Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
E-XPLORER.exe
Resource
win10v2004-20231215-en
Target
E-XPLORER.EXE
Size
4.7MB
MD5
215220ed492ed274f41129d33a2df72d
SHA1
c3a69e8e335a0a2cc25a6b315537dca1c89109fa
SHA256
47d797e099057695e2a69377bba57f3a9eb40d26e4152448628626f9a3493d14
SHA512
1915bc4fbd137143027ac5c156ffb58ad2f9a1a59f9c2e44f4c7ffe6313114db33b9cb91504f5b79865e9daf68ad014999796a5f9ffe5191aa31727f4ae3d07f
SSDEEP
98304:DmOslvNIcnCyAr4xQVInLomA15gyWiJSFMO6w8a0cD5mVI:DmOslvNICCyAr4xQVo8mA3BWiJSF6wFd
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
explorer.pdb
?_Xbad_function_call@std@@YAXXZ
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
_Thrd_detach
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_join
_Thrd_id
_Cnd_do_broadcast_at_thread_exit
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG0@Z
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE_JPBG_J@Z
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ
?tolower@?$ctype@G@std@@QBEPBGPAGPBG@Z
?_Xbad_alloc@std@@YAXXZ
?tolower@?$ctype@G@std@@QBEGG@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
_Wcscoll
_Wcsxfrm
?_Xout_of_range@std@@YAXPBD@Z
??Bid@locale@std@@QAEIXZ
?id@?$ctype@G@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
??0_Lockit@std@@QAE@H@Z
??0_Locinfo@std@@QAE@PBD@Z
?c_str@?$_Yarn@D@std@@QBEPBDXZ
??1_Lockit@std@@QAE@XZ
??1_Locinfo@std@@QAE@XZ
?is@?$ctype@G@std@@QBE_NFG@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Incref@facet@locale@std@@UAEXXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
?uncaught_exception@std@@YA_NXZ
?good@ios_base@std@@QBE_NXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGXZ
?width@ios_base@std@@QAE_J_J@Z
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
_Mtx_init_in_situ
_Xtime_get_ticks
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
?_Xinvalid_argument@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?id@?$collate@G@std@@2V0locale@2@A
_c_exit
_initterm_e
_initterm
_register_thread_local_exe_atexit_callback
_set_error_mode
_wcsrev
strncmp
wcsncmp
memset
wcscspn
wcsncpy
_time32
_o_exit
_o_floor
_o_free
_o_iswalnum
_o_iswspace
_o_memcpy_s
_o_realloc
_o_roundf
_o_terminate
_o_toupper
_o_towlower
_o_wcscat_s
_o_wcscpy_s
_o_wcsncpy_s
_o_wcstol
_o_wcstoll
_except_handler4_common
_o__wcsnicmp
_o__wcsicmp
memmove
_o__set_new_mode
_o__set_fmode
_o__set_errno
_o__set_app_type
_o__seh_filter_exe
_o__register_onexit_function
_o__recalloc
_o__purecall
_o__mktime32
_o_ceil
_o__wtoi
_o__localtime32
_o__itow_s
_o_bsearch
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
_o__initialize_wide_environment
_o__initialize_onexit_table
_o__get_wide_winmain_command_line
_o__get_errno
_o__exit
_o__errno
_o__difftime32
_o__crt_atexit
_o__controlfp_s
_o__configure_wide_argv
_o__configthreadlocale
_o__CIsqrt
_o__CIpow
_o__cexit
_o__beginthreadex
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___std_exception_destroy
_o___std_exception_copy
_o___p__commode
wcsstr
__std_terminate
__CxxFrameHandler3
_CxxThrowException
memcmp
memcpy
_o_malloc
PicRetrieveFileInfo
PicFreeFileInfo
ord9
CreateJobObjectW
SetInformationJobObject
AssignProcessToJobObject
QueryInformationJobObject
RegisterApplicationRestart
HashData
PathIsURLW
UrlUnescapeW
CheckElevation
CheckElevationEnabled
SHRegGetUSValueW
SHRegGetBoolUSValueW
CoRegisterMessageFilter
GlobalGetAtomNameW
ReleaseActCtx
CreateActCtxW
DeactivateActCtx
ActivateActCtx
RtlInitString
wcsspn
RtlQueryResourcePolicy
NtOpenThreadToken
RtlGetVersion
ZwQuerySystemInformation
RtlUpcaseUnicodeChar
RtlGetNativeSystemInformation
RtlpEnsureBufferSize
RtlNtPathNameToDosPathName
ZwOpenFile
ZwEnumerateKey
RtlInitUnicodeStringEx
RtlFormatCurrentUserKeyPath
ZwCreateFile
ZwQueryInformationFile
ZwCreateSection
ZwQueryInformationProcess
ZwSetInformationProcess
RtlxAnsiStringToUnicodeSize
RtlAnsiStringToUnicodeString
ZwUnmapViewOfSection
ZwMapViewOfSection
LdrResSearchResource
RtlVerifyVersionInfo
RtlImageDirectoryEntryToData
RtlReleaseSRWLockShared
RtlAcquireSRWLockShared
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockExclusive
NtClose
NtQueryInformationToken
NtOpenProcessToken
RtlCompareUnicodeString
RtlFreeHeap
RtlAllocateHeap
wcschr
ZwQueryDirectoryFile
wcsrchr
strchr
RtlPublishWnfStateData
NtSetSystemInformation
RtlFlushHeaps
NtQueryWnfStateData
RtlSubscribeWnfStateChangeNotification
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlInitUnicodeString
RtlQueryWnfStateData
RtlNtStatusToDosError
RtlGetDeviceFamilyInfoEnum
NtSetInformationProcess
ZwQueryValueKey
NtQueryInformationProcess
ZwOpenKey
ZwClose
RtlReAllocateHeap
RtlAppendUnicodeToString
RtlAppendUnicodeStringToString
RtlRunOnceExecuteOnce
RtlCopyUnicodeString
RtlUpcaseUnicodeString
RtlIsStateSeparationEnabled
RtlDosPathNameToNtPathName_U_WithStatus
RtlNtStatusToDosErrorNoTeb
RtlFreeUnicodeString
NtSetThreadExecutionState
VerSetConditionMask
WinSqmSetDWORD
WinSqmIsOptedIn
WinSqmAddToStreamEx
GetModuleFileNameW
LoadStringW
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
GetProcAddress
GetModuleHandleW
FindResourceExW
SizeofResource
LoadLibraryExW
LoadResource
GetModuleHandleExW
LockResource
FindStringOrdinal
Sleep
InitOnceComplete
InitOnceExecuteOnce
InitOnceBeginInitialize
ReleaseSRWLockExclusive
CreateSemaphoreExW
AcquireSRWLockExclusive
ReleaseMutex
WaitForSingleObject
InitializeCriticalSectionEx
ResetEvent
OpenMutexW
CreateMutexW
LeaveCriticalSection
TryEnterCriticalSection
TryAcquireSRWLockExclusive
ReleaseSemaphore
AcquireSRWLockShared
EnterCriticalSection
CreateMutexExW
OpenEventW
ReleaseSRWLockShared
CreateEventExW
OpenSemaphoreW
SetEvent
CreateEventW
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
WaitForSingleObjectEx
SleepEx
WaitForMultipleObjectsEx
InitializeSRWLock
DeleteCriticalSection
HeapAlloc
HeapSetInformation
GetProcessHeap
HeapFree
GetLastError
UnhandledExceptionFilter
SetErrorMode
SetLastError
RaiseException
SetUnhandledExceptionFilter
FindFirstFileW
GetFileAttributesW
FindNextFileW
FindClose
CompareFileTime
DeleteFileW
CreateFileW
WriteFile
GetLongPathNameW
EventWriteTransfer
EventActivityIdControl
EventWrite
EventSetInformation
EventRegister
EventEnabled
EventUnregister
EventProviderEnabled
RegGetKeySecurity
RegQueryInfoKeyW
RegEnumKeyExW
RegNotifyChangeKeyValue
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegEnumValueW
RegDeleteValueW
RegGetValueW
RegSetKeySecurity
RegOpenCurrentUser
RegOpenKeyExW
RegDeleteTreeW
RegDeleteKeyExW
CreateThreadpoolWork
CloseThreadpoolWait
SetThreadpoolTimer
CloseThreadpoolTimer
SubmitThreadpoolWork
CreateThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolWait
WaitForThreadpoolWaitCallbacks
TrySubmitThreadpoolCallback
CreateThreadpoolWait
OpenProcessToken
OpenThreadToken
GetStartupInfoW
GetProcessId
GetCurrentThread
ResumeThread
GetPriorityClass
ExitProcess
SetThreadPriority
SetPriorityClass
GetCurrentThreadId
ProcessIdToSessionId
OpenThread
CreateProcessW
CreateThread
SetProcessShutdownParameters
QueueUserAPC
GetCurrentProcess
GetCurrentProcessId
SetThreadPriorityBoost
TerminateProcess
GetThreadPriority
GetExitCodeProcess
GetUserDefaultLangID
GetLocaleInfoEx
GetCalendarInfoW
FormatMessageW
GetLocaleInfoW
GetGeoInfoW
GetUserDefaultLocaleName
GetThreadUILanguage
OutputDebugStringW
IsDebuggerPresent
DebugBreak
CloseHandle
DuplicateHandle
SysAllocString
VarUI4FromStr
SysStringLen
SafeArrayAccessData
SafeArrayCreate
SysFreeString
SysAllocStringByteLen
SafeArrayUnaccessData
VariantClear
SafeArrayDestroy
VariantInit
SHTaskPoolGetUniqueContext
SHTaskPoolQueueTask
SetCurrentProcessExplicitAppUserModelID
IsOS
PropVariantClear
CoUninitialize
CoReleaseMarshalData
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoTaskMemRealloc
CoCancelCall
CoDisableCallCancellation
IIDFromString
CoGetStdMarshalEx
CoEnableCallCancellation
CoGetMalloc
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterClassObject
CLSIDFromString
CoIncrementMTAUsage
CoCreateFreeThreadedMarshaler
CoGetObjectContext
CoInitializeEx
CoWaitForMultipleHandles
CoCreateGuid
CoCreateInstance
CoTaskMemFree
StringFromIID
CoSetProxyBlanket
CoFreeUnusedLibraries
CoGetApartmentType
CoInitializeSecurity
CoGetCallContext
StringFromGUID2
CreateStreamOnHGlobal
StrCmpW
StrCmpNIW
StrChrIW
StrChrW
StrCmpIW
StrToIntW
StrCmpICA
StrStrIW
StrCmpNICW
StrCmpICW
StrRChrW
QISearch
SHStrDupW
CommandLineToArgvW
IUnknown_GetSite
IUnknown_Set
IUnknown_SetSite
IUnknown_QueryService
GlobalFree
LocalReAlloc
GlobalAlloc
LocalFree
LocalAlloc
IsProcessorFeaturePresent
GetProcessMitigationPolicy
OpenProcess
GetDateFormatW
GetLogicalProcessorInformation
GetTickCount64
GetWindowsDirectoryW
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetTickCount
GetVersionExW
GetSystemTime
GetLocalTime
GetTimeFormatEx
GetDateFormatEx
GetCurrentDirectoryW
SearchPathW
GetCommandLineW
ExpandEnvironmentStringsW
PathFindExtensionW
PathFileExistsW
PathQuoteSpacesW
PathCombineW
PathIsFileSpecW
PathRemoveFileSpecW
PathRemoveBlanksW
PathFindFileNameW
PathGetArgsW
PathCommonPrefixW
PathParseIconLocationW
SHExpandEnvironmentStringsW
PathGetDriveNumberW
WindowsDuplicateString
WindowsCompareStringOrdinal
WindowsPreallocateStringBuffer
WindowsPromoteStringBuffer
WindowsDeleteStringBuffer
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsGetStringLen
WindowsCreateStringReference
WindowsCreateString
WindowsSubstringWithSpecifiedLength
RoActivateInstance
RoInitialize
RoUninitialize
RoGetActivationFactory
SHRegGetValueW
SHSetValueW
SHDeleteKeyW
SHDeleteValueW
SHGetValueW
SHEnumKeyExW
SHQueryInfoKeyW
CompareStringW
WideCharToMultiByte
CompareStringOrdinal
MultiByteToWideChar
SHGetThreadRef
SHSetThreadRef
SHCreateThread
SHCreateThreadRef
SetProcessReference
lstrlenW
lstrcmpiW
IsValidSid
GetLengthSid
CopySid
GetTokenInformation
SetKernelObjectSecurity
EqualSid
GetAclInformation
GetAce
DeleteAce
CreateWellKnownSid
CheckTokenMembership
MakeAbsoluteSD
DuplicateToken
GetSecurityDescriptorDacl
SetSecurityDescriptorDacl
InitializeAcl
AddAce
GetTraceLoggerHandle
TraceMessage
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceEnableLevel
GetTraceEnableFlags
GetUserDefaultUILanguage
FindResourceW
LoadLibraryW
SHLoadIndirectString
RemoveVectoredExceptionHandler
RegDeleteKeyValueW
RegSetKeyValueW
RoGetAgileReference
RoTransformError
RoOriginateError
RoFailFastWithErrorContext
SetRestrictedErrorInfo
GetRestrictedErrorInfo
RoGetMatchingRestrictedErrorInfo
RoOriginateLanguageException
PathCchAddExtension
PathCchAppend
PathCchRemoveFileSpec
PathCchCombine
PathAllocCombine
SHAnsiToUnicode
GlobalLock
GlobalUnlock
SetThreadDescription
SetProcessInformation
OpenFileMappingW
CreateFileMappingW
VirtualAlloc
MapViewOfFile
VirtualFree
VirtualProtect
UnmapViewOfFile
MulDiv
SHCreateStreamOnFileEx
IStream_Read
SHOpenRegStream2W
IStream_Write
SHCreateMemStream
IStream_Reset
SHCreateStreamOnFileW
GetTempPathW
QueryFullProcessImageNameW
ord170
UnregisterWaitEx
ChangeTimerQueueTimer
CreateTimerQueueTimer
DeleteTimerQueueTimer
GetProductInfo
GetOsSafeBootMode
GetUserDefaultGeoName
DeriveAppContainerSidFromAppContainerName
GetProfileType
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDynamicTimeZoneInformation
GetTimeZoneInformation
SystemTimeToFileTime
GetComputerNameW
RegisterWaitForSingleObject
GetSystemPowerStatus
QueryPerformanceCounter
InterlockedPushEntrySList
InitializeSListHead
GetPersistedRegistryLocationW
LookupAccountNameW
CharNextW
CharLowerBuffW
NotifyServiceStatusChangeW
QueryServiceConfigW
CreateIoCompletionPort
GetQueuedCompletionStatus
GetPhysicallyInstalledSystemMemory
SHRegGetValueFromHKCUHKLM
GetDpiForMonitor
ord244
GetNetworkConnectivityHint
Process32NextW
CreateToolhelp32Snapshot
Process32FirstW
RaiseFailFastException
CharNextA
GetPwrCapabilities
CallNtPowerInformation
PowerDeterminePlatformRoleEx
ApiSetQueryApiSetPresence
ord292
IUnknown_GetWindow
ord279
SHPinDllOfCLSID
ShellMessageBoxW
ord481
StrRetToStrW
ord544
ord165
ord479
AssocQueryStringW
PathRemoveArgsW
StrRetToBufW
ord478
ord635
ord509
SHIsChildOrSelf
ord197
SHCreateWorkerWindowW
GetSystemMetrics
SystemParametersInfoW
QueryDisplayConfig
GetDisplayConfigBufferSizes
GetMonitorInfoW
EnumDisplayDevicesW
EnumDisplayMonitors
UnionRect
InflateRect
SetRect
IntersectRect
OffsetRect
SubtractRect
EqualRect
PtInRect
IsRectEmpty
CopyRect
SetRectEmpty
UnhookWinEvent
NotifyWinEvent
SetWinEventHook
SHBindToParent
SHBindToFolderIDListParent
ILFindLastID
ILIsParent
ILFree
SHGetIDListFromObject
SHGetNameFromIDList
SHParseDisplayName
SHCreateItemFromIDList
SHBindToObject
ILIsEqual
ILRemoveLastID
ILCombine
ILCloneFirst
SHCreateItemFromParsingName
ILGetSize
ILClone
DXGIDeclareAdapterRemovalSupport
GetPointerType
EnableMouseInPointer
GetPointerInfo
GetPointerDevices
GetCurrentInputMessageSource
SHGetFolderPathEx
SHGetKnownFolderIDList
SetThreadFlags
GetThreadFlags
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
GetPackagesByPackageFamily
GetPackageFullName
SetWindowFeedbackSetting
RegisterClipboardFormatW
GetWindowBand
CreateWindowInBand
RegisterPowerSettingNotification
UnregisterPowerSettingNotification
PSCreateMemoryPropertyStore
PropVariantToBoolean
PSPropertyBag_WriteStr
InitVariantFromGUIDAsString
PropVariantToUInt32
PSPropertyBag_WriteDWORD
PropVariantToStringAlloc
InitVariantFromResource
PSGetPropertyFromPropertyStorage
CreateDispatcherQueueController
URLOpenBlockingStreamW
SHChangeNotify
SHCreateDataObject
FindPackagesByPackageFamily
ParseApplicationUserModelId
WTSRegisterSessionNotification
WTSUnRegisterSessionNotification
CreateRectRgn
SetRectRgn
OffsetRgn
GetDeviceCaps
GetOutlineTextMetricsW
CombineRgn
DeleteObject
GetObjectW
DeleteDC
CreateCompatibleDC
SelectObject
GetClipBox
CreateFontIndirectW
SetTextColor
SetTextAlign
GetTextMetricsW
ExtTextOutW
GetStockObject
GetTextExtentPoint32W
CreateRectRgnIndirect
GetGlyphOutlineW
GetClipRgn
SelectClipRgn
GetCurrentObject
StretchBlt
ExcludeClipRect
SetStretchBltMode
Rectangle
IsBadWritePtr
SetProcessDEPPolicy
NdrClientCall2
UuidFromStringW
RpcBindingFree
RpcBindingFromStringBindingW
RpcStringBindingComposeW
I_RpcExceptionFilter
RpcBindingSetAuthInfoExW
RpcStringFreeW
InternetCrackUrlW
ord123
ord190
ord109
ord187
ord186
ord184
ord200
ord142
ord162
SHUnicodeToAnsi
ord1
ord174
ord192
ord183
ord121
ord126
ord723
ord885
ord95
ord850
SHGetPathFromIDListW
ord743
ord907
ord43
Shell_GetCachedImageIndexW
ord790
ord792
ord727
ord162
SHAppBarMessage
ord894
ord193
ord906
ord895
SHGetLocalizedName
SHGetPropertyStoreForWindow
ord764
ord866
SHEvaluateSystemCommandTemplate
ord181
ord244
ExtractIconExW
ShellExecuteW
ord132
ord137
Shell_NotifyIconW
ord680
ord6
SHGetStockIconInfo
DuplicateIcon
ord91
ord254
ord54
SHEnableServiceObject
ord61
ord896
SHAddToRecentDocs
ord60
SHUpdateRecycleBinIcon
ord2
ord711
SHFileOperationW
ord4
ord22
ord645
ord644
ord753
ord733
SHChangeNotifyRegisterThread
DragQueryFileW
ord67
SHCreateItemInKnownFolder
ord206
ord201
ord188
ord899
ShellExecuteExW
ord245
ord200
ord89
ord190
ord85
ord100
Shell_NotifyIconGetRect
ord134
ord172
PathIsRelativeW
ord164
PathIsDirectoryW
ord413
ord548
ord163
ord467
AssocQueryKeyW
ChrCmpIW
AssocCreate
ord86
DrawThemeBackground
DrawThemeParentBackground
CloseThemeData
BufferedPaintInit
BeginBufferedPaint
EndBufferedPaint
BufferedPaintUnInit
GetWindowTheme
GetThemeFont
GetThemeMetric
GetThemeColor
GetThemeInt
GetBufferedPaintBits
IsThemeActive
DrawThemeTextEx
GetThemePartSize
ord126
BufferedPaintSetAlpha
IsCompositionActive
ord138
SetWindowTheme
IsAppThemed
GetThemeMargins
OpenThemeDataForDpi
OpenThemeData
GetThemeBool
GetThemeBackgroundExtent
DwmQueryThumbnailSourceSize
ord138
ord139
DwmGetWindowAttribute
ord140
ord159
ord124
DwmUpdateThumbnailProperties
DwmUnregisterThumbnail
DwmIsCompositionEnabled
DwmEnableBlurBehindWindow
DwmSetWindowAttribute
ord141
DwmRegisterThumbnail
ord114
ord113
BringWindowToTop
ord2573
EndTask
IsTopLevelWindow
GetMenuState
SetScrollInfo
GetScrollInfo
SetScrollPos
GetMenuStringW
InternalGetWindowText
GetLayeredWindowAttributes
SetLayeredWindowAttributes
DrawTextExW
IsProcessDPIAware
SetThreadDpiAwarenessContext
CascadeWindows
HungWindowFromGhostWindow
LoadIconW
GetKeyState
GetCursorInfo
InsertMenuW
UnregisterClassA
InjectKeyboardInput
GetCaretBlinkTime
GetSysColor
CopyImage
DestroyIcon
DrawIconEx
GetSystemMetricsForDpi
ord2005
TrackMouseEvent
SetCapture
GetCapture
ReleaseCapture
GetDoubleClickTime
CalculatePopupWindowPosition
CopyIcon
PostThreadMessageW
GetIconInfo
GetIconInfoExW
GhostWindowFromHungWindow
GetSysColorBrush
GetPhysicalCursorPos
ShowWindowAsync
GetLastInputInfo
AdjustWindowRect
GetDpiForWindow
SetWindowCompositionAttribute
SetGestureConfig
LoadImageW
ModifyMenuW
GetAsyncKeyState
ReplyMessage
MonitorFromPoint
GetWindowCompositionAttribute
GetWindowProcessHandle
UpdateLayeredWindow
CheckMenuItem
GetMenuItemInfoW
ord2521
GetMenuItemCount
UnregisterClassW
ord2522
GetMenuInfo
SetMenuInfo
GetDpiForSystem
GetWindowDpiAwarenessContext
AreDpiAwarenessContextsEqual
CreateIconIndirect
GetSubMenu
CharLowerW
IsCharAlphaNumericW
EnableMenuItem
LoadMenuW
DrawTextW
FillRect
ExitWindowsEx
EndDialog
SendDlgItemMessageW
RegisterHotKey
GetClassLongW
UnregisterHotKey
GetLastActivePopup
RemoveMenu
SwitchToThisWindow
GetClassWord
TileWindows
MapVirtualKeyExW
LockWorkStation
GetSystemMenu
InjectMouseInput
ord2574
IsHungAppWindow
AdjustWindowRectEx
GetDC
ReleaseDC
MonitorFromWindow
IsIconic
CreatePopupMenu
GetMenuDefaultItem
DestroyMenu
LoadCursorW
SetMenuDefaultItem
SetCursor
TrackPopupMenuEx
SetMenuItemInfoW
DefWindowProcA
IsWindowUnicode
LoadAcceleratorsW
ChangeWindowMessageFilterEx
TranslateAcceleratorW
ord2611
MonitorFromRect
DeleteMenu
GetGuiResources
GetUserNameExW
ResolveDelayLoadedAPI
DelayLoadFailureHook
PowerSetRequest
VerifyVersionInfoW
PowerCreateRequest
IsProcessInWDAGContainer
CopyFileW
WaitForMultipleObjects
SetTermsrvAppInstallMode
ord292
StartTraceW
EnableTraceEx2
StopTraceW
GetStagedPackagePathByFullName2
BiPtEnumerateWorkItemsForPackageName
BiPtAssociateApplicationEntryPoint
BiPtQueryWorkItem
BiPtFreeMemory
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ