Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
SysInfoCap.exe
Resource
win10v2004-20231020-en
Target
SysInfoCap.exe
Size
866KB
MD5
e279fd68bcfce24d259c3cee453e33e2
SHA1
26c3f2a41277a761304654c359e37383c2d2ae46
SHA256
079e4e4f35195d4d434ce5a6ad3d1f067791ca71d2fca0adc522a7fe56719e98
SHA512
b211420870eaa4c0094984d18aca8a11c2841a6c5ff4fccc6a6c9bd158b54c8652150076856b2a6144fc7ffdf8eb378865ea17dc4848c323768c4a333cc71f33
SSDEEP
24576:hayPxht2M+uUt4zkDmc+B2AhSMXl7hH4SBbTd7hP:VOFakSLggfP
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_register_onexit_function
__p___argc
_exit
exit
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_crt_atexit
_set_app_type
_seh_filter_exe
terminate
abort
_errno
_invalid_parameter_noinfo
_beginthreadex
__p___wargv
wcsncpy_s
strnlen
toupper
strcpy_s
tolower
towlower
wcsnlen
_wcsicmp
iswspace
wcscpy_s
wcscat_s
wcsncmp
realloc
_set_new_mode
_callnewh
malloc
free
__CxxFrameHandler4
_CxxThrowException
memset
memmove
__current_exception
__current_exception_context
__std_type_info_compare
_purecall
__std_type_info_name
__std_exception_copy
__std_exception_destroy
__std_terminate
memchr
memcmp
memcpy
strchr
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
_Wcscoll
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
_Thrd_detach
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
??_7_Facet_base@std@@6B@
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
_Cnd_destroy_in_situ
_Cnd_wait
?_Syserror_map@std@@YAPEBDH@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_init_in_situ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
_Cnd_signal
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
_Mtx_unlock
_Mtx_init_in_situ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
_Mtx_lock
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
_Mtx_destroy_in_situ
?_Throw_C_error@std@@YAXH@Z
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??1_Locinfo@std@@QEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?id@?$collate@_W@std@@2V0locale@2@A
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??_7facet@locale@std@@6B@
??1_Lockit@std@@QEAA@XZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
_Wcsxfrm
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
??0task_continuation_context@Concurrency@@AEAA@XZ
_Mtx_current_owns
_Cnd_unregister_at_thread_exit
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
_Query_perf_frequency
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
_Cnd_timedwait
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Cnd_register_at_thread_exit
_Query_perf_counter
_Xtime_get_ticks
_Cnd_broadcast
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
?exceptions@ios_base@std@@QEAAXH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?is@?$ctype@_W@std@@QEBA_NF_W@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Xbad_alloc@std@@YAXXZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Xlength_error@std@@YAXPEBD@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Incref@facet@locale@std@@UEAAXXZ
??Bid@locale@std@@QEAA_KXZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Facet_base@std@@UEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
_Cnd_do_broadcast_at_thread_exit
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Winerror_map@std@@YAHH@Z
?_Xbad_function_call@std@@YAXXZ
?uncaught_exception@std@@YA_NXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
InitOnceBeginInitialize
GetModuleFileNameW
CloseHandle
SetEvent
GetModuleHandleA
GetVersion
InterlockedPushEntrySList
GetLastError
CreateEventW
GetModuleHandleW
WideCharToMultiByte
IsDebuggerPresent
InitializeSListHead
MultiByteToWideChar
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
LocalAlloc
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetSystemFirmwareTable
FormatMessageW
LoadLibraryW
__C_specific_handler
GetSystemTime
GetTickCount64
GetFileInformationByHandleEx
RaiseException
GetSystemInfo
VirtualProtect
DeleteCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryExA
WaitForSingleObject
AreFileApisANSI
ResetEvent
RegisterWaitUntilOOBECompleted
UnregisterWaitUntilOOBECompleted
SubmitThreadpoolWork
OOBEComplete
CreateThreadpoolWork
ReleaseMutex
CreateMutexW
CreateDirectoryW
DuplicateHandle
K32GetModuleFileNameExW
GetPackageFamilyName
GetPackageId
CreateFileW
OpenProcess
ExpandEnvironmentStringsW
GetFullPathNameW
LocalFree
OpenPackageInfoByFullName
GetProcessHeap
WTSGetActiveConsoleSessionId
HeapAlloc
DeleteProcThreadAttributeList
GetPackagePathByFullName
WaitForSingleObjectEx
FormatMessageA
InitOnceComplete
VirtualQuery
GetFileAttributesExW
UpdateProcThreadAttribute
GetPackageInfo
ClosePackageInfo
HeapFree
Sleep
InitializeProcThreadAttributeList
FindPackagesByPackageFamily
CryptDestroyHash
CreateProcessAsUserW
ImpersonateLoggedOnUser
RevertToSelf
OpenProcessToken
LookupAccountSidW
GetNamedSecurityInfoW
GetAce
RegisterServiceCtrlHandlerExW
RegCloseKey
SetServiceStatus
ChangeServiceConfig2W
RegCreateKeyExW
RegOpenKeyExW
StartServiceCtrlDispatcherW
RegOpenKeyW
RegQueryValueExW
InitializeSecurityDescriptor
SetEntriesInAclW
AllocateAndInitializeSid
SetSecurityDescriptorDacl
FreeSid
RegCreateKeyW
RegSetKeyValueW
CryptReleaseContext
CryptGenKey
CryptGetProvParam
CryptImportKey
CryptSetKeyParam
DuplicateTokenEx
CryptHashData
CryptDeriveKey
CryptCreateHash
CryptExportKey
CryptDecrypt
CryptGenRandom
CryptEncrypt
CryptAcquireContextW
CryptGetKeyParam
CryptDestroyKey
ConvertStringSidToSidW
GetUserNameW
OpenServiceW
GetTokenInformation
ControlService
CreateServiceW
DeleteService
OpenSCManagerW
CloseServiceHandle
QueryServiceStatus
__setusermatherr
__stdio_common_vswprintf
__stdio_common_vfwprintf
__stdio_common_vsscanf
fgetpos
_set_fmode
__p__commode
__acrt_iob_func
__stdio_common_vswprintf_s
fclose
_get_stream_buffer_pointers
fread
fwrite
_fseeki64
fsetpos
setvbuf
fflush
fputc
ungetc
fgetc
_configthreadlocale
___lc_codepage_func
PowerSettingRegisterNotification
WTSQueryUserToken
CryptCATAdminReleaseContext
CryptCATAdminCalcHashFromFileHandle2
CryptCATCatalogInfoFromContext
CryptCATAdminEnumCatalogFromHash
CryptCATAdminReleaseCatalogContext
WTHelperGetProvSignerFromChain
CryptCATAdminAcquireContext2
WinVerifyTrust
WTHelperGetProvCertFromChain
WTHelperProvDataFromStateData
CryptBinaryToStringW
CryptUnprotectData
CryptProtectData
CertNameToStrW
CryptStringToBinaryW
PathFileExistsW
PathFindFileNameW
ExpandEnvironmentStringsForUserW
CreateEnvironmentBlock
DestroyEnvironmentBlock
GetStagedPackageOrigin
GetPackageFullNameFromToken
CommandLineToArgvW
RpcImpersonateClient
RpcServerInqCallAttributesW
RpcRevertToSelf
UuidCreate
UuidToStringW
RpcStringFreeW
NdrServerCall2
NdrServerCallAll
NdrClientCall3
RpcBindingVectorFree
RpcMgmtStopServerListening
RpcServerListen
RpcMgmtWaitServerListen
RpcServerRegisterIf3
RpcServerUseProtseqEpW
RpcServerUnregisterIf
PathCchRemoveFileSpec
PathCchRemoveExtension
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
DeriveCapabilitySidsFromName
CoIncrementMTAUsage
CoCreateFreeThreadedMarshaler
CoCreateGuid
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
wcstol
strtol
_unlock_file
_lock_file
_localtime64_s
_mktime64
_time64
wcsftime
_difftime64
?CloseConnection@RpcClient@Core@Client@Bridge@Hp@@QEAAHXZ
?OpenConnection@RpcClient@Core@Client@Bridge@Hp@@QEAAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?ExecuteCommand@RpcClient@Core@Client@Bridge@Hp@@QEAAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@I0AEAV67@@Z
?GetClientForEndpoint@RpcClient@Native@Client@Bridge@Hp@@SA?AV?$shared_ptr@VRpcClient@Native@Client@Bridge@Hp@@@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@7@@Z
GetErrorInfo
SysStringLen
SysFreeString
GetRestrictedErrorInfo
SetRestrictedErrorInfo
RoOriginateLanguageException
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsPromoteStringBuffer
WindowsDeleteString
WindowsCreateString
WindowsGetStringLen
WindowsPreallocateStringBuffer
WindowsCreateStringReference
WindowsDeleteStringBuffer
RoInitialize
RoGetActivationFactory
??0BridgeAccessManager@Security@Bridge@Hp@@QEAA@AEBV0123@@Z
??0BridgeAccessManager@Security@Bridge@Hp@@QEAA@XZ
??0CryptographyHelper@Registration@Services@Server@Bridge@Hp@@QEAA@XZ
??0IClientInformation@Server@Bridge@Hp@@QEAA@AEBU0123@@Z
??0IClientInformation@Server@Bridge@Hp@@QEAA@W4ClientType@123@@Z
??0IClientInformation@Server@Bridge@Hp@@QEAA@W4ClientType@123@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0IClientInformation@Server@Bridge@Hp@@QEAA@XZ
??0IClientWithNoHpManifestCheckCriteria@Security@Bridge@Hp@@QEAA@AEBV0123@@Z
??0IClientWithNoHpManifestCheckCriteria@Security@Bridge@Hp@@QEAA@XZ
??0Launcher@Services@Server@Bridge@Hp@@QEAA@AEBV01234@@Z
??0Launcher@Services@Server@Bridge@Hp@@QEAA@XZ
??0MatchingDescriptor@Security@Bridge@Hp@@QEAA@XZ
??0UwpInformation@Uwp@Server@Bridge@Hp@@QEAA@AEBU01234@@Z
??0UwpInformation@Uwp@Server@Bridge@Hp@@QEAA@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0GG@Z
??0UwpInformation@Uwp@Server@Bridge@Hp@@QEAA@XZ
??0UwpMatchingDescriptor@Security@Bridge@Hp@@QEAA@AEBV0123@@Z
??0UwpMatchingDescriptor@Security@Bridge@Hp@@QEAA@UUwpInformation@Uwp@Server@23@W4Operation@MatchingDescriptor@123@@Z
??0UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@QEAA@AEBV01234@@Z
??0UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@QEAA@XZ
??0UwpPackageModel@Uwp@Server@Bridge@Hp@@QEAA@$$QEAU01234@@Z
??0UwpPackageModel@Uwp@Server@Bridge@Hp@@QEAA@AEBU01234@@Z
??0UwpPackageModel@Uwp@Server@Bridge@Hp@@QEAA@XZ
??0UwpWithNoHPManifestExemptionWhiteList@Security@Bridge@Hp@@QEAA@XZ
??0UwpWithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@QEAA@AEBV0123@@Z
??0UwpWithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@QEAA@V?$shared_ptr@V?$vector@VUwpMatchingDescriptor@Security@Bridge@Hp@@V?$allocator@VUwpMatchingDescriptor@Security@Bridge@Hp@@@std@@@std@@@std@@V?$shared_ptr@UUwpInformation@Uwp@Server@Bridge@Hp@@@5@@Z
??0Win32Information@Win32@Server@Bridge@Hp@@QEAA@AEBU01234@@Z
??0Win32Information@Win32@Server@Bridge@Hp@@QEAA@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0GG@Z
??0Win32Information@Win32@Server@Bridge@Hp@@QEAA@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@GG@Z
??0Win32Information@Win32@Server@Bridge@Hp@@QEAA@XZ
??0Win32MatchingDescriptor@Security@Bridge@Hp@@QEAA@AEBV0123@@Z
??0Win32MatchingDescriptor@Security@Bridge@Hp@@QEAA@UWin32Information@Win32@Server@23@W4Operation@MatchingDescriptor@123@@Z
??0Win32WithNoHPManifestExemptionWhiteList@Security@Bridge@Hp@@QEAA@XZ
??0Win32WithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@QEAA@AEBV0123@@Z
??0Win32WithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@QEAA@V?$shared_ptr@V?$vector@VWin32MatchingDescriptor@Security@Bridge@Hp@@V?$allocator@VWin32MatchingDescriptor@Security@Bridge@Hp@@@std@@@std@@@std@@V?$shared_ptr@UWin32Information@Win32@Server@Bridge@Hp@@@5@@Z
??0bridge_access_exception@Security@Bridge@Hp@@QEAA@$$QEAV0123@@Z
??0bridge_access_exception@Security@Bridge@Hp@@QEAA@AEBV0123@@Z
??0bridge_access_exception@Security@Bridge@Hp@@QEAA@PEBD@Z
??1BridgeAccessManager@Security@Bridge@Hp@@QEAA@XZ
??1CryptographyHelper@Registration@Services@Server@Bridge@Hp@@QEAA@XZ
??1IClientInformation@Server@Bridge@Hp@@QEAA@XZ
??1IClientWithNoHpManifestCheckCriteria@Security@Bridge@Hp@@UEAA@XZ
??1Launcher@Services@Server@Bridge@Hp@@QEAA@XZ
??1UwpInformation@Uwp@Server@Bridge@Hp@@QEAA@XZ
??1UwpMatchingDescriptor@Security@Bridge@Hp@@QEAA@XZ
??1UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@UEAA@XZ
??1UwpPackageModel@Uwp@Server@Bridge@Hp@@QEAA@XZ
??1UwpWithNoHPManifestExemptionWhiteList@Security@Bridge@Hp@@QEAA@XZ
??1UwpWithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@UEAA@XZ
??1Win32Information@Win32@Server@Bridge@Hp@@QEAA@XZ
??1Win32MatchingDescriptor@Security@Bridge@Hp@@QEAA@XZ
??1Win32WithNoHPManifestExemptionWhiteList@Security@Bridge@Hp@@QEAA@XZ
??1Win32WithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@UEAA@XZ
??1bridge_access_exception@Security@Bridge@Hp@@UEAA@XZ
??4BridgeAccessManager@Security@Bridge@Hp@@QEAAAEAV0123@AEBV0123@@Z
??4CryptographyHelper@Registration@Services@Server@Bridge@Hp@@QEAAAEAV012345@AEBV012345@@Z
??4IClientInformation@Server@Bridge@Hp@@QEAAAEAU0123@AEBU0123@@Z
??4IClientWithNoHpManifestCheckCriteria@Security@Bridge@Hp@@QEAAAEAV0123@AEBV0123@@Z
??4Launcher@Services@Server@Bridge@Hp@@QEAAAEAV01234@AEBV01234@@Z
??4MatchingDescriptor@Security@Bridge@Hp@@QEAAAEAV0123@$$QEAV0123@@Z
??4MatchingDescriptor@Security@Bridge@Hp@@QEAAAEAV0123@AEBV0123@@Z
??4StringUtils@Services@Server@Bridge@Hp@@QEAAAEAV01234@$$QEAV01234@@Z
??4StringUtils@Services@Server@Bridge@Hp@@QEAAAEAV01234@AEBV01234@@Z
??4UwpInformation@Uwp@Server@Bridge@Hp@@QEAAAEAU01234@AEBU01234@@Z
??4UwpMatchingDescriptor@Security@Bridge@Hp@@QEAAAEAV0123@AEBV0123@@Z
??4UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@QEAAAEAV01234@AEBV01234@@Z
??4UwpPackageModel@Uwp@Server@Bridge@Hp@@QEAAAEAU01234@$$QEAU01234@@Z
??4UwpPackageModel@Uwp@Server@Bridge@Hp@@QEAAAEAU01234@AEBU01234@@Z
??4UwpWithNoHPManifestExemptionWhiteList@Security@Bridge@Hp@@QEAAAEAV0123@AEBV0123@@Z
??4UwpWithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@QEAAAEAV0123@AEBV0123@@Z
??4Win32Information@Win32@Server@Bridge@Hp@@QEAAAEAU01234@AEBU01234@@Z
??4Win32MatchingDescriptor@Security@Bridge@Hp@@QEAAAEAV0123@AEBV0123@@Z
??4Win32WithNoHPManifestExemptionWhiteList@Security@Bridge@Hp@@QEAAAEAV0123@AEBV0123@@Z
??4Win32WithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@QEAAAEAV0123@AEBV0123@@Z
??4bridge_access_exception@Security@Bridge@Hp@@QEAAAEAV0123@$$QEAV0123@@Z
??4bridge_access_exception@Security@Bridge@Hp@@QEAAAEAV0123@AEBV0123@@Z
??_7IClientWithNoHpManifestCheckCriteria@Security@Bridge@Hp@@6B@
??_7UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@6B@
??_7UwpWithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@6B@
??_7Win32WithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@6B@
??_7bridge_access_exception@Security@Bridge@Hp@@6B@
?Base64Decode@CryptographyHelper@Registration@Services@Server@Bridge@Hp@@QEAAHAEAU_CRYPTOAPI_BLOB@@0K@Z
?Base64Decode@CryptographyHelper@Registration@Services@Server@Bridge@Hp@@QEAA_NAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEAU_CRYPTOAPI_BLOB@@@Z
?Base64Encode@CryptographyHelper@Registration@Services@Server@Bridge@Hp@@QEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEAU_CRYPTOAPI_BLOB@@@Z
?Base64Encode@CryptographyHelper@Registration@Services@Server@Bridge@Hp@@QEAAHAEAU_CRYPTOAPI_BLOB@@0K@Z
?CREATE_FILE_EXTENDED_PATH@Launcher@Services@Server@Bridge@Hp@@0_KB
?CreateAsymetricKeyObjectToDecryptSessionKey@CryptographyHelper@Registration@Services@Server@Bridge@Hp@@QEAAJAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEA_K1@Z
?CreatePrivateExponentOneKey@CryptographyHelper@Registration@Services@Server@Bridge@Hp@@AEAAHPEB_WK0KPEA_K1@Z
?CreateSymetricKeyObjectToDecryptOOBEData@CryptographyHelper@Registration@Services@Server@Bridge@Hp@@QEAAJAEA_K0PEAEAEAK0@Z
?CreateTripleDESKey@CryptographyHelper@Registration@Services@Server@Bridge@Hp@@AEAAXAEA_K00PEAEK1@Z
?DecryptDataCollectedInOOBE@CryptographyHelper@Registration@Services@Server@Bridge@Hp@@QEAAJPEAEAEAKAEA_KAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?DecryptHelper@CryptographyHelper@Registration@Services@Server@Bridge@Hp@@QEAAJPEAEK_KPEAPEAEPEAK@Z
?DeriveSessionKeyWithAlgorithm@CryptographyHelper@Registration@Services@Server@Bridge@Hp@@AEAAH_KIPEAEKPEA_K@Z
?ExportPlainSessionBlob@CryptographyHelper@Registration@Services@Server@Bridge@Hp@@AEAAH_K0PEAPEAEPEAK@Z
?FindPackages@UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@UEAA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?FromUtf16ToUtf8@StringUtils@Services@Server@Bridge@Hp@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEB_W_K@Z
?FromUtf8ToUtf16@StringUtils@Services@Server@Bridge@Hp@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEBD_K@Z
?GenerateSessionKeyWithAlgorithm@CryptographyHelper@Registration@Services@Server@Bridge@Hp@@AEAAH_KIPEA_K@Z
?GetAbsolutePathForUWPAlias@Launcher@Services@Server@Bridge@Hp@@QEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V67@@Z
?GetExemption@UwpWithNoHPManifestExemptionWhiteList@Security@Bridge@Hp@@QEAA?AV?$shared_ptr@V?$vector@VUwpMatchingDescriptor@Security@Bridge@Hp@@V?$allocator@VUwpMatchingDescriptor@Security@Bridge@Hp@@@std@@@std@@@std@@XZ
?GetExemption@Win32WithNoHPManifestExemptionWhiteList@Security@Bridge@Hp@@QEAA?AV?$shared_ptr@V?$vector@VWin32MatchingDescriptor@Security@Bridge@Hp@@V?$allocator@VWin32MatchingDescriptor@Security@Bridge@Hp@@@std@@@std@@@std@@XZ
?GetOriginAndVersionByFamilyName@Launcher@Services@Server@Bridge@Hp@@QEAA?AV?$tuple@H_K@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@7@@Z
?GetOriginAndVersionByFullName@Launcher@Services@Server@Bridge@Hp@@QEAA?AV?$tuple@H_K@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@7@@Z
?GetPackageFullName@UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@UEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V67@@Z
?GetPackageFullNameByFamilyName@Launcher@Services@Server@Bridge@Hp@@QEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V67@@Z
?GetPackageFullNameByFamilyName@Launcher@Services@Server@Bridge@Hp@@QEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V67@V?$shared_ptr@X@7@@Z
?GetPackageInstalledPathByFullName@Launcher@Services@Server@Bridge@Hp@@QEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V67@@Z
?GetPackageInstalledPathByFullName@Launcher@Services@Server@Bridge@Hp@@QEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V67@V?$shared_ptr@X@7@@Z
?GetPackagesPerUser@UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@UEAA?AV?$vector@UUwpPackageModel@Uwp@Server@Bridge@Hp@@V?$allocator@UUwpPackageModel@Uwp@Server@Bridge@Hp@@@std@@@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@7@@Z
?GetPathExpandedImpersonatedAsCurrentUser@Launcher@Services@Server@Bridge@Hp@@QEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V67@V?$shared_ptr@X@7@@Z
?GetUserTokenForCurrentUser@Launcher@Services@Server@Bridge@Hp@@QEAA?AV?$shared_ptr@X@std@@W4_TOKEN_TYPE@@@Z
?ImportPlainSessionBlob@CryptographyHelper@Registration@Services@Server@Bridge@Hp@@AEAAH_K0IPEAEKPEA_K@Z
?IsAnException@UwpWithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@UEAA_NXZ
?IsAnException@Win32WithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@UEAA_NXZ
?IsRealUserSession@Launcher@Services@Server@Bridge@Hp@@QEAA_NAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?IsRunningAsSystem@UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@AEBA_NXZ
?IsUwpExempt@BridgeAccessManager@Security@Bridge@Hp@@QEAA_NXZ
?IsWin32Exempt@BridgeAccessManager@Security@Bridge@Hp@@QEAA_NXZ
?ProtectData@CryptographyHelper@Registration@Services@Server@Bridge@Hp@@QEAAJAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AEAU_CRYPTOAPI_BLOB@@@Z
?ProtectDataWithTripleDES@CryptographyHelper@Registration@Services@Server@Bridge@Hp@@QEAAJAEAU_CRYPTOAPI_BLOB@@000@Z
?RegisterPackage@UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@UEAA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?Run@Launcher@Services@Server@Bridge@Hp@@QEAA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@00@Z
?RunExeAsUser@Launcher@Services@Server@Bridge@Hp@@QEAA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0V?$shared_ptr@X@7@0@Z
?RunExeAsUser@Launcher@Services@Server@Bridge@Hp@@QEAA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0V?$shared_ptr@X@7@0AEAKV?$vector@PEAXV?$allocator@PEAX@std@@@7@@Z
?SetUwpChecker@BridgeAccessManager@Security@Bridge@Hp@@QEAAXV?$shared_ptr@VIClientWithNoHpManifestCheckCriteria@Security@Bridge@Hp@@@std@@@Z
?SetWin32Checker@BridgeAccessManager@Security@Bridge@Hp@@QEAAXV?$shared_ptr@VIClientWithNoHpManifestCheckCriteria@Security@Bridge@Hp@@@std@@@Z
?SidToAccountName@UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@AEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV67@@Z
?Trim@StringUtils@Services@Server@Bridge@Hp@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V67@@Z
?UTF16ToUTF8@CryptographyHelper@Registration@Services@Server@Bridge@Hp@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@8@@Z
?UTF8ToUTF16@CryptographyHelper@Registration@Services@Server@Bridge@Hp@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@8@@Z
?UnProtectData@CryptographyHelper@Registration@Services@Server@Bridge@Hp@@QEAAJAEAU_CRYPTOAPI_BLOB@@AEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@1@Z
?UnProtectDataWithTripleDES@CryptographyHelper@Registration@Services@Server@Bridge@Hp@@QEAAJAEAU_CRYPTOAPI_BLOB@@000@Z
?_white_list@UwpWithNoHPManifestExemptionWhiteList@Security@Bridge@Hp@@0V?$vector@VUwpMatchingDescriptor@Security@Bridge@Hp@@V?$allocator@VUwpMatchingDescriptor@Security@Bridge@Hp@@@std@@@std@@A
?_white_list@Win32WithNoHPManifestExemptionWhiteList@Security@Bridge@Hp@@0V?$vector@VWin32MatchingDescriptor@Security@Bridge@Hp@@V?$allocator@VWin32MatchingDescriptor@Security@Bridge@Hp@@@std@@@std@@A
?rLock@Launcher@Services@Server@Bridge@Hp@@0Vmutex@std@@A
?rLock@UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@0Vmutex@std@@A
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ