taskmgr[.]exe | Triage

Resubmissions

09/09/2022, 14:00

220909-ra7zzsgcd4 1

09/09/2022, 13:59

220909-rar9jacbap 1

Sharing

Copy URL Twitter E-mail

General

Target

taskmgr.exe
Size

1.1MB
MD5

68c717f89d51c97f4a096d56ffe4af95
SHA1

229dba8be3292720c7938331a88aa0e4285741a9
SHA256

efc4a6fb997c06367d39b536fa47ff1456587a8bd5aaee74a1da6b263674a585
SHA512

c040767c1ca7a86c5359a346cf7ecc0309e5a2f002d5f996e770b5c5e71bf17b1c0e5fbe782ef6cb6c710e8a7c2b88d20e41f69f736850f86312f5b3119b31fd
SSDEEP

24576:6p2IEKP5hAlzL0q/1nP69ZcVAQzHgHOEALXYTmF8FO:6p2I7mF/xS9ZcVraXcXYTmeF

Score

N/A

Malware Config

Signatures

Files

taskmgr.exe
.exe windows x86

e48ed6d37ab78b890a112128172fab3a

Code Sign

33:00:00:02:ec:65:79:ad:1e:67:08:90:13:00:00:00:00:02:ec
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:29

Not After

02/12/2021, 21:29

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4d:a9:dc:41:35:06:7f:53:da:8e:d7:96:d1:14:a2:6f:a3:5e:05:22:61:9c:a5:3f:50:bc:c7:18:23:0f:3d:47
Signer

Actual PE Digest

4d:a9:dc:41:35:06:7f:53:da:8e:d7:96:d1:14:a2:6f:a3:5e:05:22:61:9c:a5:3f:50:bc:c7:18:23:0f:3d:47

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

09/09/2022, 12:41
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback
_initterm_e
_initterm
_c_exit

api-ms-win-crt-private-l1-1-0

_o_iswalpha
_o_iswdigit
_o_iswspace
_o_malloc
_o_memcpy_s
_o_realloc
_o_terminate
_o_towupper
_o_wcstod
_o_wcstok_s
_o_wcstol
_o_wcstoul
memmove
__current_exception
__current_exception_context
_except_handler4_common
_o_free
_o_floor
_o_exit
_o_ceil
_o_bsearch
_o__wcsnicmp
_o__strnicmp
_o__wtol
_o__wcsicmp
_o__wtoi
_o__stricmp
_o__ui64tow_s
_CxxThrowException
__std_type_info_compare
wcsrchr
wcsstr
wcschr
__std_terminate
__CxxFrameHandler3
_o__set_new_mode
_o__set_fmode
_o__set_errno
_o__set_app_type
_o__seh_filter_exe
_o__register_onexit_function
_o__purecall
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
_o__initialize_wide_environment
_o__initialize_onexit_table
_o__i64tow_s
_o__get_wide_winmain_command_line
_o__get_errno
_o__exit
_o__errno
_o__crt_atexit
_o__controlfp_s
_o__configure_wide_argv
_o__configthreadlocale
_o__CIsqrt
_o__cexit
_o__callnewh
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf
_o___stdio_common_vsnprintf_s
_o___stdio_common_vfwprintf_s
_o___std_exception_destroy
_o___std_exception_copy
_o___p__commode
_o___acrt_iob_func
__RTDynamicCast
memcmp
memcpy

api-ms-win-crt-string-l1-1-0

memset

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

CreateThread
SetThreadPriority
GetCurrentThread
GetProcessTimes
OpenProcessToken
GetPriorityClass
CreateProcessW
SetProcessShutdownParameters
GetExitCodeThread
TerminateProcess
GetCurrentProcess
GetThreadPriority
GetStartupInfoW
ProcessIdToSessionId
GetCurrentThreadId
SetPriorityClass
GetCurrentProcessId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTime
GetLocalTime
GetSystemTimeAsFileTime
GetSystemDirectoryW
GetTickCount64
GlobalMemoryStatusEx
GetComputerNameExW
GetVersionExW
GetLogicalProcessorInformationEx
GetSystemInfo

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList
InitializeSListHead

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
DebugBreak
OutputDebugStringA
OutputDebugStringW

api-ms-win-core-errorhandling-l1-1-0

SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError
RaiseException
SetErrorMode
GetErrorMode

api-ms-win-core-processthreads-l1-1-1

GetProcessMitigationPolicy
IsProcessorFeaturePresent
OpenProcess

api-ms-win-core-libraryloader-l1-2-0

LoadStringW
GetModuleFileNameW
GetModuleHandleExW
LoadLibraryExW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameA
GetProcAddress
FreeLibrary

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventWriteTransfer
EventRegister
EventSetInformation

api-ms-win-core-localization-l1-2-0

GetThreadPreferredUILanguages
GetLocaleInfoEx
GetThreadUILanguage
FormatMessageW
GetLocaleInfoW

api-ms-win-core-heap-l1-1-0

HeapSize
HeapAlloc
HeapSetInformation
HeapFree
GetProcessHeap
HeapReAlloc

api-ms-win-core-synch-l1-1-0

OpenSemaphoreW
ReleaseSRWLockShared
CreateEventExW
CreateMutexExW
AcquireSRWLockShared
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
TryEnterCriticalSection
InitializeCriticalSectionEx
ReleaseSemaphore
DeleteCriticalSection
ResetEvent
CreateSemaphoreExW
ReleaseMutex
CreateMutexW
InitializeSRWLock
OpenEventW
WaitForSingleObject
CreateEventW
SetEvent
InitializeCriticalSection
ReleaseSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
AcquireSRWLockExclusive

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-registry-l1-1-0

RegGetValueW
RegQueryInfoKeyW
RegEnumValueW
RegCloseKey
RegNotifyChangeKeyValue
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegDeleteValueW
RegQueryValueExW

api-ms-win-core-synch-l1-2-0

Sleep
InitOnceBeginInitialize
InitOnceComplete
WakeAllConditionVariable
SleepConditionVariableCS

api-ms-win-core-string-l1-1-0

CompareStringEx
CompareStringOrdinal
MultiByteToWideChar

api-ms-win-core-heap-l2-1-0

LocalAlloc
LocalFree

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryA
LoadLibraryW

api-ms-win-core-threadpool-l1-2-0

TrySubmitThreadpoolCallback
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolTimer

api-ms-win-security-base-l1-1-0

CheckTokenMembership
FreeSid
GetLengthSid
AllocateAndInitializeSid
GetTokenInformation
CopySid
AdjustTokenPrivileges
IsWellKnownSid
EqualSid
CreateWellKnownSid
SetTokenInformation

api-ms-win-core-sysinfo-l1-2-0

GetSystemFirmwareTable
GetNativeSystemInfo

api-ms-win-core-datetime-l1-1-0

GetTimeFormatW
GetDateFormatW

api-ms-win-core-io-l1-1-1

CancelSynchronousIo

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-power-setting-l1-1-0

PowerSettingUnregisterNotification
PowerSettingRegisterNotification

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
GetCurrentDirectoryW

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime

oleaut32

SetErrorInfo
GetErrorInfo
SysAllocStringLen
SysFreeString
SafeArrayPutElement
SafeArrayDestroy
SafeArrayCreateVector
VariantClear
VariantInit
SysStringLen
SysAllocString

api-ms-win-core-memory-l1-1-1

SetProcessWorkingSetSize
VirtualUnlock

api-ms-win-core-file-l1-2-0

GetVolumePathNamesForVolumeNameW
GetTempPathW

api-ms-win-core-path-l1-1-0

PathCchCanonicalize
PathCchCombine
PathCchAppend

api-ms-win-core-file-l1-1-0

GetLongPathNameW
FindNextVolumeW
QueryDosDeviceW
GetLogicalDriveStringsW
CreateFileW
FindVolumeClose
GetDriveTypeW
FindFirstChangeNotificationW
FindNextChangeNotification
FindClose
FindFirstFileW
FindCloseChangeNotification
GetFileType
GetFileAttributesExW
CompareFileTime
FindFirstVolumeW
FindNextFileW

api-ms-win-core-wow64-l1-1-0

IsWow64Process

api-ms-win-core-version-l1-1-0

VerQueryValueW
GetFileVersionInfoSizeExW
GetFileVersionInfoExW

api-ms-win-core-string-l2-1-0

CharLowerW
CharUpperBuffW

api-ms-win-core-memory-l1-1-0

ReadProcessMemory

api-ms-win-core-version-l1-1-1

GetFileVersionInfoSizeW
GetFileVersionInfoW

api-ms-win-core-processthreads-l1-1-3

SetProcessInformation
GetProcessInformation

api-ms-win-core-datetime-l1-1-2

GetDurationFormatEx

api-ms-win-core-datetime-l1-1-1

GetDateFormatEx

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW

api-ms-win-core-sysinfo-l1-2-2

GetProcessorSystemCycleTime

api-ms-win-core-processtopology-l1-1-0

GetProcessGroupAffinity

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-core-sysinfo-l1-2-1

GetPhysicallyInstalledSystemMemory

api-ms-win-core-localization-l2-1-0

GetNumberFormatEx

api-ms-win-core-string-l2-1-1

SHLoadIndirectString

api-ms-win-core-winrt-error-l1-1-0

RoTransformError
RoOriginateError

api-ms-win-core-kernel32-legacy-l1-1-0

MulDiv
GetComputerNameW

api-ms-win-core-threadpool-legacy-l1-1-0

CreateTimerQueueTimer
DeleteTimerQueueTimer
QueueUserWorkItem

api-ms-win-core-shlwapi-legacy-l1-1-0

PathFileExistsW
PathStripPathW
PathRemoveBlanksW
SHExpandEnvironmentStringsW
PathIsRelativeW
PathRemoveExtensionW
PathGetArgsW
PathRemoveBackslashW
PathIsPrefixW

api-ms-win-perf-legacy-l1-1-0

PerfCloseQueryHandle
PerfQueryCounterData
PerfAddCounters
PerfOpenQueryHandle

api-ms-win-core-windowserrorreporting-l1-1-3

RegisterApplicationRestart

api-ms-win-core-pcw-l1-1-0

PcwCollectData
PcwAddQueryItem
PcwCreateQuery

nsi

NsiGetParameter

comctl32

ImageList_CoCreateInstance

ntdll

EtwCheckCoverage
RtlNumberOfSetBitsUlongPtr
NtPowerInformation
NtQuerySystemInformation
RtlTimeToElapsedTimeFields
NtQueryInformationProcess
LdrQueryProcessModuleInformation
NtSetInformationFile
RtlAllocateHeap
RtlFreeHeap
RtlImageNtHeader
NtSetInformationProcess
ZwQueryWnfStateData
RtlNtStatusToDosError
NtQueryInformationThread
RtlInitUnicodeString
NtQueryTimerResolution
NtQueryObject
NtQueryInformationFile
RtlIpv4AddressToStringExW
RtlIpv6AddressToStringExW
RtlCheckPortableOperatingSystem
RtlCompareUnicodeString
RtlNtStatusToDosErrorNoTeb
NtQueryInformationToken
NtOpenFile
RtlSecondsSince1970ToTime

uxtheme

BeginPanningFeedback
UpdatePanningFeedback
OpenThemeData
GetThemeColor
GetThemeInt
SetWindowTheme
CloseThemeData
EndPanningFeedback

shlwapi

StrToIntExW
ord548
ord199
ord219
StrRChrIW
PathRemoveArgsW
SHCreateStreamOnFileEx
ord278
StrRetToBufW
StrTrimW
ord16
AssocQueryStringW
PathIsNetworkPathW
ord437
ord629
StrStrW
StrStrIW
ord618
SHCreateStreamOnFileW
ord176

shell32

Shell_NotifyIconW
SHGetPropertyStoreForWindow
SHGetSpecialFolderPathW
SHGetFileInfoW
SHGetIDListFromObject
ord4
ord2
SHGetKnownFolderIDList
ord727
Shell_GetCachedImageIndexW
SHGetKnownFolderItem
DuplicateIcon
ord155
SHBindToParent
ord61
SHOpenFolderAndSelectItems
SHParseDisplayName
ord75
ShellExecuteExW
CommandLineToArgvW
SHEvaluateSystemCommandTemplate
ShellExecuteW

credui

CredUIPromptForCredentialsW

gdi32

GetTextExtentPointW
Rectangle
D3DKMTCloseAdapter
CreatePen
DeleteObject
SelectObject
GetDeviceCaps
LineTo
MoveToEx
D3DKMTOpenAdapterFromLuid
CreateDIBSection
D3DKMTQueryAdapterInfo

user32

AppendMenuW
SetWindowTextW
LoadMenuW
InvalidateRect
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetMessagePos
GetScrollPos
PtInRect
MapWindowPoints
ord2521
GetDoubleClickTime
GetCurrentInputMessageSource
TrackPopupMenu
CreateDialogParamW
GetWindowTextLengthW
EnableWindow
GetDlgItem
GetWindowTextW
GetDlgItemTextW
EndDialog
SetDlgItemTextW
DialogBoxParamW
SwitchToThisWindow
MessageBeep
GetLastActivePopup
ShowWindowAsync
GetParent
GetForegroundWindow
InsertMenuW
CreatePopupMenu
DestroyMenu
TrackPopupMenuEx
RemoveMenu
RedrawWindow
SetWindowLongW
GetCursorPos
CreateWindowExW
CloseGestureInfoHandle
GetGestureInfo
SetGestureConfig
SystemParametersInfoW
GetMenuState
EqualRect
IsZoomed
ReleaseDC
GetDC
DestroyIcon
LoadImageW
GetWindowLongW
GetKeyState
GetSystemMetrics
KillTimer
PostQuitMessage
DestroyWindow
IsWindowEnabled
OpenIcon
SetFocus
IsWindow
GetFocus
PostMessageW
DefWindowProcW
IsIconic
SetTimer
SendMessageW
LoadIconW
GetClientRect
UpdateWindow
ShowWindow
SetMenu
GetMenu
ChangeWindowMessageFilterEx
SetForegroundWindow
CreateWindowInBand
RegisterClassExW
CheckMenuRadioItem
GetSubMenu
GetMenuItemID
GetMenuItemCount
CheckMenuItem
EnableMenuItem
DeleteMenu
SetWindowPos
GetMonitorInfoW
MonitorFromPoint
GetWindowRect
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
MessageBoxW
SendMessageTimeoutW
AllowSetForegroundWindow
GetWindowThreadProcessId
FindWindowW
SetMenuDefaultItem
GetSysColor
MsgWaitForMultipleObjectsEx
PeekMessageW
CopyIcon
UnregisterClassW
GetClassLongW
GetClassNameW
GetWindow
IsWindowVisible
GhostWindowFromHungWindow
IsHungAppWindow
HungWindowFromGhostWindow
OpenDesktopW
GetThreadDesktop
SetThreadDesktop
EnumDesktopWindows
CloseDesktop
EnumDesktopsW
GetProcessWindowStation
GetDpiAwarenessContextForProcess
AreDpiAwarenessContextsEqual
GetGuiResources
RegisterDeviceNotificationW
GetMenuItemInfoW
UnregisterDeviceNotification
GetPropW
InternalGetWindowText
GetWindowBand
ord2574
GetWindowCompositionAttribute
ord2573
ord2569
RegisterWindowMessageW
CopyRect

duser

GetGadgetRect
SetGadgetStyle
ForwardGadgetMessage

dui70

?Initialize@Element@DirectUI@@QAEJIPAV12@PAK@Z
InitProcessPriv
InitThread
UnInitThread
UnInitProcessPriv
?GetKeyFocusedElement@HWNDElement@DirectUI@@SGPAVElement@2@XZ
??0HWNDElement@DirectUI@@QAE@XZ
??1HWNDElement@DirectUI@@UAE@XZ
?Destroy@NativeHWNDHost@DirectUI@@QAEXXZ
?WndProc@HWNDElement@DirectUI@@UAEJPAUHWND__@@IIJ@Z
?KeyWithinProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?Destroy@Layout@DirectUI@@QAEXXZ
?SetLayout@Element@DirectUI@@QAEJPAVLayout@2@@Z
?Create@GridLayout@DirectUI@@SGJHHPAPAVLayout@2@@Z
??0IProvider@DirectUI@@QAE@XZ
?AdviseEventRemoved@ElementProvider@DirectUI@@UAGJHPAUtagSAFEARRAY@@@Z
?AdviseEventAdded@ElementProvider@DirectUI@@UAGJHPAUtagSAFEARRAY@@@Z
?get_FragmentRoot@ElementProvider@DirectUI@@UAGJPAPAUIRawElementProviderFragmentRoot@@@Z
?SetFocus@ElementProvider@DirectUI@@UAGJXZ
?GetEmbeddedFragmentRoots@ElementProvider@DirectUI@@UAGJPAPAUtagSAFEARRAY@@@Z
?get_BoundingRectangle@ElementProvider@DirectUI@@UAGJPAUUiaRect@@@Z
?GetRuntimeId@ElementProvider@DirectUI@@UAGJPAPAUtagSAFEARRAY@@@Z
?Navigate@ElementProvider@DirectUI@@UAGJW4NavigateDirection@@PAPAUIRawElementProviderFragment@@@Z
?ShowContextMenu@ElementProvider@DirectUI@@UAGJXZ
?get_HostRawElementProvider@ElementProvider@DirectUI@@UAGJPAPAUIRawElementProviderSimple@@@Z
?GetPropertyValue@ElementProvider@DirectUI@@UAGJHPAUtagVARIANT@@@Z
?get_ProviderOptions@ElementProvider@DirectUI@@UAGJPAW4ProviderOptions@@@Z
?TossElement@ElementProvider@DirectUI@@UAEXXZ
?QueryInterface@ElementProvider@DirectUI@@UAGJABU_GUID@@PAPAX@Z
?Create@ElementProvider@DirectUI@@SGJPAVElement@2@PAVInvokeHelper@2@PAPAV12@@Z
?Create@HWNDElementProvider@DirectUI@@SGJPAVHWNDElement@2@PAVInvokeHelper@2@PAPAV12@@Z
?Find@ElementProviderManager@DirectUI@@SGPAVElementProvider@2@PAVElement@2@@Z
??0ProviderProxy@DirectUI@@IAE@XZ
??0ElementProxy@DirectUI@@IAE@XZ
??1ElementProvider@DirectUI@@UAE@XZ
??0RefcountBase@DirectUI@@QAE@XZ
??0ElementProvider@DirectUI@@QAE@XZ
?GetInvokeHelper@InvokeManager@DirectUI@@SGJPAPAVInvokeHelper@2@@Z
?Init@ProviderProxy@DirectUI@@MAEXPAVElement@2@@Z
?CreatePatternProvider@Schema@DirectUI@@SGJW4Pattern@12@PAVElementProvider@2@PAPAUIUnknown@@@Z
?IsPatternSupported@ElementProxy@DirectUI@@IAEJW4Pattern@Schema@2@PA_N@Z
?AddRef@ElementProvider@DirectUI@@UAGKXZ
?TossPatternProvider@ElementProvider@DirectUI@@QAEXW4Pattern@Schema@2@@Z
??1RefcountBase@DirectUI@@UAE@XZ
?DoInvokeArgs@ElementProvider@DirectUI@@QAEJHP6GPAVProviderProxy@2@PAVElement@2@@ZPAD@Z
?GetElement@ElementProvider@DirectUI@@UAEPDVElement@2@XZ
?AddRef@RefcountBase@DirectUI@@QAEJXZ
?Release@RefcountBase@DirectUI@@QAEJXZ
?Init@ElementProxy@DirectUI@@MAEXPAVElement@2@@Z
?DoMethod@ElementProxy@DirectUI@@UAEJHPAD@Z
?GetProperty@ElementProxy@DirectUI@@IAEJPAUtagVARIANT@@H@Z
?Release@ElementProvider@DirectUI@@UAGKXZ
?Init@ElementProvider@DirectUI@@MAEJPAVElement@2@PAVInvokeHelper@2@@Z
??1AutoLock@DirectUI@@QAE@XZ
??0AutoLock@DirectUI@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z
?DoInvoke@ElementProvider@DirectUI@@IAAJHZZ
?PatternFromPatternId@Schema@DirectUI@@SG?AW4Pattern@12@H@Z
?DataGridControlType@Schema@DirectUI@@2HA
?SelectionPattern@Schema@DirectUI@@2HA
?TablePattern@Schema@DirectUI@@2HA
?InvokePattern@Schema@DirectUI@@2HA
?TableItemPattern@Schema@DirectUI@@2HA
?IsControlElementProperty@Schema@DirectUI@@2HA
?IsContentElementProperty@Schema@DirectUI@@2HA
?TreeItemControlType@Schema@DirectUI@@2HA
?ListItemControlType@Schema@DirectUI@@2HA
?ControlTypeProperty@Schema@DirectUI@@2HA
?GridPattern@Schema@DirectUI@@2HA
?SelectionItemPattern@Schema@DirectUI@@2HA
?ExpandCollapsePattern@Schema@DirectUI@@2HA
?GridItemPattern@Schema@DirectUI@@2HA
?UiaRaiseAutomationPropertyChangedEvent@Schema@DirectUI@@2P6GJPAUIRawElementProviderSimple@@HUtagVARIANT@@1@ZA
?GetAccessible@Element@DirectUI@@QAE_NXZ
?WantPropertyEvent@EventManager@DirectUI@@SG_NH@Z
?FWantAnyEvent@EventManager@DirectUI@@SG_NPAVElement@2@@Z
??0ScrollViewer@DirectUI@@QAE@XZ
??1ScrollViewer@DirectUI@@UAE@XZ
?OnPropertyChanging@BaseScrollViewer@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanged@ScrollViewer@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnEvent@BaseScrollViewer@DirectUI@@UAEXPAUEvent@2@@Z
?Add@BaseScrollViewer@DirectUI@@UAEJPAPAVElement@2@I@Z
?CreateScrollBars@ScrollViewer@DirectUI@@MAEJXZ
?AddChildren@ScrollViewer@DirectUI@@MAEJXZ
?OnListenerAttach@BaseScrollViewer@DirectUI@@UAEXPAVElement@2@@Z
?OnListenerDetach@BaseScrollViewer@DirectUI@@UAEXPAVElement@2@@Z
?OnListenedPropertyChanging@BaseScrollViewer@DirectUI@@UAE_NPAVElement@2@PBUPropertyInfo@2@HPAVValue@2@2@Z
?OnListenedPropertyChanged@ScrollViewer@DirectUI@@UAEXPAVElement@2@PBUPropertyInfo@2@HPAVValue@2@2@Z
?OnListenedInput@BaseScrollViewer@DirectUI@@UAEXPAVElement@2@PAUInputEvent@2@@Z
?OnListenedEvent@BaseScrollViewer@DirectUI@@UAEXPAVElement@2@PAUEvent@2@@Z
?GetClassInfoPtr@ScrollViewer@DirectUI@@SGPAUIClassInfo@2@XZ
?Initialize@BaseScrollViewer@DirectUI@@QAEJPAVElement@2@PAK@Z
?Register@ScrollViewer@DirectUI@@SGJXZ
?OnInput@BaseScrollViewer@DirectUI@@UAEXPAUInputEvent@2@@Z
?GetXScrollable@BaseScrollViewer@DirectUI@@QAE_NXZ
?GetHScroll@ScrollViewer@DirectUI@@MAEPAVBaseScrollBar@2@XZ
?GetVScroll@ScrollViewer@DirectUI@@MAEPAVBaseScrollBar@2@XZ
?OnReceivedDialogFocus@Button@DirectUI@@UAE_NPAUIDialogElement@2@@Z
?OnLostDialogFocus@Button@DirectUI@@UAE_NPAUIDialogElement@2@@Z
?DefaultAction@Button@DirectUI@@UAEJXZ
?OnInput@Button@DirectUI@@UAEXPAUInputEvent@2@@Z
??1Button@DirectUI@@UAE@XZ
??0Button@DirectUI@@QAE@XZ
?GetClassInfoPtr@Button@DirectUI@@SGPAUIClassInfo@2@XZ
?Register@Button@DirectUI@@SGJXZ
?KeyFocusedProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?OnPropertyChanged@Button@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?MouseWithinProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?GetBackgroundColor@Element@DirectUI@@QAEPBUFill@2@PAPAVValue@2@@Z
?Initialize@Button@DirectUI@@QAEJIPAVElement@2@PAK@Z
?SetFontStyle@Element@DirectUI@@QAEJH@Z
?SetFontWeight@Element@DirectUI@@QAEJH@Z
?GetFontStyle@Element@DirectUI@@QAEHXZ
?GetMouseWithin@Element@DirectUI@@QAE_NXZ
?SetActive@Element@DirectUI@@QAEJH@Z
?SetID@Element@DirectUI@@QAEJPBG@Z
?SetPressed@Button@DirectUI@@QAEJ_N@Z
?GetBoolFalse@Value@DirectUI@@SGPAV12@XZ
?SetBorderThickness@Element@DirectUI@@QAEJHHHH@Z
?GetContentString@Element@DirectUI@@QAEPBGPAPAVValue@2@@Z
?SetAnimation@Element@DirectUI@@QAEJH@Z
?HeightProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?LayoutPosProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?RemoveLocalValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZ@Z
?HasPadding@Element@DirectUI@@QAE_NXZ
?SetBorderColor@Element@DirectUI@@QAEJK@Z
?HasBorder@Element@DirectUI@@QAE_NXZ
?GetType@Value@DirectUI@@QBEHXZ
?CustomProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?GetValue@Element@DirectUI@@QAEPAVValue@2@P6GPBUPropertyInfo@2@XZHPAUUpdateCache@2@@Z
?SetClass@Element@DirectUI@@QAEJPBG@Z
?CreateInt@Value@DirectUI@@SGPAV12@HW4DynamicScaleValue@@@Z
?IsDestroyed@Element@DirectUI@@QAE_NXZ
?OnNotify@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z
?OnPropertyChanged@HWNDHost@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?GetClassInfoPtr@HWNDHost@DirectUI@@SGPAUIClassInfo@2@XZ
?Register@HWNDHost@DirectUI@@SGJXZ
?OnInput@HWNDHost@DirectUI@@UAEXPAUInputEvent@2@@Z
?Release@Element@DirectUI@@QAGKXZ
?Initialize@HWNDHost@DirectUI@@QAEJIIPAVElement@2@PAK@Z
??1HWNDHost@DirectUI@@UAE@XZ
??0HWNDHost@DirectUI@@QAE@XZ
?GetEnabled@Element@DirectUI@@QAE_NXZ
?SetAccName@Element@DirectUI@@QAEJPBG@Z
?GetDPI@Element@DirectUI@@QAEHXZ
?SetEnabled@Element@DirectUI@@QAEJ_N@Z
?UpdateSheets@DUIXmlParser@DirectUI@@QAEJPAVElement@2@@Z
?SetMinSize@Element@DirectUI@@QAEJHH@Z
?IsDescendent@Element@DirectUI@@QAE_NPAV12@@Z
?Add@Element@DirectUI@@QAEJPAV12@@Z
?SetAccDesc@Element@DirectUI@@QAEJPBG@Z
?SetTooltip@Element@DirectUI@@QAEJ_N@Z
?GetLocation@Element@DirectUI@@QAEPBUtagPOINT@@PAPAVValue@2@@Z
?SetX@Element@DirectUI@@QAEJH@Z
?GetPadding@Element@DirectUI@@QAEPBUtagRECT@@PAPAVValue@2@@Z
?GetBorderThickness@Element@DirectUI@@QAEPBUtagRECT@@PAPAVValue@2@@Z
?SetContentAlign@Element@DirectUI@@QAEJH@Z
?ContentProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?SetValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZHPAVValue@2@@Z
?CreateGraphic@Value@DirectUI@@SGPAV12@PAUHICON__@@_N11@Z
??1CCListView@DirectUI@@UAE@XZ
?PostCreate@CCBase@DirectUI@@MAEXPAUHWND__@@@Z
?OnReceivedDialogFocus@CCBase@DirectUI@@UAE_NPAUIDialogElement@2@@Z
?OnLostDialogFocus@CCBase@DirectUI@@UAE_NPAUIDialogElement@2@@Z
?OnCustomDraw@CCBase@DirectUI@@UAE_NPAUtagNMCUSTOMDRAWINFO@@PAJ@Z
?EraseBkgnd@HWNDHost@DirectUI@@MAE_NPAUHDC__@@PAJ@Z
?SetWindowDirection@HWNDHost@DirectUI@@UAEXPAUHWND__@@@Z
?OnWindowStyleChanged@HWNDHost@DirectUI@@UAEXIPBUtagSTYLESTRUCT@@@Z
?OnCtrlThemeChanged@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z
?OnSinkThemeChanged@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z
?OnSysChar@HWNDHost@DirectUI@@UAE_NG@Z
?DefaultAction@CCBase@DirectUI@@UAEJXZ
?GetAccessibleImpl@HWNDHost@DirectUI@@UAEJPAPAUIAccessible@@@Z
?GetKeyFocused@HWNDHost@DirectUI@@UAE_NXZ
?OnUnHosted@HWNDHost@DirectUI@@MAEXPAVElement@2@@Z
?OnHosted@HWNDHost@DirectUI@@MAEXPAVElement@2@@Z
?MessageCallback@HWNDHost@DirectUI@@UAEIPAUtagGMSG@@@Z
?GetContentSize@CCListView@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z
?Paint@HWNDHost@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z
?OnEvent@HWNDHost@DirectUI@@UAEXPAUEvent@2@@Z
?OnDestroy@HWNDHost@DirectUI@@UAEXXZ
?OnPropertyChanged@CCBase@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?GetClassInfoPtr@CCListView@DirectUI@@SGPAUIClassInfo@2@XZ
?Register@CCListView@DirectUI@@SGJXZ
?OnInput@CCBase@DirectUI@@UAEXPAUInputEvent@2@@Z
?SetKeyFocus@HWNDHost@DirectUI@@UAEXXZ
?OnNotify@CCBase@DirectUI@@UAE_NIIJPAJ@Z
?OnMessage@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z
?GetRootRelativeBounds@Element@DirectUI@@QAEJPAUtagRECT@@@Z
?OnAdjustWindowSize@HWNDHost@DirectUI@@UAEHHHI@Z
?GetHWND@HWNDHost@DirectUI@@UAEPAUHWND__@@XZ
?SetWinStyle@CCBase@DirectUI@@QAEJH@Z
?Initialize@CCListView@DirectUI@@QAEJIPAVElement@2@PAK@Z
?CreateHWND@CCBase@DirectUI@@UAEPAUHWND__@@PAU3@@Z
??0CCListView@DirectUI@@QAE@XZ
?GetClassInfoPtr@Expando@DirectUI@@SGPAUIClassInfo@2@XZ
??0Element@DirectUI@@QAE@XZ
?_PostEvent@Element@DirectUI@@AAEXPAUEvent@2@H@Z
?Register@Element@DirectUI@@SGJXZ
?SetXScrollable@BaseScrollViewer@DirectUI@@QAEJ_N@Z
?SetPadding@Element@DirectUI@@QAEJHHHH@Z
?SetXOffset@BaseScrollViewer@DirectUI@@QAEJH@Z
?XOffsetProp@BaseScrollViewer@DirectUI@@SGPBUPropertyInfo@2@XZ
?ShiftChild@Element@DirectUI@@QAEJII@Z
?SetForegroundColor@Element@DirectUI@@QAEJK@Z
?SetBackgroundColor@Element@DirectUI@@QAEJK@Z
?GetSelected@Element@DirectUI@@QAE_NXZ
?GetVisible@Element@DirectUI@@QAE_NXZ
?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z
?SetHeight@Element@DirectUI@@QAEJH@Z
?Insert@Element@DirectUI@@QAEJPAV12@I@Z
?Remove@Element@DirectUI@@QAEJPAV12@@Z
?GetSize@Value@DirectUI@@QAEPBUtagSIZE@@XZ
?ExtentProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?OnInput@Element@DirectUI@@UAEXPAUInputEvent@2@@Z
?GetDesiredSize@Element@DirectUI@@QAEPBUtagSIZE@@XZ
?GetInt@Value@DirectUI@@QAEHXZ
?GetWidth@Element@DirectUI@@QAEHXZ
??1DCSurface@DirectUI@@UAE@XZ
??0DCSurface@DirectUI@@QAE@PAUHDC__@@@Z
?SetValue@Element@DirectUI@@QAEJPBUPropertyInfo@2@HPAVValue@2@@Z
?SetAccValue@Element@DirectUI@@QAEJPBG@Z
?SetWidth@Element@DirectUI@@QAEJH@Z
?RemoveListener@Element@DirectUI@@QAEXPAUIElementListener@2@@Z
?SetContentString@Element@DirectUI@@QAEJPBG@Z
?GetDisplayNode@Element@DirectUI@@QAEPAUHGADGET__@@XZ
?Init@NavReference@DirectUI@@QAEXPAVElement@2@PAUtagRECT@@@Z
?GetKeyWithin@Element@DirectUI@@QAE_NXZ
?OnEvent@Element@DirectUI@@UAEXPAUEvent@2@@Z
?AddListener@Element@DirectUI@@QAEJPAUIElementListener@2@@Z
??1Element@DirectUI@@UAE@XZ
?OnPropertyChanged@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnGroupChanged@Element@DirectUI@@UAEXH_N@Z
?OnDestroy@Element@DirectUI@@UAEXXZ
?UpdateTooltip@Element@DirectUI@@MAEXPAV12@@Z
?ActivateTooltip@Element@DirectUI@@MAEXPAV12@K@Z
?RemoveTooltip@Element@DirectUI@@MAEXPAV12@@Z
?GetAccessibleImpl@Element@DirectUI@@UAEJPAPAUIAccessible@@@Z
?ExpandCollapse_ExpandCollapseState_Property@Schema@DirectUI@@2HA
?SetSelected@Element@DirectUI@@QAEJ_N@Z
?CreateBool@Value@DirectUI@@SGPAV12@_N@Z
?SetExpanded@Expandable@DirectUI@@QAEJ_N@Z
?GetExpanded@Expandable@DirectUI@@QAE_NXZ
?SortChildren@Element@DirectUI@@QAEJP6AHPBX0@Z@Z
?GetBool@Value@DirectUI@@QAE_NXZ
?GetValue@Element@DirectUI@@QAEPAVValue@2@PBUPropertyInfo@2@HPAUUpdateCache@2@@Z
?HasChildren@Element@DirectUI@@QAE_NXZ
?GetChildren@Element@DirectUI@@QAEPAV?$DynamicArray@PAVElement@DirectUI@@$0A@@2@PAPAVValue@2@@Z
?GetClassInfoPtr@Element@DirectUI@@SGPAUIClassInfo@2@XZ
?GetParent@Element@DirectUI@@QAEPAV12@XZ
?GetClass@Element@DirectUI@@QAEPBGPAPAVValue@2@@Z
?GetIndex@Element@DirectUI@@QAEHXZ
?AssertPIZeroRef@ClassInfoBase@DirectUI@@UBEXXZ
?GetChildren@ClassInfoBase@DirectUI@@UBEHXZ
?RemoveChild@ClassInfoBase@DirectUI@@UAEXXZ
?AddChild@ClassInfoBase@DirectUI@@UAEXXZ
?IsGlobal@ClassInfoBase@DirectUI@@UBE_NXZ
?GetModule@ClassInfoBase@DirectUI@@UBEPAUHINSTANCE__@@XZ
?IsSubclassOf@ClassInfoBase@DirectUI@@UBE_NPAUIClassInfo@2@@Z
?IsValidProperty@ClassInfoBase@DirectUI@@UBE_NPBUPropertyInfo@2@@Z
?GetName@ClassInfoBase@DirectUI@@UBEPBGXZ
?GetGlobalIndex@ClassInfoBase@DirectUI@@UBEIXZ
?GetPICount@ClassInfoBase@DirectUI@@UBEIXZ
?GetByClassIndex@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z
?EnumPropertyInfo@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z
?Release@ClassInfoBase@DirectUI@@UAEHXZ
?AddRef@ClassInfoBase@DirectUI@@UAEXXZ
?_OnUIStateChanged@HWNDElement@DirectUI@@MAEXGG@Z
?GetWindowClassNameAndStyle@HWNDElement@DirectUI@@UAEXPAPBGPAI@Z
?IsMSAAEnabled@HWNDElement@DirectUI@@UAE_NXZ
?CanSetFocus@HWNDElement@DirectUI@@UAE_NXZ
?OnCompositionChanged@HWNDElement@DirectUI@@UAEXXZ
?OnWmSettingChanged@HWNDElement@DirectUI@@UAEXIJ@Z
?OnWmThemeChanged@HWNDElement@DirectUI@@UAEXIJ@Z
?OnGetDlgCode@HWNDElement@DirectUI@@UAEXPAUtagMSG@@PAJ@Z
?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UAEXPAUKeyboardEvent@2@@Z
?OnImmersiveColorSchemeChanged@HWNDElement@DirectUI@@UAEXXZ
?GetUiaFocusDelegate@Element@DirectUI@@UAEPAV12@XZ
?HandleUiaEventListener@Element@DirectUI@@UAEXPAUEvent@2@@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z
?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ
?GetElementProviderImpl@Element@DirectUI@@UAEJPAVInvokeHelper@2@PAPAVElementProvider@2@@Z
?GetUIAElementProvider@Element@DirectUI@@UAEJABU_GUID@@PAPAX@Z
?DefaultAction@Element@DirectUI@@UAEJXZ
?GetAccessibleImpl@HWNDElement@DirectUI@@UAEJPAPAUIAccessible@@@Z
?GetKeyFocused@Element@DirectUI@@UAE_NXZ
?RemoveTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z
?ActivateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@K@Z
?UpdateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z
?OnUnHosted@Element@DirectUI@@MAEXPAV12@@Z
?OnHosted@Element@DirectUI@@MAEXPAV12@@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE?AUtagSIZE@@HHPAVSurface@2@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z
?GetImmersiveFocusRectOffsets@Element@DirectUI@@UAEXPAUtagRECT@@@Z
?QueryInterface@Element@DirectUI@@UAGJABU_GUID@@PAPAX@Z
?MessageCallback@Element@DirectUI@@UAEIPAUtagGMSG@@@Z
?RemoveBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z
?AddBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z
?SetKeyFocus@Element@DirectUI@@UAEXXZ
?EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z
?GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z
?Remove@Element@DirectUI@@UAEJPAPAV12@I@Z
?Insert@Element@DirectUI@@UAEJPAPAV12@II@Z
?Add@Element@DirectUI@@UAEJPAPAV12@I@Z
?GetContentSize@Element@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z
?Paint@Element@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z
?OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnGroupChanged@HWNDElement@DirectUI@@UAEXH_N@Z
?OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanged@HWNDElement@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z
?GetContentStringAsDisplayed@Element@DirectUI@@UAEPBGPAPAVValue@2@@Z
?IsContentProtected@Element@DirectUI@@UAE_NXZ
?IsRTL@Element@DirectUI@@QAE_NXZ
?IsRTLReading@Element@DirectUI@@UAE_NXZ
??1ClassInfoBase@DirectUI@@UAE@XZ
??0ClassInfoBase@DirectUI@@QAE@XZ
?GetClassInfoPtr@HWNDElement@DirectUI@@SGPAUIClassInfo@2@XZ
?Initialize@ClassInfoBase@DirectUI@@QAEJPAUHINSTANCE__@@PBG_NPBQBUPropertyInfo@2@I@Z
?Register@ClassInfoBase@DirectUI@@QAEJXZ
?ClassExist@ClassInfoBase@DirectUI@@SG_NPAPAUIClassInfo@2@PBQBUPropertyInfo@2@IPAU32@PAUHINSTANCE__@@PBG_N@Z
??1CritSecLock@DirectUI@@QAE@XZ
?GetFactoryLock@Element@DirectUI@@SGPAU_RTL_CRITICAL_SECTION@@XZ
??0CritSecLock@DirectUI@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z
?Register@HWNDElement@DirectUI@@SGJXZ
?OnThemeChanged@HWNDElement@DirectUI@@UAEXPAUThemeChangedEvent@2@@Z
?GetLayoutPos@Element@DirectUI@@QAEHXZ
EnableAnimations
?FireEvent@Element@DirectUI@@QAEXPAUEvent@2@_N1@Z
?StartNavigate@Browser@DirectUI@@SG?AVUID@@XZ
DisableAnimations
?Destroy@DUIXmlParser@DirectUI@@QAEXXZ
?SetXMLFromResource@DUIXmlParser@DirectUI@@QAEJIPAUHINSTANCE__@@0@Z
?Create@DUIXmlParser@DirectUI@@SGJPAPAV12@P6GPAVValue@2@PBGPAX@Z2P6GX11H2@Z2@Z
?CreateElement@DUIXmlParser@DirectUI@@QAEJPBGPAVElement@2@1PAKPAPAV32@@Z
?ShowWindow@NativeHWNDHost@DirectUI@@QAEXH@Z
?Host@NativeHWNDHost@DirectUI@@QAEXPAVElement@2@@Z
?SetVisible@Element@DirectUI@@QAEJ_N@Z
?SetAccRole@Element@DirectUI@@QAEJH@Z
?SetAccessible@Element@DirectUI@@QAEJ_N@Z
?Initialize@HWNDElement@DirectUI@@QAEJPAUHWND__@@_NIPAVElement@2@PAK@Z
?GetHWND@NativeHWNDHost@DirectUI@@QAEPAUHWND__@@XZ
?Create@NativeHWNDHost@DirectUI@@SGJPBGPAUHWND__@@PAUHICON__@@HHHHHHIPAPAV12@@Z
?Destroy@Element@DirectUI@@QAEJ_N@Z
?OnDestroy@HWNDElement@DirectUI@@UAEXXZ
?OnEvent@HWNDElement@DirectUI@@UAEXPAUEvent@2@@Z
?KeyboardNavigate@Element@DirectUI@@SG?AVUID@@XZ
?GetID@Element@DirectUI@@QAEGXZ
?Click@Button@DirectUI@@SG?AVUID@@XZ
?GetExtent@Element@DirectUI@@QAEPBUtagSIZE@@PAPAVValue@2@@Z
?Release@Value@DirectUI@@QAEXXZ
?SetLayoutPos@Element@DirectUI@@QAEJH@Z
?OnInput@HWNDElement@DirectUI@@UAEXPAUInputEvent@2@@Z
?EndDefer@Element@DirectUI@@QAEXK@Z
?StartDefer@Element@DirectUI@@QAEXPAK@Z
?GetHWND@HWNDElement@DirectUI@@UAEPAUHWND__@@XZ
StrToID
?GetRoot@Element@DirectUI@@QAEPAV12@XZ

vdmdbg

VDMEnumProcessWOW
VDMTerminateTaskWOW
VDMEnumTaskWOWEx

api-ms-win-core-appcompat-l1-1-1

BaseReadAppCompatDataForProcess
BaseFreeAppCompatDataForProcess

pdh

PdhCloseQuery
PdhOpenQueryW
PdhGetRawCounterArrayW
PdhGetFormattedCounterArrayW
PdhCollectQueryData
PdhAddCounterW

dxcore

DXCoreCreateAdapterFactory

dxgi

DXGIDeclareAdapterRemovalSupport
CreateDXGIFactory2

setupapi

SetupDiGetClassDevsW
SetupDiGetDevicePropertyW
SetupDiEnumDeviceInfo

d3d11

D3D11CreateDevice

d3d12

ord101

kernel32

PackageFamilyNameFromFullName
ParseApplicationUserModelId
GetActiveProcessorGroupCount
GetModuleHandleExA
GetProcessAffinityMask
SetProcessAffinityMask
GetPackageFullName
GetPackageFamilyName
GlobalGetAtomNameW
GetNumberFormatW

msvcp_win

?_Random_device@std@@YAIXZ
?_Xbad_function_call@std@@YAXXZ
_Query_perf_frequency
_Thrd_sleep
_Query_perf_counter
_Xtime_get_ticks
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xinvalid_argument@std@@YAXPBD@Z

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessage

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

Sections

.text
Size: 946KB - Virtual size: 946KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.imrsiv
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

e48ed6d37ab78b890a112128172fab3a

Code Sign

33:00:00:02:ec:65:79:ad:1e:67:08:90:13:00:00:00:00:02:ecCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

4d:a9:dc:41:35:06:7f:53:da:8e:d7:96:d1:14:a2:6f:a3:5e:05:22:61:9c:a5:3f:50:bc:c7:18:23:0f:3d:47Signer

Signature Validations

Verification

09/09/2022, 12:41 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-eventing-provider-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-core-threadpool-l1-2-0

api-ms-win-security-base-l1-1-0

api-ms-win-core-sysinfo-l1-2-0

api-ms-win-core-datetime-l1-1-0

api-ms-win-core-io-l1-1-1

api-ms-win-core-synch-l1-2-1

api-ms-win-power-setting-l1-1-0

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-timezone-l1-1-0

oleaut32

api-ms-win-core-memory-l1-1-1

api-ms-win-core-file-l1-2-0

api-ms-win-core-path-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-wow64-l1-1-0

api-ms-win-core-version-l1-1-0

api-ms-win-core-string-l2-1-0

api-ms-win-core-memory-l1-1-0

api-ms-win-core-version-l1-1-1

api-ms-win-core-processthreads-l1-1-3

api-ms-win-core-datetime-l1-1-2

api-ms-win-core-datetime-l1-1-1

api-ms-win-core-psapi-l1-1-0

api-ms-win-core-sysinfo-l1-2-2

api-ms-win-core-processtopology-l1-1-0

api-ms-win-core-io-l1-1-0

api-ms-win-core-sysinfo-l1-2-1

api-ms-win-core-localization-l2-1-0

api-ms-win-core-string-l2-1-1

api-ms-win-core-winrt-error-l1-1-0

api-ms-win-core-kernel32-legacy-l1-1-0

api-ms-win-core-threadpool-legacy-l1-1-0

api-ms-win-core-shlwapi-legacy-l1-1-0

api-ms-win-perf-legacy-l1-1-0

api-ms-win-core-windowserrorreporting-l1-1-3

api-ms-win-core-pcw-l1-1-0

nsi

comctl32

ntdll

33:00:00:02:ec:65:79:ad:1e:67:08:90:13:00:00:00:00:02:ec
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

4d:a9:dc:41:35:06:7f:53:da:8e:d7:96:d1:14:a2:6f:a3:5e:05:22:61:9c:a5:3f:50:bc:c7:18:23:0f:3d:47
Signer

09/09/2022, 12:41
Valid: false

.text
Size: 946KB - Virtual size: 946KB

.imrsiv
Size: - Virtual size: 4B

.data
Size: 51KB - Virtual size: 71KB

.idata
Size: 42KB - Virtual size: 41KB

.didat
Size: 1024B - Virtual size: 520B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 62KB - Virtual size: 61KB