Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
trigger.exe
Resource
win10v2004-20230703-en
Target
trigger.exe
Size
4.7MB
MD5
926ef38d94a9c43a6c281623312a3213
SHA1
85ac0eca490767ab828a235cd492e27a634534e7
SHA256
bb685679d071bf86c7c589a89eb6d1ff2a22efd5a6aa9e1211b7d71e1221d261
SHA512
4cd5f007e7abf080dc87e434b5965a6c66afb3cfed0556686487a2f3d29094b7f27e6330194d38170dbb37503feebdb657c86b5d1afdcc14bbe5c0b3996c8850
SSDEEP
49152:QlxZNhG7w8WL0LcTnAaDjbe01pxcFn0aVNKZbAaIAS4ev3kcCEbUsmCMBuuA8Iy6:aT/oZJXY6Gpr+0Aa0J
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
_Cnd_wait
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z
?tolower@?$ctype@G@std@@QEBAGG@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
_Wcscoll
_Wcsxfrm
?id@?$collate@G@std@@2V0locale@2@A
??Bid@locale@std@@QEAA_KXZ
?id@?$ctype@G@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
??0_Lockit@std@@QEAA@H@Z
??0_Locinfo@std@@QEAA@PEBD@Z
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??1_Lockit@std@@QEAA@XZ
??1_Locinfo@std@@QEAA@XZ
?is@?$ctype@G@std@@QEBA_NFG@Z
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Incref@facet@locale@std@@UEAAXXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?uncaught_exception@std@@YA_NXZ
?good@ios_base@std@@QEBA_NXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?width@ios_base@std@@QEAA_J_J@Z
_Thrd_yield
?_Xbad_function_call@std@@YAXXZ
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
_Thrd_detach
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_join
_Mtx_unlock
?_Xlength_error@std@@YAXPEBD@Z
_Thrd_id
_Mtx_lock
_Cnd_do_broadcast_at_thread_exit
_c_exit
_initterm_e
_initterm
_register_thread_local_exe_atexit_callback
_set_error_mode
memset
strncmp
wcscspn
wcsncmp
wcscmp
_time64
_o_exit
_o_floor
_o_floorf
_o_fmod
_o_free
_o_iswspace
_o_lroundf
_o_malloc
_o_memcpy_s
_o_pow
_o_realloc
_o_sqrt
_o_terminate
_o_wcscat_s
_o_wcscpy_s
_o_wcsncpy_s
_o_wcstol
__C_specific_handler
__current_exception
__current_exception_context
__CxxFrameHandler3
memmove
_o_ceilf
_o_ceil
_o_abort
_o__set_new_mode
_o__set_fmode
_o__set_errno
_o__set_app_type
_o__seh_filter_exe
_o__localtime64
_o__register_onexit_function
_o__recalloc
_o__wcsnicmp
_o__itow_s
_o__purecall
_o__itoa_s
_o__wcsicmp
_o__mktime64
_o__wtoi
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
_o__initialize_wide_environment
_o__initialize_onexit_table
_o__get_wide_winmain_command_line
_o__get_errno
_o__exit
_o__errno
_o__difftime64
_o__crt_atexit
_o__configure_wide_argv
_o__configthreadlocale
_o__cexit
_o__beginthreadex
_o___stdio_common_vswprintf
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___std_exception_destroy
_o___std_exception_copy
_o___p__commode
wcschr
wcsrchr
wcsstr
__std_terminate
__CxxFrameHandler4
_CxxThrowException
__C_specific_handler_noexcept
memcmp
memcpy
PicFreeFileInfo
PicRetrieveFileInfo
ord9
AssignProcessToJobObject
SetInformationJobObject
CreateJobObjectW
QueryInformationJobObject
RegisterApplicationRestart
UrlUnescapeW
PathIsURLW
HashData
WerUnregisterCustomMetadata
WerRegisterCustomMetadata
CheckElevation
CheckElevationEnabled
SHRegGetBoolUSValueW
SHRegGetUSValueW
CoRegisterMessageFilter
CoRevokeInitializeSpy
CoRegisterInitializeSpy
GlobalGetAtomNameW
ActivateActCtx
ReleaseActCtx
CreateActCtxW
DeactivateActCtx
ZwQuerySystemInformation
RtlInitUnicodeString
ZwQueryValueKey
ZwOpenKey
ZwClose
RtlReAllocateHeap
RtlAppendUnicodeToString
RtlAnsiStringToUnicodeString
RtlImageDirectoryEntryToData
ZwUnmapViewOfSection
RtlNtPathNameToDosPathName
ZwCreateFile
RtlUpcaseUnicodeChar
ZwCreateSection
RtlxAnsiStringToUnicodeSize
ZwQueryInformationProcess
RtlpEnsureBufferSize
RtlGetNativeSystemInformation
RtlVerifyVersionInfo
ZwQueryDirectoryFile
ZwSetInformationProcess
RtlInitUnicodeStringEx
ZwMapViewOfSection
RtlFormatCurrentUserKeyPath
ZwEnumerateKey
ZwOpenFile
ZwQueryInformationFile
LdrResSearchResource
RtlReleaseSRWLockShared
RtlAcquireSRWLockShared
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockExclusive
RtlGetVersion
RtlInitString
NtQueryInformationProcess
NtSetInformationProcess
NtQueryWnfStateData
RtlCaptureContext
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlSubscribeWnfStateChangeNotification
RtlQueryWnfStateData
RtlFlushHeaps
NtSetSystemInformation
RtlPublishWnfStateData
RtlGetDeviceFamilyInfoEnum
RtlNtStatusToDosError
RtlLookupFunctionEntry
RtlVirtualUnwind
strchr
RtlDosPathNameToNtPathName_U_WithStatus
RtlFreeUnicodeString
RtlAllocateHeap
RtlFreeHeap
RtlCompareUnicodeString
NtOpenProcessToken
NtQueryInformationToken
NtClose
RtlAppendUnicodeStringToString
NtOpenThreadToken
wcsspn
WinSqmAddToStreamEx
RtlRunOnceExecuteOnce
RtlCopyUnicodeString
RtlUpcaseUnicodeString
RtlNtStatusToDosErrorNoTeb
NtSetThreadExecutionState
VerSetConditionMask
RtlQueryResourcePolicy
WinSqmSetDWORD
WinSqmIsOptedIn
FreeLibrary
FindStringOrdinal
FindResourceExW
GetModuleHandleW
LoadLibraryExW
GetProcAddress
SizeofResource
LoadResource
LoadStringW
LockResource
GetModuleHandleA
GetModuleHandleExW
GetModuleFileNameA
GetModuleFileNameW
InitOnceBeginInitialize
Sleep
InitOnceExecuteOnce
InitOnceComplete
EnterCriticalSection
CreateSemaphoreExW
SetEvent
CreateEventW
WaitForSingleObject
AcquireSRWLockExclusive
WaitForSingleObjectEx
OpenSemaphoreW
OpenMutexW
InitializeCriticalSectionEx
CreateEventExW
InitializeSRWLock
ReleaseSRWLockShared
WaitForMultipleObjectsEx
OpenEventW
InitializeCriticalSection
ReleaseMutex
ReleaseSRWLockExclusive
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
CreateMutexW
ReleaseSemaphore
CreateMutexExW
ResetEvent
SleepEx
TryEnterCriticalSection
AcquireSRWLockShared
DeleteCriticalSection
HeapFree
GetProcessHeap
HeapAlloc
SetErrorMode
GetLastError
UnhandledExceptionFilter
RaiseException
SetUnhandledExceptionFilter
SetLastError
DeleteFileW
WriteFile
CompareFileTime
FileTimeToLocalFileTime
GetLongPathNameW
GetFileAttributesW
FindClose
CreateFileW
FindFirstFileW
FindNextFileW
EventWriteTransfer
EventRegister
EventUnregister
EventActivityIdControl
EventWrite
EventSetInformation
EventEnabled
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegEnumValueW
RegGetValueW
RegDeleteKeyExW
RegQueryValueExW
RegCreateKeyExW
RegQueryInfoKeyW
RegCloseKey
RegOpenCurrentUser
RegSetValueExW
WaitForThreadpoolTimerCallbacks
SubmitThreadpoolWork
CreateThreadpoolTimer
CreateThreadpoolWork
CloseThreadpoolTimer
SetThreadpoolTimer
CloseThreadpoolWait
WaitForThreadpoolWaitCallbacks
SetThreadpoolWait
CreateThreadpoolWait
TrySubmitThreadpoolCallback
GetStartupInfoW
SetProcessShutdownParameters
CreateThread
QueueUserAPC
SetThreadPriority
SetPriorityClass
TlsSetValue
ResumeThread
OpenThread
CreateProcessW
TlsAlloc
ProcessIdToSessionId
GetThreadPriority
OpenProcessToken
GetCurrentThread
OpenThreadToken
GetCurrentProcess
TlsGetValue
TlsFree
ExitProcess
TerminateProcess
GetCurrentProcessId
SetThreadPriorityBoost
GetCurrentThreadId
GetExitCodeProcess
GetPriorityClass
GetProcessId
GetLocaleInfoW
FormatMessageW
GetCalendarInfoW
GetThreadUILanguage
GetLocaleInfoEx
OutputDebugStringW
DebugBreak
IsDebuggerPresent
DuplicateHandle
CloseHandle
SysAllocString
SysStringLen
SafeArrayDestroy
VariantInit
VariantClear
VarUI4FromStr
SafeArrayUnaccessData
SafeArrayCreate
SysFreeString
SafeArrayAccessData
SysAllocStringByteLen
SHTaskPoolQueueTask
SHTaskPoolGetUniqueContext
SetCurrentProcessExplicitAppUserModelID
IsOS
CreateStreamOnHGlobal
CoGetInterfaceAndReleaseStream
PropVariantClear
StringFromGUID2
StringFromIID
CoCreateGuid
CoSetProxyBlanket
CoGetObjectContext
CoFreeUnusedLibraries
CoReleaseMarshalData
CoCreateFreeThreadedMarshaler
CLSIDFromString
CoGetApartmentType
CoWaitForMultipleHandles
IIDFromString
CoGetCallContext
CoInitializeSecurity
CoEnableCallCancellation
CoMarshalInterThreadInterfaceInStream
CoDisableCallCancellation
CoCancelCall
CoTaskMemFree
StringFromCLSID
CoGetStdMarshalEx
CoCreateInstance
CoRegisterClassObject
CoRevokeClassObject
CoTaskMemRealloc
CoTaskMemAlloc
CoGetMalloc
CoInitializeEx
CoUninitialize
StrCmpICW
StrToIntW
StrChrW
StrCmpNIW
QISearch
StrCmpIW
StrCmpW
StrCmpNICW
StrCmpICA
StrChrIW
CommandLineToArgvW
SHStrDupW
IUnknown_Set
IUnknown_QueryService
IUnknown_SetSite
IUnknown_GetSite
LocalFree
LocalReAlloc
LocalAlloc
GlobalAlloc
GlobalFree
GetProcessMitigationPolicy
IsProcessorFeaturePresent
OpenProcess
GetDateFormatW
GetVersionExW
GetTickCount
GetSystemTime
GetWindowsDirectoryW
GetTickCount64
GetLocalTime
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetTimeFormatEx
GetDateFormatEx
SearchPathW
GetCurrentDirectoryW
ExpandEnvironmentStringsW
GetCommandLineW
PathFindFileNameW
PathCommonPrefixW
PathFindExtensionW
PathRemoveBlanksW
PathGetDriveNumberW
PathFileExistsW
PathIsFileSpecW
PathCombineW
PathQuoteSpacesW
SHExpandEnvironmentStringsW
PathGetArgsW
PathParseIconLocationW
PathRemoveFileSpecW
WindowsCreateString
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsSubstringWithSpecifiedLength
WindowsCompareStringOrdinal
WindowsCreateStringReference
WindowsDuplicateString
RoUninitialize
RoActivateInstance
RoGetActivationFactory
RoInitialize
SHGetValueW
SHDeleteValueW
SHQueryInfoKeyW
SHSetValueW
SHEnumKeyExW
SHDeleteKeyW
SHRegGetValueW
MultiByteToWideChar
CompareStringOrdinal
WideCharToMultiByte
CompareStringW
SHSetThreadRef
SHCreateThreadRef
SHGetThreadRef
SHCreateThread
SetProcessReference
FindResourceW
LoadLibraryW
CheckTokenMembership
GetAclInformation
SetKernelObjectSecurity
GetAce
DeleteAce
InitializeAcl
AddAce
DuplicateToken
GetLengthSid
GetTokenInformation
CreateWellKnownSid
MakeAbsoluteSD
EqualSid
CopySid
IsValidSid
K32GetModuleFileNameExW
QueryFullProcessImageNameW
VerQueryValueW
GetFileVersionInfoSizeExW
GetFileVersionInfoExW
TraceMessage
GetTraceLoggerHandle
RegisterTraceGuidsW
GetTraceEnableFlags
GetTraceEnableLevel
UnregisterTraceGuids
GetUserDefaultUILanguage
SHLoadIndirectString
RegDeleteKeyValueW
RegSetKeyValueW
RoGetAgileReference
RoOriginateError
RoTransformError
SetRestrictedErrorInfo
RoGetMatchingRestrictedErrorInfo
PathCchRemoveFileSpec
PathCchAppend
PathAllocCombine
PathCchAddExtension
PathCchCombine
SHAnsiToUnicode
GlobalUnlock
GlobalLock
lstrlenW
lstrcmpiW
CreateFileMappingW
VirtualFree
VirtualProtect
VirtualAlloc
OpenFileMappingW
UnmapViewOfFile
MapViewOfFile
SetThreadDescription
SetProcessInformation
MulDiv
SHCreateStreamOnFileEx
IStream_Write
IStream_Read
SHCreateMemStream
IStream_Reset
SHCreateStreamOnFileW
SHOpenRegStream2W
GetTempPathW
ord170
UnregisterWaitEx
DeleteTimerQueueTimer
CreateTimerQueueTimer
ChangeTimerQueueTimer
GetProductInfo
GetUserDefaultGeoName
DeriveAppContainerSidFromAppContainerName
GetProfileType
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GetDynamicTimeZoneInformation
SystemTimeToFileTime
GetComputerNameW
GetSystemPowerStatus
RegisterWaitForSingleObject
QueryPerformanceCounter
InterlockedPushEntrySList
InitializeSListHead
GetPersistedRegistryLocationW
LookupAccountNameW
CharNextW
CharLowerBuffW
NotifyServiceStatusChangeW
QueryServiceConfigW
GetQueuedCompletionStatus
CreateIoCompletionPort
SHRegGetValueFromHKCUHKLM
ord244
GetDpiForMonitor
RaiseFailFastException
CharNextA
GetPwrCapabilities
PowerDeterminePlatformRoleEx
CallNtPowerInformation
ApiSetQueryApiSetPresence
AssocQueryStringW
ord509
ord479
PathRemoveArgsW
SHCreateWorkerWindowW
ord478
ord279
ShellMessageBoxW
ord481
ord635
ord165
SHPinDllOfCLSID
SHIsChildOrSelf
ord544
ord292
StrRetToBufW
IUnknown_GetWindow
StrRetToStrW
ord197
GetMonitorInfoW
GetSystemMetrics
SystemParametersInfoW
EnumDisplayMonitors
QueryDisplayConfig
GetDisplayConfigBufferSizes
EnumDisplayDevicesW
SetRectEmpty
InflateRect
IsRectEmpty
SetRect
PtInRect
EqualRect
CopyRect
SubtractRect
OffsetRect
IntersectRect
UnionRect
UnhookWinEvent
NotifyWinEvent
SetWinEventHook
SHBindToFolderIDListParent
ILClone
SHParseDisplayName
ILFree
SHCreateItemFromIDList
SHGetIDListFromObject
SHCreateItemFromParsingName
ILIsEqual
SHGetNameFromIDList
ILRemoveLastID
ILGetSize
ILIsParent
ILCloneFirst
SHBindToObject
ILCombine
ILFindLastID
SHBindToParent
DXGIDeclareAdapterRemovalSupport
GetPointerDevices
EnableMouseInPointer
GetPointerType
GetPointerInfo
GetCurrentInputMessageSource
GetThreadFlags
SHGetKnownFolderIDList
SetThreadFlags
SHGetFolderPathEx
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
GetPackagesByPackageFamily
GetPackageFullName
SetWindowFeedbackSetting
RegisterClipboardFormatW
DragQueryFileW
GetWindowBand
CreateWindowInBand
UnregisterPowerSettingNotification
RegisterPowerSettingNotification
SHChangeNotification_Unlock
SHChangeNotification_Lock
SHChangeNotifyDeregister
SHChangeNotifyRegisterThread
SHChangeNotifyRegister
SHHandleUpdateImage
InitVariantFromResource
PropVariantToBoolean
PSCreateMemoryPropertyStore
PSGetPropertyFromPropertyStorage
InitVariantFromGUIDAsString
PSPropertyBag_WriteStr
PropVariantToUInt32
PSPropertyBag_WriteDWORD
PropVariantToStringAlloc
SHChangeNotify
SHCreateDataObject
FindPackagesByPackageFamily
ParseApplicationUserModelId
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification
GetStockObject
GetDeviceCaps
CreateRectRgn
SetRectRgn
OffsetRgn
CombineRgn
DeleteObject
GetObjectW
DeleteDC
CreateCompatibleDC
SelectObject
GetClipBox
CreateFontIndirectW
SetTextColor
SetTextAlign
GetTextMetricsW
ExtTextOutW
GetTextExtentPoint32W
CreateRectRgnIndirect
GetGlyphOutlineW
GetOutlineTextMetricsW
GetClipRgn
SelectClipRgn
GetCurrentObject
StretchBlt
ExcludeClipRect
SetStretchBltMode
Rectangle
IsBadWritePtr
GetModuleHandleExA
InternetCrackUrlW
ord162
ord191
ord141
ord123
ord190
ord121
ord174
ord187
ord186
ord109
ord126
ord213
ord184
ord142
ord183
ord210
ord192
ord1
SHUnicodeToAnsi
ord200
ord792
ord727
ord162
SHAppBarMessage
ord894
ord906
ord895
ShellExecuteW
SHGetLocalizedName
SHGetPropertyStoreForWindow
ord764
ord866
SHEvaluateSystemCommandTemplate
ord181
ord244
Shell_GetCachedImageIndexW
ord132
ord137
Shell_NotifyIconW
Shell_NotifyIconGetRect
ord6
SHGetStockIconInfo
DuplicateIcon
ord91
ord254
ord54
ord61
ord896
SHAddToRecentDocs
ord60
SHUpdateRecycleBinIcon
ord711
SHFileOperationW
SHGetPathFromIDListW
ord753
ord733
ord67
SHCreateItemInKnownFolder
ord206
ord201
ord188
ord899
ShellExecuteExW
ord245
ord200
ord89
ord190
ord85
ord100
ord790
ord43
ord907
ord743
ord172
ord680
ord723
ord885
ord95
ord850
ord134
ord22
ExtractIconExW
SHEnableServiceObject
ord164
PathIsDirectoryW
ord413
ord548
ord163
ord467
AssocQueryKeyW
ChrCmpIW
PathIsRelativeW
AssocCreate
OpenThemeDataForDpi
GetThemeMargins
OpenThemeData
GetThemeBool
ord138
BufferedPaintSetAlpha
ord126
GetThemePartSize
GetThemeBackgroundExtent
GetBufferedPaintBits
GetThemeInt
GetThemeColor
GetThemeMetric
SetWindowTheme
GetWindowTheme
BufferedPaintUnInit
EndBufferedPaint
BeginBufferedPaint
DrawThemeParentBackground
IsThemeActive
CloseThemeData
BufferedPaintInit
ord86
GetThemeFont
IsAppThemed
IsCompositionActive
DrawThemeTextEx
DrawThemeBackground
ord138
ord141
DwmUpdateThumbnailProperties
DwmUnregisterThumbnail
ord140
DwmGetWindowAttribute
DwmSetWindowAttribute
ord159
DwmIsCompositionEnabled
DwmEnableBlurBehindWindow
DwmRegisterThumbnail
DwmQueryThumbnailSourceSize
ord124
ord139
ord114
ord113
SetWindowCompositionAttribute
SetGestureConfig
LoadImageW
EndDialog
SendDlgItemMessageW
GetDpiForWindow
UnregisterHotKey
GetLastActivePopup
AdjustWindowRect
GetCursorFrameInfo
GetLastInputInfo
CopyIcon
CalculatePopupWindowPosition
GetDoubleClickTime
ReleaseCapture
GetCapture
SetCapture
PostThreadMessageW
UnregisterClassA
TrackMouseEvent
ord2005
SetCursor
SetMenuItemInfoW
DefWindowProcA
GetSystemMetricsForDpi
DrawIconEx
IsWindowUnicode
LoadAcceleratorsW
DestroyIcon
CopyImage
GetSysColor
ExitWindowsEx
GetKeyState
ChangeWindowMessageFilterEx
LoadIconW
HungWindowFromGhostWindow
CascadeWindows
AdjustWindowRectEx
CheckMenuItem
EnableMenuItem
RemoveMenu
SetMenuDefaultItem
TranslateAcceleratorW
TileWindows
TrackPopupMenuEx
DeleteMenu
FillRect
DrawTextW
LoadMenuW
GetSubMenu
GetDC
CreateIconIndirect
GetMenuItemCount
GetMenuItemInfoW
MonitorFromPoint
ReplyMessage
GetAsyncKeyState
ModifyMenuW
GetSystemMenu
GetSysColorBrush
SwitchToThisWindow
ReleaseDC
SetLayeredWindowAttributes
GhostWindowFromHungWindow
GetIconInfoExW
GetIconInfo
GetClassWord
GetClassLongW
GetPhysicalCursorPos
GetCursorInfo
ShowWindowAsync
InsertMenuW
BringWindowToTop
ord2573
EndTask
ord2611
IsTopLevelWindow
GetMenuState
SetScrollInfo
GetScrollInfo
SetScrollPos
GetMenuStringW
InternalGetWindowText
GetLayeredWindowAttributes
DrawTextExW
MonitorFromWindow
IsProcessDPIAware
IsIconic
SetThreadDpiAwarenessContext
GetWindowCompositionAttribute
GetWindowProcessHandle
GetClassLongPtrW
UpdateLayeredWindow
ord2521
UnregisterClassW
ord2522
GetMenuInfo
SetMenuInfo
GetDpiForSystem
GetWindowDpiAwarenessContext
AreDpiAwarenessContextsEqual
CharLowerW
IsCharAlphaNumericW
CreatePopupMenu
GetMenuDefaultItem
DestroyMenu
LoadCursorW
LockWorkStation
InjectMouseInput
MapVirtualKeyExW
InjectKeyboardInput
GetCaretBlinkTime
ord2574
IsHungAppWindow
GetGuiResources
MonitorFromRect
RegisterHotKey
GetUserNameExW
ResolveDelayLoadedAPI
DelayLoadFailureHook
LCIDToLocaleName
PowerSetRequest
VerifyVersionInfoW
PowerCreateRequest
OOBEComplete
CopyFileW
SetTermsrvAppInstallMode
ord292
StopTraceW
EnableTraceEx2
StartTraceW
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcStringFreeW
RpcBindingFree
NdrClientCall3
RpcBindingSetAuthInfoExW
I_RpcExceptionFilter
GetStagedPackagePathByFullName2
BiPtEnumerateWorkItemsForPackageName
BiPtFreeMemory
BiPtQueryWorkItem
BiPtAssociateApplicationEntryPoint
NetGetAadJoinInformation
NetFreeAadJoinInformation
RoCreatePropertySetSerializer
SetErrorInfo
GetErrorInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ