Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
explorer.exe
Resource
win11-20240802-en
Target
explorer.exe
Size
5.5MB
MD5
b7579f1938eaa496668c8fe82277419c
SHA1
f2b5e530b453a69cf23f2166e48bcf5749a9429a
SHA256
b945673c4465044470b6a604241df28e4511d2befb5daf8e2bbbe657f750d0fc
SHA512
fd51de1c84e2200c3294783691bbcd13be20ec42961275995630eaf3643a029451fb009a18ef874e591a39634aadb9923b05948b11d1e0c650a9f964f934a841
SSDEEP
49152:mtsjJXZ119EUDGAQCHw5+CXz8qokOIBFurhcptwQn8kXRUTIo5kQD1D/xg1CvaCx:nJ83nAk+tS8D/vg60w8a0cD5r
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
explorer.pdb
?_Xbad_function_call@std@@YAXXZ
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
_Thrd_detach
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_join
_Thrd_id
_Cnd_do_broadcast_at_thread_exit
?_Winerror_message@std@@YAKKPEADK@Z
?_Winerror_map@std@@YAHH@Z
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z
?_Xbad_alloc@std@@YAXXZ
?tolower@?$ctype@G@std@@QEBAGG@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Xout_of_range@std@@YAXPEBD@Z
_Wcscoll
_Wcsxfrm
?id@?$collate@G@std@@2V0locale@2@A
??Bid@locale@std@@QEAA_KXZ
?id@?$ctype@G@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
??0_Lockit@std@@QEAA@H@Z
??0_Locinfo@std@@QEAA@PEBD@Z
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??1_Lockit@std@@QEAA@XZ
??1_Locinfo@std@@QEAA@XZ
?is@?$ctype@G@std@@QEBA_NFG@Z
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Incref@facet@locale@std@@UEAAXXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?uncaught_exception@std@@YA_NXZ
?good@ios_base@std@@QEBA_NXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ
?width@ios_base@std@@QEAA_J_J@Z
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
_Mtx_init_in_situ
_Xtime_get_ticks
_Mtx_destroy_in_situ
_Mtx_unlock
_Mtx_lock
?_Xlength_error@std@@YAXPEBD@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
_c_exit
_register_thread_local_exe_atexit_callback
_initterm_e
_initterm
_set_error_mode
_wcsrev
wcsncpy
wcscspn
strncmp
memset
wcscmp
wcsncmp
_time64
_o_iswspace
_o_malloc
_o_memcpy_s
_o_pow
_o_realloc
_o_roundf
_o_sqrt
_o_terminate
_o_toupper
_o_towlower
_o_wcscat_s
_o_wcscpy_s
_o_wcsncpy_s
_o_wcstol
_o_wcstoll
__C_specific_handler
__CxxFrameHandler3
_o_iswalnum
_o__set_new_mode
_o__set_fmode
_o__set_errno
_o__set_app_type
_o__seh_filter_exe
_o__register_onexit_function
_o__recalloc
_o_free
_o__purecall
_o__mktime64
_o_floor
memmove
_o_exit
_o_ceil
_o_bsearch
_o__wtoi
_o__wcsnicmp
_o__wcsicmp
_o__localtime64
_o__itow_s
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
_o__initialize_wide_environment
_o__initialize_onexit_table
_o__get_wide_winmain_command_line
_o__get_errno
_o__exit
_o__errno
_o__difftime64
_o__crt_atexit
_o__configure_wide_argv
_o__configthreadlocale
_o__cexit
_o__beginthreadex
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___std_exception_destroy
_o___std_exception_copy
_o___p__commode
_o____lc_codepage_func
wcsstr
__std_terminate
__CxxFrameHandler4
_CxxThrowException
memcmp
memcpy
PicFreeFileInfo
PicRetrieveFileInfo
ord9
CreateJobObjectW
QueryInformationJobObject
AssignProcessToJobObject
SetInformationJobObject
RegisterApplicationRestart
PathIsURLW
UrlUnescapeW
HashData
CheckElevation
CheckElevationEnabled
SHRegGetUSValueW
SHRegGetBoolUSValueW
CoRegisterMessageFilter
GlobalGetAtomNameW
CreateActCtxW
ActivateActCtx
ReleaseActCtx
DeactivateActCtx
RtlGetVersion
RtlInitString
wcsspn
RtlQueryResourcePolicy
NtOpenThreadToken
ZwQuerySystemInformation
RtlInitUnicodeString
RtlUpcaseUnicodeChar
ZwQueryDirectoryFile
RtlpEnsureBufferSize
RtlNtPathNameToDosPathName
ZwOpenFile
ZwEnumerateKey
RtlInitUnicodeStringEx
RtlFormatCurrentUserKeyPath
ZwCreateFile
ZwQueryInformationFile
ZwCreateSection
ZwQueryInformationProcess
ZwSetInformationProcess
RtlxAnsiStringToUnicodeSize
RtlAnsiStringToUnicodeString
ZwUnmapViewOfSection
ZwMapViewOfSection
LdrResSearchResource
RtlVerifyVersionInfo
RtlImageDirectoryEntryToData
RtlReleaseSRWLockShared
RtlAcquireSRWLockShared
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockExclusive
NtClose
NtQueryInformationToken
NtOpenProcessToken
RtlCompareUnicodeString
RtlFreeHeap
RtlAllocateHeap
wcschr
RtlGetNativeSystemInformation
wcsrchr
strchr
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlPublishWnfStateData
NtSetSystemInformation
RtlFlushHeaps
NtQueryWnfStateData
ZwQueryValueKey
RtlSubscribeWnfStateChangeNotification
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlQueryWnfStateData
RtlNtStatusToDosError
RtlCaptureContext
ZwOpenKey
RtlGetDeviceFamilyInfoEnum
NtSetInformationProcess
NtQueryInformationProcess
ZwClose
RtlReAllocateHeap
RtlAppendUnicodeToString
RtlAppendUnicodeStringToString
RtlRunOnceExecuteOnce
RtlCopyUnicodeString
RtlUpcaseUnicodeString
RtlIsStateSeparationEnabled
RtlDosPathNameToNtPathName_U_WithStatus
RtlNtStatusToDosErrorNoTeb
RtlFreeUnicodeString
NtSetThreadExecutionState
VerSetConditionMask
WinSqmSetDWORD
WinSqmIsOptedIn
WinSqmAddToStreamEx
FindStringOrdinal
GetModuleHandleW
GetProcAddress
GetModuleFileNameW
LoadLibraryExW
LoadStringW
LoadResource
FindResourceExW
GetModuleFileNameA
SizeofResource
GetModuleHandleA
GetModuleHandleExW
FreeLibrary
LockResource
InitOnceComplete
InitOnceBeginInitialize
InitOnceExecuteOnce
Sleep
WaitForSingleObject
ReleaseMutex
TryAcquireSRWLockExclusive
CreateMutexW
OpenEventW
InitializeCriticalSectionEx
ReleaseSRWLockExclusive
TryEnterCriticalSection
AcquireSRWLockExclusive
WaitForSingleObjectEx
OpenSemaphoreW
ReleaseSRWLockShared
CreateEventExW
SetEvent
CreateEventW
SleepEx
CreateMutexExW
AcquireSRWLockShared
DeleteCriticalSection
LeaveCriticalSection
WaitForMultipleObjectsEx
ReleaseSemaphore
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
ResetEvent
CreateSemaphoreExW
InitializeCriticalSection
InitializeSRWLock
OpenMutexW
GetProcessHeap
HeapFree
HeapAlloc
UnhandledExceptionFilter
GetLastError
RaiseException
SetLastError
SetUnhandledExceptionFilter
SetErrorMode
DeleteFileW
GetFileAttributesExW
GetLongPathNameW
FindClose
FindNextFileW
FindFirstFileW
GetFileAttributesW
WriteFile
CompareFileTime
CreateFileW
EventWriteTransfer
EventEnabled
EventRegister
EventSetInformation
EventWrite
EventActivityIdControl
EventProviderEnabled
EventUnregister
RegEnumKeyExW
RegCloseKey
RegOpenCurrentUser
RegNotifyChangeKeyValue
RegDeleteTreeW
RegEnumValueW
RegDeleteKeyExW
RegOpenKeyExW
RegGetValueW
RegSetValueExW
RegSetKeySecurity
RegCreateKeyExW
RegQueryInfoKeyW
RegDeleteValueW
RegGetKeySecurity
RegQueryValueExW
CloseThreadpoolTimer
WaitForThreadpoolWaitCallbacks
SubmitThreadpoolWork
CreateThreadpoolWait
SetThreadpoolWait
SetThreadpoolTimer
CreateThreadpoolWork
CreateThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolWait
TrySubmitThreadpoolCallback
GetStartupInfoW
GetExitCodeProcess
ExitProcess
SetProcessShutdownParameters
CreateProcessW
ProcessIdToSessionId
QueueUserAPC
OpenProcessToken
GetCurrentThread
OpenThreadToken
TerminateProcess
GetThreadPriority
GetCurrentThreadId
CreateThread
OpenThread
GetCurrentProcessId
ResumeThread
SetPriorityClass
GetPriorityClass
SetThreadPriorityBoost
GetCurrentProcess
SetThreadPriority
GetProcessId
GetCalendarInfoW
GetThreadUILanguage
GetLocaleInfoEx
GetLocaleInfoW
FormatMessageW
GetUserDefaultLocaleName
GetGeoInfoW
GetUserDefaultLangID
OutputDebugStringW
DebugBreak
IsDebuggerPresent
CloseHandle
DuplicateHandle
SafeArrayDestroy
SafeArrayCreate
VariantClear
VarUI4FromStr
VariantInit
SysAllocStringByteLen
SysAllocString
SysFreeString
SafeArrayUnaccessData
SysStringLen
SafeArrayAccessData
SHTaskPoolQueueTask
SHTaskPoolGetUniqueContext
SetCurrentProcessExplicitAppUserModelID
IsOS
PropVariantClear
CoReleaseMarshalData
CoGetInterfaceAndReleaseStream
IIDFromString
CoMarshalInterThreadInterfaceInStream
CoInitializeEx
CoCancelCall
CoDisableCallCancellation
CoEnableCallCancellation
CoGetMalloc
CLSIDFromString
CoSetProxyBlanket
CoTaskMemAlloc
CoUninitialize
CoCreateGuid
CoTaskMemRealloc
StringFromIID
StringFromGUID2
CoRevokeClassObject
CreateStreamOnHGlobal
CoRegisterClassObject
CoGetObjectContext
CoInitializeSecurity
CoGetStdMarshalEx
CoWaitForMultipleHandles
CoGetApartmentType
CoIncrementMTAUsage
CoFreeUnusedLibraries
CoCreateFreeThreadedMarshaler
CoGetCallContext
CoTaskMemFree
CoCreateInstance
StrCmpW
StrStrIW
StrCmpIW
QISearch
StrCmpICA
StrRChrW
StrChrIW
StrCmpNIW
StrCmpNICW
StrCmpICW
StrChrW
StrToIntW
SHStrDupW
CommandLineToArgvW
IUnknown_SetSite
IUnknown_GetSite
IUnknown_Set
IUnknown_QueryService
GlobalAlloc
LocalFree
LocalAlloc
GlobalFree
LocalReAlloc
GetProcessMitigationPolicy
OpenProcess
IsProcessorFeaturePresent
GetDateFormatW
GetVersionExW
GetSystemTime
GetLocalTime
GetSystemTimeAsFileTime
GetLogicalProcessorInformation
GetWindowsDirectoryW
GetSystemDirectoryW
GetTickCount
GetTickCount64
GetTimeFormatEx
GetDateFormatEx
SearchPathW
ExpandEnvironmentStringsW
GetCurrentDirectoryW
GetCommandLineW
PathCombineW
PathRemoveFileSpecW
PathParseIconLocationW
PathCommonPrefixW
PathGetDriveNumberW
PathRemoveBlanksW
PathFindExtensionW
PathIsFileSpecW
PathQuoteSpacesW
SHExpandEnvironmentStringsW
PathGetArgsW
PathFileExistsW
PathFindFileNameW
WindowsPromoteStringBuffer
WindowsDeleteStringBuffer
WindowsSubstringWithSpecifiedLength
WindowsGetStringLen
WindowsCreateString
WindowsDuplicateString
WindowsPreallocateStringBuffer
WindowsCompareStringOrdinal
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference
RoInitialize
RoGetActivationFactory
RoUninitialize
RoActivateInstance
SHGetValueW
SHQueryInfoKeyW
SHEnumKeyExW
SHSetValueW
SHDeleteKeyW
SHRegGetValueW
SHDeleteValueW
CompareStringOrdinal
MultiByteToWideChar
WideCharToMultiByte
CompareStringW
SHCreateThread
SHCreateThreadRef
SHGetThreadRef
SHSetThreadRef
SetProcessReference
lstrlenW
lstrcmpiW
CopySid
GetTokenInformation
GetAclInformation
GetAce
DeleteAce
InitializeAcl
GetLengthSid
IsValidSid
MakeAbsoluteSD
CheckTokenMembership
GetSecurityDescriptorDacl
SetSecurityDescriptorDacl
EqualSid
CreateWellKnownSid
FreeSid
SetKernelObjectSecurity
DuplicateToken
AddAce
GetTraceLoggerHandle
TraceMessage
GetTraceEnableLevel
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceEnableFlags
GetUserDefaultUILanguage
LoadLibraryW
FindResourceW
SHLoadIndirectString
RemoveVectoredExceptionHandler
RegDeleteKeyValueW
RegSetKeyValueW
RoGetAgileReference
SetRestrictedErrorInfo
GetRestrictedErrorInfo
RoOriginateError
RoTransformError
RoFailFastWithErrorContext
RoOriginateLanguageException
RoGetMatchingRestrictedErrorInfo
PathAllocCombine
PathCchAppend
PathCchCombine
PathCchAddExtension
PathCchRemoveFileSpec
SHAnsiToUnicode
GlobalUnlock
GlobalLock
SetProcessInformation
SetThreadDescription
VirtualProtect
UnmapViewOfFile
CreateFileMappingW
VirtualAlloc
OpenFileMappingW
MapViewOfFile
VirtualFree
MulDiv
SHCreateStreamOnFileEx
IStream_Reset
SHOpenRegStream2W
IStream_Read
SHCreateMemStream
IStream_Write
SHCreateStreamOnFileW
GetTempPathW
QueryFullProcessImageNameW
ord170
CreateTimerQueueTimer
UnregisterWaitEx
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetOsSafeBootMode
GetProductInfo
GetUserDefaultGeoName
DeriveAppContainerSidFromAppContainerName
GetProfileType
GetDynamicTimeZoneInformation
FileTimeToSystemTime
GetTimeZoneInformation
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
RegisterWaitForSingleObject
GetSystemPowerStatus
GetComputerNameW
QueryPerformanceCounter
InitializeSListHead
InterlockedPushEntrySList
GetPersistedRegistryLocationW
LookupAccountNameW
CharNextW
CharLowerBuffW
NotifyServiceStatusChangeW
QueryServiceConfigW
GetFileInformationByHandleEx
GetQueuedCompletionStatus
CreateIoCompletionPort
GetPhysicallyInstalledSystemMemory
CreateStreamOverRandomAccessStream
SHRegGetValueFromHKCUHKLM
ord244
GetDpiForMonitor
GetNetworkConnectivityHint
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
RaiseFailFastException
CharNextA
CallNtPowerInformation
PowerDeterminePlatformRoleEx
GetPwrCapabilities
ApiSetQueryApiSetPresence
ord165
ord292
SHIsChildOrSelf
ord478
ShellMessageBoxW
AssocQueryStringW
ord509
SHCreateWorkerWindowW
ord635
ord479
ord279
PathRemoveArgsW
IUnknown_GetWindow
ord544
SHPinDllOfCLSID
StrRetToStrW
ord481
StrRetToBufW
ord197
GetSystemMetrics
EnumDisplayMonitors
GetDisplayConfigBufferSizes
QueryDisplayConfig
EnumDisplayDevicesW
SystemParametersInfoW
GetMonitorInfoW
SetRect
InflateRect
IntersectRect
OffsetRect
SetRectEmpty
SubtractRect
CopyRect
PtInRect
EqualRect
IsRectEmpty
UnionRect
SetWinEventHook
UnhookWinEvent
NotifyWinEvent
ILClone
ILFindLastID
ILCombine
ILFree
SHBindToParent
SHGetIDListFromObject
SHParseDisplayName
ILGetSize
ILIsParent
SHBindToFolderIDListParent
SHGetNameFromIDList
SHCreateItemFromIDList
ILRemoveLastID
SHBindToObject
SHCreateItemFromParsingName
ILCloneFirst
ILIsEqual
DXGIDeclareAdapterRemovalSupport
GetCurrentInputMessageSource
GetPointerDevices
EnableMouseInPointer
GetPointerType
GetPointerInfo
SHGetFolderPathEx
SHGetKnownFolderIDList
GetThreadFlags
SetThreadFlags
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
GetPackageFullName
GetPackagesByPackageFamily
SetWindowFeedbackSetting
RegisterClipboardFormatW
GetWindowBand
CreateWindowInBand
RegisterPowerSettingNotification
UnregisterPowerSettingNotification
PSCreateMemoryPropertyStore
PropVariantToBoolean
PSGetPropertyFromPropertyStorage
InitVariantFromResource
PSPropertyBag_WriteStr
PropVariantToUInt32
PSPropertyBag_WriteDWORD
PropVariantToStringAlloc
InitVariantFromGUIDAsString
CreateDispatcherQueueController
URLOpenBlockingStreamW
SHChangeNotify
SHCreateDataObject
ParseApplicationUserModelId
FindPackagesByPackageFamily
WTSRegisterSessionNotification
WTSUnRegisterSessionNotification
StretchBlt
ExcludeClipRect
SetStretchBltMode
Rectangle
SelectClipRgn
GetClipRgn
GetOutlineTextMetricsW
GetCurrentObject
GetGlyphOutlineW
CreateRectRgnIndirect
GetTextExtentPoint32W
GetDeviceCaps
CreateRectRgn
SetRectRgn
OffsetRgn
CombineRgn
GetStockObject
DeleteObject
ExtTextOutW
GetObjectW
DeleteDC
CreateCompatibleDC
SelectObject
GetClipBox
CreateFontIndirectW
SetTextColor
SetTextAlign
GetTextMetricsW
IsBadWritePtr
RpcBindingFree
NdrClientCall3
RpcStringFreeW
RpcBindingSetAuthInfoExW
I_RpcExceptionFilter
RpcBindingFromStringBindingW
UuidFromStringW
RpcStringBindingComposeW
InternetCrackUrlW
ord192
ord1
ord210
ord174
ord109
ord121
ord123
ord190
ord187
ord162
ord183
ord213
ord126
SHUnicodeToAnsi
ord142
ord186
ord200
ord184
ord172
ord680
ord723
ord885
ord95
ord743
ord907
ord43
ord790
ord792
ord727
ord162
SHAppBarMessage
ord894
ord193
ord906
ord895
SHGetLocalizedName
SHGetPropertyStoreForWindow
ord764
ord866
SHEvaluateSystemCommandTemplate
ord181
ord244
ExtractIconExW
ShellExecuteW
ord132
ord137
Shell_NotifyIconW
Shell_NotifyIconGetRect
ord6
SHGetStockIconInfo
DuplicateIcon
ord91
ord254
ord54
SHEnableServiceObject
ord61
ord896
SHAddToRecentDocs
ord60
SHUpdateRecycleBinIcon
ord2
ord711
SHFileOperationW
ord4
SHGetPathFromIDListW
ord644
ord753
ord733
SHChangeNotifyRegisterThread
DragQueryFileW
ord67
SHCreateItemInKnownFolder
ord206
ord201
ord188
ord899
ShellExecuteExW
ord245
ord200
ord89
ord190
ord85
ord100
ord645
ord850
ord22
ord134
Shell_GetCachedImageIndexW
PathIsRelativeW
ord164
PathIsDirectoryW
ord413
ord548
ord163
ord467
AssocQueryKeyW
ChrCmpIW
AssocCreate
GetWindowTheme
IsAppThemed
IsCompositionActive
DrawThemeTextEx
GetThemeFont
ord86
DrawThemeBackground
DrawThemeParentBackground
GetThemeBackgroundExtent
GetThemeBool
OpenThemeData
OpenThemeDataForDpi
GetThemeMargins
ord138
CloseThemeData
BufferedPaintSetAlpha
ord126
GetThemePartSize
IsThemeActive
GetBufferedPaintBits
GetThemeInt
GetThemeColor
GetThemeMetric
SetWindowTheme
BufferedPaintInit
BufferedPaintUnInit
EndBufferedPaint
BeginBufferedPaint
ord141
ord139
DwmSetWindowAttribute
ord114
ord138
DwmRegisterThumbnail
ord140
DwmGetWindowAttribute
ord159
DwmQueryThumbnailSourceSize
ord113
DwmEnableBlurBehindWindow
ord124
DwmUpdateThumbnailProperties
DwmUnregisterThumbnail
DwmIsCompositionEnabled
SetScrollInfo
GetScrollInfo
SetScrollPos
GetMenuStringW
InternalGetWindowText
GetLayeredWindowAttributes
SetLayeredWindowAttributes
DrawTextExW
IsProcessDPIAware
SetThreadDpiAwarenessContext
GetWindowCompositionAttribute
GetWindowProcessHandle
GetClassLongPtrW
UpdateLayeredWindow
LoadAcceleratorsW
MonitorFromRect
GetGuiResources
IsHungAppWindow
ord2574
IsWindowUnicode
SwitchToThisWindow
GetLastActivePopup
UnregisterHotKey
RegisterHotKey
SendDlgItemMessageW
EndDialog
ExitWindowsEx
GetKeyState
LoadIconW
HungWindowFromGhostWindow
CascadeWindows
TileWindows
LockWorkStation
InjectMouseInput
MapVirtualKeyExW
InjectKeyboardInput
GetCaretBlinkTime
GetSysColor
CopyImage
DestroyIcon
DrawIconEx
GetSystemMetricsForDpi
ord2005
IsTopLevelWindow
SetCapture
GetCapture
ReleaseCapture
GetDoubleClickTime
CalculatePopupWindowPosition
CopyIcon
GetMenuState
DefWindowProcA
EndTask
PostThreadMessageW
UnregisterClassA
ord2521
GetLastInputInfo
UnregisterClassW
ord2522
GetMenuInfo
SetMenuInfo
GetDpiForSystem
GetWindowDpiAwarenessContext
AreDpiAwarenessContextsEqual
CharLowerW
IsCharAlphaNumericW
AdjustWindowRect
GetCursorInfo
GetDpiForWindow
GetPhysicalCursorPos
GetClassLongW
GetClassWord
ord2573
GetIconInfo
GetIconInfoExW
GhostWindowFromHungWindow
GetSysColorBrush
GetSystemMenu
BringWindowToTop
InsertMenuW
ShowWindowAsync
ord2611
TranslateAcceleratorW
TrackMouseEvent
ModifyMenuW
GetAsyncKeyState
ReplyMessage
ChangeWindowMessageFilterEx
MonitorFromPoint
GetMenuItemInfoW
SetWindowCompositionAttribute
SetGestureConfig
GetMenuItemCount
LoadImageW
CreateIconIndirect
SetMenuItemInfoW
SetCursor
LoadCursorW
DestroyMenu
GetMenuDefaultItem
CreatePopupMenu
IsIconic
MonitorFromWindow
CheckMenuItem
EnableMenuItem
RemoveMenu
SetMenuDefaultItem
TrackPopupMenuEx
ReleaseDC
DeleteMenu
FillRect
DrawTextW
AdjustWindowRectEx
LoadMenuW
GetDC
GetSubMenu
GetUserNameExW
ResolveDelayLoadedAPI
DelayLoadFailureHook
PowerCreateRequest
VerifyVersionInfoW
PowerSetRequest
IsProcessInWDAGContainer
CopyFileW
WaitForMultipleObjects
SetTermsrvAppInstallMode
ord292
EnableTraceEx2
StartTraceW
StopTraceW
GetStagedPackagePathByFullName2
BiPtEnumerateWorkItemsForPackageName
BiPtFreeMemory
BiPtAssociateApplicationEntryPoint
BiPtQueryWorkItem
ceilf
floorf
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ