Report - zoeg4a5.exe

Malicious Library UPX Malicious Packer PE File PE64
ScreenShot
Created 2023.10.08 10:49 Machine s1_win7_x6401
Filename zoeg4a5.exe
Type PE32+ executable (GUI) x86-64, for MS Windows
AI Score
2
Behavior Score
2.0
ZERO API file : mailcious
VT API (file) 43 detected (Common, Fabookie, Zusy, Remcos, malicious, confidence, 100%, Attribute, HighConfidence, high confidence, EmnL0dJ0FNC, Swrort, thkkx, DownLoader45, Eldorado, Sabsik, Detected, GenericRXAA, ai score=82, unsafe, Oader, Czlw, QcVdRSRwcdQ, susgen, PossibleThreat)
md5 637dbce64106ecb582f119403822e138
sha256 c82c8f3777d5193351ffc815625ad1e03e2816c88a4a4e0fdaf9c1fce8ba8921
ssdeep 6144:syUa7AQnwciHMc4oiT4MKBz3I8JmGxerEhgVIXFM:sf4wcAQVrKi6FerLIX
imphash ff082fef3d15cdd142534440e54d6a28
impfuzzy 384:EKL7xkLfSwXmLvVJcOZvxrL+ich9BSlU2UnYxluk9:p7ofSwXmLvVJ7Zpe8FUnYxEk9
  Network IP location

Signature (4cnts)

Level Description
danger File has been identified by 43 AntiVirus engines on VirusTotal as malicious
notice Allocates read-write-execute memory (usually to unpack itself)
info The file contains an unknown PE resource name possibly indicative of a packer
info This executable has a PDB path

Rules (5cnts)

Level Name Description Collection
watch Malicious_Library_Zero Malicious_Library binaries (upload)
watch Malicious_Packer_Zero Malicious Packer binaries (upload)
watch UPX_Zero UPX packed file binaries (upload)
info IsPE64 (no description) binaries (upload)
info PE_Header_Zero PE File Signature binaries (upload)

Network (2cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?
z.nnnaajjjgc.com US HK Kwaifong Group Limited 156.236.72.121 malware
156.236.72.121 US HK Kwaifong Group Limited 156.236.72.121 mailcious

Suricata ids

PE API

IAT(Import Address Table) Library

ADVAPI32.dll
 0x100030000 EventWrite
 0x100030008 RegCloseKey
 0x100030010 EventRegister
 0x100030018 EventUnregister
 0x100030020 RegQueryInfoKeyW
 0x100030028 RegEnumKeyExW
 0x100030030 RegOpenKeyExW
 0x100030038 RegSetValueExW
 0x100030040 RegCreateKeyExW
 0x100030048 RegDeleteValueW
 0x100030050 RegQueryValueExW
 0x100030058 GetTokenInformation
 0x100030060 ConvertSidToStringSidW
 0x100030068 CheckTokenMembership
 0x100030070 ConvertStringSecurityDescriptorToSecurityDescriptorW
 0x100030078 RegDeleteKeyW
 0x100030080 OpenThreadToken
 0x100030088 OpenProcessToken
KERNEL32.dll
 0x100030098 GetModuleHandleW
 0x1000300a0 lstrcmpiW
 0x1000300a8 RegEnumValueW
 0x1000300b0 RegGetValueW
 0x1000300b8 CreateFileW
 0x1000300c0 FileTimeToSystemTime
 0x1000300c8 GetFileAttributesW
 0x1000300d0 CompareFileTime
 0x1000300d8 SystemTimeToFileTime
 0x1000300e0 GetTempFileNameW
 0x1000300e8 CreateThread
 0x1000300f0 UnregisterApplicationRecoveryCallback
 0x1000300f8 ApplicationRecoveryFinished
 0x100030100 ApplicationRecoveryInProgress
 0x100030108 RegisterApplicationRecoveryCallback
 0x100030110 UnregisterApplicationRestart
 0x100030118 RegisterApplicationRestart
 0x100030120 OpenMutexW
 0x100030128 DuplicateHandle
 0x100030130 GetVersionExW
 0x100030138 GetPrivateProfileStringW
 0x100030140 DebugBreak
 0x100030148 SetEvent
 0x100030150 CreateEventW
 0x100030158 OutputDebugStringA
 0x100030160 UnhandledExceptionFilter
 0x100030168 GetCurrentProcess
 0x100030170 TerminateProcess
 0x100030178 GetSystemTimeAsFileTime
 0x100030180 GetCurrentProcessId
 0x100030188 GetCurrentThreadId
 0x100030190 GetTickCount
 0x100030198 QueryPerformanceCounter
 0x1000301a0 MulDiv
 0x1000301a8 SizeofResource
 0x1000301b0 LockResource
 0x1000301b8 LoadResource
 0x1000301c0 FindResourceW
 0x1000301c8 HeapFree
 0x1000301d0 FindResourceExW
 0x1000301d8 GetSystemTime
 0x1000301e0 FreeLibrary
 0x1000301e8 LoadLibraryW
 0x1000301f0 GetLastError
 0x1000301f8 LocalAlloc
 0x100030200 LocalFree
 0x100030208 GetProcAddress
 0x100030210 GetProcessHeap
 0x100030218 SetUnhandledExceptionFilter
 0x100030220 GetStartupInfoW
 0x100030228 HeapAlloc
 0x100030230 WaitForSingleObject
 0x100030238 Sleep
 0x100030240 CompareStringW
 0x100030248 HeapSize
 0x100030250 HeapReAlloc
 0x100030258 HeapDestroy
 0x100030260 GetVersionExA
 0x100030268 LeaveCriticalSection
 0x100030270 RaiseException
 0x100030278 EnterCriticalSection
 0x100030280 MultiByteToWideChar
 0x100030288 LoadLibraryExW
 0x100030290 GetModuleFileNameW
 0x100030298 InitializeCriticalSection
 0x1000302a0 DeleteCriticalSection
 0x1000302a8 CreateMutexW
 0x1000302b0 DeleteFileW
 0x1000302b8 GetCommandLineW
 0x1000302c0 SetThreadPriority
 0x1000302c8 GetCurrentThread
 0x1000302d0 CreateDirectoryW
 0x1000302d8 OutputDebugStringW
 0x1000302e0 LoadLibraryExA
 0x1000302e8 DelayLoadFailureHook
 0x1000302f0 lstrlenW
 0x1000302f8 CloseHandle
 0x100030300 ReleaseMutex
GDI32.dll
 0x100030310 GdiAlphaBlend
 0x100030318 CreateFontW
 0x100030320 GetTextFaceW
 0x100030328 CreateRectRgn
 0x100030330 CreateDIBSection
 0x100030338 GetObjectW
 0x100030340 SetLayout
 0x100030348 CreateSolidBrush
 0x100030350 GetDeviceCaps
 0x100030358 SelectObject
 0x100030360 CreateCompatibleBitmap
 0x100030368 CreateCompatibleDC
 0x100030370 GetClipRgn
 0x100030378 BitBlt
 0x100030380 GetTextExtentPoint32W
 0x100030388 DeleteDC
 0x100030390 GdiGradientFill
 0x100030398 DeleteObject
USER32.dll
 0x1000303a8 GetAncestor
 0x1000303b0 CreateWindowExW
 0x1000303b8 DestroyAcceleratorTable
 0x1000303c0 GetUpdateRect
 0x1000303c8 ShowWindow
 0x1000303d0 GetScrollInfo
 0x1000303d8 SetScrollInfo
 0x1000303e0 SetScrollRange
 0x1000303e8 ShowScrollBar
 0x1000303f0 OffsetRect
 0x1000303f8 CopyRect
 0x100030400 SetMenuItemInfoW
 0x100030408 GetMenuItemInfoW
 0x100030410 GetMenuItemCount
 0x100030418 ClientToScreen
 0x100030420 DefWindowProcW
 0x100030428 ReleaseDC
 0x100030430 PtInRect
 0x100030438 InflateRect
 0x100030440 GetDesktopWindow
 0x100030448 DestroyMenu
 0x100030450 GetSubMenu
 0x100030458 SetWindowPos
 0x100030460 GetWindowRect
 0x100030468 EndDeferWindowPos
 0x100030470 BeginDeferWindowPos
 0x100030478 PostMessageW
 0x100030480 TrackPopupMenu
 0x100030488 MapWindowPoints
 0x100030490 ReleaseCapture
 0x100030498 SystemParametersInfoW
 0x1000304a0 LockWindowUpdate
 0x1000304a8 GetFocus
 0x1000304b0 RegisterClassW
 0x1000304b8 LoadIconW
 0x1000304c0 LoadCursorW
 0x1000304c8 SetGestureConfig
 0x1000304d0 GetWindowLongPtrW
 0x1000304d8 GetSystemMenu
 0x1000304e0 EnableMenuItem
 0x1000304e8 DestroyWindow
 0x1000304f0 GetDC
 0x1000304f8 SetCursor
 0x100030500 SendMessageW
 0x100030508 GetClientRect
 0x100030510 SetWindowLongPtrW
 0x100030518 UpdateWindow
 0x100030520 GetSystemMetrics
 0x100030528 GetSysColor
 0x100030530 EnableScrollBar
 0x100030538 SetFocus
 0x100030540 CreateCaret
 0x100030548 SetCaretPos
 0x100030550 SetTimer
 0x100030558 KillTimer
 0x100030560 ScrollWindowEx
 0x100030568 SetCapture
 0x100030570 ScreenToClient
 0x100030578 MessageBoxW
 0x100030580 ChangeWindowMessageFilter
 0x100030588 RemoveMenu
 0x100030590 GetWindowPlacement
 0x100030598 SetWindowPlacement
 0x1000305a0 PostQuitMessage
 0x1000305a8 SetActiveWindow
 0x1000305b0 IntersectRect
 0x1000305b8 EqualRect
 0x1000305c0 MonitorFromWindow
 0x1000305c8 GetMonitorInfoW
 0x1000305d0 MonitorFromRect
 0x1000305d8 CopyAcceleratorTableW
 0x1000305e0 GetMessageW
 0x1000305e8 TranslateMessage
 0x1000305f0 DispatchMessageW
 0x1000305f8 CharNextW
 0x100030600 FindWindowW
 0x100030608 SetForegroundWindow
 0x100030610 SetProcessDPIAware
 0x100030618 RegisterClassExW
 0x100030620 DeferWindowPos
 0x100030628 LoadAcceleratorsW
 0x100030630 BeginPaint
 0x100030638 HideCaret
 0x100030640 ShowCaret
 0x100030648 EndPaint
 0x100030650 GetMessageExtraInfo
 0x100030658 GetKeyboardLayout
 0x100030660 LoadImageW
 0x100030668 UnregisterClassA
 0x100030670 TranslateAcceleratorW
 0x100030678 LoadMenuW
 0x100030680 UnregisterClassW
 0x100030688 IsClipboardFormatAvailable
 0x100030690 SetRect
 0x100030698 GetScrollBarInfo
 0x1000306a0 GetParent
 0x1000306a8 GetWindowLongW
 0x1000306b0 EnableWindow
 0x1000306b8 FillRect
 0x1000306c0 GetSysColorBrush
 0x1000306c8 IsWindowVisible
 0x1000306d0 GetKeyState
 0x1000306d8 GetAsyncKeyState
 0x1000306e0 SetScrollPos
 0x1000306e8 GetWindowTextLengthW
 0x1000306f0 UpdateLayeredWindow
 0x1000306f8 InvalidateRect
 0x100030700 GetWindowTextW
msvcrt.dll
 0x100030710 ??1type_info@@UEAA@XZ
 0x100030718 ?terminate@@YAXXZ
 0x100030720 __set_app_type
 0x100030728 _fmode
 0x100030730 _commode
 0x100030738 __setusermatherr
 0x100030740 _amsg_exit
 0x100030748 _initterm
 0x100030750 _acmdln
 0x100030758 exit
 0x100030760 _cexit
 0x100030768 _ismbblead
 0x100030770 _unlock
 0x100030778 _XcptFilter
 0x100030780 __getmainargs
 0x100030788 ??0exception@@QEAA@XZ
 0x100030790 __CxxFrameHandler3
 0x100030798 _callnewh
 0x1000307a0 _CxxThrowException
 0x1000307a8 ??0exception@@QEAA@AEBQEBDH@Z
 0x1000307b0 __C_specific_handler
 0x1000307b8 memset
 0x1000307c0 ?what@exception@@UEBAPEBDXZ
 0x1000307c8 vswprintf_s
 0x1000307d0 _vscwprintf
 0x1000307d8 _wcsicmp
 0x1000307e0 malloc
 0x1000307e8 wcsncpy_s
 0x1000307f0 ??0exception@@QEAA@AEBV0@@Z
 0x1000307f8 __dllonexit
 0x100030800 _lock
 0x100030808 _onexit
 0x100030810 realloc
 0x100030818 _errno
 0x100030820 cos
 0x100030828 _vsnwprintf
 0x100030830 wcstoul
 0x100030838 memcpy
 0x100030840 ??1exception@@UEAA@XZ
 0x100030848 memcpy_s
 0x100030850 memmove_s
 0x100030858 wcscpy_s
 0x100030860 _purecall
 0x100030868 calloc
 0x100030870 _exit
 0x100030878 ??0exception@@QEAA@AEBQEBD@Z
 0x100030880 free
 0x100030888 sin
ntdll.dll
 0x100030898 WinSqmAddToStream
 0x1000308a0 WinSqmEndSession
 0x1000308a8 RtlVirtualUnwind
 0x1000308b0 RtlLookupFunctionEntry
 0x1000308b8 RtlCaptureContext
 0x1000308c0 WinSqmIsOptedIn
 0x1000308c8 WinSqmStartSession
 0x1000308d0 WinSqmSetIfMaxDWORD
SHELL32.dll
 0x1000308e0 SHGetKnownFolderPath
 0x1000308e8 SHGetFolderPathW
 0x1000308f0 CommandLineToArgvW
 0x1000308f8 SetCurrentProcessExplicitAppUserModelID
 0x100030900 SHGetSpecialFolderPathW
 0x100030908 None
 0x100030910 SHCreateDirectoryExW
 0x100030918 ShellExecuteW
SHLWAPI.dll
 0x100030928 None
 0x100030930 None
 0x100030938 PathFileExistsW
 0x100030940 None
 0x100030948 None
 0x100030950 SHCreateStreamOnFileW
 0x100030958 None
 0x100030960 None
 0x100030968 SHStrDupW
ole32.dll
 0x100030978 CoCreateInstance
 0x100030980 CoTaskMemAlloc
 0x100030988 PropVariantClear
 0x100030990 CoUninitialize
 0x100030998 OleUninitialize
 0x1000309a0 OleInitialize
 0x1000309a8 CoInitializeEx
 0x1000309b0 CoTaskMemFree
 0x1000309b8 CoSetProxyBlanket
 0x1000309c0 StgCreateStorageEx
 0x1000309c8 StgOpenStorageEx
 0x1000309d0 OleSaveToStream
 0x1000309d8 WriteClassStm
 0x1000309e0 CoTaskMemRealloc
 0x1000309e8 OleLoadFromStream
OLEAUT32.dll
 0x1000309f8 VariantChangeType
 0x100030a00 SysAllocStringByteLen
 0x100030a08 SysAllocString
 0x100030a10 VarUI4FromStr
 0x100030a18 SystemTimeToVariantTime
 0x100030a20 SysFreeString
 0x100030a28 SysStringByteLen
 0x100030a30 SafeArrayCreateVector
 0x100030a38 SafeArrayAccessData
 0x100030a40 SafeArrayUnaccessData
 0x100030a48 VariantClear
 0x100030a50 SafeArrayDestroy
 0x100030a58 VariantInit
COMCTL32.dll
 0x100030a68 None
 0x100030a70 None
 0x100030a78 None
 0x100030a80 None
 0x100030a88 None
 0x100030a90 None
 0x100030a98 None
slc.dll
 0x100030aa8 SLGetWindowsInformationDWORD
dwmapi.dll
 0x100030ab8 DwmInvalidateIconicBitmaps
 0x100030ac0 DwmSetIconicThumbnail
 0x100030ac8 DwmSetIconicLivePreviewBitmap
 0x100030ad0 DwmSetWindowAttribute
UxTheme.dll
 0x100030ae0 GetThemeFont
 0x100030ae8 CloseThemeData
 0x100030af0 OpenThemeData
DUI70.dll
 0x100030b00 ?GetChildren@ClassInfoBase@DirectUI@@UEBAHXZ
 0x100030b08 ?RemoveChild@ClassInfoBase@DirectUI@@UEAAXXZ
 0x100030b10 ?AddChild@ClassInfoBase@DirectUI@@UEAAXXZ
 0x100030b18 ?IsGlobal@ClassInfoBase@DirectUI@@UEBA_NXZ
 0x100030b20 ?GetModule@ClassInfoBase@DirectUI@@UEBAPEAUHINSTANCE__@@XZ
 0x100030b28 ?IsSubclassOf@ClassInfoBase@DirectUI@@UEBA_NPEAUIClassInfo@2@@Z
 0x100030b30 ?IsValidProperty@ClassInfoBase@DirectUI@@UEBA_NPEBUPropertyInfo@2@@Z
 0x100030b38 ?GetName@ClassInfoBase@DirectUI@@UEBAPEBGXZ
 0x100030b40 ?GetGlobalIndex@ClassInfoBase@DirectUI@@UEBAIXZ
 0x100030b48 ?GetPICount@ClassInfoBase@DirectUI@@UEBAIXZ
 0x100030b50 ?GetByClassIndex@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z
 0x100030b58 ?EnumPropertyInfo@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z
 0x100030b60 ?Release@ClassInfoBase@DirectUI@@UEAAHXZ
 0x100030b68 ?AddRef@ClassInfoBase@DirectUI@@UEAAXXZ
 0x100030b70 ??1ClassInfoBase@DirectUI@@UEAA@XZ
 0x100030b78 ??0ClassInfoBase@DirectUI@@QEAA@XZ
 0x100030b80 ?GetClassInfoPtr@HWNDElement@DirectUI@@SAPEAUIClassInfo@2@XZ
 0x100030b88 ?GetClassInfoPtr@HWNDHost@DirectUI@@SAPEAUIClassInfo@2@XZ
 0x100030b90 ?Initialize@ClassInfoBase@DirectUI@@QEAAJPEAUHINSTANCE__@@PEBG_NPEBQEBUPropertyInfo@2@I@Z
 0x100030b98 ?Register@HWNDElement@DirectUI@@SAJXZ
 0x100030ba0 ?Register@ClassInfoBase@DirectUI@@QEAAJXZ
 0x100030ba8 ?ClassExist@ClassInfoBase@DirectUI@@SA_NPEAPEAUIClassInfo@2@PEBQEBUPropertyInfo@2@IPEAU32@PEAUHINSTANCE__@@PEBG_N@Z
 0x100030bb0 ??1CritSecLock@DirectUI@@QEAA@XZ
 0x100030bb8 ?GetFactoryLock@Element@DirectUI@@SAPEAU_RTL_CRITICAL_SECTION@@XZ
 0x100030bc0 ?Register@HWNDHost@DirectUI@@SAJXZ
 0x100030bc8 UnInitProcessPriv
 0x100030bd0 UnInitThread
 0x100030bd8 InitThread
 0x100030be0 InitProcessPriv
 0x100030be8 ?Initialize@HWNDHost@DirectUI@@QEAAJIIPEAVElement@2@PEAK@Z
 0x100030bf0 ?SetAbsorbsShortcut@Element@DirectUI@@QEAAJ_N@Z
 0x100030bf8 ?CreateStyleParser@HWNDElement@DirectUI@@UEAAJPEAPEAVDUIXmlParser@2@@Z
 0x100030c00 ?CanSetFocus@HWNDElement@DirectUI@@UEAA_NXZ
 0x100030c08 ?OnThemeChanged@HWNDElement@DirectUI@@UEAAXPEAUThemeChangedEvent@2@@Z
 0x100030c10 ?GetHWND@HWNDElement@DirectUI@@UEAAPEAUHWND__@@XZ
 0x100030c18 ?GetAccessibleImpl@HWNDElement@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z
 0x100030c20 ?GetKeyFocused@Element@DirectUI@@UEAA_NXZ
 0x100030c28 ?RemoveTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z
 0x100030c30 ?ActivateTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@K@Z
 0x100030c38 ?UpdateTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z
 0x100030c40 ?OnUnHosted@Element@DirectUI@@MEAAXPEAV12@@Z
 0x100030c48 ?OnHosted@Element@DirectUI@@MEAAXPEAV12@@Z
 0x100030c50 ?MessageCallback@Element@DirectUI@@UEAAIPEAUtagGMSG@@@Z
 0x100030c58 ?SetKeyFocus@Element@DirectUI@@UEAAXXZ
 0x100030c60 ?Paint@Element@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z
 0x100030c68 ??1NativeHWNDHost@DirectUI@@UEAA@XZ
 0x100030c70 ??0NativeHWNDHost@DirectUI@@QEAA@XZ
 0x100030c78 ?CreateElement@DUIXmlParser@DirectUI@@QEAAJPEBGPEAVElement@2@1PEAKPEAPEAV32@@Z
 0x100030c80 ?Host@NativeHWNDHost@DirectUI@@QEAAXPEAVElement@2@@Z
 0x100030c88 ?EndDefer@Element@DirectUI@@QEAAXK@Z
 0x100030c90 ?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z
 0x100030c98 ?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z
 0x100030ca0 ?Destroy@NativeHWNDHost@DirectUI@@QEAAXXZ
 0x100030ca8 ?AssertPIZeroRef@ClassInfoBase@DirectUI@@UEBAXXZ
 0x100030cb0 ?WndProc@HWNDElement@DirectUI@@UEAA_JPEAUHWND__@@I_K_J@Z
 0x100030cb8 ?OnCompositionChanged@HWNDElement@DirectUI@@UEAAXXZ
 0x100030cc0 ?OnWmThemeChanged@HWNDElement@DirectUI@@UEAAX_K_J@Z
 0x100030cc8 ?OnGetDlgCode@HWNDElement@DirectUI@@UEAAXPEAUtagMSG@@PEA_J@Z
 0x100030cd0 ?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UEAAXPEAUKeyboardEvent@2@@Z
 0x100030cd8 ?OnDestroy@HWNDElement@DirectUI@@UEAAXXZ
 0x100030ce0 ?OnGroupChanged@HWNDElement@DirectUI@@UEAAXH_N@Z
 0x100030ce8 ?OnPropertyChanged@HWNDElement@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
 0x100030cf0 ?OnEvent@HWNDElement@DirectUI@@UEAAXPEAUEvent@2@@Z
 0x100030cf8 ?OnInput@HWNDElement@DirectUI@@UEAAXPEAUInputEvent@2@@Z
 0x100030d00 ?Initialize@HWNDElement@DirectUI@@QEAAJPEAUHWND__@@_NIPEAVElement@2@PEAK@Z
 0x100030d08 ?Destroy@Element@DirectUI@@QEAAJ_N@Z
 0x100030d10 ??1HWNDElement@DirectUI@@UEAA@XZ
 0x100030d18 ??0HWNDElement@DirectUI@@QEAA@XZ
 0x100030d20 ?EraseBkgnd@HWNDHost@DirectUI@@MEAA_NPEAUHDC__@@PEA_J@Z
 0x100030d28 ?SetWindowDirection@HWNDHost@DirectUI@@UEAAXPEAUHWND__@@@Z
 0x100030d30 ?OnAdjustWindowSize@HWNDHost@DirectUI@@UEAAHHHI@Z
 0x100030d38 ?OnWindowStyleChanged@HWNDHost@DirectUI@@UEAAX_KPEBUtagSTYLESTRUCT@@@Z
 0x100030d40 ?OnCtrlThemeChanged@HWNDHost@DirectUI@@UEAA_NI_K_JPEA_J@Z
 0x100030d48 ?OnSinkThemeChanged@HWNDHost@DirectUI@@UEAA_NI_K_JPEA_J@Z
 0x100030d50 ?OnSysChar@HWNDHost@DirectUI@@UEAA_NG@Z
 0x100030d58 ?GetHWND@HWNDHost@DirectUI@@UEAAPEAUHWND__@@XZ
 0x100030d60 ?HandleUiaEventListener@Element@DirectUI@@UEAAXPEAUEvent@2@@Z
 0x100030d68 ?HandleUiaPropertyChangingListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@@Z
 0x100030d70 ?HandleUiaPropertyListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
 0x100030d78 ?HandleUiaDestroyListener@Element@DirectUI@@UEAAXXZ
 0x100030d80 ?GetElementProviderImpl@Element@DirectUI@@UEAAJPEAVInvokeHelper@2@PEAPEAVElementProvider@2@@Z
 0x100030d88 ?DefaultAction@Element@DirectUI@@UEAAJXZ
 0x100030d90 ?GetAccessibleImpl@HWNDHost@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z
 0x100030d98 ?GetKeyFocused@HWNDHost@DirectUI@@UEAA_NXZ
 0x100030da0 ?RemoveTooltip@Element@DirectUI@@MEAAXPEAV12@@Z
 0x100030da8 ?ActivateTooltip@Element@DirectUI@@MEAAXPEAV12@K@Z
 0x100030db0 ?UpdateTooltip@Element@DirectUI@@MEAAXPEAV12@@Z
 0x100030db8 ?OnUnHosted@HWNDHost@DirectUI@@MEAAXPEAVElement@2@@Z
 0x100030dc0 ?OnHosted@HWNDHost@DirectUI@@MEAAXPEAVElement@2@@Z
 0x100030dc8 ?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
 0x100030dd0 ?_SelfLayoutDoLayout@Element@DirectUI@@MEAAXHH@Z
 0x100030dd8 ?QueryInterface@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z
 0x100030de0 ?MessageCallback@HWNDHost@DirectUI@@UEAAIPEAUtagGMSG@@@Z
 0x100030de8 ?SetKeyFocus@HWNDHost@DirectUI@@UEAAXXZ
 0x100030df0 ?EnsureVisible@Element@DirectUI@@UEAA_NHHHH@Z
 0x100030df8 ?GetAdjacent@Element@DirectUI@@UEAAPEAV12@PEAV12@HPEBUNavReference@2@K@Z
 0x100030e00 ?Remove@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
 0x100030e08 ?Insert@Element@DirectUI@@UEAAJPEAPEAV12@II@Z
 0x100030e10 ?Add@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
 0x100030e18 ?GetContentSize@Element@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
 0x100030e20 ?Paint@HWNDHost@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z
 0x100030e28 ?OnDestroy@HWNDHost@DirectUI@@UEAAXXZ
 0x100030e30 ?OnMouseFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
 0x100030e38 ?OnKeyFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
 0x100030e40 ?OnGroupChanged@Element@DirectUI@@UEAAXH_N@Z
 0x100030e48 ?OnPropertyChanged@Element@DirectUI@@UEAAXPEAUPropertyInfo@2@HPEAVValue@2@1@Z
 0x100030e50 ?OnPropertyChanging@Element@DirectUI@@UEAA_NPEAUPropertyInfo@2@HPEAVValue@2@1@Z
 0x100030e58 ?OnPropertyChanging@Element@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z
 0x100030e60 ?GetContentStringAsDisplayed@Element@DirectUI@@UEAAPEBGPEAPEAVValue@2@@Z
 0x100030e68 ?IsContentProtected@Element@DirectUI@@UEAA_NXZ
 0x100030e70 ?IsRTLReading@Element@DirectUI@@UEAA_NXZ
 0x100030e78 ?SetAccValue@Element@DirectUI@@QEAAJPEBG@Z
 0x100030e80 ?SetDirection@Element@DirectUI@@QEAAJH@Z
 0x100030e88 ?GetLocation@Element@DirectUI@@QEAAPEBUtagPOINT@@PEAPEAVValue@2@@Z
 0x100030e90 ?OnEvent@HWNDHost@DirectUI@@UEAAXPEAUEvent@2@@Z
 0x100030e98 ?OnInput@HWNDHost@DirectUI@@UEAAXPEAUInputEvent@2@@Z
 0x100030ea0 ?OnPropertyChanged@HWNDHost@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
 0x100030ea8 ?EnabledProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
 0x100030eb0 ?BackgroundProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
 0x100030eb8 ?GetValue@Element@DirectUI@@QEAAPEAVValue@2@P6APEBUPropertyInfo@2@XZHPEAUUpdateCache@2@@Z
 0x100030ec0 ??1HWNDHost@DirectUI@@UEAA@XZ
 0x100030ec8 ??0HWNDHost@DirectUI@@QEAA@XZ
 0x100030ed0 ?SheetProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
 0x100030ed8 ?GetSheet@DUIXmlParser@DirectUI@@QEAAJPEBGPEAPEAVValue@2@@Z
 0x100030ee0 ?SetWindowActive@Element@DirectUI@@QEAAJ_N@Z
 0x100030ee8 ?SetVisible@Element@DirectUI@@QEAAJ_N@Z
 0x100030ef0 ?MouseWithinProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
 0x100030ef8 ?GetWindowActive@Element@DirectUI@@QEAA_NXZ
 0x100030f00 ?WindowActiveProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
 0x100030f08 ?Click@Button@DirectUI@@SA?AVUID@@XZ
 0x100030f10 ?UpdateSheets@DUIXmlParser@DirectUI@@QEAAJPEAVElement@2@@Z
 0x100030f18 ?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ
 0x100030f20 ?AddListener@Element@DirectUI@@QEAAJPEAUIElementListener@2@@Z
 0x100030f28 StrToID
 0x100030f30 ?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z
 0x100030f38 ?SetValue@Element@DirectUI@@QEAAJP6APEBUPropertyInfo@2@XZHPEAVValue@2@@Z
 0x100030f40 ?Release@Value@DirectUI@@QEAAXXZ
 0x100030f48 ?Initialize@NativeHWNDHost@DirectUI@@QEAAJPEBG0PEAUHWND__@@PEAUHICON__@@HHHHHHPEAUHINSTANCE__@@I@Z
gdiplus.dll
 0x100030f58 GdipCreateBitmapFromScan0
 0x100030f60 GdipCloneImage
 0x100030f68 GdipDisposeImage
 0x100030f70 GdipGetImageGraphicsContext
 0x100030f78 GdipFree
 0x100030f80 GdipCreateTexture
 0x100030f88 GdiplusShutdown
 0x100030f90 GdiplusStartup
 0x100030f98 GdipCreateBitmapFromStream
 0x100030fa0 GdipDrawImagePoints
 0x100030fa8 GdipSetInterpolationMode
 0x100030fb0 GdipSetPixelOffsetMode
 0x100030fb8 GdipCreateFromHDC
 0x100030fc0 GdipDrawImageRectI
 0x100030fc8 GdipSetSmoothingMode
 0x100030fd0 GdipDeleteGraphics
 0x100030fd8 GdipSetCompositingMode
 0x100030fe0 GdipCreateBitmapFromHBITMAP
 0x100030fe8 GdipCreateSolidFill
 0x100030ff0 GdipDeleteBrush
 0x100030ff8 GdipCloneBrush
 0x100031000 GdipFillRectangleI
 0x100031008 GdipAlloc
RPCRT4.dll
 0x100031018 RpcStringFreeW
 0x100031020 UuidCreateSequential
 0x100031028 UuidToStringW
 0x100031030 UuidCreate
WindowsCodecs.dll
 0x100031040 WICCreateImagingFactory_Proxy

EAT(Export Address Table) is none



Similarity measure (PE file only) - Checking for service failure