Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
explorer.exe
Resource
win10v2004-20241007-en
Target
explorer.exe
Size
5.3MB
MD5
e2d1f700066d39814081317462a0fd74
SHA1
12ee7ed3ba979aca336e42a523612e0cdfa3ab3a
SHA256
359179ffb630953ee79523866a0a2246a5612d726c2eace52f7413f15530715e
SHA512
1185c38e6216ef846af8e00bae22964a70a4efa95ffb996d782f5cd6d8ab96c921f320ab2845dac3aecc4ccabdebd660dff84e274364b13e06ce2cfa81715768
SSDEEP
49152:BLYiHv5/ACIycn1Gk51JM0gcHfHPnAdISuXXpKbhSEqteY9+D6eY4KcQo5krTwtl:BE8FFXECK1zakbw8a0shIno
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
explorer.pdb
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
_Cnd_wait
?_Xinvalid_argument@std@@YAXPEBD@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z
?tolower@?$ctype@G@std@@QEBAGG@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
_Wcscoll
_Wcsxfrm
?id@?$collate@G@std@@2V0locale@2@A
??Bid@locale@std@@QEAA_KXZ
?id@?$ctype@G@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
??0_Lockit@std@@QEAA@H@Z
??0_Locinfo@std@@QEAA@PEBD@Z
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??1_Lockit@std@@QEAA@XZ
??1_Locinfo@std@@QEAA@XZ
?is@?$ctype@G@std@@QEBA_NFG@Z
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?uncaught_exception@std@@YA_NXZ
?good@ios_base@std@@QEBA_NXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
?width@ios_base@std@@QEBA_JXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?flags@ios_base@std@@QEBAHXZ
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
_Thrd_yield
?_Xbad_function_call@std@@YAXXZ
?__ExceptionPtrCreate@@YAXPEAX@Z
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?width@ios_base@std@@QEAA_J_J@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
_Thrd_detach
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_join
_Thrd_id
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
_Cnd_do_broadcast_at_thread_exit
?_Incref@facet@locale@std@@UEAAXXZ
_Mtx_lock
_Mtx_unlock
?_Xlength_error@std@@YAXPEBD@Z
_c_exit
_initterm_e
_initterm
_set_error_mode
_register_thread_local_exe_atexit_callback
wcsncmp
wcscspn
memset
strncmp
wcscmp
_time64
_o_free
_o_iswspace
_o_lround
_o_lroundf
_o_malloc
_o_memcpy_s
_o_pow
_o_realloc
_o_sqrt
_o_terminate
_o_wcscat_s
_o_wcscpy_s
_o_wcsncpy_s
_o_wcstol
_o_wcstoll
__C_specific_handler
__current_exception
__current_exception_context
__CxxFrameHandler3
_o__ltow_s
_o_ceilf
_o_ceil
__C_specific_handler_noexcept
_o__localtime64
_o__wcsnicmp
_o__wcslwr_s
_o__wcsicmp
_o_fmod
_o_exit
_o__itow_s
_o__itoa_s
_o__set_new_mode
_o__set_fmode
_o__set_errno
_o__set_app_type
_o__seh_filter_exe
_o__register_onexit_function
_o__recalloc
_o__purecall
_o_abort
_o__mktime64
_o_floorf
_o_floor
_o__wtoi
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
_o__initialize_wide_environment
_o__initialize_onexit_table
_o__get_wide_winmain_command_line
_o__get_errno
_o__exit
_o__errno
_o__difftime64
_o__crt_atexit
_o__configure_wide_argv
_o__configthreadlocale
_o__cexit
_o__beginthreadex
_o___stdio_common_vswprintf
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___std_exception_destroy
_o___std_exception_copy
_o___p__commode
_o____lc_codepage_func
wcsrchr
wcsstr
__std_terminate
__CxxFrameHandler4
_CxxThrowException
PicFreeFileInfo
PicRetrieveFileInfo
ord9
OpenJobObjectW
AssignProcessToJobObject
CreateJobObjectW
QueryInformationJobObject
SetInformationJobObject
RegisterApplicationRestart
PathIsURLW
HashData
UrlUnescapeW
WerRegisterCustomMetadata
WerUnregisterCustomMetadata
CheckElevation
CheckElevationEnabled
SHRegGetBoolUSValueW
SHRegGetUSValueW
CoRevokeInitializeSpy
CoRegisterInitializeSpy
CoRegisterMessageFilter
GlobalGetAtomNameW
ActivateActCtx
CreateActCtxW
DeactivateActCtx
ReleaseActCtx
NtDeviceIoControlFile
NtQueryWnfStateData
NtSetInformationProcess
NtQueryInformationProcess
RtlCaptureContext
WinSqmAddToStream
NtClose
RtlGetVersion
ZwQuerySystemInformation
ZwQueryValueKey
ZwOpenKey
ZwClose
RtlReAllocateHeap
ZwEnumerateValueKey
ZwCreateFile
NtQueryInformationFile
RtlAppendUnicodeToString
RtlAnsiStringToUnicodeString
RtlImageDirectoryEntryToData
ZwUnmapViewOfSection
RtlNtPathNameToDosPathName
RtlUpcaseUnicodeChar
ZwCreateSection
RtlxAnsiStringToUnicodeSize
ZwQueryInformationProcess
RtlpEnsureBufferSize
RtlGetNativeSystemInformation
RtlVerifyVersionInfo
ZwQueryDirectoryFile
ZwSetInformationProcess
RtlInitUnicodeStringEx
ZwMapViewOfSection
RtlFormatCurrentUserKeyPath
ZwEnumerateKey
RtlInitString
ZwOpenFile
ZwQueryInformationFile
LdrResSearchResource
RtlReleaseSRWLockShared
RtlAcquireSRWLockShared
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockExclusive
RtlInitUnicodeString
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlSubscribeWnfStateChangeNotification
RtlQueryWnfStateData
RtlFlushHeaps
NtSetSystemInformation
RtlPublishWnfStateData
RtlGetDeviceFamilyInfoEnum
RtlNtStatusToDosError
RtlLookupFunctionEntry
RtlVirtualUnwind
strchr
memmove_s
RtlDosPathNameToNtPathName_U_WithStatus
RtlFreeUnicodeString
wcschr
RtlAllocateHeap
RtlFreeHeap
RtlCompareUnicodeString
NtOpenProcessToken
NtQueryInformationToken
NtOpenThreadToken
wcsspn
WinSqmIsOptedIn
memcpy
memcmp
memmove
RtlAppendUnicodeStringToString
RtlRunOnceExecuteOnce
RtlCopyUnicodeString
RtlUpcaseUnicodeString
RtlNtStatusToDosErrorNoTeb
NtSetThreadExecutionState
NtPowerInformation
VerSetConditionMask
RtlQueryResourcePolicy
RtlQueryUnbiasedInterruptTime
NtQuerySystemInformation
RtlGetNtSystemRoot
NtOpenFile
GetProcAddress
SizeofResource
FreeLibrary
LockResource
LoadResource
FindResourceExW
GetModuleHandleW
GetModuleHandleExW
LoadLibraryExW
GetModuleFileNameA
LoadStringW
GetModuleHandleA
FindStringOrdinal
GetModuleFileNameW
InitOnceComplete
InitOnceBeginInitialize
Sleep
InitOnceExecuteOnce
LeaveCriticalSection
ReleaseSRWLockShared
CreateMutexExW
ReleaseSemaphore
AcquireSRWLockShared
EnterCriticalSection
SleepEx
DeleteCriticalSection
InitializeCriticalSectionEx
OpenMutexW
OpenEventW
WaitForSingleObject
ReleaseMutex
SetEvent
TryEnterCriticalSection
CreateEventW
CreateEventExW
WaitForSingleObjectEx
InitializeSRWLock
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
ReleaseSRWLockExclusive
TryAcquireSRWLockShared
CreateSemaphoreExW
WaitForMultipleObjectsEx
AcquireSRWLockExclusive
CreateMutexW
ResetEvent
OpenSemaphoreW
HeapFree
HeapAlloc
GetProcessHeap
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetErrorMode
GetLastError
SetLastError
RaiseException
GetFileAttributesExW
GetFileAttributesW
FindFirstFileW
FindNextFileW
FindClose
GetLongPathNameW
DeleteFileW
CompareFileTime
CreateFileW
WriteFile
EventEnabled
EventWriteTransfer
EventRegister
EventSetInformation
EventUnregister
EventActivityIdControl
EventWrite
CloseThreadpoolTimer
CreateThreadpoolWork
WaitForThreadpoolTimerCallbacks
CreateThreadpoolTimer
CreateThreadpoolIo
StartThreadpoolIo
CancelThreadpoolIo
WaitForThreadpoolIoCallbacks
CloseThreadpoolIo
TrySubmitThreadpoolCallback
CloseThreadpoolWait
SubmitThreadpoolWork
SetThreadpoolTimer
WaitForThreadpoolWaitCallbacks
SetThreadpoolWait
CreateThreadpoolWait
GetCurrentThread
OpenProcessToken
GetCurrentProcess
GetCurrentThreadId
SetThreadPriorityBoost
GetCurrentProcessId
ProcessIdToSessionId
QueueUserAPC
TlsSetValue
TlsAlloc
TerminateProcess
GetThreadPriority
TlsGetValue
CreateProcessW
OpenThreadToken
TlsFree
CreateThread
SetPriorityClass
GetExitCodeProcess
SetThreadPriority
GetProcessId
OpenThread
UpdateProcThreadAttribute
ResumeThread
GetPriorityClass
InitializeProcThreadAttributeList
DeleteProcThreadAttributeList
SetProcessShutdownParameters
ExitProcess
GetStartupInfoW
FormatMessageW
FormatMessageA
GetCalendarInfoW
GetThreadUILanguage
GetLocaleInfoEx
GetLocaleInfoW
GetGeoInfoW
IsDebuggerPresent
DebugBreak
OutputDebugStringW
DuplicateHandle
CloseHandle
SafeArrayDestroy
VarUI4FromStr
SysAllocString
SysFreeString
SafeArrayUnaccessData
SafeArrayCreate
VariantInit
VariantClear
SysStringLen
SysAllocStringByteLen
SafeArrayAccessData
SHTaskPoolGetUniqueContext
SHTaskPoolQueueTask
SetCurrentProcessExplicitAppUserModelID
IsOS
StringFromIID
CoCreateGuid
CLSIDFromString
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoFreeUnusedLibraries
CoRegisterClassObject
CoUninitialize
CoInitializeSecurity
CoEnableCallCancellation
CoDisableCallCancellation
CoCancelCall
IIDFromString
CoReleaseMarshalData
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CreateStreamOnHGlobal
StringFromCLSID
CoTaskMemRealloc
CoInitializeEx
CoRevokeClassObject
PropVariantClear
CoGetApartmentType
StringFromGUID2
CoGetCallContext
CoGetObjectContext
CoTaskMemAlloc
CoWaitForMultipleHandles
CoGetMalloc
CoGetStdMarshalEx
CoSetProxyBlanket
CoCreateInstance
StrToIntW
StrChrW
StrCmpNIW
StrCmpW
StrCmpIW
StrChrIW
StrCmpNICW
QISearch
StrCmpICW
StrCmpICA
SHStrDupW
RegQueryInfoKeyW
RegNotifyChangeKeyValue
RegQueryValueExW
RegDeleteKeyExW
RegCloseKey
RegDeleteTreeW
RegSetValueExW
RegOpenCurrentUser
RegCreateKeyExW
RegOpenKeyExW
RegEnumValueW
RegDeleteValueW
RegEnumKeyExW
RegGetValueW
RegLoadMUIStringW
IUnknown_Set
IUnknown_QueryService
IUnknown_SetSite
IUnknown_GetSite
GlobalAlloc
GlobalFree
LocalFree
LocalAlloc
LocalReAlloc
OpenProcess
IsProcessorFeaturePresent
GetProcessMitigationPolicy
GetDateFormatW
GetTickCount64
GetSystemDirectoryW
GetSystemTime
GetTickCount
GetWindowsDirectoryW
GetSystemTimeAsFileTime
GetVersionExW
GetLocalTime
GetDateFormatEx
GetTimeFormatEx
ExpandEnvironmentStringsW
GetCommandLineW
GetCurrentDirectoryW
GetEnvironmentVariableW
SetEnvironmentVariableW
SearchPathW
PathRemoveBlanksW
PathGetArgsW
PathIsFileSpecW
PathFindFileNameW
PathCommonPrefixW
PathFindExtensionW
PathRemoveFileSpecW
PathParseIconLocationW
SHExpandEnvironmentStringsW
PathQuoteSpacesW
PathCombineW
PathGetDriveNumberW
PathFileExistsW
SHSetValueW
SHGetValueW
SHEnumKeyExW
SHDeleteValueW
SHRegGetValueW
SHDeleteKeyW
SHQueryInfoKeyW
CompareStringW
MultiByteToWideChar
CompareStringOrdinal
WideCharToMultiByte
WindowsPromoteStringBuffer
WindowsCompareStringOrdinal
WindowsCreateString
WindowsDeleteStringBuffer
WindowsSubstringWithSpecifiedLength
WindowsPreallocateStringBuffer
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateStringReference
WindowsDuplicateString
SHCreateThreadRef
SHSetThreadRef
SHGetThreadRef
SHCreateThread
SetProcessReference
FindResourceW
LoadLibraryW
SetKernelObjectSecurity
EqualSid
AllocateAndInitializeSid
FreeSid
CreateWellKnownSid
GetTokenInformation
CopySid
GetSecurityDescriptorDacl
IsValidSid
InitializeAcl
GetAclInformation
GetAce
MakeAbsoluteSD
GetLengthSid
DeleteAce
AddAce
CheckTokenMembership
DuplicateToken
K32EnumProcessModules
K32GetModuleFileNameExW
K32GetModuleBaseNameW
QueryFullProcessImageNameW
K32EnumProcesses
GetFileVersionInfoSizeExW
GetFileVersionInfoExW
VerQueryValueW
UnregisterTraceGuids
RegisterTraceGuidsW
TraceMessage
GetTraceEnableFlags
GetTraceLoggerHandle
GetTraceEnableLevel
GetUserDefaultUILanguage
SHLoadIndirectString
SetProcessInformation
SetThreadDescription
RegSetKeyValueW
RoUninitialize
RoGetActivationFactory
RoActivateInstance
RoInitialize
RoGetAgileReference
RoTransformError
RoOriginateError
SetRestrictedErrorInfo
RoGetMatchingRestrictedErrorInfo
PathCchRemoveFileSpec
PathCchCombine
PathCchAppend
PathAllocCombine
PathCchAddExtension
PathCchSkipRoot
SHAnsiToUnicode
GlobalLock
GlobalUnlock
lstrlenW
lstrcmpiW
VirtualProtect
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
VirtualAlloc
VirtualFree
CommandLineToArgvW
GetDpiForMonitor
ord244
MulDiv
SHOpenRegStream2W
SHCreateMemStream
SHCreateStreamOnFileEx
SHCreateStreamOnFileW
IStream_Read
IStream_Write
IStream_Reset
GetTempPathW
ord170
UnregisterWaitEx
CreateTimerQueueTimer
DeleteTimerQueueTimer
ChangeTimerQueueTimer
GetProductInfo
GetNativeSystemInfo
GetUserDefaultGeoName
DeriveAppContainerSidFromAppContainerName
GetProfileType
FileTimeToSystemTime
SystemTimeToFileTime
GetDynamicTimeZoneInformation
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
GetQueuedCompletionStatus
CreateIoCompletionPort
DeviceIoControl
CancelIoEx
GetFileInformationByHandleEx
ReadDirectoryChangesW
GetComputerNameW
RegisterWaitForSingleObject
GetSystemPowerStatus
QueryPerformanceCounter
InitializeSListHead
InterlockedPushEntrySList
GetPersistedRegistryLocationW
LookupAccountNameW
CharNextW
CharLowerBuffW
QueryServiceConfigW
NotifyServiceStatusChangeW
SHRegGetValueFromHKCUHKLM
RaiseFailFastException
CharNextA
GetPwrCapabilities
CallNtPowerInformation
ApiSetQueryApiSetPresence
ord509
ord635
ord544
AssocQueryStringW
SHCreateWorkerWindowW
ord197
SHIsChildOrSelf
SHPinDllOfCLSID
ord279
ShellMessageBoxW
ord165
ord292
IUnknown_GetWindow
StrRetToStrW
StrRetToBufW
ord478
ord479
ord481
PathRemoveArgsW
EnumDisplayDevicesW
EnumDisplayMonitors
GetMonitorInfoW
QueryDisplayConfig
SystemParametersInfoW
GetDisplayConfigBufferSizes
GetSystemMetrics
IsRectEmpty
InflateRect
CopyRect
SubtractRect
SetRect
OffsetRect
IntersectRect
EqualRect
PtInRect
SetRectEmpty
UnionRect
NotifyWinEvent
SetWinEventHook
UnhookWinEvent
ILRemoveLastID
ILClone
SHParseDisplayName
SHBindToFolderIDListParent
ILGetSize
ILCloneFirst
ILCombine
SHCreateItemFromIDList
SHGetNameFromIDList
SHCreateItemFromParsingName
SHGetIDListFromObject
ILFree
ILIsParent
ILFindLastID
SHBindToParent
SHBindToObject
ILIsEqual
DXGIDeclareAdapterRemovalSupport
GetPointerInfo
GetCurrentInputMessageSource
EnableMouseInPointer
GetPointerType
GetPointerDevices
SetThreadFlags
GetThreadFlags
SHGetKnownFolderIDList
SHGetFolderPathEx
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
GetPackagesByPackageFamily
GetPackageFullName
SetWindowFeedbackSetting
RegisterClipboardFormatW
DragQueryFileW
GetWindowBand
CreateWindowInBand
UnregisterPowerSettingNotification
RegisterPowerSettingNotification
SHChangeNotification_Unlock
SHChangeNotifyRegister
SHHandleUpdateImage
SHChangeNotification_Lock
SHChangeNotifyRegisterThread
SHChangeNotifyDeregister
InitVariantFromGUIDAsString
InitVariantFromResource
PSCreateMemoryPropertyStore
PropVariantToBoolean
PSPropertyBag_WriteStr
PropVariantToUInt32
PSPropertyBag_WriteDWORD
PropVariantToStringAlloc
PSGetPropertyFromPropertyStorage
SHChangeNotify
SHCreateDataObject
FindPackagesByPackageFamily
ParseApplicationUserModelId
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification
StretchBlt
ExcludeClipRect
SetStretchBltMode
Rectangle
GetCurrentObject
GetDeviceCaps
GetStockObject
SetRectRgn
OffsetRgn
CombineRgn
SelectClipRgn
DeleteObject
GetObjectW
DeleteDC
CreateCompatibleDC
SelectObject
GetClipBox
CreateFontIndirectW
CreateRectRgn
GetClipRgn
SetTextColor
SetTextAlign
GetTextMetricsW
ExtTextOutW
GetTextExtentPoint32W
CreateRectRgnIndirect
GetGlyphOutlineW
GetOutlineTextMetricsW
GetModuleHandleExA
IsBadWritePtr
RtlCompareMemory
HeapDestroy
HeapReAlloc
HeapSize
InternetCrackUrlW
ord121
ord174
ord109
ord191
ord126
ord213
ord183
ord210
ord141
ord192
ord1
SHUnicodeToAnsi
ord187
ord123
ord190
ord162
ord142
ord200
ord184
ord186
ord172
ord743
ord907
ord43
ord680
Shell_GetCachedImageIndexW
ord790
ord792
ord727
ord162
SHAppBarMessage
ord894
ord906
ord181
ord895
SHGetLocalizedName
SHGetPropertyStoreForWindow
ord764
ord866
SHEvaluateSystemCommandTemplate
ord244
ExtractIconExW
ord132
ord137
Shell_NotifyIconW
Shell_NotifyIconGetRect
ord6
SHGetStockIconInfo
DuplicateIcon
ShellExecuteW
ord91
ord254
ord54
SHEnableServiceObject
ord61
ord896
SHAddToRecentDocs
ord60
SHUpdateRecycleBinIcon
ord711
SHFileOperationW
SHGetPathFromIDListW
ord753
ord885
ord67
SHCreateItemInKnownFolder
ord206
ord201
ord188
ord899
ShellExecuteExW
ord245
ord200
ord89
ord190
ord85
ord100
ord733
ord95
ord850
ord22
ord134
ord723
ord467
ord164
PathIsDirectoryW
ord413
ord548
ord163
AssocQueryKeyW
ChrCmpIW
PathIsRelativeW
AssocCreate
OpenThemeData
GetThemeBool
GetThemeBackgroundExtent
IsThemePartDefined
GetThemeMargins
ord138
BufferedPaintSetAlpha
ord126
GetThemePartSize
OpenThemeDataForDpi
IsThemeActive
GetBufferedPaintBits
GetThemeInt
GetThemeColor
GetThemeMetric
SetWindowTheme
GetWindowTheme
BufferedPaintUnInit
EndBufferedPaint
BeginBufferedPaint
BufferedPaintInit
CloseThemeData
DrawThemeParentBackground
DrawThemeBackground
ord86
GetThemeFont
DrawThemeTextEx
IsCompositionActive
IsAppThemed
ord113
DwmEnableBlurBehindWindow
DwmGetWindowAttribute
ord141
ord159
ord138
DwmRegisterThumbnail
ord139
DwmQueryThumbnailSourceSize
ord124
DwmUpdateThumbnailProperties
DwmIsCompositionEnabled
DwmUnregisterThumbnail
ord140
ord114
DwmSetWindowAttribute
CalculatePopupWindowPosition
CopyIcon
GetLastInputInfo
GetCursorFrameInfo
AdjustWindowRect
GetDpiForWindow
SetWindowCompositionAttribute
SetGestureConfig
LoadImageW
CheckMenuItem
EnableMenuItem
GetDoubleClickTime
SetMenuDefaultItem
TrackPopupMenuEx
DeleteMenu
FillRect
DrawTextW
IsWindowUnicode
LoadAcceleratorsW
ChangeWindowMessageFilterEx
TranslateAcceleratorW
MonitorFromWindow
SetMenuItemInfoW
SetCursor
RemoveMenu
ReleaseCapture
LoadCursorW
ord2005
GetSystemMetricsForDpi
DrawIconEx
DestroyIcon
CopyImage
GetSysColor
GetCaretBlinkTime
InjectKeyboardInput
MapVirtualKeyExW
InjectMouseInput
LockWorkStation
TileWindows
GetCapture
SendInput
SetDesktopColorTransform
UnregisterClassA
ord2611
MonitorFromRect
GetGuiResources
IsHungAppWindow
ord2574
CascadeWindows
HungWindowFromGhostWindow
LoadIconW
IsIconic
DestroyMenu
LoadMenuW
GetSubMenu
CreateIconIndirect
SetCapture
GetMenuDefaultItem
CreatePopupMenu
GetMenuItemInfoW
MonitorFromPoint
ReplyMessage
GetAsyncKeyState
ModifyMenuW
GetSystemMenu
GetSysColorBrush
SetLayeredWindowAttributes
GetIconInfoExW
GetIconInfo
GetClassWord
GetClassLongW
GetPhysicalCursorPos
GetCursorInfo
ShowWindowAsync
SwitchToThisWindow
ReleaseDC
InsertMenuW
BringWindowToTop
ord2573
GhostWindowFromHungWindow
EndTask
IsTopLevelWindow
GetMenuState
SetScrollInfo
GetScrollInfo
SetScrollPos
GetMenuStringW
InternalGetWindowText
GetLayeredWindowAttributes
DrawTextExW
IsProcessDPIAware
SetThreadDpiAwarenessContext
GetLastActivePopup
GetWindowCompositionAttribute
GetWindowProcessHandle
GetClassLongPtrW
UpdateLayeredWindow
ord2521
UnregisterHotKey
GetDC
UnregisterClassW
ord2522
WindowFromDC
GetMenuInfo
SetMenuInfo
GetDpiForSystem
GetWindowDpiAwarenessContext
AreDpiAwarenessContextsEqual
CharLowerW
IsCharAlphaNumericW
RegisterHotKey
GetMenuItemCount
DefWindowProcA
SendDlgItemMessageW
EndDialog
ExitWindowsEx
TrackMouseEvent
AdjustWindowRectEx
GetKeyState
GetUserNameExW
ResolveDelayLoadedAPI
DelayLoadFailureHook
LCIDToLocaleName
PowerSetRequest
PowerCreateRequest
VerifyVersionInfoW
OOBEComplete
CopyFileW
SetTermsrvAppInstallMode
ord292
StopTraceW
StartTraceW
EnableTraceEx2
IsProcessInJob
RpcStringBindingComposeW
RpcBindingFromStringBindingW
I_RpcExceptionFilter
RpcBindingSetAuthInfoExW
RpcStringFreeW
RpcBindingFree
NdrClientCall3
GetStagedPackagePathByFullName2
BiPtQueryWorkItem
BiPtFreeMemory
BiPtAssociateApplicationEntryPoint
BiPtEnumerateWorkItemsForPackageName
IsDeveloperModeEnabled
GetShellWindow
RoCreatePropertySetSerializer
GetErrorInfo
SetErrorInfo
g_trayTriageBlock
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ