@core@@QEAAXXZ
?initialize@SCOM_Module@core@@QEAAXXZ
?cleanup@SCOM_Module@core@@QEAAXXZ
?cleanup@SCOM_ResourceBundle@core@@QEAAXXZ
?registerAll@SCOM_Module@core@@QEAAXPEAVSCOM_Process@2@PEAVSCOM_ClassRegistrar@2@@Z
?revokeAll@SCOM_Module@core@@QEAAXPEAVSCOM_Process@2@PEAVSCOM_ClassRegistrar@2@@Z
?kPropDirBin@core@@3QB_SB
?params@URL@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?fragment@URL@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?term_string@core@@YAPEB_SQEBQEB_SH@Z
?system@Converter@core@@SAAEBV12@XZ
?putBeginOfList@ListOutStream@core@@QEAAXXZ
?putEndOfList@ListOutStream@core@@QEAAXXZ
?getBeginOfList@ListInStream@core@@QEAAXXZ
?skipListContent@ListInStream@core@@QEAAXXZ
?getEndOfList@ListInStream@core@@QEAAXXZ
??0LSEHelper@core@@QEAA@XZ
??1LSEHelper@core@@QEAA@XZ
?get@ListInStream@core@@QEAAXAEAH@Z
??BNumeric@core@@QEBAIXZ
?value_list_item@core@@YA?AV?$InterfacePtr@VIValueListItem@core@@@1@AEBVValue@1@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@W4CheckState@1@AEBVV8Picture@1@J_N1@Z
?open@StringOutputStream@core@@QEAAXPEAVIStringBuffer@2@@Z
?close@StringOutputStream@core@@QEAA?AV?$InterfacePtr@VIStringBuffer@core@@@2@XZ
?lock@IMutexImpl@core@@UEAAXXZ
?toString@Numeric@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?kEmptyPoint@core@@3UPoint@1@B
?getIValue@Value@core@@UEBA?AV?$InterfacePtr@VIValue@core@@@2@XZ
??0Value@core@@QEAA@PEAVIValue@1@@Z
?string_printf@core@@YAHAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEB_SZZ
??0Color@core@@QEAA@W4ColorKind@01@AEBVCompositeID@1@@Z
??0CompositeID@core@@QEAA@J@Z
?put@ListOutStream@core@@QEAAXJ@Z
?topLeft@Rect@core@@QEBA?AUPoint@2@XZ
?offset@Rect@core@@QEAAAEAU12@HH@Z
??0Rect@core@@QEAA@AEBUtagPOINT@@AEBUtagSIZE@@@Z
?size@Rect@core@@QEBA?AUSize@2@XZ
??0Numeric@core@@QEAA@I@Z
??0Numeric@core@@QEAA@_K@Z
?setIValue@Value@core@@UEAAXPEAVIValue@2@@Z
??0SCOM_ResourceBundle@core@@QEAA@PEBD@Z
?kLastPixel@core@@3UPoint@1@B
?unescape@URL@core@@SA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV34@@Z
??0ListOutStream@core@@QEAA@PEAVIWriter@1@@Z
??0ListInStream@core@@QEAA@PEAVIReader@1@@Z
?get_milliseconds@core@@YAIXZ
?string_split@core@@YA?AV?$vector@V?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@V?$allocator@V?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@std@@@std@@PEB_S000@Z
??1ListInStream@core@@QEAA@XZ
??1ListOutStream@core@@QEAA@XZ
??1StringInputStream@core@@QEAA@XZ
??0StringInputStream@core@@QEAA@XZ
??1StringOutputStream@core@@UEAA@XZ
??0StringOutputStream@core@@QEAA@XZ
?is_space@core@@YA_ND@Z
??0URL@core@@QEAA@PEB_S_N@Z
?widen@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEBD@Z
??0URL@core@@QEAA@AEBV?$basic_string_view@_SU?$char_traits@_S@std@@@std@@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_N@Z
??0EventRecipientImplBase@core@@IEAA@PEAVIEventRecipient@1@@Z
??0IMutexImpl@core@@QEAA@XZ
??1EventRecipientImplBase@core@@IEAA@XZ
??1IMutexImpl@core@@QEAA@XZ
?to_lower@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEB_S0@Z
?ext@URL@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?decode@URLEncoder@core@@SA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV34@AEBVConverter@2@@Z
??0Value@core@@QEAA@PEAUIUnknown@@@Z
?unsubscribe@EventRecipientImplBase@core@@QEAAXAEBU_GUID@@@Z
?kProcessDeathEvent@core@@3U_GUID@@B
?subscribe@EventRecipientImplBase@core@@QEAAXAEBU_GUID@@@Z
?equal@URL@core@@QEBA_NAEBV12@@Z
?kEmptyRect@core@@3URect@1@B
?kEmptySize@core@@3USize@1@B
??0Rect@core@@QEAA@HHHH@Z
??0URL@core@@QEAA@XZ
??0V8Picture@core@@QEAA@XZ
??4URL@core@@QEAAAEAV01@AEBV01@@Z
?compare_nocase@core@@YAHPEB_S_K01@Z
??0URL@core@@QEAA@AEBV01@@Z
??0Value@core@@QEAA@_N@Z
??0URL@core@@QEAA@AEBV?$basic_string_view@_SU?$char_traits@_S@std@@@std@@PEB_S_N@Z
??0V8Picture@core@@QEAA@AEBVURL@1@@Z
?widen@Converter@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV?$BasicString@D$0A@$0A@Vallocator@std@@@4@@Z
?replace_all@core@@YA_KAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV23@1@Z
?load_wstring@core@@YA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEAVSCOM_ResourceBundle@1@PEBD@Z
?load_utf8@core@@YAXPEAVIFile@1@AEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?getString@LocalWString@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@PEB_S@Z
?getString@LocalWString@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV34@@Z
?fullPathName@URL@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?host@URL@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?narrow@Converter@core@@QEBA?AV?$BasicString@D$0A@$0A@Vallocator@std@@@ale@@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@4@@Z
??0TypeDomainPattern@core@@QEAA@AEBU_GUID@@@Z
??4TypeDomainPattern@core@@QEAAAEAV01@$$QEAV01@@Z
?extractSchemeName@SchemeBase@core@@SA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@AEBV34@@Z
?getBoolean@Value@core@@QEBA_NAEA_N@Z
?assign@GenericValue@core@@QEAAX_N@Z
??0Value@core@@QEAA@AEBVNumeric@1@@Z
?getNumeric@Value@core@@QEBA_NAEAVNumeric@2@@Z
??0Value@core@@QEAA@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?getString@Value@core@@QEBA_NAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?type@Value@core@@QEBA?AVType@2@XZ
?current_thread@core@@YAPEAVThread@1@XZ
?getResourceLocale@Thread@core@@QEAA?AVLocale@2@XZ
?name@Locale@core@@QEBAPEB_SXZ
?utf8@Converter@core@@SAAEBV12@XZ
??4Value@core@@QEAAAEAV01@$$QEAV01@@Z
??4Value@core@@QEAAAEAV01@AEBV01@@Z
??0Numeric@core@@QEAA@H@Z
??4Numeric@core@@QEAAAEAV01@$$QEAV01@@Z
?current_process@core@@YAPEAVSCOM_Process@1@XZ
??0Value@core@@QEAA@AEBV01@@Z
??BNumeric@core@@QEBAHXZ
?empty@URL@core@@QEBA_NXZ
??1TypeDomainPattern@core@@QEAA@XZ
??1V8Picture@core@@QEAA@XZ
?part@URL@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@HH@Z
?scheme@URL@core@@QEBA?AV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?content@URL@core@@QEBAAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
?unlock@IMutexImpl@core@@UEAAXXZ
??0URL@core@@QEAA@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@_N@Z
??1URL@core@@QEAA@XZ
?empty_string@core@@YAAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@XZ
??1Value@core@@QEAA@XZ
??0Value@core@@QEAA@XZ
??1LocalWString@core@@QEAA@XZ
??0LocalWString@core@@QEAA@XZ
??0Exception@core@@QEAA@AEBV01@@Z
?getString@GenericValue@core@@QEBA_NAEAV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?getTypeCode@Type@core@@QEBA?AW4Code@12@XZ
??1Type@core@@QEAA@XZ
??1Exception@core@@QEAA@XZ
??0Exception@core@@IEAA@AEBU_GUID@@PEB_SPEAVIExceptionObject@1@0AEBV?$bitset@$0BG@@std@@AEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
??0Numeric@core@@QEAA@XZ
??1Numeric@core@@QEAA@XZ
?string_len@core@@YA_KPEB_S@Z
?kUUIDNull@core@@3U_GUID@@B
?open@StringInputStream@core@@QEAAXAEBV?$BasicString@_S$0A@$0A@Vallocator@std@@@ale@@@Z
?nuke_new@@YAPEAX_K@Z
?nuke_new_nothrow@@YAPEAX_K@Z
?nuke_delete@@YAXPEAX@Z
?nuke_delete_size@@YAXPEAX_K@Z
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
DecodePointer
DeleteCriticalSection
FreeLibrary
GetProcAddress
GetModuleHandleW
lstrcmpiW
TerminateProcess
EnterCriticalSection
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
RtlLookupFunctionEntry
RtlCaptureContext
OutputDebugStringW
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcess
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcessId
LeaveCriticalSection
CharNextW
GetKeyState
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
VarUI4FromStr
RegEnumKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
?_Xlength_error@std@@YAXPEBD@Z
wcsstr
__std_exception_copy
__std_terminate
__CxxFrameHandler3
_purecall
__std_exception_destroy
memcmp
memmove
memset
__C_specific_handler
__std_type_info_destroy_list
memcpy
_CxxThrowException
malloc
free
_recalloc
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_invalid_parameter_noinfo
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_errno
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
wcsncpy_s
SCOM_Main
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ