Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
LockAppHost.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
LockAppHost.exe
Resource
win10v2004-20230220-en
Target
LockAppHost.exe
Size
314KB
MD5
a8a1972707edb245529005d4507cd220
SHA1
c99e9a0fbd492be91473375bedda59c736405cf4
SHA256
4cbaea16e271edbb1a8559cda050674f7d97b239d40e968560c04958777e7a19
SHA512
22bf77b7c150550fc34ce5a3b41a16806921d586704b26487827d1c2e2899de6e71c1eee3e049c69369b2f2ed41ab653f1b33591e011d9b90d28d58c96900432
SSDEEP
6144:tkGWCH9Br+DKxudpf8n/NofJb3BvZL/W6HcqPc8RMK:SGDr+DKsdV8n/NoblAqPcEx
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ResolveDelayLoadedAPI
LocalAlloc
FindPackagesByPackageFamily
DelayLoadFailureHook
LoadLibraryExW
GetProcessHeap
GetCurrentProcessId
DeleteCriticalSection
AcquireSRWLockShared
CreateMutexExW
GetProcAddress
DecodePointer
HeapAlloc
ReleaseSRWLockShared
CloseHandle
OpenSemaphoreW
WaitForSingleObjectEx
AcquireSRWLockExclusive
OutputDebugStringW
ReleaseSRWLockExclusive
GetLastError
FormatMessageW
ReleaseMutex
GetCurrentThreadId
WaitForSingleObject
InitializeCriticalSectionEx
LeaveCriticalSection
EncodePointer
GetModuleHandleExW
ReleaseSemaphore
GetModuleFileNameA
EnterCriticalSection
SetLastError
HeapFree
CreateSemaphoreExW
TranslateMessage
GetMessageW
RemovePropW
SetPropW
UpdateWindow
UpdateLayeredWindow
DispatchMessageW
PostThreadMessageW
GetDC
ReleaseDC
SetFocus
GetForegroundWindow
GetWindowRect
GetPropW
SetWindowLongW
GetWindowLongW
SetTimer
EnableWindow
SendNotifyMessageW
IsHungAppWindow
PostQuitMessage
KillTimer
SetWindowCompositionAttribute
SetWindowPos
MonitorFromWindow
GetSystemMetrics
UnregisterClassW
GetShellWindow
MsgWaitForMultipleObjectsEx
GetDisplayConfigBufferSizes
SendMessageW
PostMessageW
PeekMessageW
SetForegroundWindow
QueryDisplayConfig
GetClientRect
DefWindowProcW
DestroyWindow
GetWindowThreadProcessId
CreateWindowInBandEx
RegisterClassExW
LoadCursorW
IsWindowVisible
GetClassInfoExW
_except_handler4_common
_controlfp
??1type_info@@UAE@XZ
_onexit
__dllonexit
_wcmdln
_initterm
__setusermatherr
_unlock
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__p__commode
_XcptFilter
malloc
free
_vsnprintf_s
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
_purecall
??3@YAXPAX@Z
memcpy_s
_vsnwprintf
??_V@YAXPAX@Z
_lock
?terminate@@YAXXZ
__p__fmode
__CxxFrameHandler3
memcmp
memcpy
_CxxThrowException
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBDH@Z
??0exception@@QAE@ABQBD@Z
memmove_s
wcscspn
wcsrchr
memmove
realloc
_callnewh
memset
SHGetThreadRef
SHSetThreadRef
SHCreateThreadRef
SHCreateThreadWithHandle
IUnknown_SetSite
IUnknown_QueryService
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoReleaseMarshalData
StringFromGUID2
CoCreateFreeThreadedMarshaler
CoWaitForMultipleHandles
CoTaskMemFree
CoTaskMemRealloc
CoRevokeClassObject
CoDisableCallCancellation
CoCancelCall
CoGetApartmentType
RoGetAgileReference
CoEnableCallCancellation
CoAddRefServerProcess
CoReleaseServerProcess
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoRegisterClassObject
CoResumeClassObjects
CoInitializeEx
CoGetMalloc
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsIsStringEmpty
WindowsCreateString
WindowsCreateStringReference
WindowsSubstringWithSpecifiedLength
WindowsCompareStringOrdinal
WindowsStringHasEmbeddedNull
RoActivateInstance
RoRevokeActivationFactories
RoGetActivationFactory
RoRegisterActivationFactories
RoOriginateErrorW
RoOriginateError
TryAcquireSRWLockShared
OpenEventW
InitOnceComplete
InitializeSRWLock
CreateEventW
ResetEvent
CreateEventExW
Sleep
SetEvent
InitOnceBeginInitialize
GetStartupInfoW
CreateThread
TlsFree
OpenProcess
ExitProcess
TlsSetValue
TerminateProcess
GetCurrentProcess
OpenProcessToken
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
FreeLibraryAndExitThread
GetModuleHandleA
FreeLibrary
QueryPerformanceCounter
GetTickCount64
GetSystemTimeAsFileTime
GetProductInfo
GetTickCount
CreateThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CallbackMayRunLong
FreeLibraryWhenCallbackReturns
CloseThreadpoolWait
WaitForThreadpoolWaitCallbacks
TrySubmitThreadpoolCallback
SetThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolTimer
RegGetValueW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
DuplicateHandle
EventWriteTransfer
EventUnregister
EventSetInformation
EventActivityIdControl
EventRegister
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetThreadUILanguage
PowerSettingRegisterNotification
PowerSettingUnregisterNotification
CreateSemaphoreW
LocalFree
IsDebuggerPresent
CheckRemoteDebuggerPresent
QuirkIsEnabledForPackage
CompareStringOrdinal
SysAllocString
VariantInit
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
UnregisterWait
RegisterWaitForSingleObject
CreateTimerQueueTimer
DeleteTimerQueueTimer
UnregisterWaitEx
CheckElevationEnabled
ApiSetQueryApiSetPresence
ord140
ord14
ord10
NtQueryWnfStateData
DbgPrintEx
RtlPublishWnfStateData
NtPowerInformation
NtQueryInformationToken
NtQuerySystemInformation
?SetY@Element@DirectUI@@QAEJH@Z
?SetX@Element@DirectUI@@QAEJH@Z
?Create@Element@DirectUI@@SGJIPAV12@PAKPAPAV12@@Z
?AddBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z
DuiCreateObject
?SetAccessible@Element@DirectUI@@QAEJ_N@Z
?SetActive@Element@DirectUI@@QAEJH@Z
?SetForegroundStdColor@Element@DirectUI@@QAEJH@Z
?SetBackgroundStdColor@Element@DirectUI@@QAEJH@Z
?Host@NativeHWNDHost@DirectUI@@QAEXPAVElement@2@@Z
?Initialize@TouchHWNDElement@DirectUI@@QAEJPAUHWND__@@_NIPAVElement@2@PAK@Z
?SyncDestroyWindow@NativeHWNDHost@DirectUI@@QAEXXZ
?GetHWND@HWNDElement@DirectUI@@UAEPAUHWND__@@XZ
?GetDisplayNode@Element@DirectUI@@QAEPAUHGADGET__@@XZ
?SetVisible@Element@DirectUI@@QAEJ_N@Z
?SetHeight@Element@DirectUI@@QAEJH@Z
?SetWidth@Element@DirectUI@@QAEJH@Z
?SetLayoutPos@Element@DirectUI@@QAEJH@Z
?StartDefer@Element@DirectUI@@QAEXPAK@Z
?OnEvent@TouchHWNDElement@DirectUI@@UAEXPAUEvent@2@@Z
?DCompDeviceRebuilt@Element@DirectUI@@SG?AVUID@@XZ
?WndProc@TouchHWNDElement@DirectUI@@UAEJPAUHWND__@@IIJ@Z
?Destroy@Element@DirectUI@@QAEJ_N@Z
??1TouchHWNDElement@DirectUI@@UAE@XZ
??0TouchHWNDElement@DirectUI@@QAE@XZ
?WndProc@NativeHWNDHost@DirectUI@@SGJPAUHWND__@@IIJ@Z
?HideWindow@NativeHWNDHost@DirectUI@@QAEXXZ
?ShowWindow@NativeHWNDHost@DirectUI@@QAEXH@Z
?GetHWND@NativeHWNDHost@DirectUI@@QAEPAUHWND__@@XZ
?Initialize@NativeHWNDHost@DirectUI@@QAEJPBG0PAUHWND__@@PAUHICON__@@HHHHHHPAUHINSTANCE__@@I@Z
?Destroy@NativeHWNDHost@DirectUI@@QAEXXZ
??1NativeHWNDHost@DirectUI@@UAE@XZ
??0NativeHWNDHost@DirectUI@@QAE@XZ
RegisterPVLBehaviorFactory
InitThread
InitProcessPriv
?SetAccName@Element@DirectUI@@QAEJPBG@Z
?Add@Element@DirectUI@@QAEJPAV12@@Z
?Remove@Element@DirectUI@@QAEJPAV12@@Z
?DestroyAll@Element@DirectUI@@QAEJ_N@Z
?RemoveListener@Element@DirectUI@@QAEXPAUIElementListener@2@@Z
?_CreateAndSetLayout@DirectUI@@YGJPAVElement@1@P6GJHPAHPAPAVValue@1@@ZH1@Z
?Create@FlowLayout@DirectUI@@SGJHPAHPAPAVValue@2@@Z
?Create@FillLayout@DirectUI@@SGJHPAHPAPAVValue@2@@Z
?GetClassInfoPtr@HWNDElement@DirectUI@@SGPAUIClassInfo@2@XZ
?EndDefer@Element@DirectUI@@QAEXK@Z
?AddListener@Element@DirectUI@@QAEJPAUIElementListener@2@@Z
UnInitThread
UnInitProcessPriv
?IsContentProtected@Element@DirectUI@@UAE_NXZ
?GetContentStringAsDisplayed@Element@DirectUI@@UAEPBGPAPAVValue@2@@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanged@TouchHWNDElement@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnGroupChanged@HWNDElement@DirectUI@@UAEXH_N@Z
?OnInput@TouchHWNDElement@DirectUI@@UAEXPAUInputEvent@2@@Z
?OnKeyFocusMoved@TouchHWNDElement@DirectUI@@UAEXPAVElement@2@0@Z
?OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnDestroy@TouchHWNDElement@DirectUI@@UAEXXZ
?Paint@Element@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z
?GetContentSize@Element@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z
?Add@Element@DirectUI@@UAEJPAPAV12@I@Z
?GetVisible@Element@DirectUI@@QAE_NXZ
?TriggeredAnimationComplete@PVLAnimation@DirectUI@@SG?AVUID@@XZ
?DestroyWindow@NativeHWNDHost@DirectUI@@QAEXXZ
?AssertPIZeroRef@ClassInfoBase@DirectUI@@UBEXXZ
?GetChildren@ClassInfoBase@DirectUI@@UBEHXZ
?RemoveChild@ClassInfoBase@DirectUI@@UAEXXZ
?AddChild@ClassInfoBase@DirectUI@@UAEXXZ
?IsGlobal@ClassInfoBase@DirectUI@@UBE_NXZ
?GetModule@ClassInfoBase@DirectUI@@UBEPAUHINSTANCE__@@XZ
?IsSubclassOf@ClassInfoBase@DirectUI@@UBE_NPAUIClassInfo@2@@Z
?IsValidProperty@ClassInfoBase@DirectUI@@UBE_NPBUPropertyInfo@2@@Z
?GetName@ClassInfoBase@DirectUI@@UBEPBGXZ
?GetGlobalIndex@ClassInfoBase@DirectUI@@UBEIXZ
?GetPICount@ClassInfoBase@DirectUI@@UBEIXZ
?GetByClassIndex@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z
?EnumPropertyInfo@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z
?Release@ClassInfoBase@DirectUI@@UAEHXZ
?AddRef@ClassInfoBase@DirectUI@@UAEXXZ
?GetClassInfoW@HWNDElement@DirectUI@@UAEPAUIClassInfo@2@XZ
?_OnUIStateChanged@HWNDElement@DirectUI@@MAEXGG@Z
?WndProc@HWNDElement@DirectUI@@UAEJPAUHWND__@@IIJ@Z
?IsMSAAEnabled@HWNDElement@DirectUI@@UAE_NXZ
?RemoveTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z
?ActivateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@K@Z
?UpdateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z
?MessageCallback@Element@DirectUI@@UAEIPAUtagGMSG@@@Z
?OnEvent@HWNDElement@DirectUI@@UAEXPAUEvent@2@@Z
?OnDestroy@HWNDElement@DirectUI@@UAEXXZ
?OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnInput@HWNDElement@DirectUI@@UAEXPAUInputEvent@2@@Z
?OnPropertyChanged@HWNDElement@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
??0HWNDElement@DirectUI@@QAE@XZ
??1ClassInfoBase@DirectUI@@UAE@XZ
??0ClassInfoBase@DirectUI@@QAE@XZ
?Initialize@ClassInfoBase@DirectUI@@QAEJPAUHINSTANCE__@@PBG_NPBQBUPropertyInfo@2@I@Z
?Register@ClassInfoBase@DirectUI@@QAEJXZ
?ClassExist@ClassInfoBase@DirectUI@@SG_NPAPAUIClassInfo@2@PBQBUPropertyInfo@2@IPAU32@PAUHINSTANCE__@@PBG_N@Z
??1CritSecLock@DirectUI@@QAE@XZ
?GetFactoryLock@Element@DirectUI@@SGPAU_RTL_CRITICAL_SECTION@@XZ
??0CritSecLock@DirectUI@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z
?Register@HWNDElement@DirectUI@@SGJXZ
?Detach@CSafeElementProxy@@QAEXXZ
??1HWNDElement@DirectUI@@UAE@XZ
?CreateInstance@CSafeElementProxy@@SGJPAVElement@DirectUI@@PAPAV1@@Z
?SetBackgroundColor@Element@DirectUI@@QAEJK@Z
?Initialize@HWNDElement@DirectUI@@QAEJPAUHWND__@@_NIPAVElement@2@PAK@Z
?_OnUIStateChanged@TouchHWNDElement@DirectUI@@MAEXGG@Z
?GetWindowClassNameAndStyle@HWNDElement@DirectUI@@UAEXPAPBGPAI@Z
?CreateStyleParser@HWNDElement@DirectUI@@UAEJPAPAVDUIXmlParser@2@@Z
?IsMSAAEnabled@TouchHWNDElement@DirectUI@@UAE_NXZ
?CanSetFocus@HWNDElement@DirectUI@@UAE_NXZ
?OnCompositionChanged@HWNDElement@DirectUI@@UAEXXZ
?OnWmSettingChanged@HWNDElement@DirectUI@@UAEXIJ@Z
?OnWmThemeChanged@HWNDElement@DirectUI@@UAEXIJ@Z
?OnGetDlgCode@HWNDElement@DirectUI@@UAEXPAUtagMSG@@PAJ@Z
?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UAEXPAUKeyboardEvent@2@@Z
?OnImmersiveColorSchemeChanged@HWNDElement@DirectUI@@UAEXXZ
?OnThemeChanged@HWNDElement@DirectUI@@UAEXPAUThemeChangedEvent@2@@Z
?GetUiaFocusDelegate@Element@DirectUI@@UAEPAV12@XZ
?HandleUiaEventListener@Element@DirectUI@@UAEXPAUEvent@2@@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z
?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ
?GetElementProviderImpl@Element@DirectUI@@UAEJPAVInvokeHelper@2@PAPAVElementProvider@2@@Z
?GetUIAElementProvider@Element@DirectUI@@UAEJABU_GUID@@PAPAX@Z
?DefaultAction@Element@DirectUI@@UAEJXZ
?GetAccessibleImpl@HWNDElement@DirectUI@@UAEJPAPAUIAccessible@@@Z
?GetClassInfoW@TouchHWNDElement@DirectUI@@UAEPAUIClassInfo@2@XZ
?GetKeyFocused@Element@DirectUI@@UAE_NXZ
?RemoveTooltip@TouchHWNDElement@DirectUI@@UAEXPAVElement@2@@Z
?ActivateTooltip@TouchHWNDElement@DirectUI@@UAEXPAVElement@2@K@Z
?UpdateTooltip@TouchHWNDElement@DirectUI@@UAEXPAVElement@2@@Z
?OnUnHosted@Element@DirectUI@@MAEXPAV12@@Z
?OnHosted@Element@DirectUI@@MAEXPAV12@@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE?AUtagSIZE@@HHPAVSurface@2@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z
?GetImmersiveFocusRectOffsets@Element@DirectUI@@UAEXPAUtagRECT@@@Z
?QueryInterface@Element@DirectUI@@UAGJABU_GUID@@PAPAX@Z
?MessageCallback@TouchHWNDElement@DirectUI@@UAEIPAUtagGMSG@@@Z
?RemoveBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z
?SetKeyFocus@Element@DirectUI@@UAEXXZ
?EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z
?GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z
?Remove@Element@DirectUI@@UAEJPAPAV12@I@Z
?Insert@Element@DirectUI@@UAEJPAPAV12@II@Z
?IsRTLReading@Element@DirectUI@@UAE_NXZ
SetGadgetFlags
AddLayeredRef
GetGadgetVisual
SetMinimumDCompVersion
GetGadgetRect
InvalidateGadget
SetGadgetStyle
SetGadgetBufferInfo
SetHardwareDeviceUsage
ImmDisableIME
GetTokenInformation
ConvertSidToStringSidW
CreateWellKnownSid
EqualSid
RevertToSelf
RegQueryValueExW
CreateDIBSection
CreateCompatibleDC
DeleteObject
SelectObject
DeleteDC
GetStockObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ