Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
explorer.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
explorer.exe
Resource
win10v2004-20230703-en
Target
explorer.exe
Size
4.5MB
MD5
6f5d250eaede1d80806ecbc487c7b9b8
SHA1
ae81139ed3184bac4e8e7dc51beff7228264bd37
SHA256
a4cf3a2bd03cf8a28d97c10a8ad2952bfe4c2037c99e1c56a81e3f928a8d349d
SHA512
8d9f60c37ca7834b572fa1606c33713d45cb57605f9fe45fc35a250c13f0e1091aa918c24c19c9cdebd077382a6bcd4034406fe949bbc6f01d0b8e3ef5ecf612
SSDEEP
98304:3vOlNys//OcTpZrp0MywhKkgSft7giztzlO/w8a0cDLb:3vOlNys//bTpZrSMvhKkgSV7giztGwFh
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?_Xout_of_range@std@@YAXPBD@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
_Thrd_detach
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_join
_Thrd_id
_Cnd_do_broadcast_at_thread_exit
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG0@Z
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE_JPBG_J@Z
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ
?tolower@?$ctype@G@std@@QBEPBGPAGPBG@Z
?_Xbad_alloc@std@@YAXXZ
?tolower@?$ctype@G@std@@QBEGG@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
_Wcscoll
_Wcsxfrm
?_Xbad_function_call@std@@YAXXZ
??Bid@locale@std@@QAEIXZ
?id@?$ctype@G@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
??0_Lockit@std@@QAE@H@Z
??0_Locinfo@std@@QAE@PBD@Z
?c_str@?$_Yarn@D@std@@QBEPBDXZ
??1_Lockit@std@@QAE@XZ
??1_Locinfo@std@@QAE@XZ
?is@?$ctype@G@std@@QBE_NFG@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Incref@facet@locale@std@@UAEXXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
?uncaught_exception@std@@YA_NXZ
?good@ios_base@std@@QBE_NXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGXZ
?width@ios_base@std@@QAE_J_J@Z
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Xtime_get_ticks
_Mtx_unlock
_Mtx_lock
?_Xlength_error@std@@YAXPBD@Z
?id@?$collate@G@std@@2V0locale@2@A
_c_exit
_initterm_e
_initterm
_set_error_mode
_register_thread_local_exe_atexit_callback
_time32
strncmp
wcscspn
wcsncmp
memset
_o_exit
_o_floor
_o_free
_o_iswalnum
_o_iswspace
_o_malloc
_o_memcpy_s
_o_realloc
_o_roundf
_o_terminate
_o_toupper
_o_towlower
_o_wcscat_s
_o_wcscpy_s
_o_wcsncpy_s
_o_wcstol
_except_handler4_common
_o__purecall
_o__mktime32
_o__wtoi
memmove
_o_ceil
_o__wcsnicmp
_o__wcsicmp
_o__localtime32
_o_bsearch
_o__itow_s
_o__set_new_mode
_o__set_fmode
_o__set_errno
_o__set_app_type
_o__seh_filter_exe
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
_o__initialize_wide_environment
_o__initialize_onexit_table
_o__get_wide_winmain_command_line
_o__get_errno
_o__exit
_o__errno
_o__difftime32
_o__crt_atexit
_o__controlfp_s
_o__configure_wide_argv
_o__configthreadlocale
_o__CIsqrt
_o__CIpow
_o__cexit
_o__beginthreadex
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___std_exception_destroy
_o___std_exception_copy
_o___p__commode
wcsstr
__std_terminate
__CxxFrameHandler3
_o__register_onexit_function
_o__recalloc
_CxxThrowException
memcmp
memcpy
PicFreeFileInfo
PicRetrieveFileInfo
ord9
SetInformationJobObject
QueryInformationJobObject
CreateJobObjectW
AssignProcessToJobObject
RegisterApplicationRestart
HashData
UrlUnescapeW
PathIsURLW
CheckElevation
CheckElevationEnabled
SHRegGetBoolUSValueW
SHRegGetUSValueW
CoRegisterMessageFilter
GlobalGetAtomNameW
ActivateActCtx
ReleaseActCtx
DeactivateActCtx
CreateActCtxW
RtlGetVersion
ZwQuerySystemInformation
RtlInitString
wcsspn
RtlInitUnicodeString
ZwQueryValueKey
RtlUpcaseUnicodeChar
RtlGetNativeSystemInformation
ZwQueryDirectoryFile
RtlNtPathNameToDosPathName
ZwOpenFile
ZwEnumerateKey
RtlInitUnicodeStringEx
RtlFormatCurrentUserKeyPath
ZwCreateFile
ZwQueryInformationFile
ZwCreateSection
ZwQueryInformationProcess
ZwSetInformationProcess
RtlxAnsiStringToUnicodeSize
RtlAnsiStringToUnicodeString
ZwUnmapViewOfSection
ZwMapViewOfSection
LdrResSearchResource
RtlVerifyVersionInfo
RtlImageDirectoryEntryToData
RtlReleaseSRWLockShared
RtlAcquireSRWLockShared
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockExclusive
RtlQueryResourcePolicy
NtOpenThreadToken
NtClose
NtQueryInformationToken
NtOpenProcessToken
RtlCompareUnicodeString
RtlFreeHeap
RtlpEnsureBufferSize
wcschr
RtlDosPathNameToNtPathName_U_WithStatus
wcsrchr
strchr
RtlPublishWnfStateData
NtSetSystemInformation
RtlFlushHeaps
NtQueryWnfStateData
ZwOpenKey
RtlSubscribeWnfStateChangeNotification
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlQueryWnfStateData
RtlNtStatusToDosError
ZwClose
RtlGetDeviceFamilyInfoEnum
NtSetInformationProcess
NtQueryInformationProcess
RtlReAllocateHeap
RtlAppendUnicodeToString
RtlAppendUnicodeStringToString
RtlRunOnceExecuteOnce
RtlCopyUnicodeString
RtlUpcaseUnicodeString
RtlIsStateSeparationEnabled
RtlAllocateHeap
RtlNtStatusToDosErrorNoTeb
RtlFreeUnicodeString
NtSetThreadExecutionState
VerSetConditionMask
WinSqmSetDWORD
WinSqmIsOptedIn
WinSqmAddToStreamEx
FindStringOrdinal
FindResourceExW
SizeofResource
LoadLibraryExW
LockResource
LoadStringW
GetModuleFileNameW
GetModuleHandleExW
FreeLibrary
GetModuleFileNameA
LoadResource
GetModuleHandleW
GetModuleHandleA
GetProcAddress
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
Sleep
InitializeCriticalSection
SleepEx
InitializeCriticalSectionEx
TryEnterCriticalSection
SetEvent
InitializeSRWLock
ReleaseSRWLockExclusive
WaitForMultipleObjectsEx
CreateEventW
CreateEventExW
TryAcquireSRWLockExclusive
InitializeCriticalSectionAndSpinCount
OpenMutexW
OpenEventW
ReleaseSemaphore
EnterCriticalSection
WaitForSingleObject
WaitForSingleObjectEx
ReleaseMutex
DeleteCriticalSection
AcquireSRWLockShared
ResetEvent
CreateMutexW
LeaveCriticalSection
CreateMutexExW
ReleaseSRWLockShared
CreateSemaphoreExW
OpenSemaphoreW
AcquireSRWLockExclusive
HeapSetInformation
GetProcessHeap
HeapFree
HeapAlloc
SetErrorMode
SetLastError
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
CompareFileTime
GetLongPathNameW
FindClose
FindNextFileW
DeleteFileW
FindFirstFileW
WriteFile
CreateFileW
GetFileAttributesW
EventSetInformation
EventRegister
EventActivityIdControl
EventWriteTransfer
EventWrite
EventEnabled
EventUnregister
EventProviderEnabled
RegSetValueExW
RegOpenCurrentUser
RegDeleteValueW
RegEnumValueW
RegNotifyChangeKeyValue
RegDeleteTreeW
RegCreateKeyExW
RegGetValueW
RegQueryInfoKeyW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyExW
RegQueryValueExW
RegOpenKeyExW
SetThreadpoolWait
CreateThreadpoolWait
SubmitThreadpoolWork
WaitForThreadpoolWaitCallbacks
CloseThreadpoolWait
CreateThreadpoolTimer
CreateThreadpoolWork
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
TrySubmitThreadpoolCallback
CloseThreadpoolTimer
GetCurrentThread
GetPriorityClass
OpenProcessToken
GetStartupInfoW
CreateProcessW
GetCurrentThreadId
ExitProcess
SetThreadPriorityBoost
GetThreadPriority
SetProcessShutdownParameters
OpenThread
GetCurrentProcess
OpenThreadToken
GetProcessId
SetPriorityClass
CreateThread
ResumeThread
GetCurrentProcessId
ProcessIdToSessionId
SetThreadPriority
GetExitCodeProcess
QueueUserAPC
TerminateProcess
GetUserDefaultLocaleName
GetUserDefaultLangID
GetLocaleInfoW
FormatMessageW
GetThreadUILanguage
GetLocaleInfoEx
GetCalendarInfoW
OutputDebugStringW
DebugBreak
IsDebuggerPresent
CloseHandle
DuplicateHandle
SysFreeString
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayAccessData
VariantClear
VarUI4FromStr
SafeArrayCreate
SysAllocString
SysStringLen
VariantInit
SysAllocStringByteLen
SHTaskPoolGetUniqueContext
SHTaskPoolQueueTask
SetCurrentProcessExplicitAppUserModelID
IsOS
CoRegisterClassObject
CoRevokeClassObject
IIDFromString
CoGetStdMarshalEx
CoTaskMemRealloc
CoCancelCall
CoDisableCallCancellation
CoGetInterfaceAndReleaseStream
CoGetObjectContext
CLSIDFromString
CoTaskMemAlloc
CoGetMalloc
CoInitializeEx
CoCreateGuid
CoUninitialize
StringFromIID
StringFromGUID2
CoMarshalInterThreadInterfaceInStream
CoTaskMemFree
CreateStreamOnHGlobal
CoReleaseMarshalData
CoIncrementMTAUsage
PropVariantClear
CoGetCallContext
CoSetProxyBlanket
CoEnableCallCancellation
CoInitializeSecurity
CoCreateInstance
CoFreeUnusedLibraries
CoGetApartmentType
CoCreateFreeThreadedMarshaler
CoWaitForMultipleHandles
StrToIntW
StrCmpICA
StrCmpICW
QISearch
StrRChrW
StrCmpW
StrStrIW
StrCmpNICW
StrCmpNIW
StrChrW
StrChrIW
StrCmpIW
SHStrDupW
CommandLineToArgvW
IUnknown_Set
IUnknown_GetSite
IUnknown_QueryService
IUnknown_SetSite
GlobalAlloc
LocalReAlloc
LocalAlloc
LocalFree
GlobalFree
IsProcessorFeaturePresent
OpenProcess
GetProcessMitigationPolicy
GetDateFormatW
GetTickCount
GetSystemTime
GetSystemTimeAsFileTime
GetVersionExW
GetLocalTime
GetTickCount64
GetWindowsDirectoryW
GetLogicalProcessorInformation
GetSystemDirectoryW
GetDateFormatEx
GetTimeFormatEx
GetCommandLineW
GetCurrentDirectoryW
SearchPathW
ExpandEnvironmentStringsW
SHExpandEnvironmentStringsW
PathFindFileNameW
PathQuoteSpacesW
PathGetDriveNumberW
PathFindExtensionW
PathCommonPrefixW
PathParseIconLocationW
PathIsFileSpecW
PathFileExistsW
PathRemoveFileSpecW
PathGetArgsW
PathRemoveBlanksW
PathCombineW
WindowsCompareStringOrdinal
WindowsGetStringLen
WindowsDeleteStringBuffer
WindowsPreallocateStringBuffer
WindowsDeleteString
WindowsPromoteStringBuffer
WindowsCreateStringReference
WindowsCreateString
WindowsSubstringWithSpecifiedLength
WindowsDuplicateString
WindowsGetStringRawBuffer
RoUninitialize
RoInitialize
RoGetActivationFactory
RoActivateInstance
SHSetValueW
SHQueryInfoKeyW
SHGetValueW
SHDeleteKeyW
SHDeleteValueW
SHEnumKeyExW
SHRegGetValueW
WideCharToMultiByte
CompareStringOrdinal
MultiByteToWideChar
CompareStringW
SHCreateThreadRef
SHCreateThread
SHSetThreadRef
SetProcessReference
SHGetThreadRef
lstrlenW
lstrcmpiW
CopySid
GetTokenInformation
EqualSid
GetAclInformation
GetAce
GetLengthSid
InitializeAcl
AddAce
SetKernelObjectSecurity
MakeAbsoluteSD
DeleteAce
IsValidSid
CreateWellKnownSid
CheckTokenMembership
DuplicateToken
GetTraceEnableLevel
GetTraceEnableFlags
RegisterTraceGuidsW
GetTraceLoggerHandle
TraceMessage
UnregisterTraceGuids
GetUserDefaultUILanguage
LoadLibraryW
FindResourceW
SHLoadIndirectString
RemoveVectoredExceptionHandler
RegSetKeyValueW
RegDeleteKeyValueW
RoGetAgileReference
RoOriginateError
GetRestrictedErrorInfo
SetRestrictedErrorInfo
RoFailFastWithErrorContext
RoTransformError
RoGetMatchingRestrictedErrorInfo
RoOriginateLanguageException
PathCchCombine
PathCchRemoveFileSpec
PathCchAddExtension
PathCchAppend
PathAllocCombine
SHAnsiToUnicode
GlobalLock
GlobalUnlock
SetProcessInformation
SetThreadDescription
CreateFileMappingW
VirtualFree
VirtualProtect
MapViewOfFile
VirtualAlloc
UnmapViewOfFile
OpenFileMappingW
MulDiv
SHCreateStreamOnFileEx
IStream_Write
SHOpenRegStream2W
IStream_Reset
SHCreateMemStream
IStream_Read
SHCreateStreamOnFileW
GetTempPathW
QueryFullProcessImageNameW
ord170
ChangeTimerQueueTimer
CreateTimerQueueTimer
DeleteTimerQueueTimer
UnregisterWaitEx
GetProductInfo
GetOsSafeBootMode
GetUserDefaultGeoName
DeriveAppContainerSidFromAppContainerName
GetProfileType
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
FileTimeToSystemTime
GetTimeZoneInformation
GetDynamicTimeZoneInformation
GetSystemPowerStatus
RegisterWaitForSingleObject
GetComputerNameW
QueryPerformanceCounter
InitializeSListHead
InterlockedPushEntrySList
GetPersistedRegistryLocationW
LookupAccountNameW
CharNextW
CharLowerBuffW
NotifyServiceStatusChangeW
QueryServiceConfigW
CreateIoCompletionPort
GetQueuedCompletionStatus
GetPhysicallyInstalledSystemMemory
SHRegGetValueFromHKCUHKLM
ord244
GetDpiForMonitor
GetNetworkConnectivityHint
RaiseFailFastException
CharNextA
CallNtPowerInformation
PowerDeterminePlatformRoleEx
GetPwrCapabilities
ApiSetQueryApiSetPresence
ord279
ord479
ShellMessageBoxW
ord478
ord635
AssocQueryStringW
SHPinDllOfCLSID
StrRetToStrW
ord509
SHIsChildOrSelf
ord197
ord292
PathRemoveArgsW
ord544
ord481
ord165
StrRetToBufW
IUnknown_GetWindow
SHCreateWorkerWindowW
EnumDisplayMonitors
QueryDisplayConfig
GetDisplayConfigBufferSizes
SystemParametersInfoW
GetMonitorInfoW
GetSystemMetrics
EnumDisplayDevicesW
SetRectEmpty
PtInRect
IsRectEmpty
IntersectRect
InflateRect
OffsetRect
SubtractRect
CopyRect
UnionRect
EqualRect
SetRect
NotifyWinEvent
UnhookWinEvent
SetWinEventHook
SHParseDisplayName
ILClone
SHBindToFolderIDListParent
SHBindToParent
ILFindLastID
SHBindToObject
ILIsParent
ILCombine
ILCloneFirst
ILGetSize
SHGetNameFromIDList
ILFree
SHGetIDListFromObject
SHCreateItemFromParsingName
ILRemoveLastID
SHCreateItemFromIDList
ILIsEqual
DXGIDeclareAdapterRemovalSupport
GetPointerType
GetPointerDevices
EnableMouseInPointer
GetCurrentInputMessageSource
GetPointerInfo
SetThreadFlags
SHGetKnownFolderIDList
SHGetFolderPathEx
GetThreadFlags
MsgWaitForMultipleObjects
MsgWaitForMultipleObjectsEx
GetPackageFullName
GetPackagesByPackageFamily
SetWindowFeedbackSetting
RegisterClipboardFormatW
GetWindowBand
CreateWindowInBand
RegisterPowerSettingNotification
UnregisterPowerSettingNotification
InitVariantFromResource
InitVariantFromGUIDAsString
PropVariantToStringAlloc
PSPropertyBag_WriteDWORD
PropVariantToUInt32
PSPropertyBag_WriteStr
PSGetPropertyFromPropertyStorage
PSCreateMemoryPropertyStore
PropVariantToBoolean
CreateDispatcherQueueController
URLOpenBlockingStreamW
SHChangeNotify
SHCreateDataObject
ParseApplicationUserModelId
FindPackagesByPackageFamily
WTSRegisterSessionNotification
WTSUnRegisterSessionNotification
CreateFontIndirectW
GetStockObject
ExtTextOutW
GetTextMetricsW
SetTextAlign
SetTextColor
GetClipBox
SelectObject
CreateCompatibleDC
DeleteDC
GetObjectW
DeleteObject
CombineRgn
OffsetRgn
SetRectRgn
CreateRectRgn
GetDeviceCaps
CreateRectRgnIndirect
GetGlyphOutlineW
GetOutlineTextMetricsW
StretchBlt
ExcludeClipRect
SetStretchBltMode
Rectangle
GetClipRgn
SelectClipRgn
GetCurrentObject
GetTextExtentPoint32W
SetProcessDEPPolicy
IsBadWritePtr
RpcStringBindingComposeW
I_RpcExceptionFilter
UuidFromStringW
RpcBindingSetAuthInfoExW
RpcStringFreeW
RpcBindingFree
RpcBindingFromStringBindingW
NdrClientCall2
InternetCrackUrlW
SHUnicodeToAnsi
ord109
ord1
ord121
ord123
ord190
ord187
ord186
ord184
ord162
ord192
ord126
ord183
ord174
ord142
ord200
ord680
ord723
ord885
ord95
ord850
ord743
ord907
ord43
Shell_GetCachedImageIndexW
ord790
ord792
ord727
ord162
SHAppBarMessage
ord894
ord193
ord906
ord895
ShellExecuteW
SHGetLocalizedName
SHGetPropertyStoreForWindow
ord764
ord866
SHEvaluateSystemCommandTemplate
ord181
ord244
ExtractIconExW
ord132
ord137
Shell_NotifyIconW
Shell_NotifyIconGetRect
ord6
SHGetStockIconInfo
DuplicateIcon
ord91
ord254
ord54
SHEnableServiceObject
ord61
ord896
SHAddToRecentDocs
ord60
SHUpdateRecycleBinIcon
ord2
ord711
SHFileOperationW
ord4
SHGetPathFromIDListW
ord645
ord644
ord753
ord733
SHChangeNotifyRegisterThread
DragQueryFileW
ord67
SHCreateItemInKnownFolder
ord206
ord201
ord188
ord899
ShellExecuteExW
ord245
ord200
ord89
ord190
ord85
ord100
ord172
ord22
ord134
ord164
PathIsDirectoryW
ord413
ord548
ord163
ord467
AssocQueryKeyW
ChrCmpIW
PathIsRelativeW
AssocCreate
OpenThemeData
OpenThemeDataForDpi
GetThemeMargins
ord138
BufferedPaintSetAlpha
ord126
GetThemePartSize
IsThemeActive
GetBufferedPaintBits
GetThemeInt
GetThemeColor
GetThemeMetric
SetWindowTheme
GetWindowTheme
BufferedPaintUnInit
EndBufferedPaint
BeginBufferedPaint
BufferedPaintInit
CloseThemeData
DrawThemeParentBackground
DrawThemeBackground
GetThemeBackgroundExtent
GetThemeFont
DrawThemeTextEx
IsCompositionActive
IsAppThemed
GetThemeBool
ord86
DwmRegisterThumbnail
ord113
ord141
ord140
DwmEnableBlurBehindWindow
DwmGetWindowAttribute
DwmIsCompositionEnabled
ord138
ord114
ord159
DwmQueryThumbnailSourceSize
DwmSetWindowAttribute
ord124
DwmUpdateThumbnailProperties
DwmUnregisterThumbnail
ord139
GetMenuState
SetScrollInfo
GetScrollInfo
SetScrollPos
GetMenuStringW
InternalGetWindowText
GetLayeredWindowAttributes
SetLayeredWindowAttributes
DrawTextExW
IsProcessDPIAware
SetThreadDpiAwarenessContext
GetWindowCompositionAttribute
GetWindowProcessHandle
UpdateLayeredWindow
ord2521
GetCursorInfo
GetPhysicalCursorPos
GetClassLongW
GetClassWord
GetIconInfo
GetIconInfoExW
GhostWindowFromHungWindow
GetSysColorBrush
GetSystemMenu
ModifyMenuW
GetAsyncKeyState
ReplyMessage
MonitorFromPoint
GetMenuItemInfoW
GetMenuItemCount
CreateIconIndirect
AdjustWindowRectEx
GetDC
ReleaseDC
MonitorFromWindow
IsIconic
CreatePopupMenu
GetMenuDefaultItem
DestroyMenu
LoadCursorW
SetCursor
SetMenuItemInfoW
DefWindowProcA
IsWindowUnicode
LoadAcceleratorsW
ChangeWindowMessageFilterEx
TranslateAcceleratorW
ord2611
MonitorFromRect
GetGuiResources
IsHungAppWindow
ord2574
SwitchToThisWindow
EndTask
UnregisterHotKey
RegisterHotKey
DeleteMenu
SendDlgItemMessageW
UnregisterClassW
ord2522
EndDialog
GetMenuInfo
SetMenuInfo
GetDpiForSystem
GetWindowDpiAwarenessContext
AreDpiAwarenessContextsEqual
CharLowerW
IsCharAlphaNumericW
ExitWindowsEx
GetKeyState
FillRect
LoadIconW
HungWindowFromGhostWindow
CascadeWindows
ord2573
TileWindows
LockWorkStation
InjectMouseInput
MapVirtualKeyExW
InjectKeyboardInput
BringWindowToTop
InsertMenuW
ShowWindowAsync
UnregisterClassA
PostThreadMessageW
GetCaretBlinkTime
GetSysColor
CopyImage
DestroyIcon
DrawIconEx
GetSystemMetricsForDpi
ord2005
TrackMouseEvent
SetCapture
GetCapture
ReleaseCapture
GetDoubleClickTime
CalculatePopupWindowPosition
CopyIcon
GetLastInputInfo
AdjustWindowRect
GetDpiForWindow
IsTopLevelWindow
SetWindowCompositionAttribute
SetGestureConfig
LoadImageW
GetLastActivePopup
DrawTextW
CheckMenuItem
EnableMenuItem
RemoveMenu
LoadMenuW
SetMenuDefaultItem
TrackPopupMenuEx
GetSubMenu
GetUserNameExW
ResolveDelayLoadedAPI
DelayLoadFailureHook
PowerSetRequest
VerifyVersionInfoW
PowerCreateRequest
IsProcessInWDAGContainer
CopyFileW
WaitForMultipleObjects
SetTermsrvAppInstallMode
ord292
StartTraceW
StopTraceW
EnableTraceEx2
GetStagedPackagePathByFullName2
BiPtFreeMemory
BiPtEnumerateWorkItemsForPackageName
BiPtAssociateApplicationEntryPoint
BiPtQueryWorkItem
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ