Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
DisplaySwitch.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
DisplaySwitch.exe
Resource
win10v2004-20230703-en
Target
DisplaySwitch.exe
Size
1.8MB
MD5
5338d4beddf23db817eb5c37500b5735
SHA1
1b5c56f00b53fca3205ff24770203af46cbc7c54
SHA256
8b581f1d15a6920e4ecfe172d8ef753d0a2bf1a47e686a8d5d8e01147fa4c65e
SHA512
173170b83e0048ee05da18c0c957744204954da58a93c532b669d62edb632c4c73d0744c13eb864ecf357ff12831aa46c4f2445dc33b62a4547385b9e0297b0c
SSDEEP
3072:xZtA8bXIUwXCuQJfR5ibYxGXyt9McD9GIPv02BTvkSorZoJTW/TY1e7j:xfrIUNbLi80yt9McD9GIPv02BjNJPe
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
EventRegister
EventWriteTransfer
EventUnregister
RegGetValueW
GetCommandLineW
CompareStringOrdinal
GetCurrentThreadId
AcquireSRWLockShared
ReleaseSRWLockShared
EncodePointer
InitOnceExecuteOnce
RaiseException
DecodePointer
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
LocalFree
LoadLibraryW
GetDisplayConfigBufferSizes
QueryDisplayConfig
SetDisplayConfig
DestroyWindow
SetTimer
KillTimer
SetForegroundWindow
SendInput
GetWindowLongPtrW
PostThreadMessageW
GetThreadDesktop
GetUserObjectInformationW
GetMessageW
TranslateMessage
DispatchMessageW
DefWindowProcW
DestroyIcon
SystemParametersInfoW
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
GetAsyncKeyState
GetKeyState
_cexit
__setusermatherr
_initterm
__C_specific_handler
_wcmdln
_fmode
_exit
_lock
exit
_unlock
__dllonexit
__set_app_type
_onexit
?terminate@@YAXXZ
__CxxFrameHandler3
pow
memset
memcpy
__wgetmainargs
_amsg_exit
_XcptFilter
free
_purecall
_commode
_callnewh
malloc
_vsnwprintf
memcpy_s
_set_errno
_get_errno
wcscmp
PolicyManager_GetPolicyInt
PathRemoveFileSpecW
SHGetThreadRef
ord278
ord172
PathAppendW
GetCurrentThemeName
ord121
ord120
CoRevokeClassObject
CoCreateInstance
CoReleaseServerProcess
CoAddRefServerProcess
CoInitializeEx
CoRegisterClassObject
CoResumeClassObjects
CoUninitialize
SetRestrictedErrorInfo
RoOriginateError
RoOriginateErrorW
RoActivateInstance
RoRevokeActivationFactories
RoGetActivationFactory
RoRegisterActivationFactories
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsDeleteString
WindowsCreateStringReference
WindowsCreateString
WindowsGetStringRawBuffer
InitOnceBeginInitialize
InitOnceComplete
Sleep
TlsGetValue
TerminateProcess
TlsAlloc
GetCurrentProcessId
TlsSetValue
TlsFree
GetStartupInfoW
GetCurrentProcess
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
LoadLibraryExW
LoadStringW
GetModuleFileNameA
GetModuleHandleExW
GetModuleFileNameW
FreeLibrary
LockResource
FindResourceExW
LoadResource
GetProcAddress
GetModuleHandleW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
HeapFree
GetProcessHeap
HeapAlloc
GetProcessMitigationPolicy
LocalReAlloc
LocalAlloc
CloseHandle
EventSetInformation
EventActivityIdControl
IsDebuggerPresent
OutputDebugStringW
DebugBreak
FormatMessageW
PowerDeterminePlatformRoleEx
WaitForSingleObject
ReleaseSemaphore
WaitForSingleObjectEx
CreateSemaphoreExW
OpenSemaphoreW
CreateMutexExW
ReleaseMutex
RoGetMatchingRestrictedErrorInfo
ExpandEnvironmentStringsW
ApiSetQueryApiSetPresence
SHTaskPoolQueueTask
ord140
ord381
DwmSetWindowAttribute
ImmDisableIME
RtlQueryWnfStateData
RtlGetDeviceFamilyInfoEnum
WinStationIsSessionRemoteable
?HeightProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?WidthProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
ARGBColorFromEnumI
?SetXMLFromResourceWithTheme@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@00@Z
?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJPEBGPEAUHINSTANCE__@@1@Z
?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ
?SetRootWindowForTheming@DUIXmlParser@DirectUI@@QEAAXPEAUHWND__@@@Z
?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z
?GetSheet@DUIXmlParser@DirectUI@@QEAAJPEBGPEAPEAVValue@2@@Z
UnInitThread
InitThread
UnInitProcessPriv
InitProcessPriv
?CreateString@Value@DirectUI@@SAPEAV12@PEBGPEAUHINSTANCE__@@@Z
?StartDefer@Element@DirectUI@@QEAAXPEAK@Z
?GetClassInfoPtr@HWNDElement@DirectUI@@SAPEAUIClassInfo@2@XZ
?_PostEvent@Element@DirectUI@@AEAAXPEAUEvent@2@H@Z
?FireEvent@Element@DirectUI@@QEAAXPEAUEvent@2@_N1@Z
?KeyboardNavigate@Element@DirectUI@@SA?AVUID@@XZ
?GetSelection@Selector@DirectUI@@QEAAPEAVElement@2@XZ
?RemoveLocalValue@Element@DirectUI@@QEAAJP6APEBUPropertyInfo@2@XZ@Z
?SetClass@Element@DirectUI@@QEAAJPEBG@Z
?ShowUIState@HWNDElement@DirectUI@@QEAAX_N0@Z
?GetRoot@Element@DirectUI@@QEAAPEAV12@XZ
?Click@TouchButton@DirectUI@@SA?AVUID@@XZ
?AddListener@Element@DirectUI@@QEAAJPEAUIElementListener@2@@Z
?AssertPIZeroRef@ClassInfoBase@DirectUI@@UEBAXXZ
?GetChildren@ClassInfoBase@DirectUI@@UEBAHXZ
?RemoveChild@ClassInfoBase@DirectUI@@UEAAXXZ
?AddChild@ClassInfoBase@DirectUI@@UEAAXXZ
?IsGlobal@ClassInfoBase@DirectUI@@UEBA_NXZ
?GetModule@ClassInfoBase@DirectUI@@UEBAPEAUHINSTANCE__@@XZ
?IsSubclassOf@ClassInfoBase@DirectUI@@UEBA_NPEAUIClassInfo@2@@Z
?IsValidProperty@ClassInfoBase@DirectUI@@UEBA_NPEBUPropertyInfo@2@@Z
?GetName@ClassInfoBase@DirectUI@@UEBAPEBGXZ
?GetGlobalIndex@ClassInfoBase@DirectUI@@UEBAIXZ
?GetPICount@ClassInfoBase@DirectUI@@UEBAIXZ
?GetByClassIndex@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z
?EnumPropertyInfo@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z
?Release@ClassInfoBase@DirectUI@@UEAAHXZ
?AddRef@ClassInfoBase@DirectUI@@UEAAXXZ
?FireRightClickEvent@TouchButton@DirectUI@@UEAAXIPEAUtagPOINT@@@Z
?FireClickEvent@TouchButton@DirectUI@@UEAAXIIW4ClickDevice@12@PEAUtagPOINT@@@Z
?GetForegroundColorRef@TouchButton@DirectUI@@UEAAJPEAK@Z
?DefaultAction@TouchButton@DirectUI@@UEAAJXZ
?OnUnHosted@TouchButton@DirectUI@@UEAAXPEAVElement@2@@Z
?OnHosted@TouchButton@DirectUI@@UEAAXPEAVElement@2@@Z
?GetImmersiveFocusRectOffsets@TouchButton@DirectUI@@UEAAXPEAUtagRECT@@@Z
?GetContentSize@RichText@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?Paint@RichText@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z
?OnEvent@TouchButton@DirectUI@@UEAAXPEAUEvent@2@@Z
?OnKeyFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
?OnInput@TouchButton@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?SetSelection@Selector@DirectUI@@UEAAJPEAVElement@2@@Z
?GetUiaFocusDelegate@Element@DirectUI@@UEAAPEAV12@XZ
?HandleUiaEventListener@Element@DirectUI@@UEAAXPEAUEvent@2@@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@@Z
?HandleUiaPropertyListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?HandleUiaDestroyListener@Element@DirectUI@@UEAAXXZ
?GetElementProviderImpl@Element@DirectUI@@UEAAJPEAVInvokeHelper@2@PEAPEAVElementProvider@2@@Z
?GetUIAElementProvider@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z
?DefaultAction@Element@DirectUI@@UEAAJXZ
?GetAccessibleImpl@Element@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z
?GetKeyFocused@Element@DirectUI@@UEAA_NXZ
?RemoveTooltip@Element@DirectUI@@MEAAXPEAV12@@Z
?ActivateTooltip@Element@DirectUI@@MEAAXPEAV12@K@Z
?UpdateTooltip@Element@DirectUI@@MEAAXPEAV12@@Z
?OnUnHosted@Element@DirectUI@@MEAAXPEAV12@@Z
?OnHosted@Element@DirectUI@@MEAAXPEAV12@@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MEAAXHH@Z
?GetImmersiveFocusRectOffsets@Element@DirectUI@@UEAAXPEAUtagRECT@@@Z
?QueryInterface@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z
?MessageCallback@Element@DirectUI@@UEAAIPEAUtagGMSG@@@Z
?RemoveBehavior@Element@DirectUI@@UEAAJPEAUIDuiBehavior@@@Z
?AddBehavior@Element@DirectUI@@UEAAJPEAUIDuiBehavior@@@Z
?SetKeyFocus@Element@DirectUI@@UEAAXXZ
?EnsureVisible@Element@DirectUI@@UEAA_NHHHH@Z
?Remove@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
?Insert@Element@DirectUI@@UEAAJPEAPEAV12@II@Z
?Add@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
?GetContentSize@Element@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?Paint@Element@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z
?OnEvent@Selector@DirectUI@@UEAAXPEAUEvent@2@@Z
?OnDestroy@Element@DirectUI@@UEAAXXZ
?OnMouseFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
?OnKeyFocusMoved@Selector@DirectUI@@UEAAXPEAVElement@2@0@Z
?OnInput@Selector@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?OnGroupChanged@Element@DirectUI@@UEAAXH_N@Z
?OnPropertyChanged@Element@DirectUI@@UEAAXPEAUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanged@ItemList@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEAUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?GetContentStringAsDisplayed@Element@DirectUI@@UEAAPEBGPEAPEAVValue@2@@Z
?IsContentProtected@Element@DirectUI@@UEAA_NXZ
?IsRTLReading@Element@DirectUI@@UEAA_NXZ
??1ItemList@DirectUI@@UEAA@XZ
??0ItemList@DirectUI@@QEAA@XZ
??1ClassInfoBase@DirectUI@@UEAA@XZ
??0ClassInfoBase@DirectUI@@QEAA@XZ
?GetClassInfoPtr@TouchButton@DirectUI@@SAPEAUIClassInfo@2@XZ
?Initialize@Selector@DirectUI@@QEAAJPEAVElement@2@PEAK@Z
?Initialize@ClassInfoBase@DirectUI@@QEAAJPEAUHINSTANCE__@@PEBG_NPEBQEBUPropertyInfo@2@I@Z
?Register@ItemList@DirectUI@@SAJXZ
?Register@ClassInfoBase@DirectUI@@QEAAJXZ
?ClassExist@ClassInfoBase@DirectUI@@SA_NPEAPEAUIClassInfo@2@PEBQEBUPropertyInfo@2@IPEAU32@PEAUHINSTANCE__@@PEBG_N@Z
?ClassProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
??1CritSecLock@DirectUI@@QEAA@XZ
?GetFactoryLock@Element@DirectUI@@SAPEAU_RTL_CRITICAL_SECTION@@XZ
??0CritSecLock@DirectUI@@QEAA@PEAU_RTL_CRITICAL_SECTION@@@Z
?Register@TouchButton@DirectUI@@SAJXZ
?OnPropertyChanged@TouchButton@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?SizeInLayoutProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
DuiCreateObject
?PressedProp@TouchButton@DirectUI@@SAPEBUPropertyInfo@2@XZ
RegisterPVLBehaviorFactory
?CreateElement@DUIXmlParser@DirectUI@@QEAAJPEBGPEAVElement@2@1PEAKPEAPEAV32@@Z
?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z
StrToID
?SetLayoutPos@Element@DirectUI@@QEAAJH@Z
?EndDefer@Element@DirectUI@@QEAAXK@Z
?Destroy@Element@DirectUI@@QEAAJ_N@Z
?GetClassInfoPtr@ItemList@DirectUI@@SAPEAUIClassInfo@2@XZ
??0TouchButton@DirectUI@@QEAA@XZ
??1TouchButton@DirectUI@@UEAA@XZ
?Release@Value@DirectUI@@QEAAXXZ
?GetAdjacent@Element@DirectUI@@UEAAPEAV12@PEAV12@HPEBUNavReference@2@K@Z
?GetChildren@Element@DirectUI@@QEAAPEAV?$DynamicArray@PEAVElement@DirectUI@@$0A@@2@PEAPEAVValue@2@@Z
?GetValue@Element@DirectUI@@QEAAPEAVValue@2@P6APEBUPropertyInfo@2@XZHPEAUUpdateCache@2@@Z
?Add@Element@DirectUI@@QEAAJPEAV12@@Z
?CreateGraphic@Value@DirectUI@@SAPEAV12@PEAUHICON__@@_N11@Z
?BackgroundProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?SetValue@Element@DirectUI@@QEAAJP6APEBUPropertyInfo@2@XZHPEAVValue@2@@Z
?ContentProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?Initialize@TouchButton@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z
?SetAccName@Element@DirectUI@@QEAAJPEBG@Z
DeleteHandle
CreateAction
D3DKMTNetDispStopMiracastDisplayDevice
D3DKMTNetDispQueryMiracastDisplayDeviceSupport
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ