Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
ProximityUxHost.exe
Resource
win10v2004-20231023-en
Target
ProximityUxHost.exe
Size
227KB
MD5
b765418464a273d6c1122f54aae20a3a
SHA1
710ff1952e0ba21c73a635fcbd57f357877849b6
SHA256
70ee182597dd295af5ca1d47e1ae2ef03e14cb21dec1ae1acd415938102b93da
SHA512
8b911d84f8ff3fca02fa502c80454b777443885675a06a4896713fef53320913cf36ab41be993ce325952ccd06ae81f9a2f6ea5475ba452d2499f50ab2da3657
SSDEEP
3072:EeYZoXSK+erS1g7UPx+4PeEKh7aq9n4443BXm+8tfnaB/v6FgzP5S:EjV0h2q43BXm+8xn0MgzhS
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_purecall
qsort_s
rand
srand
_except_handler4_common
_controlfp
?terminate@@YAXXZ
__CxxFrameHandler3
_onexit
__dllonexit
_unlock
_lock
_wcmdln
__setusermatherr
__p__fmode
_cexit
_exit
exit
wcsrchr
__set_app_type
__wgetmainargs
_amsg_exit
_vsnwprintf
memcpy_s
malloc
memcpy
memcmp
__p__commode
_XcptFilter
_initterm
free
_callnewh
memset
RegisterTraceGuidsW
UnregisterTraceGuids
GetTraceLoggerHandle
TraceMessage
GetTraceEnableFlags
GetTraceEnableLevel
CreateEventExW
WaitForMultipleObjectsEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitOnceBeginInitialize
SetEvent
InitOnceComplete
ResetEvent
CreateEventW
LeaveCriticalSection
CreateSemaphoreExW
EnterCriticalSection
AcquireSRWLockShared
ReleaseSemaphore
InitializeCriticalSection
ReleaseMutex
DeleteCriticalSection
WaitForSingleObjectEx
OpenSemaphoreW
TryEnterCriticalSection
CreateMutexExW
Sleep
WaitForSingleObject
InitializeCriticalSectionEx
ReleaseSRWLockShared
CreateMutexW
CoGetApartmentType
CoCreateFreeThreadedMarshaler
PropVariantClear
CoReleaseServerProcess
CoAddRefServerProcess
CoCreateInstance
CoWaitForMultipleHandles
CoTaskMemAlloc
CoGetMalloc
CoRegisterClassObject
CoResumeClassObjects
CoRevokeClassObject
CoTaskMemFree
CoTaskMemRealloc
RoGetAgileReference
CoInitializeEx
CoEnableCallCancellation
CoUninitialize
CoCancelCall
CoDisableCallCancellation
SHCreateThreadRef
SHSetThreadRef
SHCreateThread
TlsSetValue
TlsFree
GetCurrentThreadId
GetStartupInfoW
TlsGetValue
GetCurrentProcessId
TlsAlloc
GetCurrentProcess
TerminateProcess
CreateThread
RoRegisterActivationFactories
RoRevokeActivationFactories
RoUninitialize
RoGetActivationFactory
RoActivateInstance
RoInitialize
UnhandledExceptionFilter
RaiseException
SetLastError
GetLastError
SetUnhandledExceptionFilter
SHStrDupW
EventSetInformation
EventWrite
EventUnregister
EventActivityIdControl
EventWriteTransfer
EventRegister
RoOriginateErrorW
SetRestrictedErrorInfo
RoGetMatchingRestrictedErrorInfo
RoOriginateError
EncodePointer
DecodePointer
WindowsCompareStringOrdinal
WindowsStringHasEmbeddedNull
WindowsGetStringLen
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsCreateString
WindowsSubstringWithSpecifiedLength
WindowsDeleteString
WindowsIsStringEmpty
WindowsCreateStringReference
LoadResource
LoadLibraryExW
GetModuleHandleExW
GetProcAddress
GetModuleFileNameA
FindResourceExW
FreeLibraryAndExitThread
FreeLibrary
GetModuleHandleA
LockResource
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
GetTickCount64
ord20
ord21
ord22
ord24
PAL_RegisterConsoleDisplayStateNotifications
PAL_UnregisterConsoleDisplayStateNotifications
D3DKMTNetDispQueryMiracastDisplayDeviceSupport
LoadCursorW
DispatchMessageW
SetCursor
GetMessageW
TranslateMessage
PostMessageW
PostThreadMessageW
IsWindowVisible
SendMessageW
DefWindowProcW
SetForegroundWindow
PostQuitMessage
GetWindowLongW
DestroyWindow
PeekMessageW
KillTimer
LoadStringW
SetTimer
MsgWaitForMultipleObjectsEx
CloseHandle
SysFreeString
MultiByteToWideChar
CompareStringOrdinal
OutputDebugStringW
FormatMessageW
HeapFree
HeapAlloc
GetProcessHeap
GetPackagesByPackageFamily
RegCreateKeyExW
RegGetValueW
RegCloseKey
RegSetValueExW
IUnknown_GetWindow
SHCreateWorkerWindowW
AssocQueryStringW
WriteFile
GetTempPathW
CreateFileW
RemoveDirectoryW
SHGetKnownFolderPath
ord290
PlaySoundW
DevCloseObjectQuery
DevGetObjectPropertiesEx
DevFreeObjectProperties
DevCreateObjectQuery
DevCreateObjectQueryFromId
SetCurrentProcessExplicitAppUserModelID
PowerSetRequest
PowerCreateRequest
PowerClearRequest
SHCreateStreamOnFileEx
BCryptDestroyKey
BCryptGenerateSymmetricKey
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
BCryptDecrypt
BCryptGetProperty
BCryptEncrypt
BCryptGenRandom
CreateTimerQueueTimer
DeleteTimerQueueTimer
CreateSemaphoreW
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
FreeLibraryWhenCallbackReturns
TrySubmitThreadpoolCallback
CallbackMayRunLong
CloseThreadpoolTimer
ntohl
ntohs
SHCreateItemInKnownFolder
ShellExecuteExW
SHCreateAssociationRegistration
CoAllowSetForegroundWindow
PropVariantToStringAlloc
DwmGetWindowAttribute
DafCloseChallengeContext
DafSelectCeremony
DafStartRemoveAssociation
DafCreateAssociationContext
DafCloseAssociationContext
DafMemFree
DafStartEnumCeremonies
DafStartReadCeremonyData
DafCreateChallengeContext
DafStartDeviceStatusNotification
DafStartFinalize
DafCreateAssociationContextFromOobBlob
DafChallengeDevicePresence
ord4
ord7
?SetValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZHPAVValue@2@@Z
?CreateInt@Value@DirectUI@@SGPAV12@HW4DynamicScaleValue@@@Z
?GetClassInfoPtr@ModernProgressBar@DirectUI@@SGPAUIClassInfo@2@XZ
?StateProp@ModernProgressBar@DirectUI@@SGPBUPropertyInfo@2@XZ
?PositionProp@ModernProgressBar@DirectUI@@SGPBUPropertyInfo@2@XZ
?GetRoot@Element@DirectUI@@QAEPAV12@XZ
UnInitProcessPriv
UnInitThread
InitThread
InitProcessPriv
?DeterminateProp@ModernProgressBar@DirectUI@@SGPBUPropertyInfo@2@XZ
DuiCreateObject
?GetValue@Element@DirectUI@@QAEPAVValue@2@P6GPBUPropertyInfo@2@XZHPAUUpdateCache@2@@Z
?CustomProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?CreateString@Value@DirectUI@@SGPAV12@PBGPAUHINSTANCE__@@@Z
?Destroy@DUIXmlParser@DirectUI@@QAEXXZ
?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z
?AccessibleProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?AddListener@Element@DirectUI@@QAEJPAUIElementListener@2@@Z
?CreateElement@DUIXmlParser@DirectUI@@QAEJPBGPAVElement@2@1PAKPAPAV32@@Z
?SetXMLFromResource@DUIXmlParser@DirectUI@@QAEJIPAUHINSTANCE__@@0@Z
?Create@DUIXmlParser@DirectUI@@SGJPAPAV12@P6GPAVValue@2@PBGPAX@Z2P6GX11H2@Z2@Z
?VisibleProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?_ZeroRelease@Value@DirectUI@@AAEXXZ
StrToID
?ContentProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?Click@TouchButton@DirectUI@@SG?AVUID@@XZ
?CreateBool@Value@DirectUI@@SGPAV12@_N@Z
?Click@Button@DirectUI@@SG?AVUID@@XZ
ord237
CreateWindowInBand
PathRemoveBackslashW
UrlUnescapeW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ