Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
explorer.exe
Resource
win10v2004-20240508-en
Target
explorer.exe
Size
3.8MB
MD5
66d168b3a5caf573fd8399bdcb9269a7
SHA1
84782753843b57371c57950e98424cb81f69a593
SHA256
fd13df84642d87c45a16b7afe62629cc3e93755c4c62564d1ad02cf743e99453
SHA512
6612c2bbedf893667ac599c05708927b6e5088a9ec3df246b75383dbf70ddd184e44db4db47f3f0c849f3cacb9061ae0b17cd964b6b2e019aa166995015ada2f
SSDEEP
98304:+j5DcWfDg5Tyros3pOK4gUq3hC8ysTzz1Iqw8a0cD0YKrK:a5DcWfDg5Tyros3IK4gUIhC8ysTf17wH
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
explorer.pdb
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
?uncaught_exception@std@@YA_NXZ
?good@ios_base@std@@QBE_NXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG0@Z
?width@ios_base@std@@QBE_JXZ
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
?flags@ios_base@std@@QBEHXZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE_JPBG_J@Z
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ
?tolower@?$ctype@G@std@@QBEPBGPAGPBG@Z
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGXZ
?_Xbad_alloc@std@@YAXXZ
?tolower@?$ctype@G@std@@QBEGG@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z
?width@ios_base@std@@QAE_J_J@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
_Wcscoll
_Wcsxfrm
?id@?$collate@G@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
?id@?$ctype@G@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
?_Xbad_function_call@std@@YAXXZ
??0_Lockit@std@@QAE@H@Z
?_Xout_of_range@std@@YAXPBD@Z
??0_Locinfo@std@@QAE@PBD@Z
?c_str@?$_Yarn@D@std@@QBEPBDXZ
??1_Lockit@std@@QAE@XZ
??1_Locinfo@std@@QAE@XZ
?is@?$ctype@G@std@@QBE_NFG@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Incref@facet@locale@std@@UAEXXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z
?_Xlength_error@std@@YAXPBD@Z
_initterm
_initterm_e
_c_exit
_register_thread_local_exe_atexit_callback
_set_error_mode
_time32
memset
wcsncmp
strncmp
wcscspn
_o_bsearch
_o_ceil
_o_exit
_o_floor
_o_free
_o_iswalnum
_o_malloc
_o_memcpy_s
_o_realloc
_o_terminate
_o_toupper
_o_wcscpy_s
_o_wcsncpy_s
_o_wcstol
_except_handler4_common
_o__wcsnicmp
_o__wcsicmp
_o__wtoi
_o__ui64tow_s
_o__set_new_mode
_o__set_fmode
_o__set_errno
_o__set_app_type
_o__register_onexit_function
_o__recalloc
_o__purecall
_o__mktime32
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
_o__initialize_wide_environment
_o__initialize_onexit_table
_o__get_wide_winmain_command_line
_o__get_errno
_o__exit
_o__errno
_o__difftime32
_o__crt_atexit
_o__controlfp_s
_o__configure_wide_argv
_o__configthreadlocale
_o__CIsqrt
_o__CIpow
_o__localtime32
_o__cexit
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___std_exception_destroy
_o___std_exception_copy
_o___p__commode
wcsstr
__std_terminate
__CxxFrameHandler3
_o__itow_s
_o__seh_filter_exe
_CxxThrowException
memcmp
memcpy
memmove
ord9
CreateJobObjectW
AssignProcessToJobObject
QueryInformationJobObject
SetInformationJobObject
PathIsURLW
UrlUnescapeW
HashData
CheckElevationEnabled
SHRegGetUSValueW
SHRegGetBoolUSValueW
CoRegisterMessageFilter
GlobalGetAtomNameW
CreateActCtxW
ActivateActCtx
ReleaseActCtx
DeactivateActCtx
RtlInitUnicodeString
ZwQueryValueKey
ZwOpenKey
ZwClose
RtlFreeHeap
RtlReAllocateHeap
RtlAllocateHeap
RtlAppendUnicodeToString
RtlUpcaseUnicodeChar
RtlGetNativeSystemInformation
ZwQueryDirectoryFile
RtlpEnsureBufferSize
RtlNtPathNameToDosPathName
ZwOpenFile
ZwEnumerateKey
RtlInitUnicodeStringEx
RtlFormatCurrentUserKeyPath
ZwCreateFile
ZwQueryInformationFile
ZwCreateSection
ZwQueryInformationProcess
ZwSetInformationProcess
RtlxAnsiStringToUnicodeSize
RtlAnsiStringToUnicodeString
ZwUnmapViewOfSection
ZwMapViewOfSection
LdrResSearchResource
RtlVerifyVersionInfo
RtlImageDirectoryEntryToData
RtlIsStateSeparationEnabled
RtlAcquireSRWLockExclusive
ZwQuerySystemInformation
RtlReleaseSRWLockShared
RtlReleaseSRWLockExclusive
RtlAppendUnicodeStringToString
RtlRunOnceExecuteOnce
RtlCopyUnicodeString
RtlUpcaseUnicodeString
RtlInitString
RtlIsMultiSessionSku
RtlIsMultiUsersInSessionSku
RtlDosPathNameToNtPathName_U_WithStatus
WinSqmAddToStreamEx
WinSqmIsOptedIn
WinSqmSetDWORD
wcsspn
wcsrchr
NtOpenThreadToken
NtClose
NtQueryInformationToken
NtOpenProcessToken
RtlCompareUnicodeString
wcschr
RtlQueryResourcePolicy
VerSetConditionMask
NtSetThreadExecutionState
RtlNtStatusToDosErrorNoTeb
RtlFreeUnicodeString
RtlAcquireSRWLockShared
strchr
RtlNtStatusToDosError
NtQueryWnfStateData
RtlPublishWnfStateData
NtSetSystemInformation
RtlFlushHeaps
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlSubscribeWnfStateChangeNotification
RtlQueryWnfStateData
RtlGetDeviceFamilyInfoEnum
NtSetInformationProcess
NtQueryInformationProcess
RtlGetVersion
GetModuleHandleW
GetModuleHandleA
SizeofResource
GetModuleFileNameW
GetModuleFileNameA
LockResource
LoadResource
GetProcAddress
FindResourceExW
FreeLibrary
FindStringOrdinal
LoadStringW
LoadLibraryExW
GetModuleHandleExW
InitOnceBeginInitialize
InitOnceExecuteOnce
InitOnceComplete
Sleep
CreateSemaphoreExW
EnterCriticalSection
ReleaseSemaphore
SleepEx
LeaveCriticalSection
InitializeCriticalSectionEx
CreateMutexW
WaitForMultipleObjectsEx
InitializeSRWLock
WaitForSingleObject
DeleteCriticalSection
ReleaseMutex
AcquireSRWLockShared
InitializeCriticalSection
CreateEventW
SetEvent
OpenEventW
OpenMutexW
CreateMutexExW
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
InitializeCriticalSectionAndSpinCount
ResetEvent
WaitForSingleObjectEx
TryEnterCriticalSection
CreateEventExW
OpenSemaphoreW
HeapAlloc
HeapFree
HeapSetInformation
GetProcessHeap
GetLastError
RaiseException
UnhandledExceptionFilter
SetLastError
SetUnhandledExceptionFilter
SetErrorMode
GetLongPathNameW
FindNextFileW
FindFirstFileW
CompareFileTime
GetFileAttributesW
FindClose
WriteFile
DeleteFileW
CreateFileW
EventUnregister
EventWriteTransfer
EventSetInformation
EventProviderEnabled
EventEnabled
EventActivityIdControl
EventRegister
EventWrite
RegQueryInfoKeyW
RegOpenKeyExW
RegDeleteValueW
RegEnumValueW
RegCloseKey
RegSetValueExW
RegOpenCurrentUser
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyExW
RegGetValueW
RegDeleteTreeW
RegEnumKeyExW
CloseThreadpoolTimer
CloseThreadpoolWait
WaitForThreadpoolTimerCallbacks
CreateThreadpoolTimer
SetThreadpoolTimer
CreateThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWait
SetThreadpoolWait
WaitForThreadpoolWaitCallbacks
GetCurrentThread
OpenProcessToken
GetProcessId
SetThreadPriority
OpenThreadToken
ResumeThread
GetPriorityClass
GetCurrentProcessId
TerminateProcess
SetPriorityClass
SetThreadPriorityBoost
ExitProcess
GetStartupInfoW
GetCurrentProcess
ProcessIdToSessionId
QueueUserAPC
OpenThread
CreateProcessW
GetThreadPriority
GetExitCodeProcess
CreateThread
GetCurrentThreadId
SetProcessShutdownParameters
GetUserDefaultLangID
GetLocaleInfoEx
GetThreadUILanguage
GetLocaleInfoW
GetCalendarInfoW
FormatMessageW
IsDebuggerPresent
OutputDebugStringW
DebugBreak
DuplicateHandle
CloseHandle
VarUI4FromStr
SysAllocString
SysFreeString
SysAllocStringByteLen
VariantClear
SafeArrayUnaccessData
VariantInit
SafeArrayCreate
SafeArrayAccessData
SafeArrayDestroy
SHTaskPoolQueueTask
SHTaskPoolGetUniqueContext
IsOS
SetCurrentProcessExplicitAppUserModelID
CoDisableCallCancellation
CoTaskMemFree
CoEnableCallCancellation
PropVariantClear
CoCreateInstance
CLSIDFromString
CoGetClassObject
CoRegisterClassObject
CoCreateGuid
CoRevokeClassObject
StringFromIID
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCancelCall
CoSetProxyBlanket
CoCreateFreeThreadedMarshaler
CoReleaseMarshalData
CoGetApartmentType
CoTaskMemRealloc
CoTaskMemAlloc
CoGetMalloc
IIDFromString
CoInitializeEx
CoUninitialize
StringFromGUID2
CoWaitForMultipleHandles
CoGetCallContext
CoInitializeSecurity
CoFreeUnusedLibraries
CoGetStdMarshalEx
CreateStreamOnHGlobal
StrStrIW
StrCmpICW
StrCmpW
StrChrIW
StrToIntW
QISearch
StrChrW
StrCmpICA
StrCmpIW
StrCmpNIW
StrRChrW
StrCmpNICW
CommandLineToArgvW
SHStrDupW
IUnknown_SetSite
IUnknown_GetSite
IUnknown_Set
IUnknown_QueryService
GlobalFree
LocalReAlloc
LocalFree
LocalAlloc
GlobalAlloc
OpenProcess
GetProcessMitigationPolicy
IsProcessorFeaturePresent
GetDateFormatW
GetLocalTime
GetTickCount
GetSystemTimeAsFileTime
GetSystemTime
GetSystemDirectoryW
GetVersionExW
GetTickCount64
GetWindowsDirectoryW
GetDateFormatEx
GetTimeFormatEx
SearchPathW
ExpandEnvironmentStringsW
GetCommandLineW
GetCurrentDirectoryW
PathIsFileSpecW
PathGetArgsW
PathCombineW
PathFindExtensionW
PathFileExistsW
PathGetDriveNumberW
PathFindFileNameW
PathQuoteSpacesW
SHExpandEnvironmentStringsW
PathCommonPrefixW
PathParseIconLocationW
PathRemoveFileSpecW
PathRemoveBlanksW
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateStringReference
WindowsCreateString
WindowsDuplicateString
WindowsSubstringWithSpecifiedLength
WindowsCompareStringOrdinal
SHCreateThread
SetProcessReference
SHCreateThreadRef
SHGetThreadRef
SHSetThreadRef
lstrcmpiW
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
CompareStringOrdinal
CompareStringW
SHDeleteValueW
SHDeleteKeyW
SHSetValueW
SHEnumKeyExW
SHQueryInfoKeyW
SHGetValueW
SHRegGetValueW
GetAce
DuplicateToken
CopySid
CheckTokenMembership
MakeAbsoluteSD
CreateWellKnownSid
GetLengthSid
EqualSid
AddAce
InitializeAcl
GetAclInformation
DeleteAce
SetKernelObjectSecurity
IsValidSid
GetTokenInformation
GetTraceEnableFlags
GetTraceEnableLevel
TraceMessage
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
GetUserDefaultUILanguage
LoadLibraryW
FindResourceW
SHLoadIndirectString
RemoveVectoredExceptionHandler
RegSetKeyValueW
RoActivateInstance
RoUninitialize
RoGetActivationFactory
RoInitialize
RoGetAgileReference
RoTransformError
SetRestrictedErrorInfo
RoOriginateError
RoGetMatchingRestrictedErrorInfo
PathAllocCombine
PathCchCombine
PathCchAppend
PathCchRemoveFileSpec
PathCchAddExtension
SHAnsiToUnicode
GlobalUnlock
GlobalLock
SetProcessInformation
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
MulDiv
SHCreateStreamOnFileEx
IStream_Write
SHOpenRegStream2W
SHCreateMemStream
SHCreateStreamOnFileW
IStream_Read
IStream_Reset
GetTempPathW
QueryFullProcessImageNameW
ord170
UnregisterWaitEx
DeleteTimerQueueTimer
CreateTimerQueueTimer
ChangeTimerQueueTimer
FileTimeToSystemTime
SystemTimeToFileTime
GetDynamicTimeZoneInformation
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
GetSystemPowerStatus
RegisterWaitForSingleObject
GetComputerNameW
QueryPerformanceCounter
InitializeSListHead
GetPersistedRegistryLocationW
LookupAccountNameW
SHRegGetValueFromHKCUHKLM
GetDpiForMonitor
ord244
GetProductInfo
GetOsSafeBootMode
RaiseFailFastException
CharLowerBuffW
CharNextW
CharNextA
PowerDeterminePlatformRoleEx
CallNtPowerInformation
GetPwrCapabilities
ApiSetQueryApiSetPresence
ord509
ord635
ShellMessageBoxW
PathRemoveArgsW
ord544
SHCreateWorkerWindowW
StrRetToStrW
AssocQueryStringW
ord197
ord279
SHIsChildOrSelf
ord478
ord479
ord481
IUnknown_GetWindow
SHPinDllOfCLSID
StrRetToBufW
ord292
ord165
EnumDisplayMonitors
EnumDisplayDevicesW
GetSystemMetrics
SystemParametersInfoW
GetMonitorInfoW
CopyRect
SubtractRect
PtInRect
IsRectEmpty
SetRectEmpty
EqualRect
SetRect
InflateRect
OffsetRect
UnionRect
IntersectRect
NotifyWinEvent
UnhookWinEvent
SetWinEventHook
SHParseDisplayName
ILFree
ILFindLastID
SHBindToParent
SHBindToObject
SHGetIDListFromObject
ILCombine
ILClone
ILGetSize
ILRemoveLastID
ILIsEqual
SHGetNameFromIDList
SHBindToFolderIDListParent
SHCreateItemFromIDList
SHCreateItemFromParsingName
ILIsParent
ILCloneFirst
DXGIDeclareAdapterRemovalSupport
EnableMouseInPointer
GetPointerType
GetCurrentInputMessageSource
GetPointerInfo
GetPointerDevices
SetThreadFlags
SHGetFolderPathEx
SHGetKnownFolderIDList
GetThreadFlags
MsgWaitForMultipleObjects
MsgWaitForMultipleObjectsEx
GetPackageFullName
GetPackagesByPackageFamily
SetWindowFeedbackSetting
RegisterClipboardFormatW
CreateWindowInBand
GetWindowBand
RegisterPowerSettingNotification
UnregisterPowerSettingNotification
InitVariantFromGUIDAsString
PSPropertyBag_WriteStr
PropVariantToUInt32
PSPropertyBag_WriteDWORD
InitVariantFromResource
PropVariantToStringAlloc
PSGetPropertyFromPropertyStorage
PSCreateMemoryPropertyStore
PropVariantToBoolean
PlaySoundW
SHChangeNotify
SHCreateDataObject
ParseApplicationUserModelId
GetStagedPackagePathByFullName
FindPackagesByPackageFamily
SetTextColor
CreateFontIndirectW
GetClipBox
SelectObject
CreateCompatibleDC
DeleteDC
GetObjectW
DeleteObject
CombineRgn
OffsetRgn
SetRectRgn
Rectangle
CreateRectRgn
SetStretchBltMode
ExcludeClipRect
StretchBlt
GetDeviceCaps
SetTextAlign
GetTextMetricsW
ExtTextOutW
GetStockObject
GetTextExtentPoint32W
CreateRectRgnIndirect
GetGlyphOutlineW
SelectClipRgn
GetClipRgn
GetOutlineTextMetricsW
GetCurrentObject
SetProcessDEPPolicy
IsBadWritePtr
RegisterApplicationRestart
InternetCrackUrlW
ord162
SHUnicodeToAnsi
ord1
ord192
ord183
ord126
ord109
ord174
ord121
ord190
ord123
ord187
ord186
ord142
ord184
ord200
ord134
ord22
ord850
ord95
ord885
ord723
ord743
ord907
ord43
Shell_GetCachedImageIndexW
ord790
ord792
ord727
ord162
ord680
ord894
SHGetPropertyStoreForWindow
ord193
ord906
ord895
ShellExecuteW
SHGetLocalizedName
SHEvaluateSystemCommandTemplate
ord764
ord866
ord181
ord244
ExtractIconExW
ord132
ord137
Shell_NotifyIconW
Shell_NotifyIconGetRect
ord6
SHGetStockIconInfo
DuplicateIcon
ord91
ord254
ord54
SHEnableServiceObject
ord61
ord896
SHAddToRecentDocs
ord60
SHUpdateRecycleBinIcon
ord2
ord711
ord172
ord4
SHGetPathFromIDListW
ord645
ord644
ord753
ord733
SHChangeNotifyRegisterThread
DragQueryFileW
ord67
SHCreateItemInKnownFolder
ord206
ord201
ord188
ord899
ShellExecuteExW
ord245
ord200
ord89
ord190
ord85
ord100
SHAppBarMessage
SHFileOperationW
ord164
PathIsDirectoryW
ord413
ord548
ord163
ord467
AssocQueryKeyW
ChrCmpIW
PathIsRelativeW
AssocCreate
IsCompositionActive
IsAppThemed
GetThemeMetric
DrawThemeTextEx
SetWindowTheme
ord86
DrawThemeBackground
DrawThemeParentBackground
CloseThemeData
GetThemeColor
BufferedPaintInit
BeginBufferedPaint
GetThemeFont
ord138
EndBufferedPaint
BufferedPaintUnInit
GetThemeInt
GetThemeBackgroundExtent
GetThemeBool
OpenThemeData
OpenThemeDataForDpi
GetThemeMargins
GetBufferedPaintBits
BufferedPaintSetAlpha
ord126
GetThemePartSize
IsThemeActive
GetWindowTheme
ord138
ord113
ord141
DwmEnableBlurBehindWindow
ord124
ord139
DwmIsCompositionEnabled
DwmRegisterThumbnail
DwmQueryThumbnailSourceSize
DwmUnregisterThumbnail
DwmSetWindowAttribute
ord140
ord114
DwmGetWindowAttribute
DwmUpdateThumbnailProperties
ord159
MonitorFromWindow
CreatePopupMenu
GetMenuDefaultItem
DestroyMenu
LoadCursorW
SetCursor
SetMenuItemInfoW
DefWindowProcA
IsWindowUnicode
LoadAcceleratorsW
ChangeWindowMessageFilterEx
TranslateAcceleratorW
ord2611
MonitorFromRect
GetWindowPlacement
GetGuiResources
IsHungAppWindow
ord2574
SwitchToThisWindow
GetLastActivePopup
UnregisterHotKey
RegisterHotKey
SendDlgItemMessageW
EndDialog
ExitWindowsEx
GetKeyState
IsIconic
LoadIconW
HungWindowFromGhostWindow
SetWindowPlacement
CascadeWindows
TileWindows
LockWorkStation
InjectMouseInput
MapVirtualKeyExW
InjectKeyboardInput
GetCaretBlinkTime
GetSysColor
CopyImage
DestroyIcon
DrawIconEx
GetSystemMetricsForDpi
ord2005
TrackMouseEvent
SetCapture
GetCapture
ReleaseCapture
GetDoubleClickTime
CalculatePopupWindowPosition
CopyIcon
GetLastInputInfo
AdjustWindowRect
GetDpiForWindow
SetWindowCompositionAttribute
SetGestureConfig
LoadImageW
CheckMenuItem
EnableMenuItem
RemoveMenu
SetMenuDefaultItem
TrackPopupMenuEx
DeleteMenu
ReleaseDC
DrawTextW
LoadMenuW
GetSubMenu
CreateIconIndirect
GetMenuItemCount
GetMenuItemInfoW
MonitorFromPoint
ReplyMessage
GetAsyncKeyState
ModifyMenuW
GetSystemMenu
GetSysColorBrush
GhostWindowFromHungWindow
GetIconInfoExW
GetIconInfo
GetClassWord
GetClassLongW
GetPhysicalCursorPos
GetCursorInfo
ShowWindowAsync
InsertMenuW
BringWindowToTop
ord2573
EndTask
IsTopLevelWindow
GetMenuState
IsZoomed
SetScrollInfo
GetScrollInfo
SetScrollPos
GetMenuStringW
InternalGetWindowText
GetLayeredWindowAttributes
SetLayeredWindowAttributes
DrawTextExW
IsProcessDPIAware
SetThreadDpiAwarenessContext
GetWindowCompositionAttribute
GetWindowProcessHandle
UpdateLayeredWindow
ord2521
GetDC
UnregisterClassW
PostThreadMessageW
UnregisterClassA
ord2522
GetMenuInfo
SetMenuInfo
GetDpiForSystem
GetWindowDpiAwarenessContext
AreDpiAwarenessContextsEqual
CharLowerW
IsCharAlphaNumericW
FillRect
AdjustWindowRectEx
LsaFreeReturnBuffer
LsaConnectUntrusted
GetUserNameExW
LsaCallAuthenticationPackage
LsaDeregisterLogonProcess
LsaLookupAuthenticationPackage
LsaLookupUserAccountType
ResolveDelayLoadedAPI
DelayLoadFailureHook
DeriveAppContainerSidFromAppContainerName
GetProfileType
PowerSetRequest
PowerCreateRequest
VerifyVersionInfoW
IsProcessInWDAGContainer
CopyFileW
NotifyServiceStatusChangeW
QueryServiceConfigW
GetUserDefaultGeoName
SetTermsrvAppInstallMode
GetQueuedCompletionStatus
CreateIoCompletionPort
ord292
EnableTraceEx2
StopTraceW
StartTraceW
RpcBindingFromStringBindingW
RpcStringBindingComposeW
I_RpcExceptionFilter
RpcBindingSetAuthInfoExW
RpcStringFreeW
RpcBindingFree
NdrClientCall2
UuidFromStringW
BiPtFreeMemory
BiPtAssociateApplicationEntryPoint
BiPtEnumerateWorkItemsForPackageName
BiPtQueryWorkItem
WTSRegisterSessionNotification
WTSUnRegisterSessionNotification
EnumerateIdentityProviders
GetDefaultIdentityProvider
GetIdentityProviderInfoByGUID
ReleaseIdentityProviderEnumContext
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ