Taskmgr[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Taskmgr.exe
Size

997KB
MD5

e09ec6f27902f64e629cfce2f584e0da
SHA1

4b3f8010b757626b52c2f0b39e28288526531c4b
SHA256

c3741520c9e238f4402a4258e2f8df5019c47e3b303b150ff11292a6cfb5782b
SHA512

f910bfb1ce36b3d2990e034c6c6005265d5e5b9cff2a9a48780d52df8026a8b2458c1c549db3ccc0531ed29f8857f0c7ed0b35cc402c98a4a872751faf6c738d
SSDEEP

24576:82zDKrnQJ70me6QnbQ+RBsWu6BTWL7yL1T5mnBb/:82zGYAAQnbQjaiL2L1T5mBb

Score

1^/10

Malware Config

Signatures

Files

Taskmgr.exe
.exe windows:10 windows x86 arch:x86

1e7af74202b7f59f9c08832d68d2fcb7

Code Sign

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:ed
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:29

Not After

02/12/2021, 21:29

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ac:a7:7a:4c:84:aa:71:0d:6c:cb:c4:9b:14:3b:62:11:e2:93:12:05:51:09:0f:b0:44:43:15:7f:dc:0a:1f:d6
Signer

Actual PE Digest

ac:a7:7a:4c:84:aa:71:0d:6c:cb:c4:9b:14:3b:62:11:e2:93:12:05:51:09:0f:b0:44:43:15:7f:dc:0a:1f:d6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Taskmgr.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback
_c_exit
_initterm_e
_initterm

api-ms-win-crt-private-l1-1-0

_o_free
_o_iswalpha
_o_iswdigit
_o_iswspace
_o_malloc
_o_memcpy_s
_o_realloc
_o_terminate
_o_towupper
memmove
_o_wcstod
_o_wcstok_s
_o_wcstoul
__current_exception
__current_exception_context
_except_handler4_common
_o_floor
_o_exit
_o_ceil
_o_bsearch
_o__wcsnicmp
_o__wcsicmp
_o__wtol
_o__wtoi
_o__ui64tow_s
_o__strnicmp
_o__stricmp
_CxxThrowException
wcsrchr
wcsstr
wcschr
__std_terminate
__CxxFrameHandler3
_o__set_new_mode
_o__set_fmode
_o__set_errno
_o__set_app_type
_o__seh_filter_exe
_o__register_onexit_function
_o__purecall
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
_o__initialize_wide_environment
_o__initialize_onexit_table
_o__i64tow_s
_o__get_wide_winmain_command_line
_o__get_errno
_o__exit
_o__errno
_o__crt_atexit
_o__controlfp_s
_o__configure_wide_argv
_o__configthreadlocale
_o__CIsqrt
_o__cexit
_o__callnewh
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf
_o___stdio_common_vsnprintf_s
_o___stdio_common_vfwprintf_s
_o___std_exception_destroy
_o___std_exception_copy
_o___p__commode
_o___acrt_iob_func
memcmp
memcpy

api-ms-win-crt-string-l1-1-0

memset

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetExitCodeThread
ProcessIdToSessionId
GetThreadPriority
CreateThread
TerminateProcess
GetCurrentProcess
SetThreadPriority
GetStartupInfoW
GetCurrentThread
CreateProcessW
GetProcessTimes
OpenProcessToken
GetCurrentThreadId
GetCurrentProcessId
SetPriorityClass
GetPriorityClass
SetProcessShutdownParameters

api-ms-win-core-sysinfo-l1-1-0

GetComputerNameExW
GetSystemTimeAsFileTime
GlobalMemoryStatusEx
GetSystemDirectoryW
GetTickCount64
GetLogicalProcessorInformationEx
GetVersionExW
GetSystemInfo
GetLocalTime
GetSystemTime

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList
InitializeSListHead

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
DebugBreak
OutputDebugStringA
OutputDebugStringW

api-ms-win-core-errorhandling-l1-1-0

GetLastError
RaiseException
SetUnhandledExceptionFilter
SetLastError
SetErrorMode
GetErrorMode
UnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent
OpenProcess
GetProcessMitigationPolicy

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExW
FreeLibrary
GetModuleFileNameA
GetModuleHandleExW
GetModuleHandleA
GetModuleFileNameW
LoadStringW
GetModuleHandleW
GetProcAddress

api-ms-win-core-heap-l1-1-0

HeapSize
HeapReAlloc
HeapAlloc
HeapFree
GetProcessHeap
HeapSetInformation

api-ms-win-core-synch-l1-1-0

ReleaseSemaphore
OpenSemaphoreW
ReleaseSRWLockExclusive
InitializeCriticalSectionEx
AcquireSRWLockExclusive
InitializeSRWLock
AcquireSRWLockShared
ResetEvent
CreateEventExW
ReleaseSRWLockShared
DeleteCriticalSection
WaitForSingleObjectEx
CreateMutexExW
InitializeCriticalSectionAndSpinCount
ReleaseMutex
CreateMutexW
EnterCriticalSection
CreateEventW
LeaveCriticalSection
TryEnterCriticalSection
CreateSemaphoreExW
WaitForSingleObject
OpenEventW
SetEvent
InitializeCriticalSection

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolTimer
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CreateThreadpoolTimer

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW
LoadLibraryA

api-ms-win-core-localization-l1-2-0

FormatMessageW
GetLocaleInfoEx
GetThreadPreferredUILanguages
GetLocaleInfoW
GetThreadUILanguage

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-eventing-provider-l1-1-0

EventRegister
EventSetInformation
EventUnregister
EventWriteTransfer

api-ms-win-core-registry-l1-1-0

RegCloseKey
RegSetValueExW
RegQueryInfoKeyW
RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
RegNotifyChangeKeyValue
RegQueryValueExW
RegGetValueW
RegEnumValueW

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
CompareStringEx
CompareStringOrdinal

api-ms-win-core-heap-l2-1-0

LocalAlloc
LocalFree

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize
Sleep
InitOnceComplete

api-ms-win-security-base-l1-1-0

SetTokenInformation
CreateWellKnownSid
EqualSid
AdjustTokenPrivileges
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
GetLengthSid
IsWellKnownSid
GetTokenInformation
CopySid

api-ms-win-core-sysinfo-l1-2-0

GetNativeSystemInfo
GetSystemFirmwareTable

api-ms-win-core-datetime-l1-1-0

GetDateFormatW
GetTimeFormatW

api-ms-win-core-io-l1-1-1

CancelSynchronousIo

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-power-setting-l1-1-0

PowerSettingRegisterNotification
PowerSettingUnregisterNotification

api-ms-win-core-processenvironment-l1-1-0

GetCurrentDirectoryW
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA

api-ms-win-core-timezone-l1-1-0

SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
FileTimeToSystemTime

oleaut32

SetErrorInfo
SysFreeString
SysAllocStringLen
SysAllocString
GetErrorInfo
SysStringLen
SafeArrayPutElement
SafeArrayDestroy
SafeArrayCreateVector
VariantClear
VariantInit

api-ms-win-core-memory-l1-1-1

SetProcessWorkingSetSize
VirtualUnlock

api-ms-win-core-file-l1-2-0

GetVolumePathNamesForVolumeNameW
GetTempPathW

api-ms-win-core-path-l1-1-0

PathCchCombine
PathCchCanonicalize
PathCchAppend

api-ms-win-core-file-l1-1-0

CreateFileW
QueryDosDeviceW
GetLogicalDriveStringsW
CompareFileTime
GetFileAttributesExW
GetLongPathNameW
GetFileType
FindFirstVolumeW
FindCloseChangeNotification
FindNextFileW
FindFirstFileW
FindClose
FindNextChangeNotification
FindFirstChangeNotificationW
FindNextVolumeW
GetDriveTypeW
FindVolumeClose

api-ms-win-core-wow64-l1-1-0

IsWow64Process

api-ms-win-core-version-l1-1-0

GetFileVersionInfoExW
VerQueryValueW
GetFileVersionInfoSizeExW

api-ms-win-core-string-l2-1-0

CharLowerW
CharUpperBuffW

api-ms-win-core-memory-l1-1-0

ReadProcessMemory

api-ms-win-core-version-l1-1-1

GetFileVersionInfoW
GetFileVersionInfoSizeW

api-ms-win-core-datetime-l1-1-2

GetDurationFormatEx

api-ms-win-core-datetime-l1-1-1

GetDateFormatEx

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW

api-ms-win-core-sysinfo-l1-2-2

GetProcessorSystemCycleTime

api-ms-win-core-processtopology-l1-1-0

GetProcessGroupAffinity

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-core-sysinfo-l1-2-1

GetPhysicallyInstalledSystemMemory

api-ms-win-core-localization-l2-1-0

GetNumberFormatEx

api-ms-win-core-string-l2-1-1

SHLoadIndirectString

api-ms-win-core-wow64-l1-1-1

IsWow64Process2

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError
RoTransformError

api-ms-win-core-kernel32-legacy-l1-1-0

MulDiv
GetComputerNameW

api-ms-win-core-threadpool-legacy-l1-1-0

DeleteTimerQueueTimer
QueueUserWorkItem
CreateTimerQueueTimer

api-ms-win-core-shlwapi-legacy-l1-1-0

PathStripPathW
PathIsPrefixW
PathIsRelativeW
PathRemoveExtensionW
SHExpandEnvironmentStringsW
PathRemoveBlanksW
PathFileExistsW
PathRemoveBackslashW
PathGetArgsW

api-ms-win-core-windowserrorreporting-l1-1-3

RegisterApplicationRestart

api-ms-win-core-pcw-l1-1-0

PcwCreateQuery
PcwCollectData
PcwAddQueryItem

nsi

NsiGetParameter

comctl32

ImageList_CoCreateInstance

ntdll

EtwCheckCoverage
RtlNumberOfSetBitsUlongPtr
NtPowerInformation
NtQuerySystemInformation
RtlTimeToElapsedTimeFields
NtQueryInformationProcess
LdrQueryProcessModuleInformation
NtSetInformationFile
RtlAllocateHeap
RtlFreeHeap
RtlImageNtHeader
RtlSecondsSince1970ToTime
NtSetInformationProcess
RtlNtStatusToDosError
NtQueryInformationThread
RtlInitUnicodeString
NtQueryTimerResolution
NtQueryObject
NtQueryInformationFile
RtlIpv4AddressToStringExW
RtlIpv6AddressToStringExW
RtlCheckPortableOperatingSystem
NtOpenFile
RtlCompareUnicodeString
RtlNtStatusToDosErrorNoTeb
NtQueryInformationToken
ZwQueryWnfStateData

uxtheme

CloseThemeData
EndPanningFeedback
BeginPanningFeedback
UpdatePanningFeedback
OpenThemeData
GetThemeColor
GetThemeInt
SetWindowTheme

shlwapi

StrToIntExW
ord548
ord199
ord219
StrRChrIW
PathRemoveArgsW
SHCreateStreamOnFileEx
ord278
StrRetToBufW
StrTrimW
ord176
ord16
AssocQueryStringW
PathIsNetworkPathW
ord437
ord629
StrStrW
StrStrIW
ord618
SHCreateStreamOnFileW

shell32

Shell_NotifyIconW
SHGetPropertyStoreForWindow
SHGetSpecialFolderPathW
SHGetFileInfoW
SHGetIDListFromObject
ord4
ord2
SHGetKnownFolderIDList
ord727
Shell_GetCachedImageIndexW
SHGetKnownFolderItem
DuplicateIcon
ord155
SHBindToParent
ord61
SHOpenFolderAndSelectItems
SHParseDisplayName
ord75
ShellExecuteExW
ShellExecuteW
CommandLineToArgvW
SHEvaluateSystemCommandTemplate

credui

CredUIPromptForCredentialsW

gdi32

CreatePen
MoveToEx
GetTextExtentPointW
D3DKMTCloseAdapter
D3DKMTOpenAdapterFromLuid
D3DKMTQueryAdapterInfo
CreateDIBSection
DeleteObject
SelectObject
GetDeviceCaps
LineTo
Rectangle

user32

GetMenuItemInfoW
AppendMenuW
SetWindowTextW
LoadMenuW
InvalidateRect
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetMessagePos
GetScrollPos
PtInRect
MapWindowPoints
ord2521
GetDoubleClickTime
GetCurrentInputMessageSource
TrackPopupMenu
CreateDialogParamW
GetWindowTextLengthW
EnableWindow
GetDlgItem
GetWindowTextW
GetDlgItemTextW
EndDialog
SetDlgItemTextW
DialogBoxParamW
SwitchToThisWindow
MessageBeep
GetLastActivePopup
ShowWindowAsync
GetParent
GetForegroundWindow
InsertMenuW
CreatePopupMenu
DestroyMenu
TrackPopupMenuEx
RemoveMenu
RedrawWindow
SetWindowLongW
GetCursorPos
CreateWindowExW
CloseGestureInfoHandle
GetGestureInfo
SetGestureConfig
SystemParametersInfoW
CopyRect
EqualRect
IsZoomed
ReleaseDC
GetDC
DestroyIcon
LoadImageW
GetWindowLongW
GetKeyState
GetSystemMetrics
KillTimer
PostQuitMessage
DestroyWindow
IsWindowEnabled
OpenIcon
SetFocus
IsWindow
GetFocus
PostMessageW
DefWindowProcW
IsIconic
SetTimer
SendMessageW
LoadIconW
GetClientRect
UpdateWindow
ShowWindow
SetMenu
GetMenu
ChangeWindowMessageFilterEx
SetForegroundWindow
CreateWindowInBand
RegisterClassExW
CheckMenuRadioItem
GetSubMenu
GetMenuItemID
GetMenuItemCount
CheckMenuItem
EnableMenuItem
DeleteMenu
SetWindowPos
GetMonitorInfoW
MonitorFromPoint
GetWindowRect
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
MessageBoxW
SendMessageTimeoutW
AllowSetForegroundWindow
GetWindowThreadProcessId
FindWindowW
SetMenuDefaultItem
GetSysColor
MsgWaitForMultipleObjectsEx
PeekMessageW
CopyIcon
UnregisterClassW
GetClassLongW
GetClassNameW
GetWindow
IsWindowVisible
GhostWindowFromHungWindow
IsHungAppWindow
HungWindowFromGhostWindow
OpenDesktopW
GetThreadDesktop
SetThreadDesktop
EnumDesktopWindows
CloseDesktop
EnumDesktopsW
GetProcessWindowStation
GetDpiAwarenessContextForProcess
AreDpiAwarenessContextsEqual
GetGuiResources
RegisterDeviceNotificationW
GetMenuState
UnregisterDeviceNotification
GetPropW
InternalGetWindowText
GetWindowBand
ord2574
GetWindowCompositionAttribute
ord2573
ord2569
RegisterWindowMessageW

duser

GetGadgetRect
SetGadgetStyle
ForwardGadgetMessage

dui70

?SetForegroundColor@Element@DirectUI@@QAEJK@Z
InitProcessPriv
InitThread
UnInitThread
UnInitProcessPriv
?GetKeyFocusedElement@HWNDElement@DirectUI@@SGPAVElement@2@XZ
??0HWNDElement@DirectUI@@QAE@XZ
??1HWNDElement@DirectUI@@UAE@XZ
?Destroy@NativeHWNDHost@DirectUI@@QAEXXZ
?WndProc@HWNDElement@DirectUI@@UAEJPAUHWND__@@IIJ@Z
?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z
?GetRoot@Element@DirectUI@@QAEPAV12@XZ
StrToID
?KeyWithinProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?Destroy@Layout@DirectUI@@QAEXXZ
?SetLayout@Element@DirectUI@@QAEJPAVLayout@2@@Z
?Create@GridLayout@DirectUI@@SGJHHPAPAVLayout@2@@Z
?HasChildren@Element@DirectUI@@QAE_NXZ
??0IProvider@DirectUI@@QAE@XZ
?AdviseEventRemoved@ElementProvider@DirectUI@@UAGJHPAUtagSAFEARRAY@@@Z
?AdviseEventAdded@ElementProvider@DirectUI@@UAGJHPAUtagSAFEARRAY@@@Z
?get_FragmentRoot@ElementProvider@DirectUI@@UAGJPAPAUIRawElementProviderFragmentRoot@@@Z
?SetFocus@ElementProvider@DirectUI@@UAGJXZ
?GetEmbeddedFragmentRoots@ElementProvider@DirectUI@@UAGJPAPAUtagSAFEARRAY@@@Z
?get_BoundingRectangle@ElementProvider@DirectUI@@UAGJPAUUiaRect@@@Z
?GetRuntimeId@ElementProvider@DirectUI@@UAGJPAPAUtagSAFEARRAY@@@Z
?Navigate@ElementProvider@DirectUI@@UAGJW4NavigateDirection@@PAPAUIRawElementProviderFragment@@@Z
?ShowContextMenu@ElementProvider@DirectUI@@UAGJXZ
?get_HostRawElementProvider@ElementProvider@DirectUI@@UAGJPAPAUIRawElementProviderSimple@@@Z
?GetPropertyValue@ElementProvider@DirectUI@@UAGJHPAUtagVARIANT@@@Z
?get_ProviderOptions@ElementProvider@DirectUI@@UAGJPAW4ProviderOptions@@@Z
?TossElement@ElementProvider@DirectUI@@UAEXXZ
?QueryInterface@ElementProvider@DirectUI@@UAGJABU_GUID@@PAPAX@Z
?Create@ElementProvider@DirectUI@@SGJPAVElement@2@PAVInvokeHelper@2@PAPAV12@@Z
?Create@HWNDElementProvider@DirectUI@@SGJPAVHWNDElement@2@PAVInvokeHelper@2@PAPAV12@@Z
?Find@ElementProviderManager@DirectUI@@SGPAVElementProvider@2@PAVElement@2@@Z
??0ProviderProxy@DirectUI@@IAE@XZ
??0ElementProxy@DirectUI@@IAE@XZ
??1ElementProvider@DirectUI@@UAE@XZ
??0RefcountBase@DirectUI@@QAE@XZ
??0ElementProvider@DirectUI@@QAE@XZ
?GetInvokeHelper@InvokeManager@DirectUI@@SGJPAPAVInvokeHelper@2@@Z
?Init@ProviderProxy@DirectUI@@MAEXPAVElement@2@@Z
?CreatePatternProvider@Schema@DirectUI@@SGJW4Pattern@12@PAVElementProvider@2@PAPAUIUnknown@@@Z
?IsPatternSupported@ElementProxy@DirectUI@@IAEJW4Pattern@Schema@2@PA_N@Z
?AddRef@ElementProvider@DirectUI@@UAGKXZ
?TossPatternProvider@ElementProvider@DirectUI@@QAEXW4Pattern@Schema@2@@Z
??1RefcountBase@DirectUI@@UAE@XZ
?DoInvokeArgs@ElementProvider@DirectUI@@QAEJHP6GPAVProviderProxy@2@PAVElement@2@@ZPAD@Z
?GetElement@ElementProvider@DirectUI@@UAEPDVElement@2@XZ
?AddRef@RefcountBase@DirectUI@@QAEJXZ
?Release@RefcountBase@DirectUI@@QAEJXZ
?Init@ElementProxy@DirectUI@@MAEXPAVElement@2@@Z
?DoMethod@ElementProxy@DirectUI@@UAEJHPAD@Z
?GetProperty@ElementProxy@DirectUI@@IAEJPAUtagVARIANT@@H@Z
?Release@ElementProvider@DirectUI@@UAGKXZ
?Init@ElementProvider@DirectUI@@MAEJPAVElement@2@PAVInvokeHelper@2@@Z
??1AutoLock@DirectUI@@QAE@XZ
??0AutoLock@DirectUI@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z
?DoInvoke@ElementProvider@DirectUI@@IAAJHZZ
?PatternFromPatternId@Schema@DirectUI@@SG?AW4Pattern@12@H@Z
?DataGridControlType@Schema@DirectUI@@2HA
?SelectionPattern@Schema@DirectUI@@2HA
?TablePattern@Schema@DirectUI@@2HA
?InvokePattern@Schema@DirectUI@@2HA
?TableItemPattern@Schema@DirectUI@@2HA
?IsControlElementProperty@Schema@DirectUI@@2HA
?IsContentElementProperty@Schema@DirectUI@@2HA
?TreeItemControlType@Schema@DirectUI@@2HA
?ListItemControlType@Schema@DirectUI@@2HA
?ControlTypeProperty@Schema@DirectUI@@2HA
?GridPattern@Schema@DirectUI@@2HA
?SelectionItemPattern@Schema@DirectUI@@2HA
?ExpandCollapsePattern@Schema@DirectUI@@2HA
?GridItemPattern@Schema@DirectUI@@2HA
?UiaRaiseAutomationPropertyChangedEvent@Schema@DirectUI@@2P6GJPAUIRawElementProviderSimple@@HUtagVARIANT@@1@ZA
?GetAccessible@Element@DirectUI@@QAE_NXZ
?WantPropertyEvent@EventManager@DirectUI@@SG_NH@Z
?FWantAnyEvent@EventManager@DirectUI@@SG_NPAVElement@2@@Z
?OnReceivedDialogFocus@Button@DirectUI@@UAE_NPAUIDialogElement@2@@Z
?OnLostDialogFocus@Button@DirectUI@@UAE_NPAUIDialogElement@2@@Z
?DefaultAction@Button@DirectUI@@UAEJXZ
?OnInput@Button@DirectUI@@UAEXPAUInputEvent@2@@Z
??1Button@DirectUI@@UAE@XZ
??0Button@DirectUI@@QAE@XZ
?GetClassInfoPtr@Button@DirectUI@@SGPAUIClassInfo@2@XZ
?Register@Button@DirectUI@@SGJXZ
?KeyFocusedProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?OnPropertyChanged@Button@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?MouseWithinProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?GetBackgroundColor@Element@DirectUI@@QAEPBUFill@2@PAPAVValue@2@@Z
?Initialize@Button@DirectUI@@QAEJIPAVElement@2@PAK@Z
?SetFontStyle@Element@DirectUI@@QAEJH@Z
?SetFontWeight@Element@DirectUI@@QAEJH@Z
?GetFontStyle@Element@DirectUI@@QAEHXZ
?GetMouseWithin@Element@DirectUI@@QAE_NXZ
?SetActive@Element@DirectUI@@QAEJH@Z
?SetID@Element@DirectUI@@QAEJPBG@Z
?SetPressed@Button@DirectUI@@QAEJ_N@Z
?GetBoolFalse@Value@DirectUI@@SGPAV12@XZ
?SetBorderThickness@Element@DirectUI@@QAEJHHHH@Z
?GetContentString@Element@DirectUI@@QAEPBGPAPAVValue@2@@Z
?SetAnimation@Element@DirectUI@@QAEJH@Z
?HeightProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?LayoutPosProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?RemoveLocalValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZ@Z
?HasPadding@Element@DirectUI@@QAE_NXZ
?SetBorderColor@Element@DirectUI@@QAEJK@Z
?HasBorder@Element@DirectUI@@QAE_NXZ
?GetType@Value@DirectUI@@QBEHXZ
?CustomProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?GetValue@Element@DirectUI@@QAEPAVValue@2@P6GPBUPropertyInfo@2@XZHPAUUpdateCache@2@@Z
?SetClass@Element@DirectUI@@QAEJPBG@Z
?CreateInt@Value@DirectUI@@SGPAV12@HW4DynamicScaleValue@@@Z
?IsDestroyed@Element@DirectUI@@QAE_NXZ
?OnNotify@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z
?OnPropertyChanged@HWNDHost@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?GetClassInfoPtr@HWNDHost@DirectUI@@SGPAUIClassInfo@2@XZ
?Register@HWNDHost@DirectUI@@SGJXZ
?OnInput@HWNDHost@DirectUI@@UAEXPAUInputEvent@2@@Z
?Release@Element@DirectUI@@QAGKXZ
?Initialize@HWNDHost@DirectUI@@QAEJIIPAVElement@2@PAK@Z
??1HWNDHost@DirectUI@@UAE@XZ
??0HWNDHost@DirectUI@@QAE@XZ
?GetEnabled@Element@DirectUI@@QAE_NXZ
?SetAccName@Element@DirectUI@@QAEJPBG@Z
?GetDPI@Element@DirectUI@@QAEHXZ
?SetEnabled@Element@DirectUI@@QAEJ_N@Z
?UpdateSheets@DUIXmlParser@DirectUI@@QAEJPAVElement@2@@Z
?SetMinSize@Element@DirectUI@@QAEJHH@Z
?IsDescendent@Element@DirectUI@@QAE_NPAV12@@Z
?Add@Element@DirectUI@@QAEJPAV12@@Z
?SetAccDesc@Element@DirectUI@@QAEJPBG@Z
?SetTooltip@Element@DirectUI@@QAEJ_N@Z
?GetLocation@Element@DirectUI@@QAEPBUtagPOINT@@PAPAVValue@2@@Z
?SetX@Element@DirectUI@@QAEJH@Z
?GetPadding@Element@DirectUI@@QAEPBUtagRECT@@PAPAVValue@2@@Z
?GetBorderThickness@Element@DirectUI@@QAEPBUtagRECT@@PAPAVValue@2@@Z
?SetContentAlign@Element@DirectUI@@QAEJH@Z
?ContentProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?SetValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZHPAVValue@2@@Z
?CreateGraphic@Value@DirectUI@@SGPAV12@PAUHICON__@@_N11@Z
??1CCListView@DirectUI@@UAE@XZ
?PostCreate@CCBase@DirectUI@@MAEXPAUHWND__@@@Z
?OnReceivedDialogFocus@CCBase@DirectUI@@UAE_NPAUIDialogElement@2@@Z
?OnLostDialogFocus@CCBase@DirectUI@@UAE_NPAUIDialogElement@2@@Z
?OnCustomDraw@CCBase@DirectUI@@UAE_NPAUtagNMCUSTOMDRAWINFO@@PAJ@Z
?EraseBkgnd@HWNDHost@DirectUI@@MAE_NPAUHDC__@@PAJ@Z
?SetWindowDirection@HWNDHost@DirectUI@@UAEXPAUHWND__@@@Z
?OnWindowStyleChanged@HWNDHost@DirectUI@@UAEXIPBUtagSTYLESTRUCT@@@Z
?OnCtrlThemeChanged@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z
?OnSinkThemeChanged@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z
?OnSysChar@HWNDHost@DirectUI@@UAE_NG@Z
?DefaultAction@CCBase@DirectUI@@UAEJXZ
?GetAccessibleImpl@HWNDHost@DirectUI@@UAEJPAPAUIAccessible@@@Z
?GetKeyFocused@HWNDHost@DirectUI@@UAE_NXZ
?OnUnHosted@HWNDHost@DirectUI@@MAEXPAVElement@2@@Z
?OnHosted@HWNDHost@DirectUI@@MAEXPAVElement@2@@Z
?MessageCallback@HWNDHost@DirectUI@@UAEIPAUtagGMSG@@@Z
?GetContentSize@CCListView@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z
?Paint@HWNDHost@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z
?OnEvent@HWNDHost@DirectUI@@UAEXPAUEvent@2@@Z
?OnDestroy@HWNDHost@DirectUI@@UAEXXZ
?OnPropertyChanged@CCBase@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?GetClassInfoPtr@CCListView@DirectUI@@SGPAUIClassInfo@2@XZ
?Register@CCListView@DirectUI@@SGJXZ
?OnInput@CCBase@DirectUI@@UAEXPAUInputEvent@2@@Z
?SetKeyFocus@HWNDHost@DirectUI@@UAEXXZ
?OnNotify@CCBase@DirectUI@@UAE_NIIJPAJ@Z
?OnMessage@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z
?GetRootRelativeBounds@Element@DirectUI@@QAEJPAUtagRECT@@@Z
?OnAdjustWindowSize@HWNDHost@DirectUI@@UAEHHHI@Z
?GetHWND@HWNDHost@DirectUI@@UAEPAUHWND__@@XZ
?SetWinStyle@CCBase@DirectUI@@QAEJH@Z
?Initialize@CCListView@DirectUI@@QAEJIPAVElement@2@PAK@Z
?CreateHWND@CCBase@DirectUI@@UAEPAUHWND__@@PAU3@@Z
??0CCListView@DirectUI@@QAE@XZ
??0ScrollViewer@DirectUI@@QAE@XZ
??1ScrollViewer@DirectUI@@UAE@XZ
?OnPropertyChanging@BaseScrollViewer@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanged@ScrollViewer@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnInput@BaseScrollViewer@DirectUI@@UAEXPAUInputEvent@2@@Z
?OnEvent@BaseScrollViewer@DirectUI@@UAEXPAUEvent@2@@Z
?Add@BaseScrollViewer@DirectUI@@UAEJPAPAVElement@2@I@Z
?CreateScrollBars@ScrollViewer@DirectUI@@MAEJXZ
?AddChildren@ScrollViewer@DirectUI@@MAEJXZ
?OnListenerAttach@BaseScrollViewer@DirectUI@@UAEXPAVElement@2@@Z
?OnListenerDetach@BaseScrollViewer@DirectUI@@UAEXPAVElement@2@@Z
?OnListenedPropertyChanging@BaseScrollViewer@DirectUI@@UAE_NPAVElement@2@PBUPropertyInfo@2@HPAVValue@2@2@Z
?OnListenedPropertyChanged@ScrollViewer@DirectUI@@UAEXPAVElement@2@PBUPropertyInfo@2@HPAVValue@2@2@Z
?OnListenedInput@BaseScrollViewer@DirectUI@@UAEXPAVElement@2@PAUInputEvent@2@@Z
?OnListenedEvent@BaseScrollViewer@DirectUI@@UAEXPAVElement@2@PAUEvent@2@@Z
?GetClassInfoPtr@Expando@DirectUI@@SGPAUIClassInfo@2@XZ
?GetClassInfoPtr@ScrollViewer@DirectUI@@SGPAUIClassInfo@2@XZ
?Initialize@BaseScrollViewer@DirectUI@@QAEJPAVElement@2@PAK@Z
??0Element@DirectUI@@QAE@XZ
?_PostEvent@Element@DirectUI@@AAEXPAUEvent@2@H@Z
?Register@Element@DirectUI@@SGJXZ
?Register@ScrollViewer@DirectUI@@SGJXZ
?GetHScroll@ScrollViewer@DirectUI@@MAEPAVBaseScrollBar@2@XZ
?GetVScroll@ScrollViewer@DirectUI@@MAEPAVBaseScrollBar@2@XZ
?SetXScrollable@BaseScrollViewer@DirectUI@@QAEJ_N@Z
?SetPadding@Element@DirectUI@@QAEJHHHH@Z
?SetXOffset@BaseScrollViewer@DirectUI@@QAEJH@Z
?XOffsetProp@BaseScrollViewer@DirectUI@@SGPBUPropertyInfo@2@XZ
?ShiftChild@Element@DirectUI@@QAEJII@Z
?GetHWND@HWNDElement@DirectUI@@UAEPAUHWND__@@XZ
?SetBackgroundColor@Element@DirectUI@@QAEJK@Z
?GetSelected@Element@DirectUI@@QAE_NXZ
?GetVisible@Element@DirectUI@@QAE_NXZ
?Initialize@Element@DirectUI@@QAEJIPAV12@PAK@Z
?SetHeight@Element@DirectUI@@QAEJH@Z
?Insert@Element@DirectUI@@QAEJPAV12@I@Z
?GetSize@Value@DirectUI@@QAEPBUtagSIZE@@XZ
?ExtentProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?OnInput@Element@DirectUI@@UAEXPAUInputEvent@2@@Z
?GetDesiredSize@Element@DirectUI@@QAEPBUtagSIZE@@XZ
?GetInt@Value@DirectUI@@QAEHXZ
?GetWidth@Element@DirectUI@@QAEHXZ
??1DCSurface@DirectUI@@UAE@XZ
??0DCSurface@DirectUI@@QAE@PAUHDC__@@@Z
?SetValue@Element@DirectUI@@QAEJPBUPropertyInfo@2@HPAVValue@2@@Z
?SetAccValue@Element@DirectUI@@QAEJPBG@Z
?SetWidth@Element@DirectUI@@QAEJH@Z
?RemoveListener@Element@DirectUI@@QAEXPAUIElementListener@2@@Z
?SetContentString@Element@DirectUI@@QAEJPBG@Z
?GetDisplayNode@Element@DirectUI@@QAEPAUHGADGET__@@XZ
?Init@NavReference@DirectUI@@QAEXPAVElement@2@PAUtagRECT@@@Z
?GetKeyWithin@Element@DirectUI@@QAE_NXZ
?OnEvent@Element@DirectUI@@UAEXPAUEvent@2@@Z
?Remove@Element@DirectUI@@QAEJPAV12@@Z
?AddListener@Element@DirectUI@@QAEJPAUIElementListener@2@@Z
??1Element@DirectUI@@UAE@XZ
?OnPropertyChanged@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnGroupChanged@Element@DirectUI@@UAEXH_N@Z
?OnDestroy@Element@DirectUI@@UAEXXZ
?UpdateTooltip@Element@DirectUI@@MAEXPAV12@@Z
?ActivateTooltip@Element@DirectUI@@MAEXPAV12@K@Z
?RemoveTooltip@Element@DirectUI@@MAEXPAV12@@Z
?GetAccessibleImpl@Element@DirectUI@@UAEJPAPAUIAccessible@@@Z
?ExpandCollapse_ExpandCollapseState_Property@Schema@DirectUI@@2HA
?SetSelected@Element@DirectUI@@QAEJ_N@Z
?CreateBool@Value@DirectUI@@SGPAV12@_N@Z
?SetExpanded@Expandable@DirectUI@@QAEJ_N@Z
?GetExpanded@Expandable@DirectUI@@QAE_NXZ
?SortChildren@Element@DirectUI@@QAEJP6AHPBX0@Z@Z
?GetBool@Value@DirectUI@@QAE_NXZ
?GetValue@Element@DirectUI@@QAEPAVValue@2@PBUPropertyInfo@2@HPAUUpdateCache@2@@Z
?GetChildren@Element@DirectUI@@QAEPAV?$DynamicArray@PAVElement@DirectUI@@$0A@@2@PAPAVValue@2@@Z
?GetClassInfoPtr@Element@DirectUI@@SGPAUIClassInfo@2@XZ
?GetParent@Element@DirectUI@@QAEPAV12@XZ
?GetClass@Element@DirectUI@@QAEPBGPAPAVValue@2@@Z
?GetIndex@Element@DirectUI@@QAEHXZ
?AssertPIZeroRef@ClassInfoBase@DirectUI@@UBEXXZ
?GetChildren@ClassInfoBase@DirectUI@@UBEHXZ
?RemoveChild@ClassInfoBase@DirectUI@@UAEXXZ
?AddChild@ClassInfoBase@DirectUI@@UAEXXZ
?IsGlobal@ClassInfoBase@DirectUI@@UBE_NXZ
?GetModule@ClassInfoBase@DirectUI@@UBEPAUHINSTANCE__@@XZ
?IsSubclassOf@ClassInfoBase@DirectUI@@UBE_NPAUIClassInfo@2@@Z
?IsValidProperty@ClassInfoBase@DirectUI@@UBE_NPBUPropertyInfo@2@@Z
?GetName@ClassInfoBase@DirectUI@@UBEPBGXZ
?GetGlobalIndex@ClassInfoBase@DirectUI@@UBEIXZ
?GetPICount@ClassInfoBase@DirectUI@@UBEIXZ
?GetByClassIndex@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z
?EnumPropertyInfo@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z
?Release@ClassInfoBase@DirectUI@@UAEHXZ
?AddRef@ClassInfoBase@DirectUI@@UAEXXZ
?_OnUIStateChanged@HWNDElement@DirectUI@@MAEXGG@Z
?GetWindowClassNameAndStyle@HWNDElement@DirectUI@@UAEXPAPBGPAI@Z
?IsMSAAEnabled@HWNDElement@DirectUI@@UAE_NXZ
?CanSetFocus@HWNDElement@DirectUI@@UAE_NXZ
?OnCompositionChanged@HWNDElement@DirectUI@@UAEXXZ
?OnWmSettingChanged@HWNDElement@DirectUI@@UAEXIJ@Z
?OnWmThemeChanged@HWNDElement@DirectUI@@UAEXIJ@Z
?OnGetDlgCode@HWNDElement@DirectUI@@UAEXPAUtagMSG@@PAJ@Z
?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UAEXPAUKeyboardEvent@2@@Z
?OnImmersiveColorSchemeChanged@HWNDElement@DirectUI@@UAEXXZ
?GetUiaFocusDelegate@Element@DirectUI@@UAEPAV12@XZ
?HandleUiaEventListener@Element@DirectUI@@UAEXPAUEvent@2@@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z
?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ
?GetElementProviderImpl@Element@DirectUI@@UAEJPAVInvokeHelper@2@PAPAVElementProvider@2@@Z
?GetUIAElementProvider@Element@DirectUI@@UAEJABU_GUID@@PAPAX@Z
?DefaultAction@Element@DirectUI@@UAEJXZ
?GetAccessibleImpl@HWNDElement@DirectUI@@UAEJPAPAUIAccessible@@@Z
?GetKeyFocused@Element@DirectUI@@UAE_NXZ
?RemoveTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z
?ActivateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@K@Z
?UpdateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z
?OnUnHosted@Element@DirectUI@@MAEXPAV12@@Z
?OnHosted@Element@DirectUI@@MAEXPAV12@@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE?AUtagSIZE@@HHPAVSurface@2@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z
?GetImmersiveFocusRectOffsets@Element@DirectUI@@UAEXPAUtagRECT@@@Z
?QueryInterface@Element@DirectUI@@UAGJABU_GUID@@PAPAX@Z
?MessageCallback@Element@DirectUI@@UAEIPAUtagGMSG@@@Z
?RemoveBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z
?AddBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z
?SetKeyFocus@Element@DirectUI@@UAEXXZ
?EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z
?GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z
?Remove@Element@DirectUI@@UAEJPAPAV12@I@Z
?Insert@Element@DirectUI@@UAEJPAPAV12@II@Z
?Add@Element@DirectUI@@UAEJPAPAV12@I@Z
?GetContentSize@Element@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z
?Paint@Element@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z
?OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnGroupChanged@HWNDElement@DirectUI@@UAEXH_N@Z
?OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanged@HWNDElement@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z
?GetContentStringAsDisplayed@Element@DirectUI@@UAEPBGPAPAVValue@2@@Z
?IsContentProtected@Element@DirectUI@@UAE_NXZ
?IsRTL@Element@DirectUI@@QAE_NXZ
?IsRTLReading@Element@DirectUI@@UAE_NXZ
??1ClassInfoBase@DirectUI@@UAE@XZ
??0ClassInfoBase@DirectUI@@QAE@XZ
?GetClassInfoPtr@HWNDElement@DirectUI@@SGPAUIClassInfo@2@XZ
?Initialize@ClassInfoBase@DirectUI@@QAEJPAUHINSTANCE__@@PBG_NPBQBUPropertyInfo@2@I@Z
?Register@ClassInfoBase@DirectUI@@QAEJXZ
?ClassExist@ClassInfoBase@DirectUI@@SG_NPAPAUIClassInfo@2@PBQBUPropertyInfo@2@IPAU32@PAUHINSTANCE__@@PBG_N@Z
??1CritSecLock@DirectUI@@QAE@XZ
?GetFactoryLock@Element@DirectUI@@SGPAU_RTL_CRITICAL_SECTION@@XZ
??0CritSecLock@DirectUI@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z
?Register@HWNDElement@DirectUI@@SGJXZ
?OnThemeChanged@HWNDElement@DirectUI@@UAEXPAUThemeChangedEvent@2@@Z
?GetLayoutPos@Element@DirectUI@@QAEHXZ
EnableAnimations
?FireEvent@Element@DirectUI@@QAEXPAUEvent@2@_N1@Z
?StartNavigate@Browser@DirectUI@@SG?AVUID@@XZ
DisableAnimations
?Destroy@DUIXmlParser@DirectUI@@QAEXXZ
?SetXMLFromResource@DUIXmlParser@DirectUI@@QAEJIPAUHINSTANCE__@@0@Z
?Create@DUIXmlParser@DirectUI@@SGJPAPAV12@P6GPAVValue@2@PBGPAX@Z2P6GX11H2@Z2@Z
?CreateElement@DUIXmlParser@DirectUI@@QAEJPBGPAVElement@2@1PAKPAPAV32@@Z
?ShowWindow@NativeHWNDHost@DirectUI@@QAEXH@Z
?Host@NativeHWNDHost@DirectUI@@QAEXPAVElement@2@@Z
?SetVisible@Element@DirectUI@@QAEJ_N@Z
?SetAccRole@Element@DirectUI@@QAEJH@Z
?SetAccessible@Element@DirectUI@@QAEJ_N@Z
?Initialize@HWNDElement@DirectUI@@QAEJPAUHWND__@@_NIPAVElement@2@PAK@Z
?GetHWND@NativeHWNDHost@DirectUI@@QAEPAUHWND__@@XZ
?Create@NativeHWNDHost@DirectUI@@SGJPBGPAUHWND__@@PAUHICON__@@HHHHHHIPAPAV12@@Z
?Destroy@Element@DirectUI@@QAEJ_N@Z
?OnDestroy@HWNDElement@DirectUI@@UAEXXZ
?OnEvent@HWNDElement@DirectUI@@UAEXPAUEvent@2@@Z
?KeyboardNavigate@Element@DirectUI@@SG?AVUID@@XZ
?GetID@Element@DirectUI@@QAEGXZ
?Click@Button@DirectUI@@SG?AVUID@@XZ
?GetExtent@Element@DirectUI@@QAEPBUtagSIZE@@PAPAVValue@2@@Z
?Release@Value@DirectUI@@QAEXXZ
?SetLayoutPos@Element@DirectUI@@QAEJH@Z
?OnInput@HWNDElement@DirectUI@@UAEXPAUInputEvent@2@@Z
?EndDefer@Element@DirectUI@@QAEXK@Z
?StartDefer@Element@DirectUI@@QAEXPAK@Z

vdmdbg

VDMTerminateTaskWOW
VDMEnumTaskWOWEx
VDMEnumProcessWOW

api-ms-win-core-appcompat-l1-1-1

BaseFreeAppCompatDataForProcess
BaseReadAppCompatDataForProcess

pdh

PdhOpenQueryW
PdhCloseQuery
PdhCollectQueryData
PdhGetRawCounterArrayW
PdhGetFormattedCounterArrayW
PdhAddCounterW

dxcore

DXCoreCreateAdapterFactory

dxgi

DXGIDeclareAdapterRemovalSupport
CreateDXGIFactory2

setupapi

SetupDiEnumDeviceInfo
SetupDiGetDevicePropertyW
SetupDiGetClassDevsW

d3d11

D3D11CreateDevice

d3d12

ord101

kernel32

PackageFamilyNameFromFullName
GlobalGetAtomNameW
GetNumberFormatW
ParseApplicationUserModelId
GetActiveProcessorGroupCount
GetProcessAffinityMask
SetProcessAffinityMask
GetPackageFullName
GetPackageFamilyName
GetModuleHandleExA

msvcp_win

_Query_perf_counter
_Query_perf_frequency
?_Random_device@std@@YAIXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessage

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

Sections

.text
Size: 834KB - Virtual size: 834KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.imrsiv
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 43KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1e7af74202b7f59f9c08832d68d2fcb7

Code Sign

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:edCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

ac:a7:7a:4c:84:aa:71:0d:6c:cb:c4:9b:14:3b:62:11:e2:93:12:05:51:09:0f:b0:44:43:15:7f:dc:0a:1f:d6Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-threadpool-l1-2-0

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-core-localization-l1-2-0

api-ms-win-core-handle-l1-1-0

api-ms-win-eventing-provider-l1-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-security-base-l1-1-0

api-ms-win-core-sysinfo-l1-2-0

api-ms-win-core-datetime-l1-1-0

api-ms-win-core-io-l1-1-1

api-ms-win-core-synch-l1-2-1

api-ms-win-power-setting-l1-1-0

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-timezone-l1-1-0

oleaut32

api-ms-win-core-memory-l1-1-1

api-ms-win-core-file-l1-2-0

api-ms-win-core-path-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-wow64-l1-1-0

api-ms-win-core-version-l1-1-0

api-ms-win-core-string-l2-1-0

api-ms-win-core-memory-l1-1-0

api-ms-win-core-version-l1-1-1

api-ms-win-core-datetime-l1-1-2

api-ms-win-core-datetime-l1-1-1

api-ms-win-core-psapi-l1-1-0

api-ms-win-core-sysinfo-l1-2-2

api-ms-win-core-processtopology-l1-1-0

api-ms-win-core-io-l1-1-0

api-ms-win-core-sysinfo-l1-2-1

api-ms-win-core-localization-l2-1-0

api-ms-win-core-string-l2-1-1

api-ms-win-core-wow64-l1-1-1

api-ms-win-core-winrt-error-l1-1-0

api-ms-win-core-kernel32-legacy-l1-1-0

api-ms-win-core-threadpool-legacy-l1-1-0

api-ms-win-core-shlwapi-legacy-l1-1-0

api-ms-win-core-windowserrorreporting-l1-1-3

api-ms-win-core-pcw-l1-1-0

nsi

comctl32

ntdll

uxtheme

shlwapi

shell32

credui

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:ed
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

ac:a7:7a:4c:84:aa:71:0d:6c:cb:c4:9b:14:3b:62:11:e2:93:12:05:51:09:0f:b0:44:43:15:7f:dc:0a:1f:d6
Signer

.text
Size: 834KB - Virtual size: 834KB

.imrsiv
Size: - Virtual size: 4B

.data
Size: 43KB - Virtual size: 63KB

.idata
Size: 41KB - Virtual size: 40KB

.didat
Size: 1024B - Virtual size: 520B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 56KB - Virtual size: 56KB