Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
CloudExperienceHostCommon.dll
Resource
win10v2004-20240426-en
Target
CloudExperienceHostCommon.dll
Size
817KB
MD5
ce889ef63b195ee36467515ed7637f6e
SHA1
1ae2dbffd819fce12e8c090034fec86305096d11
SHA256
6f063fb2843cfa41b68c6dd820d9a8bd8293e0694213f5172fa2a26c670d4112
SHA512
7aba11036836552f3c006c7c5c573cac197c06b5e01169baeb6ec5af776a6a9e082fd85a766e7f6f5191affe9de1fa6accf9c3658439898cb265cb9479b3a982
SSDEEP
24576:uBtZSHdGJfZDJRUoT5CeavOtBkTKzDmX0xMljtfFfK6kPJLeq0cy:SZyGJfZDJCoRtakDmX0xMljtfFfK6Ii
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloudExperienceHostCommon.pdb
_initterm_e
_initterm
wcsnlen
memset
wcscspn
_o__get_errno
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o__set_errno
_o__callnewh
memmove
_o__execute_onexit_table
_o__wcsicmp
_o_free
_o_localeconv
_o_malloc
_o_realloc
_o_strtod
_o_strtoll
_o_strtoull
_o_terminate
_o_towlower
_o_wcsncpy_s
_o_wcstok
_o_wcstoul
_except_handler4_common
_CxxThrowException
_o__crt_atexit
_o__errno
_o__configure_narrow_argv
_o___stdio_common_vswprintf
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
_o__dtest
_o__cexit
__std_terminate
__CxxFrameHandler3
memcmp
wcsrchr
memcpy
FreeResource
GetProcAddress
LockResource
LoadResource
GetModuleHandleW
FreeLibrary
GetModuleFileNameW
FindResourceExW
GetModuleFileNameA
DisableThreadLibraryCalls
FindStringOrdinal
GetModuleHandleExW
LoadLibraryExA
InitOnceExecuteOnce
InitOnceBeginInitialize
InitOnceComplete
ReleaseSemaphore
WaitForSingleObject
WaitForMultipleObjectsEx
ReleaseMutex
InitializeSRWLock
InitializeCriticalSectionEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
CreateSemaphoreExW
CreateEventExW
OpenEventW
OpenSemaphoreW
ReleaseSRWLockShared
CreateEventW
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
AcquireSRWLockShared
CreateMutexExW
WaitForSingleObjectEx
GetProcessHeap
HeapAlloc
HeapFree
RaiseException
UnhandledExceptionFilter
GetLastError
SetLastError
SetUnhandledExceptionFilter
WindowsCreateStringReference
WindowsDeleteString
WindowsCreateString
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsDuplicateString
EventSetInformation
EventRegister
EventUnregister
EventWriteTransfer
EventActivityIdControl
DecodePointer
EncodePointer
GetCurrentProcess
GetCurrentThreadId
GetProcessId
GetCurrentProcessId
TerminateProcess
OpenThreadToken
GetCurrentThread
OpenProcessToken
RoTransformError
RoOriginateErrorW
GetRestrictedErrorInfo
SetRestrictedErrorInfo
RoOriginateError
ResolveLocaleName
GetUserGeoID
GetGeoInfoW
GetUILanguageInfo
FormatMessageW
LocaleNameToLCID
GetFileMUIPath
DebugBreak
OutputDebugStringW
IsDebuggerPresent
CloseHandle
IsProcessorFeaturePresent
OpenProcess
GetProcessMitigationPolicy
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetTickCount64
GetVersionExW
GetSystemTime
GetSystemTimeAsFileTime
InitializeSListHead
RegCloseKey
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegGetValueW
RegEnumValueW
SysFreeString
SysAllocString
UnregisterWaitUntilOOBECompleted
OOBEComplete
RegisterWaitUntilOOBECompleted
LocalAlloc
LocalFree
PathCchAppend
PathAllocCombine
DeleteFileW
FindNextFileW
FindFirstFileW
FindClose
ExpandEnvironmentStringsW
CopyFileW
ControlTraceW
GetTimeZoneInformation
SHDeleteValueW
CloseThreadpoolTimer
SetThreadpoolTimer
CreateThreadpoolTimer
WaitForThreadpoolTimerCallbacks
GetUserNameExW
RoGetActivationFactory
RoActivateInstance
RoReportFailedDelegate
RoGetMatchingRestrictedErrorInfo
IsErrorPropagationEnabled
DuplicateTokenEx
GetTokenInformation
AdjustTokenPrivileges
MultiByteToWideChar
CompareStringW
CompareStringOrdinal
FindResourceW
GetGeoInfoEx
EnumSystemGeoNames
QueryFullProcessImageNameW
GetPersistedRegistryLocationW
CapabilityCheck
RtlGetDeviceFamilyInfoEnum
RtlUnsubscribeWnfNotificationWaitForCompletion
NtQueryWnfStateData
RtlPublishWnfStateData
RtlSubscribeWnfStateChangeNotification
RtlIsMultiSessionSku
LsaLookupUserAccountType
SHTaskPoolAllowThreadReuse
SHTaskPoolQueueTask
ParseApplicationUserModelId
sndPlaySoundW
SHGetKnownFolderPath
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?_BADOFF@std@@3_JB
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpCrackUrl
WinHttpOpen
WinHttpConnect
WinHttpSendRequest
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpReceiveResponse
VirtualQuery
VirtualProtect
ApiSetQueryApiSetPresence
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ