Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
DisplaySwitch.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
DisplaySwitch.exe
Resource
win10v2004-20230221-en
Target
DisplaySwitch.exe
Size
1.8MB
MD5
94ccf6030081f088da5068df780755ac
SHA1
10ebdf557889e2902c49ec203fc98c913f3f90e9
SHA256
1d5cba061142691df9d99380139653fae326ff15fd12d8cc1b91ead79194aa9d
SHA512
31ec8dc1882d163c6d1eabbbdaac832fe6d39f823aee1f3b618fc82e2c4fcd31eaf24c4dd0ce002b85ba76e617d56787be55b895377d9990cb733c2a08900468
SSDEEP
3072:BXDJI17xZ5sp0pCJz+qHZuFFF3AfyGUpCvzHmcReMsY+kc:BNIF5s6GzXuX3PG/vzLbG
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
EventRegister
EventWrite
EventUnregister
ExpandEnvironmentStringsW
LoadLibraryExW
LoadLibraryA
GetCommandLineW
CompareStringOrdinal
Sleep
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
AcquireSRWLockShared
ReleaseSRWLockShared
EncodePointer
LocalFree
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
DecodePointer
GetCurrentThreadId
TlsGetValue
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
TrySubmitThreadpoolCallback
CallbackMayRunLong
FreeLibraryWhenCallbackReturns
CreateEventExW
CreateThread
OpenSemaphoreW
ReleaseSemaphore
TlsAlloc
CreateSemaphoreW
TlsFree
TlsSetValue
FreeLibraryAndExitThread
SetEvent
WaitForSingleObject
LocalReAlloc
FindResourceExW
LoadResource
LockResource
GetProcAddress
GetModuleHandleExW
CloseHandle
LocalAlloc
SetLastError
GetLastError
GetModuleFileNameW
GetProcessHeap
HeapFree
HeapAlloc
FreeLibrary
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcessId
SetWindowsHookExW
UnhookWindowsHookEx
GetAsyncKeyState
GetThreadDesktop
GetKeyState
SetDisplayConfig
QueryDisplayConfig
GetDisplayConfigBufferSizes
GetMessageW
TranslateMessage
LoadStringW
SystemParametersInfoW
DestroyIcon
MsgWaitForMultipleObjectsEx
PeekMessageW
DefWindowProcW
DispatchMessageW
PostThreadMessageW
GetWindowLongW
SendInput
SetForegroundWindow
KillTimer
SetTimer
DestroyWindow
GetUserObjectInformationW
CallNextHookEx
_vsnwprintf
strchr
_set_errno
_get_errno
memset
__CxxFrameHandler3
??2@YAPAXI@Z
_except_handler4_common
_controlfp
?terminate@@YAXXZ
_onexit
__dllonexit
_unlock
_lock
_wcmdln
_initterm
__setusermatherr
__p__fmode
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__p__commode
_XcptFilter
_purecall
??3@YAXPAX@Z
memcpy
_CIpow
RoRegisterActivationFactories
RoRevokeActivationFactories
WindowsCreateString
WindowsDeleteString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
RoOriginateErrorW
RoOriginateError
CoGetApartmentType
CoRegisterClassObject
RoGetAgileReference
CoInitializeEx
CoCreateInstance
CoWaitForMultipleHandles
CoResumeClassObjects
CoUninitialize
CoRevokeClassObject
CoAddRefServerProcess
CoReleaseServerProcess
ImmDisableIME
CoAllowSetForegroundWindow
WinSqmAddToStream
WinSqmIncrementDWORD
WinSqmIsOptedIn
RtlQueryWnfStateData
PathAppendW
PathRemoveFileSpecW
SHCreateThreadRef
SHSetThreadRef
SHGetThreadRef
ord172
ord278
SHStrDupW
ord381
DwmSetWindowAttribute
PowerDeterminePlatformRoleEx
WinStationIsSessionRemoteable
GetCurrentThemeName
ord121
ord120
?WidthProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?HeightProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?SetOverrideScaleFactor@DUIXmlParser@DirectUI@@QAEXM@Z
?SetDynamicScaling@DUIXmlParser@DirectUI@@QAEXW4DynamicScaleParsing@2@@Z
?GetSheet@DUIXmlParser@DirectUI@@QAEJPBGPAPAVValue@2@@Z
?SetXMLFromResource@DUIXmlParser@DirectUI@@QAEJPBGPAUHINSTANCE__@@1@Z
?SetXMLFromResourceWithTheme@DUIXmlParser@DirectUI@@QAEJIPAUHINSTANCE__@@00@Z
?Destroy@DUIXmlParser@DirectUI@@QAEXXZ
?Create@DUIXmlParser@DirectUI@@SGJPAPAV12@P6GPAVValue@2@PBGPAX@Z2P6GX11H2@Z2@Z
UnInitThread
InitThread
InitProcessPriv
?CreateString@Value@DirectUI@@SGPAV12@PBGPAUHINSTANCE__@@@Z
ARGBColorFromEnumI
?StartDefer@Element@DirectUI@@QAEXPAK@Z
?GetClassInfoPtr@HWNDElement@DirectUI@@SGPAUIClassInfo@2@XZ
?_PostEvent@Element@DirectUI@@AAEXPAUEvent@2@H@Z
?FireEvent@Element@DirectUI@@QAEXPAUEvent@2@_N1@Z
?KeyboardNavigate@Element@DirectUI@@SG?AVUID@@XZ
?GetSelection@Selector@DirectUI@@QAEPAVElement@2@XZ
?RemoveLocalValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZ@Z
?ClassProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?SetClass@Element@DirectUI@@QAEJPBG@Z
?ShowUIState@HWNDElement@DirectUI@@QAEX_N0@Z
?GetRoot@Element@DirectUI@@QAEPAV12@XZ
?Click@TouchButton@DirectUI@@SG?AVUID@@XZ
?AddListener@Element@DirectUI@@QAEJPAUIElementListener@2@@Z
?AssertPIZeroRef@ClassInfoBase@DirectUI@@UBEXXZ
?GetChildren@ClassInfoBase@DirectUI@@UBEHXZ
?RemoveChild@ClassInfoBase@DirectUI@@UAEXXZ
?AddChild@ClassInfoBase@DirectUI@@UAEXXZ
?IsGlobal@ClassInfoBase@DirectUI@@UBE_NXZ
?GetModule@ClassInfoBase@DirectUI@@UBEPAUHINSTANCE__@@XZ
?IsSubclassOf@ClassInfoBase@DirectUI@@UBE_NPAUIClassInfo@2@@Z
?IsValidProperty@ClassInfoBase@DirectUI@@UBE_NPBUPropertyInfo@2@@Z
?GetName@ClassInfoBase@DirectUI@@UBEPBGXZ
?GetGlobalIndex@ClassInfoBase@DirectUI@@UBEIXZ
?GetPICount@ClassInfoBase@DirectUI@@UBEIXZ
?GetByClassIndex@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z
?EnumPropertyInfo@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z
?Release@ClassInfoBase@DirectUI@@UAEHXZ
?AddRef@ClassInfoBase@DirectUI@@UAEXXZ
?FireRightClickEvent@TouchButton@DirectUI@@UAEXIPAUtagPOINT@@@Z
?FireClickEvent@TouchButton@DirectUI@@UAEXIIW4ClickDevice@12@PAUtagPOINT@@@Z
?GetForegroundColorRef@TouchButton@DirectUI@@UAEJPAK@Z
?DefaultAction@TouchButton@DirectUI@@UAEJXZ
?OnUnHosted@TouchButton@DirectUI@@UAEXPAVElement@2@@Z
?OnHosted@TouchButton@DirectUI@@UAEXPAVElement@2@@Z
?GetImmersiveFocusRectOffsets@TouchButton@DirectUI@@UAEXPAUtagRECT@@@Z
?GetContentSize@RichText@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z
?Paint@RichText@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z
?OnEvent@TouchButton@DirectUI@@UAEXPAUEvent@2@@Z
?OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnInput@TouchButton@DirectUI@@UAEXPAUInputEvent@2@@Z
?SetSelection@Selector@DirectUI@@UAEJPAVElement@2@@Z
?GetUiaFocusDelegate@Element@DirectUI@@UAEPAV12@XZ
?HandleUiaEventListener@Element@DirectUI@@UAEXPAUEvent@2@@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z
?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ
?GetElementProviderImpl@Element@DirectUI@@UAEJPAVInvokeHelper@2@PAPAVElementProvider@2@@Z
?GetUIAElementProvider@Element@DirectUI@@UAEJABU_GUID@@PAPAX@Z
?DefaultAction@Element@DirectUI@@UAEJXZ
?GetAccessibleImpl@Element@DirectUI@@UAEJPAPAUIAccessible@@@Z
?GetKeyFocused@Element@DirectUI@@UAE_NXZ
?RemoveTooltip@Element@DirectUI@@MAEXPAV12@@Z
?ActivateTooltip@Element@DirectUI@@MAEXPAV12@K@Z
?UpdateTooltip@Element@DirectUI@@MAEXPAV12@@Z
?OnUnHosted@Element@DirectUI@@MAEXPAV12@@Z
?OnHosted@Element@DirectUI@@MAEXPAV12@@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE?AUtagSIZE@@HHPAVSurface@2@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z
?GetImmersiveFocusRectOffsets@Element@DirectUI@@UAEXPAUtagRECT@@@Z
?QueryInterface@Element@DirectUI@@UAGJABU_GUID@@PAPAX@Z
?MessageCallback@Element@DirectUI@@UAEIPAUtagGMSG@@@Z
UnInitProcessPriv
?RemoveBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z
?AddBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z
?SetKeyFocus@Element@DirectUI@@UAEXXZ
?EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z
?Remove@Element@DirectUI@@UAEJPAPAV12@I@Z
?Insert@Element@DirectUI@@UAEJPAPAV12@II@Z
?Add@Element@DirectUI@@UAEJPAPAV12@I@Z
?GetContentSize@Element@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z
?Paint@Element@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z
?OnEvent@Selector@DirectUI@@UAEXPAUEvent@2@@Z
?OnDestroy@Element@DirectUI@@UAEXXZ
?OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnKeyFocusMoved@Selector@DirectUI@@UAEXPAVElement@2@0@Z
?OnInput@Selector@DirectUI@@UAEXPAUInputEvent@2@@Z
?OnGroupChanged@Element@DirectUI@@UAEXH_N@Z
?OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanged@ItemList@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z
?GetContentStringAsDisplayed@Element@DirectUI@@UAEPBGPAPAVValue@2@@Z
?IsContentProtected@Element@DirectUI@@UAE_NXZ
RegisterPVLBehaviorFactory
?CreateElement@DUIXmlParser@DirectUI@@QAEJPBGPAVElement@2@1PAKPAPAV32@@Z
?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z
StrToID
?SetLayoutPos@Element@DirectUI@@QAEJH@Z
?EndDefer@Element@DirectUI@@QAEXK@Z
?Destroy@Element@DirectUI@@QAEJ_N@Z
?GetClassInfoPtr@ItemList@DirectUI@@SGPAUIClassInfo@2@XZ
??0TouchButton@DirectUI@@QAE@XZ
??1TouchButton@DirectUI@@UAE@XZ
?Release@Value@DirectUI@@QAEXXZ
?GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z
?GetChildren@Element@DirectUI@@QAEPAV?$DynamicArray@PAVElement@DirectUI@@$0A@@2@PAPAVValue@2@@Z
?GetValue@Element@DirectUI@@QAEPAVValue@2@P6GPBUPropertyInfo@2@XZHPAUUpdateCache@2@@Z
?Add@Element@DirectUI@@QAEJPAV12@@Z
?CreateGraphic@Value@DirectUI@@SGPAV12@PAUHICON__@@_N11@Z
?BackgroundProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?SetValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZHPAVValue@2@@Z
?ContentProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?Initialize@TouchButton@DirectUI@@QAEJIPAVElement@2@PAK@Z
?SetAccName@Element@DirectUI@@QAEJPBG@Z
?PressedProp@TouchButton@DirectUI@@SGPBUPropertyInfo@2@XZ
DuiCreateObject
?SizeInLayoutProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?OnPropertyChanged@TouchButton@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?Register@ItemList@DirectUI@@SGJXZ
??0CritSecLock@DirectUI@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z
?GetFactoryLock@Element@DirectUI@@SGPAU_RTL_CRITICAL_SECTION@@XZ
??1CritSecLock@DirectUI@@QAE@XZ
?ClassExist@ClassInfoBase@DirectUI@@SG_NPAPAUIClassInfo@2@PBQBUPropertyInfo@2@IPAU32@PAUHINSTANCE__@@PBG_N@Z
?Register@ClassInfoBase@DirectUI@@QAEJXZ
?Register@TouchButton@DirectUI@@SGJXZ
?Initialize@ClassInfoBase@DirectUI@@QAEJPAUHINSTANCE__@@PBG_NPBQBUPropertyInfo@2@I@Z
?Initialize@Selector@DirectUI@@QAEJPAVElement@2@PAK@Z
?GetClassInfoPtr@TouchButton@DirectUI@@SGPAUIClassInfo@2@XZ
??0ClassInfoBase@DirectUI@@QAE@XZ
??1ClassInfoBase@DirectUI@@UAE@XZ
??0ItemList@DirectUI@@QAE@XZ
??1ItemList@DirectUI@@UAE@XZ
?IsRTLReading@Element@DirectUI@@UAE_NXZ
CreateAction
DeleteHandle
D3DKMTNetDispQueryMiracastDisplayDeviceSupport
D3DKMTNetDispStopMiracastDisplayDevice
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ