Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
DisplaySwitch.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
DisplaySwitch.exe
Resource
win10v2004-20230703-en
Target
DisplaySwitch.exe
Size
1.8MB
MD5
f6cb0a96cc904a08410ab001605495d8
SHA1
68f91bc280b26b02e2b21dfd7d23441da87bd1b0
SHA256
5fc420b29cf147097f2a0abe8d41d023550ff24d971b167e32af1b873b59e351
SHA512
517f168190159d19e22f9be64cfe11557a4e682fd9b575f51a4cfa3b35ffdd3128e333a6367c97fe44569978d388ca73a126853bf050c95ec8c1c7baa95cc8b1
SSDEEP
3072:NazWmm3wgELdE5GLHAwAqGYBOFOKjSscWvkSSQYQOCTWE+ImEo0EV:NTm8ELdE5whAqGkkjSs/HST++OC
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
EventRegister
EventWriteTransfer
EventUnregister
RegGetValueW
AcquireSRWLockShared
ReleaseSRWLockShared
EncodePointer
LocalFree
RaiseException
AcquireSRWLockExclusive
CompareStringOrdinal
GetCurrentThreadId
DecodePointer
ReleaseSRWLockExclusive
LoadLibraryW
GetCommandLineW
GetDisplayConfigBufferSizes
QueryDisplayConfig
SetDisplayConfig
DestroyWindow
SetTimer
KillTimer
SetForegroundWindow
SendInput
GetWindowLongPtrW
DefWindowProcW
PostThreadMessageW
GetThreadDesktop
GetUserObjectInformationW
GetMessageW
TranslateMessage
DispatchMessageW
DestroyIcon
SystemParametersInfoW
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
GetAsyncKeyState
GetKeyState
free
memcpy
memset
pow
__CxxFrameHandler3
_onexit
__dllonexit
_unlock
_lock
_commode
_fmode
_wcmdln
__C_specific_handler
_initterm
__setusermatherr
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
_XcptFilter
_purecall
?terminate@@YAXXZ
_callnewh
malloc
_vsnwprintf
memcpy_s
_set_errno
_get_errno
wcscmp
PolicyManager_GetPolicyInt
ord172
ord278
PathRemoveFileSpecW
SHGetThreadRef
PathAppendW
GetCurrentThemeName
ord120
ord121
CoInitializeEx
CoCreateInstance
CoUninitialize
CoReleaseServerProcess
CoResumeClassObjects
CoRegisterClassObject
CoAddRefServerProcess
CoRevokeClassObject
RoOriginateErrorW
RoOriginateError
SetRestrictedErrorInfo
RoActivateInstance
RoGetActivationFactory
RoRevokeActivationFactories
RoRegisterActivationFactories
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsIsStringEmpty
SleepConditionVariableSRW
WakeAllConditionVariable
Sleep
InitOnceBeginInitialize
InitOnceComplete
TlsSetValue
TerminateProcess
GetCurrentProcess
TlsGetValue
TlsAlloc
TlsFree
GetStartupInfoW
GetCurrentProcessId
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
SetUnhandledExceptionFilter
GetLastError
UnhandledExceptionFilter
SetLastError
GetModuleFileNameA
FreeLibrary
GetModuleHandleW
LoadStringW
GetModuleHandleExW
GetModuleFileNameW
FindResourceExW
LoadResource
LoadLibraryExW
LockResource
GetProcAddress
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetProcessHeap
HeapAlloc
HeapFree
GetProcessMitigationPolicy
LocalAlloc
LocalReAlloc
CloseHandle
EventSetInformation
EventActivityIdControl
DebugBreak
IsDebuggerPresent
OutputDebugStringW
FormatMessageW
PowerDeterminePlatformRoleEx
OpenSemaphoreW
WaitForSingleObjectEx
ReleaseMutex
WaitForSingleObject
ReleaseSemaphore
CreateSemaphoreExW
CreateMutexExW
RoGetMatchingRestrictedErrorInfo
ExpandEnvironmentStringsW
ApiSetQueryApiSetPresence
SHTaskPoolQueueTask
ord140
ord381
DwmSetWindowAttribute
ImmDisableIME
RtlQueryWnfStateData
RtlGetDeviceFamilyInfoEnum
WinStationIsSessionRemoteable
?HeightProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?WidthProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
ARGBColorFromEnumI
?SetXMLFromResourceWithTheme@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@00@Z
?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJPEBGPEAUHINSTANCE__@@1@Z
?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ
?SetRootWindowForTheming@DUIXmlParser@DirectUI@@QEAAXPEAUHWND__@@@Z
?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z
?GetSheet@DUIXmlParser@DirectUI@@QEAAJPEBGPEAPEAVValue@2@@Z
UnInitThread
InitThread
UnInitProcessPriv
InitProcessPriv
?CreateString@Value@DirectUI@@SAPEAV12@PEBGPEAUHINSTANCE__@@@Z
?StartDefer@Element@DirectUI@@QEAAXPEAK@Z
?GetClassInfoPtr@HWNDElement@DirectUI@@SAPEAUIClassInfo@2@XZ
?_PostEvent@Element@DirectUI@@AEAAXPEAUEvent@2@H@Z
?FireEvent@Element@DirectUI@@QEAAXPEAUEvent@2@_N1@Z
?KeyboardNavigate@Element@DirectUI@@SA?AVUID@@XZ
?GetSelection@Selector@DirectUI@@QEAAPEAVElement@2@XZ
?RemoveLocalValue@Element@DirectUI@@QEAAJP6APEBUPropertyInfo@2@XZ@Z
?ClassProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?SetClass@Element@DirectUI@@QEAAJPEBG@Z
?ShowUIState@HWNDElement@DirectUI@@QEAAX_N0@Z
?GetRoot@Element@DirectUI@@QEAAPEAV12@XZ
?Click@TouchButton@DirectUI@@SA?AVUID@@XZ
?AddListener@Element@DirectUI@@QEAAJPEAUIElementListener@2@@Z
?GetChildren@ClassInfoBase@DirectUI@@UEBAHXZ
?RemoveChild@ClassInfoBase@DirectUI@@UEAAXXZ
?AddChild@ClassInfoBase@DirectUI@@UEAAXXZ
?IsGlobal@ClassInfoBase@DirectUI@@UEBA_NXZ
?GetModule@ClassInfoBase@DirectUI@@UEBAPEAUHINSTANCE__@@XZ
?IsSubclassOf@ClassInfoBase@DirectUI@@UEBA_NPEAUIClassInfo@2@@Z
?IsValidProperty@ClassInfoBase@DirectUI@@UEBA_NPEBUPropertyInfo@2@@Z
?GetName@ClassInfoBase@DirectUI@@UEBAPEBGXZ
?GetGlobalIndex@ClassInfoBase@DirectUI@@UEBAIXZ
?GetPICount@ClassInfoBase@DirectUI@@UEBAIXZ
?GetByClassIndex@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z
?EnumPropertyInfo@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z
?Release@ClassInfoBase@DirectUI@@UEAAHXZ
?AddRef@ClassInfoBase@DirectUI@@UEAAXXZ
?FireRightClickEvent@TouchButton@DirectUI@@UEAAXIPEAUtagPOINT@@@Z
?FireClickEvent@TouchButton@DirectUI@@UEAAXIIW4ClickDevice@12@PEAUtagPOINT@@@Z
?GetForegroundColorRef@TouchButton@DirectUI@@UEAAJPEAK@Z
?DefaultAction@TouchButton@DirectUI@@UEAAJXZ
?OnUnHosted@TouchButton@DirectUI@@UEAAXPEAVElement@2@@Z
?OnHosted@TouchButton@DirectUI@@UEAAXPEAVElement@2@@Z
?GetImmersiveFocusRectOffsets@TouchButton@DirectUI@@UEAAXPEAUtagRECT@@@Z
?GetContentSize@RichText@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?Paint@RichText@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z
?OnEvent@TouchButton@DirectUI@@UEAAXPEAUEvent@2@@Z
?OnKeyFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
?OnInput@TouchButton@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?SetSelection@Selector@DirectUI@@UEAAJPEAVElement@2@@Z
?GetUiaFocusDelegate@Element@DirectUI@@UEAAPEAV12@XZ
?HandleUiaEventListener@Element@DirectUI@@UEAAXPEAUEvent@2@@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@@Z
?HandleUiaPropertyListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?HandleUiaDestroyListener@Element@DirectUI@@UEAAXXZ
?GetElementProviderImpl@Element@DirectUI@@UEAAJPEAVInvokeHelper@2@PEAPEAVElementProvider@2@@Z
?GetUIAElementProvider@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z
?DefaultAction@Element@DirectUI@@UEAAJXZ
?GetAccessibleImpl@Element@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z
?GetKeyFocused@Element@DirectUI@@UEAA_NXZ
?RemoveTooltip@Element@DirectUI@@MEAAXPEAV12@@Z
?ActivateTooltip@Element@DirectUI@@MEAAXPEAV12@K@Z
?UpdateTooltip@Element@DirectUI@@MEAAXPEAV12@@Z
?OnUnHosted@Element@DirectUI@@MEAAXPEAV12@@Z
?OnHosted@Element@DirectUI@@MEAAXPEAV12@@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MEAAXHH@Z
?GetImmersiveFocusRectOffsets@Element@DirectUI@@UEAAXPEAUtagRECT@@@Z
?QueryInterface@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z
?MessageCallback@Element@DirectUI@@UEAAIPEAUtagGMSG@@@Z
?RemoveBehavior@Element@DirectUI@@UEAAJPEAUIDuiBehavior@@@Z
?AddBehavior@Element@DirectUI@@UEAAJPEAUIDuiBehavior@@@Z
?SetKeyFocus@Element@DirectUI@@UEAAXXZ
?EnsureVisible@Element@DirectUI@@UEAA_NHHHH@Z
?Remove@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
?Insert@Element@DirectUI@@UEAAJPEAPEAV12@II@Z
?Add@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
?GetContentSize@Element@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?Paint@Element@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z
?OnEvent@Selector@DirectUI@@UEAAXPEAUEvent@2@@Z
?OnDestroy@Element@DirectUI@@UEAAXXZ
?OnMouseFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
?OnKeyFocusMoved@Selector@DirectUI@@UEAAXPEAVElement@2@0@Z
?OnInput@Selector@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?OnGroupChanged@Element@DirectUI@@UEAAXH_N@Z
?OnPropertyChanged@Element@DirectUI@@UEAAXPEAUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanged@ItemList@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEAUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?GetContentStringAsDisplayed@Element@DirectUI@@UEAAPEBGPEAPEAVValue@2@@Z
?IsContentProtected@Element@DirectUI@@UEAA_NXZ
?IsRTLReading@Element@DirectUI@@UEAA_NXZ
??1ItemList@DirectUI@@UEAA@XZ
??0ItemList@DirectUI@@QEAA@XZ
??1ClassInfoBase@DirectUI@@UEAA@XZ
??0ClassInfoBase@DirectUI@@QEAA@XZ
?GetClassInfoPtr@TouchButton@DirectUI@@SAPEAUIClassInfo@2@XZ
?Initialize@Selector@DirectUI@@QEAAJPEAVElement@2@PEAK@Z
?Initialize@ClassInfoBase@DirectUI@@QEAAJPEAUHINSTANCE__@@PEBG_NPEBQEBUPropertyInfo@2@I@Z
?Register@ItemList@DirectUI@@SAJXZ
?Register@ClassInfoBase@DirectUI@@QEAAJXZ
?ClassExist@ClassInfoBase@DirectUI@@SA_NPEAPEAUIClassInfo@2@PEBQEBUPropertyInfo@2@IPEAU32@PEAUHINSTANCE__@@PEBG_N@Z
??1CritSecLock@DirectUI@@QEAA@XZ
?GetFactoryLock@Element@DirectUI@@SAPEAU_RTL_CRITICAL_SECTION@@XZ
??0CritSecLock@DirectUI@@QEAA@PEAU_RTL_CRITICAL_SECTION@@@Z
?Register@TouchButton@DirectUI@@SAJXZ
?OnPropertyChanged@TouchButton@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?SizeInLayoutProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
DuiCreateObject
?AssertPIZeroRef@ClassInfoBase@DirectUI@@UEBAXXZ
?PressedProp@TouchButton@DirectUI@@SAPEBUPropertyInfo@2@XZ
?SetAccName@Element@DirectUI@@QEAAJPEBG@Z
?Initialize@TouchButton@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z
?ContentProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?SetValue@Element@DirectUI@@QEAAJP6APEBUPropertyInfo@2@XZHPEAVValue@2@@Z
?BackgroundProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?CreateGraphic@Value@DirectUI@@SAPEAV12@PEAUHICON__@@_N11@Z
?Add@Element@DirectUI@@QEAAJPEAV12@@Z
?GetValue@Element@DirectUI@@QEAAPEAVValue@2@P6APEBUPropertyInfo@2@XZHPEAUUpdateCache@2@@Z
RegisterPVLBehaviorFactory
?CreateElement@DUIXmlParser@DirectUI@@QEAAJPEBGPEAVElement@2@1PEAKPEAPEAV32@@Z
?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z
StrToID
?SetLayoutPos@Element@DirectUI@@QEAAJH@Z
?EndDefer@Element@DirectUI@@QEAAXK@Z
?Destroy@Element@DirectUI@@QEAAJ_N@Z
?GetClassInfoPtr@ItemList@DirectUI@@SAPEAUIClassInfo@2@XZ
??0TouchButton@DirectUI@@QEAA@XZ
??1TouchButton@DirectUI@@UEAA@XZ
?Release@Value@DirectUI@@QEAAXXZ
?GetAdjacent@Element@DirectUI@@UEAAPEAV12@PEAV12@HPEBUNavReference@2@K@Z
?GetChildren@Element@DirectUI@@QEAAPEAV?$DynamicArray@PEAVElement@DirectUI@@$0A@@2@PEAPEAVValue@2@@Z
DeleteHandle
CreateAction
D3DKMTNetDispStopMiracastDisplayDevice
D3DKMTNetDispQueryMiracastDisplayDeviceSupport
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ