Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
DisplaySwitch.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
DisplaySwitch.exe
Resource
win10v2004-20230221-en
Target
DisplaySwitch.exe
Size
1.8MB
MD5
2e5e1b653778de0e51add0bbe788b30a
SHA1
341f9a52a68e66b183c2e3262dc1e010b29612c0
SHA256
47bb2f510efd927d4bddf8f13503ddf077b1f0ed8427f64605dc9f60bd935b06
SHA512
e11c92d628c0d7cc1a9843c71360088b39fc3f84d6c7b87f26b7abbd126599310239e6aef0953c3f999c3c16ad2d2676abf12a711a82a3bbda3780806e7fa671
SSDEEP
3072:tfvk88Rh3rWekHas1C3UeVk27Ea1mm+9QnJRehnZ9T3UWi108J5wYPwR8U:FDshpwa6d6/t+9scCvjU
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
EventRegister
EventWrite
EventUnregister
RegGetValueW
DecodePointer
LocalFree
CompareStringOrdinal
LoadLibraryW
EncodePointer
ReleaseSRWLockExclusive
AcquireSRWLockShared
GetCommandLineW
ReleaseSRWLockShared
AcquireSRWLockExclusive
GetCurrentThreadId
DestroyWindow
SetTimer
KillTimer
SetForegroundWindow
SendInput
GetWindowLongW
DefWindowProcW
PeekMessageW
MsgWaitForMultipleObjectsEx
DestroyIcon
SystemParametersInfoW
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
GetAsyncKeyState
GetKeyState
PostThreadMessageW
GetThreadDesktop
GetUserObjectInformationW
GetMessageW
TranslateMessage
DispatchMessageW
SetDisplayConfig
GetDisplayConfigBufferSizes
QueryDisplayConfig
memcpy
memset
__CxxFrameHandler3
_controlfp
?terminate@@YAXXZ
_onexit
__dllonexit
_unlock
_lock
_wcmdln
_initterm
__setusermatherr
__p__fmode
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__p__commode
_XcptFilter
free
_purecall
_except_handler4_common
_CIpow
_callnewh
strchr
_vsnwprintf
memcpy_s
malloc
_set_errno
_get_errno
PolicyManager_GetPolicyInt
PathRemoveFileSpecW
ord278
ord172
SHGetThreadRef
PathAppendW
SHSetThreadRef
SHCreateThreadRef
GetCurrentThemeName
ord120
ord121
CoGetApartmentType
RoGetAgileReference
CoResumeClassObjects
CoRegisterClassObject
CoWaitForMultipleHandles
CoRevokeClassObject
CoAddRefServerProcess
CoReleaseServerProcess
CoUninitialize
CoCreateInstance
CoInitializeEx
RoOriginateErrorW
RoOriginateError
RoRegisterActivationFactories
RoRevokeActivationFactories
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsCreateString
WindowsStringHasEmbeddedNull
WaitForSingleObjectEx
InitOnceBeginInitialize
CreateMutexExW
OpenSemaphoreW
CreateEventExW
WaitForSingleObject
InitOnceComplete
SetEvent
Sleep
ReleaseMutex
ReleaseSemaphore
CreateSemaphoreExW
GetCurrentProcess
GetStartupInfoW
GetCurrentProcessId
CreateThread
TlsSetValue
TerminateProcess
TlsFree
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
SetLastError
GetLastError
UnhandledExceptionFilter
GetModuleHandleA
GetModuleHandleW
FreeLibrary
GetProcAddress
LoadStringW
GetModuleHandleExW
GetModuleFileNameW
LockResource
LoadLibraryExW
FreeLibraryAndExitThread
LoadResource
FindResourceExW
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetProcessHeap
HeapFree
HeapAlloc
LocalAlloc
LocalReAlloc
CloseHandle
EventSetInformation
EventActivityIdControl
EventWriteTransfer
OutputDebugStringW
FormatMessageW
PowerDeterminePlatformRoleEx
CreateSemaphoreW
CallbackMayRunLong
FreeLibraryWhenCallbackReturns
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
TrySubmitThreadpoolCallback
ExpandEnvironmentStringsW
ApiSetQueryApiSetPresence
ord140
ord381
DwmSetWindowAttribute
ImmDisableIME
RtlQueryWnfStateData
WinStationIsSessionRemoteable
?HeightProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?WidthProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
ARGBColorFromEnumI
?SetXMLFromResourceWithTheme@DUIXmlParser@DirectUI@@QAEJIPAUHINSTANCE__@@00@Z
?SetXMLFromResource@DUIXmlParser@DirectUI@@QAEJPBGPAUHINSTANCE__@@1@Z
?Destroy@DUIXmlParser@DirectUI@@QAEXXZ
?Create@DUIXmlParser@DirectUI@@SGJPAPAV12@P6GPAVValue@2@PBGPAX@Z2P6GX11H2@Z2@Z
?GetSheet@DUIXmlParser@DirectUI@@QAEJPBGPAPAVValue@2@@Z
UnInitThread
InitThread
UnInitProcessPriv
InitProcessPriv
?CreateString@Value@DirectUI@@SGPAV12@PBGPAUHINSTANCE__@@@Z
?StartDefer@Element@DirectUI@@QAEXPAK@Z
?GetClassInfoPtr@HWNDElement@DirectUI@@SGPAUIClassInfo@2@XZ
?_PostEvent@Element@DirectUI@@AAEXPAUEvent@2@H@Z
?FireEvent@Element@DirectUI@@QAEXPAUEvent@2@_N1@Z
?KeyboardNavigate@Element@DirectUI@@SG?AVUID@@XZ
?GetSelection@Selector@DirectUI@@QAEPAVElement@2@XZ
?RemoveLocalValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZ@Z
?ClassProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?SetClass@Element@DirectUI@@QAEJPBG@Z
?ShowUIState@HWNDElement@DirectUI@@QAEX_N0@Z
?GetRoot@Element@DirectUI@@QAEPAV12@XZ
?Click@TouchButton@DirectUI@@SG?AVUID@@XZ
?AddListener@Element@DirectUI@@QAEJPAUIElementListener@2@@Z
?AssertPIZeroRef@ClassInfoBase@DirectUI@@UBEXXZ
?GetChildren@ClassInfoBase@DirectUI@@UBEHXZ
?AddChild@ClassInfoBase@DirectUI@@UAEXXZ
?IsGlobal@ClassInfoBase@DirectUI@@UBE_NXZ
?GetModule@ClassInfoBase@DirectUI@@UBEPAUHINSTANCE__@@XZ
?IsSubclassOf@ClassInfoBase@DirectUI@@UBE_NPAUIClassInfo@2@@Z
?IsValidProperty@ClassInfoBase@DirectUI@@UBE_NPBUPropertyInfo@2@@Z
?GetName@ClassInfoBase@DirectUI@@UBEPBGXZ
?GetGlobalIndex@ClassInfoBase@DirectUI@@UBEIXZ
?GetPICount@ClassInfoBase@DirectUI@@UBEIXZ
?GetByClassIndex@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z
?EnumPropertyInfo@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z
?Release@ClassInfoBase@DirectUI@@UAEHXZ
?AddRef@ClassInfoBase@DirectUI@@UAEXXZ
?FireRightClickEvent@TouchButton@DirectUI@@UAEXIPAUtagPOINT@@@Z
?FireClickEvent@TouchButton@DirectUI@@UAEXIIW4ClickDevice@12@PAUtagPOINT@@@Z
?GetForegroundColorRef@TouchButton@DirectUI@@UAEJPAK@Z
?DefaultAction@TouchButton@DirectUI@@UAEJXZ
?OnUnHosted@TouchButton@DirectUI@@UAEXPAVElement@2@@Z
?OnHosted@TouchButton@DirectUI@@UAEXPAVElement@2@@Z
?GetImmersiveFocusRectOffsets@TouchButton@DirectUI@@UAEXPAUtagRECT@@@Z
?GetContentSize@RichText@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z
?Paint@RichText@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z
?OnEvent@TouchButton@DirectUI@@UAEXPAUEvent@2@@Z
?OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnInput@TouchButton@DirectUI@@UAEXPAUInputEvent@2@@Z
?SetSelection@Selector@DirectUI@@UAEJPAVElement@2@@Z
?GetUiaFocusDelegate@Element@DirectUI@@UAEPAV12@XZ
?HandleUiaEventListener@Element@DirectUI@@UAEXPAUEvent@2@@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z
?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ
?GetElementProviderImpl@Element@DirectUI@@UAEJPAVInvokeHelper@2@PAPAVElementProvider@2@@Z
?GetUIAElementProvider@Element@DirectUI@@UAEJABU_GUID@@PAPAX@Z
?DefaultAction@Element@DirectUI@@UAEJXZ
?GetAccessibleImpl@Element@DirectUI@@UAEJPAPAUIAccessible@@@Z
?GetKeyFocused@Element@DirectUI@@UAE_NXZ
?RemoveTooltip@Element@DirectUI@@MAEXPAV12@@Z
?ActivateTooltip@Element@DirectUI@@MAEXPAV12@K@Z
?UpdateTooltip@Element@DirectUI@@MAEXPAV12@@Z
?OnUnHosted@Element@DirectUI@@MAEXPAV12@@Z
?OnHosted@Element@DirectUI@@MAEXPAV12@@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE?AUtagSIZE@@HHPAVSurface@2@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z
?GetImmersiveFocusRectOffsets@Element@DirectUI@@UAEXPAUtagRECT@@@Z
?QueryInterface@Element@DirectUI@@UAGJABU_GUID@@PAPAX@Z
?MessageCallback@Element@DirectUI@@UAEIPAUtagGMSG@@@Z
?RemoveBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z
?AddBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z
?SetKeyFocus@Element@DirectUI@@UAEXXZ
?EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z
?Remove@Element@DirectUI@@UAEJPAPAV12@I@Z
?Insert@Element@DirectUI@@UAEJPAPAV12@II@Z
?Add@Element@DirectUI@@UAEJPAPAV12@I@Z
?GetContentSize@Element@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z
?Paint@Element@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z
?OnEvent@Selector@DirectUI@@UAEXPAUEvent@2@@Z
?OnDestroy@Element@DirectUI@@UAEXXZ
?OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnKeyFocusMoved@Selector@DirectUI@@UAEXPAVElement@2@0@Z
?OnInput@Selector@DirectUI@@UAEXPAUInputEvent@2@@Z
?OnGroupChanged@Element@DirectUI@@UAEXH_N@Z
?OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanged@ItemList@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z
?GetContentStringAsDisplayed@Element@DirectUI@@UAEPBGPAPAVValue@2@@Z
?IsContentProtected@Element@DirectUI@@UAE_NXZ
?IsRTLReading@Element@DirectUI@@UAE_NXZ
??1ItemList@DirectUI@@UAE@XZ
??0ItemList@DirectUI@@QAE@XZ
??1ClassInfoBase@DirectUI@@UAE@XZ
??0ClassInfoBase@DirectUI@@QAE@XZ
?GetClassInfoPtr@TouchButton@DirectUI@@SGPAUIClassInfo@2@XZ
?Initialize@Selector@DirectUI@@QAEJPAVElement@2@PAK@Z
?Initialize@ClassInfoBase@DirectUI@@QAEJPAUHINSTANCE__@@PBG_NPBQBUPropertyInfo@2@I@Z
?Register@ItemList@DirectUI@@SGJXZ
?Register@ClassInfoBase@DirectUI@@QAEJXZ
?ClassExist@ClassInfoBase@DirectUI@@SG_NPAPAUIClassInfo@2@PBQBUPropertyInfo@2@IPAU32@PAUHINSTANCE__@@PBG_N@Z
??1CritSecLock@DirectUI@@QAE@XZ
?GetFactoryLock@Element@DirectUI@@SGPAU_RTL_CRITICAL_SECTION@@XZ
??0CritSecLock@DirectUI@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z
?Register@TouchButton@DirectUI@@SGJXZ
?OnPropertyChanged@TouchButton@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?SizeInLayoutProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
DuiCreateObject
?PressedProp@TouchButton@DirectUI@@SGPBUPropertyInfo@2@XZ
?SetAccName@Element@DirectUI@@QAEJPBG@Z
?Initialize@TouchButton@DirectUI@@QAEJIPAVElement@2@PAK@Z
?RemoveChild@ClassInfoBase@DirectUI@@UAEXXZ
?ContentProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?SetValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZHPAVValue@2@@Z
?BackgroundProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?CreateGraphic@Value@DirectUI@@SGPAV12@PAUHICON__@@_N11@Z
?Add@Element@DirectUI@@QAEJPAV12@@Z
?GetValue@Element@DirectUI@@QAEPAVValue@2@P6GPBUPropertyInfo@2@XZHPAUUpdateCache@2@@Z
?GetChildren@Element@DirectUI@@QAEPAV?$DynamicArray@PAVElement@DirectUI@@$0A@@2@PAPAVValue@2@@Z
?GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z
RegisterPVLBehaviorFactory
?CreateElement@DUIXmlParser@DirectUI@@QAEJPBGPAVElement@2@1PAKPAPAV32@@Z
?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z
StrToID
?SetLayoutPos@Element@DirectUI@@QAEJH@Z
?EndDefer@Element@DirectUI@@QAEXK@Z
?Destroy@Element@DirectUI@@QAEJ_N@Z
?GetClassInfoPtr@ItemList@DirectUI@@SGPAUIClassInfo@2@XZ
??0TouchButton@DirectUI@@QAE@XZ
??1TouchButton@DirectUI@@UAE@XZ
?Release@Value@DirectUI@@QAEXXZ
CreateAction
DeleteHandle
D3DKMTNetDispStopMiracastDisplayDevice
D3DKMTNetDispQueryMiracastDisplayDeviceSupport
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ