Extended Key Usages
ExtKeyUsageCodeSigning
Overview
overview
3Static
static
3New folder.zip
windows7-x64
1New folder.zip
windows10-2004-x64
1New folder/BioIso.exe
windows7-x64
New folder/BioIso.exe
windows10-2004-x64
1New folder...ev.exe
windows7-x64
New folder...ev.exe
windows10-2004-x64
1New folder...ck.exe
windows7-x64
New folder...ck.exe
windows10-2004-x64
1New folder...ce.dll
windows7-x64
1New folder...ce.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
New folder.zip
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
New folder.zip
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
New folder/BioIso.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
New folder/BioIso.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
New folder/BitLockerWizardElev.exe
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
New folder/BitLockerWizardElev.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
New folder/appidcertstorecheck.exe
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
New folder/appidcertstorecheck.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
New folder/bcastdvruserservice.dll
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
New folder/bcastdvruserservice.dll
Resource
win10v2004-20231215-en
Target
New folder.zip
Size
902KB
MD5
511aba9cd6bac06ffb9c4f415b17997d
SHA1
aad2c91e89d7b9e4d3a2442c75085418ad3c835d
SHA256
dd8f8d62aa6c80fc895a4af0585ce03917d5810d3116b6f71ee3cef9aa787962
SHA512
b1a2752235a981503794ee41706ca362eaeed9e85180cd6175610a75cb11aa70e255531b26b54e1115d3602222e95a1f89f1001e22cdd82201376edb9ae2b4fd
SSDEEP
24576:QLy9b+71qKFu0n0HwGpzwAOiGlGnDYvT6xEl+mPvvu:n+sYutQ2zwAOiGc8wE+mP3u
Checks for missing Authenticode signature.
resource |
---|
unpack001/New folder/BitLockerWizardElev.exe |
unpack001/New folder/appidcertstorecheck.exe |
unpack001/New folder/bcastdvruserservice.dll |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
_register_thread_local_exe_atexit_callback
_initterm
_c_exit
_initterm_e
_o__errno
_o__exit
_o__get_initial_wide_environment
_o__initialize_onexit_table
_o__initialize_wide_environment
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__purecall
_o__register_onexit_function
_o__seh_filter_exe
_o__set_app_type
_o__set_fmode
_o__set_new_mode
memmove
_o__crt_atexit
_o_atoi
_o_bsearch_s
_o_exit
_o_free
_o_isdigit
_o_iswalpha
_o_malloc
_o_terminate
_o_towupper
__C_specific_handler
__current_exception
__current_exception_context
_CxxThrowException
_o__configthreadlocale
_o___p__commode
_o__cexit
_o__callnewh
_o___p___wargv
_o___p___argc
_o___stdio_common_vswprintf
__std_terminate
__CxxFrameHandler4
_o___stdio_common_vsnprintf_s
memcmp
_o___std_exception_destroy
memcpy
_o___std_exception_copy
_o__configure_wide_argv
memset
GetModuleHandleExW
FreeLibrary
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
SetEvent
OpenEventW
DeleteCriticalSection
ReleaseSRWLockExclusive
ReleaseSemaphore
InitializeCriticalSectionEx
AcquireSRWLockShared
WaitForSingleObject
CreateSemaphoreExW
CreateEventW
CreateMutexExW
ResetEvent
ReleaseSRWLockShared
InitializeCriticalSectionAndSpinCount
OpenSemaphoreW
WaitForSingleObjectEx
AcquireSRWLockExclusive
ReleaseMutex
HeapFree
GetProcessHeap
HeapAlloc
UnhandledExceptionFilter
GetLastError
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
OpenProcessToken
GetCurrentThread
OpenThreadToken
FormatMessageW
OutputDebugStringW
DebugBreak
IsDebuggerPresent
CloseHandle
EventUnregister
EventWriteTransfer
EventSetInformation
EventActivityIdControl
EventRegister
InitOnceBeginInitialize
InitOnceComplete
QueryPerformanceFrequency
QueryPerformanceCounter
CreateThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
SetThreadpoolTimer
GetLengthSid
IsValidSid
GetTokenInformation
EqualSid
LocalAlloc
LocalFree
LocalSize
GetSystemTimeAsFileTime
GetWindowsDirectoryW
GetTickCount64
CompareFileTime
RpcServerListen
RpcServerUseProtseqIfW
NdrServerCallAll
NdrServerCall2
UuidFromStringA
RpcImpersonateClient
RpcRevertToSelfEx
RpcMgmtStopServerListening
RpcMgmtWaitServerListen
RpcServerUnregisterIf
RpcServerRegisterIfEx
VirtualQuery
MapViewOfFile
UnmapViewOfFile
RtlCaptureContext
RtlCompareMemory
RtlLookupFunctionEntry
RtlVirtualUnwind
IsProcessorFeaturePresent
InitializeSListHead
RtlTimeFieldsToTime
RtlFreeHeap
RtlEqualSid
NtQuerySystemInformation
RtlImageNtHeader
RtlNtStatusToDosError
RtlAllocateHeap
GetSignedReport
EncryptData
GetTaggedData
GetSecureIdentitySigningKey
OpenSecureSection
GetTaggedDataSize
DecryptData
ResolveDelayLoadedAPI
DelayLoadFailureHook
__ImagePolicyMetadata
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetProcessHeap
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetLastError
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
GetCurrentProcess
TerminateProcess
HeapSetInformation
GetCurrentProcessId
GetCommandLineW
UnhandledExceptionFilter
memset
_commode
_fmode
_acmdln
__iob_func
__C_specific_handler
_initterm
?terminate@@YAXXZ
__setusermatherr
_ismbblead
_cexit
_exit
exit
__set_app_type
__getmainargs
_amsg_exit
_XcptFilter
fwprintf
towupper
FveuiWizard
FveuipClearFveWizOnStartup
CoInitialize
CoUninitialize
CommandLineToArgvW
ShellExecuteW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_lock
_unlock
__dllonexit
_exit
__set_app_type
_commode
?terminate@@YAXXZ
memcmp
_fmode
exit
__wgetmainargs
_cexit
__setusermatherr
_initterm
__C_specific_handler
_vsnwprintf
_amsg_exit
_XcptFilter
memmove_s
_purecall
??3@YAXPEAX@Z
memcpy_s
_onexit
memset
GetModuleFileNameA
GetModuleHandleExW
GetModuleHandleW
GetProcAddress
LeaveCriticalSection
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ResetEvent
ReleaseMutex
SetEvent
CreateEventExW
WaitForSingleObjectEx
OpenSemaphoreW
ReleaseSemaphore
CreateSemaphoreExW
DeleteCriticalSection
AcquireSRWLockShared
WaitForSingleObject
CreateMutexExW
EnterCriticalSection
ReleaseSRWLockShared
InitializeCriticalSectionEx
HeapAlloc
HeapFree
HeapSetInformation
GetProcessHeap
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
SetThreadpoolTimer
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CreateThreadpoolTimer
GetCurrentThreadId
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
FormatMessageW
IsDebuggerPresent
DebugBreak
OutputDebugStringW
CloseHandle
AddSIDToBoundaryDescriptor
ClosePrivateNamespace
OpenPrivateNamespaceW
CreatePrivateNamespaceW
CreateBoundaryDescriptorW
DeleteBoundaryDescriptor
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
LocalAlloc
LocalFree
GetSystemTimeAsFileTime
GetTickCount
CompareFileTime
CreateFileW
Sleep
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceCounter
DeviceIoControl
GetSystemMetrics
EtwEventWriteTransfer
EtwEventUnregister
EtwEventWrite
EtwEventRegister
EtwUnregisterTraceGuids
EtwRegisterTraceGuidsW
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
EtwTraceMessage
ResolveDelayLoadedAPI
DelayLoadFailureHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
_initterm_e
_initterm
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o__wcsicmp
_o__wcslwr
_o__wcsnicmp
_o__wfopen_s
memmove
_o_fclose
_o_fgetws
_o_free
_o_iswupper
_o_malloc
_o_memcpy_s
_o_realloc
_o_terminate
_o_towlower
_o_wcscat_s
_o_wcscpy_s
_o_wcstol
_o_wcstoul
__C_specific_handler
__current_exception
__current_exception_context
__CxxFrameHandler3
_CxxThrowException
_o__execute_onexit_table
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
_o__initialize_onexit_table
_o__errno
_o__initialize_narrow_environment
_o__crt_atexit
_o__configure_narrow_argv
_o__cexit
_o__callnewh
_o__aligned_malloc
_o__aligned_free
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf
_o___stdio_common_vsprintf_s
_o___stdio_common_vsprintf
_o___stdio_common_vsnprintf_s
_o___std_type_info_name
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
wcschr
wcsstr
wcsrchr
__std_terminate
__CxxFrameHandler4
memcmp
memcpy
wcsncmp
memset
?PrintGuid@GameDVRUtility@Internal@Capture@Media@Windows@@YAJU_GUID@@PEAVString@25@@Z
FireCallerManagerEvent
?OutputString@BcastDVR_OutputDebug@@QEAAXXZ
?LogError@BcastDVRLogProviderBase@@SAXJPEBD0H_N@Z
?PrintType@BcastDVR_OutputDebug@@QEAAXPEBDK@Z
?GetGuidStringFromGuid@GameDVRUtility@Internal@Capture@Media@Windows@@YAJAEBU_GUID@@_NPEAVString@25@@Z
??0BcastDVR_OutputDebug@@QEAA@PEBD@Z
?PrintType@BcastDVR_OutputDebug@@QEAAXPEBD0@Z
?Uninitialize@BcastDVR_OutputDebug@@SAXXZ
?GetPlugInPackageFullName@PlugInUtility@Internal@Capture@Media@Windows@@YAJAEBU_GUID@@PEAVString@25@@Z
?PrintType@BcastDVR_OutputDebug@@QEAAXPEBDN@Z
?LogErrorEx@BcastDVRLogProviderBase@@SAXJPEBD0H00_N@Z
?RegGetDwordValue@GameDVRUtility@Internal@Capture@Media@Windows@@YAXPEAUHKEY__@@PEBG1KPEAK@Z
?RegSetDwordValue@GameDVRUtility@Internal@Capture@Media@Windows@@YAJPEAUHKEY__@@PEBG1K@Z
?RegSetStringValue@GameDVRUtility@Internal@Capture@Media@Windows@@YAJPEAUHKEY__@@PEBG1PEAVString@25@@Z
GetBroadcastSharedMemoryWriter
?RegSetQwordValue@GameDVRUtility@Internal@Capture@Media@Windows@@YAJPEAUHKEY__@@PEBG1_K@Z
?RegGetQwordValue@GameDVRUtility@Internal@Capture@Media@Windows@@YAXPEAUHKEY__@@PEBG1_KPEA_K@Z
?PrintType@BcastDVR_OutputDebug@@QEAAXPEBDPEBG@Z
?GetUserGameDVRConfigFolderPath@EnvironmentManager@Internal@Capture@Media@Windows@@YAJPEAVString@25@PEBG@Z
?Initialize@BcastDVR_OutputDebug@@SAXPEBGW4BcastDVR_OutputDebug_TraceToFileType@@0@Z
?GetOSVersionString@GameDVRUtility@Internal@Capture@Media@Windows@@YAXPEAVString@25@@Z
?Printf@BcastDVRLogProviderBase@@SAX_N0PEBD1HPEBGZZ
?RegGetStringValue@GameDVRUtility@Internal@Capture@Media@Windows@@YAXPEAUHKEY__@@PEBG1PEAVString@25@@Z
?GetHKeyCurrentUserForIUser@GameDVRUtility@Internal@Capture@Media@Windows@@YAJPEAUIUser@System@5@PEAPEAUHKEY__@@@Z
??0ImpersonateHelper@Internal@Capture@Media@Windows@@QEAA@XZ
??1ImpersonateHelper@Internal@Capture@Media@Windows@@QEAA@XZ
?ImpersonateUser@ImpersonateHelper@Internal@Capture@Media@Windows@@QEAAJPEAUIUser@System@5@@Z
?CleanupObsoletePlugIns@PlugInUtility@Internal@Capture@Media@Windows@@YAJPEAUHKEY__@@@Z
?MostRecentErrorInHistory@BcastDVRLogProviderBase@@SAJXZ
?GetBroadcastSebEventIds@PlugInUtility@Internal@Capture@Media@Windows@@YAJPEAKPEAPEAU_GUID@@@Z
?FreeBroadcastSebEventIds@PlugInUtility@Internal@Capture@Media@Windows@@YAXPEAPEAU_GUID@@@Z
?GetDefaultPlugIn@PlugInUtility@Internal@Capture@Media@Windows@@YAJPEAUHKEY__@@PEAU_GUID@@@Z
?SetDefaultPlugIn@PlugInUtility@Internal@Capture@Media@Windows@@YAJPEAUHKEY__@@AEBU_GUID@@@Z
?GetPlugInInfo@PlugInUtility@Internal@Capture@Media@Windows@@YAJPEAUHKEY__@@AEBU_GUID@@PEAVString@25@22@Z
CreateCallerManagerInstance
?CloseDuplicatedHandle@GameDVRUtility@Internal@Capture@Media@Windows@@YAJKPEAX@Z
?GetErrorHistoryCount@BcastDVRLogProviderBase@@SAKXZ
?CloseDuplicatedHandles@GameDVRUtility@Internal@Capture@Media@Windows@@YAJKKQEAPEAX@Z
?AppendPath@EnvironmentManager@Internal@Capture@Media@Windows@@YAJAEBVString@25@0PEAV625@@Z
?PrintType@BcastDVR_OutputDebug@@QEAAXPEBDE@Z
CreateMetadataManagerInstance
?PrintType@BcastDVR_OutputDebug@@QEAAXPEBDH@Z
?GetBroadcastPlugInRegistryPathFromSebEventId@EnvironmentManager@Internal@Capture@Media@Windows@@YAJAEBU_GUID@@PEAVString@25@@Z
?PrintType@BcastDVR_OutputDebug@@QEAAXPEBD_K@Z
ActiveMetadataManagerInstances
?MapConstantToString@GameDVRUtility@Internal@Capture@Media@Windows@@YAPEBGQEAPEBGKKKK@Z
GetPreviewSharedMemoryWriter
?PrintType@BcastDVR_OutputDebug@@QEAAXPEBDI@Z
?PrintHRESULT@BcastDVR_OutputDebug@@QEAAXJ@Z
?PrintType@BcastDVR_OutputDebug@@QEAAXPEBDPEAX@Z
?GetIUserSID@GameDVRUtility@Internal@Capture@Media@Windows@@YAJPEAUIUser@System@5@PEAVString@25@@Z
?GetCallersSebEventId@PlugInUtility@Internal@Capture@Media@Windows@@YAJPEAU_GUID@@@Z
?GetFormattedErrorHistory@BcastDVRLogProviderBase@@SAKPEAVString@Internal@Windows@@@Z
?GetKnownFolderSubFolder@EnvironmentManager@Internal@Capture@Media@Windows@@YAJAEBU_GUID@@PEBGPEAVString@25@@Z
GetModuleHandleW
FreeLibrary
LoadLibraryExW
GetProcAddress
GetModuleFileNameA
GetModuleHandleExW
CreateEventExW
OpenSemaphoreW
WaitForSingleObjectEx
ReleaseMutex
CreateMutexExW
InitializeSRWLock
DeleteCriticalSection
TryEnterCriticalSection
AcquireSRWLockExclusive
InitializeCriticalSectionAndSpinCount
ReleaseSRWLockExclusive
AcquireSRWLockShared
WaitForSingleObject
CreateSemaphoreExW
InitializeCriticalSectionEx
ReleaseSemaphore
ResetEvent
ReleaseSRWLockShared
CreateEventW
SetEvent
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
HeapAlloc
HeapFree
RaiseException
GetLastError
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCompareStringOrdinal
WindowsGetStringLen
WindowsConcatString
WindowsCreateString
WindowsDeleteString
WindowsReplaceString
WindowsDuplicateString
WindowsCreateStringReference
GetCurrentProcessId
CreateThread
GetCurrentThreadId
TerminateProcess
GetProcessId
OpenProcessToken
GetCurrentProcess
FormatMessageW
DebugBreak
IsDebuggerPresent
OutputDebugStringW
CloseHandle
PropVariantClear
CoDisconnectContext
CoTaskMemAlloc
CoTaskMemFree
CoReleaseMarshalData
CreateStreamOnHGlobal
CoMarshalInterface
CoWaitForMultipleHandles
CoGetCallContext
CoDecrementMTAUsage
CoCreateGuid
CoCreateFreeThreadedMarshaler
CoReleaseServerProcess
CoResumeClassObjects
CoRegisterClassObject
CoInitializeSecurity
CoCreateInstance
CoAddRefServerProcess
CoRevokeClassObject
CloseThreadpoolTimer
SetThreadpoolTimer
CreateThreadpoolWork
WaitForThreadpoolTimerCallbacks
CreateThreadpoolTimer
CreateThreadpool
CloseThreadpool
SubmitThreadpoolWork
CloseThreadpoolWork
RoTransformError
RoOriginateErrorW
GetRestrictedErrorInfo
SetRestrictedErrorInfo
RoOriginateError
RoUninitialize
RoRevokeActivationFactories
RoGetActivationFactory
RoInitialize
RoRegisterActivationFactories
RoActivateInstance
EventRegister
EventSetInformation
EventWriteTransfer
EventUnregister
Sleep
InitOnceExecuteOnce
InitOnceComplete
InitOnceBeginInitialize
SetServiceStatus
RegisterServiceCtrlHandlerExW
EncodePointer
DecodePointer
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetTokenInformation
MakeAbsoluteSD
DuplicateTokenEx
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
IsProcessorFeaturePresent
OpenProcess
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount64
GlobalMemoryStatusEx
GetSystemTime
GetSystemTimeAsFileTime
GetLocalTime
InitializeSListHead
MFTEnumEx
MFCreateDXGISurfaceBuffer
MFCreateDXGIDeviceManager
MFShutdown
MFCreateSample
MFCreateMemoryBuffer
MFStartup
MFCreateAttributes
MFCreateFile
MFCreateMediaType
MFCreateAlignedMemoryBuffer
SetProcessDpiAwareness
ord157
ord158
ord175
ord176
ord173
ord2002
ord1060
DCompositionCreateDevice2
ord2000
GetApplicationUserModelIdFromToken
ParseApplicationUserModelId
GetPackageFullNameFromToken
FindPackagesByPackageFamily
PolicyManager_GetPolicyInt
SebEnumerateEventsByType
SebSignalEvent
ord1
ord3
ord2
RegGetValueW
RegOpenCurrentUser
RegCloseKey
GetWindowRect
IsWindowVisible
EnumWindows
GetWindowTextW
GetPropW
GetDesktopWindow
GetForegroundWindow
GetWindowLongW
GetWindowThreadProcessId
GetClientRect
ScreenToClient
DispatchMessageW
TranslateMessage
SendMessageW
PeekMessageW
GetAncestor
PowerSettingUnregisterNotification
PowerSettingRegisterNotification
RtlQueryPackageClaims
RtlUpcaseUnicodeChar
RtlPublishWnfStateData
ZwQuerySystemInformation
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlSubscribeWnfStateChangeNotification
RtlQueryWnfStateData
ZwClose
ZwOpenKey
RtlInitUnicodeString
RtlFreeHeap
RtlGetNativeSystemInformation
ZwEnumerateKey
RtlReAllocateHeap
NtQueryInformationProcess
RtlAllocateHeap
RtlInitUnicodeStringEx
RtlCompareUnicodeString
RtlNtStatusToDosErrorNoTeb
NtQueryInformationToken
ZwQueryValueKey
PulseEvent
RegisterWaitForSingleObject
IsWow64Process2
ExpandEnvironmentStringsW
QueueUserWorkItem
UnregisterWaitEx
CreateFileW
DeleteFileW
CreateDirectoryW
WriteFile
FindFirstFileW
FindClose
ReadFile
GetFileAttributesW
GetFileSizeEx
GetTempFileNameW
GetDiskFreeSpaceExW
FindNextFileW
RoGetMatchingRestrictedErrorInfo
RoReportFailedDelegate
IsErrorPropagationEnabled
RoGetAgileReference
UuidCreate
RpcRevertToSelf
RpcImpersonateClient
FileTimeToSystemTime
SystemTimeToFileTime
CreateSemaphoreW
WaitForMultipleObjects
RegOpenKeyW
SHCreateMemStream
VariantInit
CreateRandomAccessStreamOverStream
CreateDXGIFactory1
CreateDXGIFactory2
QueryFullProcessImageNameW
IntersectRect
PtInRect
PathFileExistsW
CryptReleaseContext
CryptAcquireContextW
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptCreateHash
D3D11CreateDevice
GetTimeFormatEx
GetDateFormatEx
BCryptGetProperty
BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptHashData
BCryptOpenAlgorithmProvider
BCryptFinishHash
BCryptCreateHash
MFCreateSinkWriterFromURL
MFCreateSinkWriterFromMediaSink
MFCreateSourceReaderFromMediaSource
ReadProcessMemory
CryptBinaryToStringW
PathCchCombine
GetTempPath2W
CopyFileW
ord69
ord66
ord68
ord67
?_Xlength_error@std@@YAXPEBD@Z
_finite
PicRetrieveFileInfo
PicFreeFileInfo
ResolveDelayLoadedAPI
DelayLoadFailureHook
GetDIBits
DeleteObject
CreateCompatibleDC
DeleteDC
ShellExecuteW
ShellExecuteExW
GetClassLongPtrW
GetCursorInfo
MonitorFromWindow
GetIconInfo
DestroyIcon
SetupDiGetDevicePropertyW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
CapabilityCheck
GlobalGetAtomNameW
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ