!@pAssW0rd_4488_$etUp![.]zip

resource
unpack002/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/AAD.Core.winmd
unpack002/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Microsoft.AAD.BrokerPlugin.winmd
unpack002/SystemApps/Microsoft.AccountsControl_cw5n1h2txyewy/AccountsControlUI.dll
unpack002/SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/Microsoft.AsyncTextService.exe
unpack002/SystemApps/Microsoft.BioEnrollment_cw5n1h2txyewy/BioEnrollmentUI.dll
unpack002/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/GazeInputInternal.dll
unpack002/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/GazeInputInternal.winmd
unpack002/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/GazeInteraction.dll
unpack002/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/GazeInteraction.winmd
unpack002/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Microsoft.ECApp.exe
unpack002/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/ecsystem.dll
unpack002/SystemApps/Microsoft.Win32WebViewHost_cw5n1h2txyewy/Win32WebViewHost.exe
unpack002/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/CallingShellApp.exe
unpack002/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/CallingShellAppPresenters.dll
unpack002/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/WindowsInternal.Shell.Experiences.Calling.winmd
unpack002/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/WindowsInternal.Shell.Experiences.CallingShellAppControls.dll
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/AntiTheft.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/ApplicationTheme.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/CloudDomainJoin.DataModel.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/CloudExperienceHostAPI.SyncSettings.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/CloudExperienceHostAPI.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/CloudExperienceHostBroker.Account.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/CloudExperienceHostBroker.Cortana.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/CloudExperienceHostBroker.Hello.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/CloudExperienceHostBroker.LocalNgc.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/CloudExperienceHostBroker.RetailDemo.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/CloudExperienceHostBroker.SyncEngine.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/ContentManagement.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/Family.Cache.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/Microsoft.CloudExperienceHost.dll
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/Microsoft.CloudExperienceHost.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/MicrosoftAccount.Extension.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/MicrosoftAccount.TokenProvider.Core.dll
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/MicrosoftAccount.TokenProvider.Core.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/MicrosoftAccount.UserOperations.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo.Internal.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/SystemSettings.DataModel.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/UnifiedEnrollment.DataModel.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/WindowsUdk.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/cloudexperiencehostapi.provisioning.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/enterprisedevicemanagement.enrollment.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/enterprisedevicemanagement.service.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/microsoft.resourceaccountmanager.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/moderndeployment.autopilot.winmd
unpack002/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/userdeviceregistration.ngc.winmd
unpack002/SystemApps/Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy/PinningConfirmationDialog.exe
unpack002/SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/BingConfigurationClient.dll
unpack002/SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Cortana.Internal.Search.winmd
unpack002/SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Cortana.Search.winmd
unpack002/SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Search.Core.dll
unpack002/SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/SearchApi.CppWinrt.dll
unpack002/SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/SearchApi.ProxyStub.dll
unpack002/SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/SearchApi.dll
unpack002/SystemApps/Microsoft.Windows.SecHealthUI_cw5n1h2txyewy/SecHealthUI.exe
unpack002/SystemApps/Microsoft.Windows.SecHealthUI_cw5n1h2txyewy/SecHealthUIAppShell.winmd
unpack002/SystemApps/Microsoft.Windows.SecHealthUI_cw5n1h2txyewy/SecHealthUIDataModel.dll
unpack002/SystemApps/Microsoft.Windows.SecHealthUI_cw5n1h2txyewy/SecHealthUIDataModel.winmd
unpack002/SystemApps/Microsoft.Windows.SecHealthUI_cw5n1h2txyewy/SecHealthUITelemetry.dll
unpack002/SystemApps/Microsoft.Windows.SecHealthUI_cw5n1h2txyewy/SecHealthUITelemetry.winmd
unpack002/SystemApps/Microsoft.Windows.SecHealthUI_cw5n1h2txyewy/SecHealthUIViewModels.dll
unpack002/SystemApps/Microsoft.Windows.SecHealthUI_cw5n1h2txyewy/SecHealthUIViewModels.winmd
unpack002/SystemApps/Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy/StartUI.dll
unpack002/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/GamingTcuiHelpers.dll
unpack002/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/GamingUI.XboxLive.InternalHelpers.winmd
unpack002/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Toolkit.dll
unpack002/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/XBox.TCUI.Resource.dll
unpack002/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/XBox.TCUI.Shell.dll
unpack002/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/XBox.TCUI.Tracing.dll
unpack002/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/XBox.TCUI.exe
unpack002/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/XboxExperienceServices.dll
unpack002/SystemApps/MicrosoftWindows.Client.CBS_cw5n1h2txyewy/LayoutData.winmd
unpack002/SystemApps/MicrosoftWindows.Client.CBS_cw5n1h2txyewy/ScreenClipping.winmd
unpack002/SystemApps/MicrosoftWindows.Client.CBS_cw5n1h2txyewy/SuggestionUI.winmd
unpack002/SystemApps/MicrosoftWindows.Client.CBS_cw5n1h2txyewy/TextInput.winmd
unpack002/SystemApps/MicrosoftWindows.Client.CBS_cw5n1h2txyewy/TextInputCommon.winmd
unpack002/SystemApps/MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy/windowsudk.winmd
unpack002/SystemApps/NcsiUwpApp_8wekyb3d8bbwe/NcsiUwpApp.winmd
unpack002/SystemApps/NcsiUwpApp_8wekyb3d8bbwe/NcsiUwpBackgroundTasks.winmd
unpack002/SystemApps/ShellExperienceHost_cw5n1h2txyewy/BatteryFlyoutExperience.dll
unpack002/SystemApps/ShellExperienceHost_cw5n1h2txyewy/ClockFlyoutExperience.dll
unpack002/SystemApps/ShellExperienceHost_cw5n1h2txyewy/DevicesFlowUI.dll
unpack002/SystemApps/ShellExperienceHost_cw5n1h2txyewy/ImeStatusNotification.dll
unpack002/SystemApps/ShellExperienceHost_cw5n1h2txyewy/InputDial.dll
unpack002/SystemApps/ShellExperienceHost_cw5n1h2txyewy/Insights.dll
unpack002/SystemApps/ShellExperienceHost_cw5n1h2txyewy/MtcUvc.dll
unpack002/SystemApps/ShellExperienceHost_cw5n1h2txyewy/PenWorkspace.dll
unpack002/SystemApps/ShellExperienceHost_cw5n1h2txyewy/QuickConnectUI.dll
unpack002/SystemApps/ShellExperienceHost_cw5n1h2txyewy/SharePickerUI.dll
unpack002/SystemApps/ShellExperienceHost_cw5n1h2txyewy/VirtualTouchpadUI.dll
unpack002/SystemApps/ShellExperienceHost_cw5n1h2txyewy/Windows.UI.ActionCenter.dll
unpack002/SystemApps/ShellExperienceHost_cw5n1h2txyewy/Windows.UI.SoftLanding.dll
unpack002/SystemApps/Windows.CBSPreview_cw5n1h2txyewy/CameraBarcodeScannerPreview.exe
unpack002/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/NarratorQuickStart.exe

!@pAssW0rd_4488_$etUp!.zip

.zip

Password: 4488

@!Open_Main_File#/!@pAssW0rd_4488_$etUp!.rar

.rar

Password: 4488

AAD.Core.dll

.dll windows:10 windows x64 arch:x64

Password: 4488

f6631409fdf8ba0fc04cbbcf0d4c4b2c

Code Sign

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05-05-2022 19:23

Not After

04-05-2023 19:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

5a:3a:1d:f1:b8:7e:e4:ff:3c:7a:66:71:17:b3:ff:b4:f5:b0:19:10:ff:4d:93:67:34:65:91:bd:a0:97:e4:56
Signer

Actual PE Digest

5a:3a:1d:f1:b8:7e:e4:ff:3c:7a:66:71:17:b3:ff:b4:f5:b0:19:10:ff:4d:93:67:34:65:91:bd:a0:97:e4:56

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

AAD.Core.pdb

Imports

ntdll

RtlAllocateHeap

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

RtlImageNtHeader

RtlFreeHeap

RtlGetDeviceFamilyInfoEnum

RtlInitUnicodeString

ZwQueryLicenseValue

RtlNtStatusToDosError

api-ms-win-eventing-provider-l1-1-0

EventSetInformation

EventActivityIdControl

EventRegister

EventUnregister

EventWriteTransfer

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

IsDebuggerPresent

DebugBreak

OutputDebugStringA

api-ms-win-core-heap-l1-1-0

GetProcessHeap

HeapAlloc

HeapFree

HeapReAlloc

HeapSize

api-ms-win-eventing-classicprovider-l1-1-0

RegisterTraceGuidsW

UnregisterTraceGuids

TraceMessage

GetTraceEnableFlags

GetTraceLoggerHandle

GetTraceEnableLevel

api-ms-win-core-synch-l1-1-0

OpenSemaphoreW

WaitForSingleObject

CreateEventExW

ReleaseSemaphore

ResetEvent

CreateSemaphoreExW

DeleteCriticalSection

SetEvent

InitializeCriticalSectionEx

ReleaseMutex

EnterCriticalSection

ReleaseSRWLockShared

ReleaseSRWLockExclusive

CreateMutexExW

WaitForSingleObjectEx

AcquireSRWLockShared

LeaveCriticalSection

AcquireSRWLockExclusive

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

RoOriginateErrorW

api-ms-win-core-errorhandling-l1-1-0

GetLastError

SetLastError

UnhandledExceptionFilter

SetUnhandledExceptionFilter

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler

CoTaskMemAlloc

StringFromGUID2

CoCreateGuid

CoMarshalInterThreadInterfaceInStream

CoGetInterfaceAndReleaseStream

CoGetContextToken

CoGetObjectContext

CoGetApartmentType

CLSIDFromString

CoCreateInstance

CoTaskMemFree

api-ms-win-core-localization-l1-2-0

ResolveLocaleName

FormatMessageW

api-ms-win-core-string-l1-1-0

WideCharToMultiByte

MultiByteToWideChar

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW

RegCloseKey

RegGetValueW

api-ms-win-core-processthreads-l1-1-0

SetThreadStackGuarantee

TerminateProcess

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress

GetModuleFileNameA

GetModuleHandleExW

GetModuleHandleW

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolTimer

CreateThreadpoolTimer

CloseThreadpoolTimer

WaitForThreadpoolTimerCallbacks

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

WakeAllConditionVariable

SleepConditionVariableSRW

Sleep

api-ms-win-security-cryptoapi-l1-1-0

CryptReleaseContext

wincorlib

?__abi_FailFast@@YAXXZ

?UninitializeData@Details@Platform@@YAXH@Z

?InitializeData@Details@Platform@@YAJH@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z

?ToString@Guid@Platform@@QEAAPE$AAVString@2@XZ

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0ClassNotRegisteredException@Platform@@QE$AAA@PE$AAVString@1@@Z

??0COMException@Platform@@QE$AAA@HPE$AAVString@1@@Z

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z

?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K@Z

??0Delegate@Platform@@QE$AAA@XZ

?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ

??0NotImplementedException@Platform@@QE$AAA@PE$AAVString@1@@Z

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?ToString@Enum@Platform@@QE$AAAPE$AAVString@2@XZ

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

msvcrt

wcscat_s

wcsncpy_s

??3@YAXPEAX@Z

__CxxFrameHandler3

memcpy_s

memmove_s

wcsstr

vswprintf_s

_vscwprintf

??_V@YAXPEAX@Z

_purecall

time

__RTDynamicCast

??0exception@@QEAA@AEBV0@@Z

??1exception@@UEAA@XZ

??0exception@@QEAA@XZ

__ExceptionPtrDestroy

__ExceptionPtrRethrow

__ExceptionPtrCurrentException

__ExceptionPtrCreate

?terminate@@YAXXZ

_wcsicmp

?what@exception@@UEBAPEBDXZ

??0exception@@QEAA@AEBQEBD@Z

wcsrchr

?name@type_info@@QEBAPEBDXZ

__RTtypeid

wcschr

free

calloc

_ultoa_s

strncmp

_strlwr_s

malloc

swprintf_s

isalpha

isalnum

_wcslwr_s

wcspbrk

wcsnlen

iswspace

_time64

_gmtime64_s

wcsftime

__C_specific_handler

_vsnprintf

_wtoi

__ExceptionPtrCopyException

__ExceptionPtrAssign

__ExceptionPtrToBool

wcsncmp

srand

rand

_wcsupr_s

_wcsnicmp

_wcsicoll

wcscspn

wcsspn

_vsnwprintf

_vsnprintf_s

difftime

_wtol

??0exception@@QEAA@AEBQEBDH@Z

memset

wcslen

_CxxThrowException

??1type_info@@UEAA@XZ

_lock

_unlock

__dllonexit

_onexit

_XcptFilter

_amsg_exit

_initterm

_errno

realloc

memmove

??8type_info@@QEBAHAEBV0@@Z

_callnewh

memcpy

__ExceptionPtrCopy

memcmp

??2@YAPEAX_KHPEBDH@Z

api-ms-win-security-lsalookup-l1-1-2

LsaLookupUserAccountType

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference

WindowsCreateString

WindowsGetStringLen

WindowsDeleteString

WindowsDuplicateString

WindowsGetStringRawBuffer

WindowsCompareStringOrdinal

WindowsConcatString

WindowsIsStringEmpty

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

GetSystemInfo

api-ms-win-core-memory-l1-1-0

VirtualQuery

VirtualAlloc

VirtualProtect

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 304KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Info_Key.txt

Setup.exe

.exe windows:5 windows x86 arch:x86

Password: 4488

73103d9d9a536cb44d46f26283544db2

Code Sign

98:0c:39:aa:67:9a:d3:37:fb:40:cf:70:6d:b7:69:c8
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

18-09-2020 00:00

Not After

18-09-2023 23:59

Subject

CN=Nextcloud GmbH,O=Nextcloud GmbH,POSTALCODE=70192,STREET=Hauptmannsreute 44A,L=Stuttgart,ST=Baden-Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

4e:b2:00:67:0c:03:5d:4f
Certificate

Issuer

CN=SwissSign Platinum CA - G2,O=SwissSign AG,C=CH

Not Before

25-10-2006 08:36

Not After

25-10-2036 08:36

Subject

CN=SwissSign Platinum CA - G2,O=SwissSign AG,C=CH

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

31:0b:78:32:0a:1f:8e:d2:2c:f1:67:e9:99:fa:8a:71:4f:a9:ef:fb
Certificate

Issuer

CN=SwissSign TSA Platinum CA 2017 - G22,O=SwissSign AG,C=CH,2.5.4.97=#13154e545243482d4348452d3130392e3335372e303132

Not Before

18-12-2018 15:48

Not After

18-12-2021 15:48

Subject

CN=SwissSign ZertES TSA UNIT CH-2018,O=SwissSign AG,C=CH,2.5.4.97=#13154e545243482d4348452d3130392e3335372e303132

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

64:4f:be:61:79:2d:d4:67:bb:20:79:76:70:10:96
Certificate

Issuer

CN=SwissSign Platinum CA - G2,O=SwissSign AG,C=CH

Not Before

14-02-2017 08:29

Not After

15-02-2032 08:29

Subject

CN=SwissSign TSA Platinum CA 2017 - G22,O=SwissSign AG,C=CH,2.5.4.97=#13154e545243482d4348452d3130392e3335372e303132

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

a8:d0:30:f3:6f:a9:60:51:88:2b:fb:ea:2d:26:be:4d:14:64:59:a0:fd:77:81:23:91:18:df:0f:26:6f:e5:4d
Signer

Actual PE Digest

a8:d0:30:f3:6f:a9:60:51:88:2b:fb:ea:2d:26:be:4d:14:64:59:a0:fd:77:81:23:91:18:df:0f:26:6f:e5:4d

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_EH_prolog

kernel32

IsProcessorFeaturePresent

GetSystemTimeAsFileTime

HeapAlloc

HeapFree

ExitProcess

GetModuleHandleA

LoadLibraryA

GetProcAddress

user32

CharToOemA

advapi32

RegOpenKeyExA

ole32

CoInitializeSecurity

oleaut32

VariantClear

shlwapi

ord155

Sections

.text
Size: - Virtual size: 119KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.vmpÆþ
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.vmpÆþ
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.vmpÆþ
Size: 6.7MB - Virtual size: 6.7MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 173KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/AAD.Core.winmd

.dll windows:6 windows x86 arch:x86

Password: 4488

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/App.xaml

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/AppxBlockMap.xml

.xml

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/AppxManifest.xml

.xml

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/AppxSignature.p7x

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/AccountSmallLogo.png

.png

Password: 4488

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/Logo.scale-100.png

.png

Password: 4488

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.contrast-black_scale-100.png

.png

Password: 4488

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.contrast-black_scale-125.png

.png

Password: 4488

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.contrast-black_scale-150.png

.png

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.contrast-black_scale-200.png

.png

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.contrast-black_scale-400.png

.png

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.contrast-white_scale-100.png

.png

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.contrast-white_scale-125.png

.png

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.contrast-white_scale-150.png

.png

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.contrast-white_scale-200.png

.png

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.contrast-white_scale-400.png

.png

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.scale-100.png

.png

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.scale-125.png

.png

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.scale-150.png

.png

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.scale-200.png

.png

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.scale-400.png

.png

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/SmallLogo.scale-100.png

.png

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/SplashScreen.scale-100.png

.png

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/StoreLogo.scale-100.png

.png

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Error.htm

.js

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Loading.htm

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/MainPage.xaml

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Microsoft.AAD.BrokerPlugin.exe

.exe windows:10 windows x64 arch:x64

1c7722ebbdcee129017e54a6fbaf1a83

Code Sign

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05-05-2022 19:23

Not After

04-05-2023 19:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

c9:b9:77:de:9e:5c:a7:b1:6c:3a:2c:35:0d:f1:6c:f3:69:8c:7e:5e:81:c8:6b:db:b6:9c:a0:53:2e:32:b5:e6
Signer

Actual PE Digest

c9:b9:77:de:9e:5c:a7:b1:6c:3a:2c:35:0d:f1:6c:f3:69:8c:7e:5e:81:c8:6b:db:b6:9c:a0:53:2e:32:b5:e6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Microsoft.AAD.BrokerPlugin.pdb

Imports

api-ms-win-eventing-classicprovider-l1-1-0

GetTraceEnableLevel

GetTraceEnableFlags

GetTraceLoggerHandle

RegisterTraceGuidsW

UnregisterTraceGuids

TraceMessage

api-ms-win-core-synch-l1-1-0

AcquireSRWLockExclusive

AcquireSRWLockShared

DeleteCriticalSection

ReleaseSRWLockExclusive

ReleaseSRWLockShared

InitializeCriticalSectionEx

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext

SetRestrictedErrorInfo

RoOriginateError

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

UnhandledExceptionFilter

api-ms-win-core-util-l1-1-0

DecodePointer

wincorlib

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

??0Delegate@Platform@@QE$AAA@XZ

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

??0OutOfMemoryException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

msvcrt

memset

wcslen

_CxxThrowException

?terminate@@YAXXZ

??1type_info@@UEAA@XZ

_lock

_unlock

__dllonexit

__C_specific_handler

_onexit

_XcptFilter

_amsg_exit

__getmainargs

__set_app_type

exit

_exit

_cexit

_ismbblead

__setusermatherr

_initterm

_acmdln

_fmode

_commode

malloc

_callnewh

??0exception@@QEAA@AEBQEBDH@Z

memcpy

??0exception@@QEAA@AEBV0@@Z

wcsrchr

??0exception@@QEAA@AEBQEBD@Z

??1exception@@UEAA@XZ

?what@exception@@UEBAPEBDXZ

_purecall

__CxxFrameHandler3

??3@YAXPEAX@Z

memmove

_vsnprintf

ntdll

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

RtlImageNtHeader

RtlAllocateHeap

RtlFreeHeap

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsConcatString

WindowsCompareStringOrdinal

WindowsIsStringEmpty

WindowsCreateString

WindowsGetStringRawBuffer

WindowsDuplicateString

WindowsDeleteString

WindowsCreateStringReference

api-ms-win-core-synch-l1-2-0

Sleep

InitOnceExecuteOnce

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc

CoCreateFreeThreadedMarshaler

CoTaskMemFree

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

SetThreadStackGuarantee

GetCurrentProcessId

GetStartupInfoW

GetCurrentThreadId

GetCurrentProcess

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemInfo

GetSystemTimeAsFileTime

api-ms-win-core-memory-l1-1-0

VirtualQuery

VirtualProtect

VirtualAlloc

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Microsoft.AAD.BrokerPlugin.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/css/app.css

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/css/ui-light.css

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/pris/resources.en-US.pri

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/pris/resources.ru-RU.pri

SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/resources.pri

SystemApps/Microsoft.AccountsControl_cw5n1h2txyewy/AccountsControlHost.exe

.exe windows:10 windows x64 arch:x64

8c99df03e773b6f863719949aefd5752

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:30

Not After

03-03-2021 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

e3:5b:d3:50:07:fc:a2:3c:ae:1d:25:ff:ab:44:ca:f8:41:02:53:26:17:4c:93:0d:ad:65:15:84:87:ca:3e:b3
Signer

Actual PE Digest

e3:5b:d3:50:07:fc:a2:3c:ae:1d:25:ff:ab:44:ca:f8:41:02:53:26:17:4c:93:0d:ad:65:15:84:87:ca:3e:b3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

AccountsControlHost.pdb

Imports

msvcrt

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@AEBV0@@Z

wcstol

_errno

wcsstr

calloc

??0exception@@QEAA@AEBQEBD@Z

?what@exception@@UEBAPEBDXZ

___lc_collate_cp_func

memcmp

?terminate@@YAXXZ

__CxxFrameHandler3

__pctype_func

_commode

_fmode

abort

_acmdln

??0exception@@QEAA@XZ

??1exception@@UEAA@XZ

_initterm

__setusermatherr

??0exception@@QEAA@AEBV0@@Z

_ismbblead

_cexit

_vsnwprintf

_exit

exit

__set_app_type

__getmainargs

memmove_s

memcpy_s

_amsg_exit

_XcptFilter

??1type_info@@UEAA@XZ

_onexit

_wcsdup

??0bad_cast@@QEAA@PEBD@Z

_wsetlocale

free

_vsnprintf_s

_purecall

??3@YAXPEAX@Z

strchr

___lc_codepage_func

realloc

__crtLCMapStringW

___lc_handle_func

__crtCompareStringW

memset

wcslen

_CxxThrowException

??0exception@@QEAA@AEBQEBDH@Z

memcpy

memmove

malloc

_callnewh

setlocale

___mb_cur_max_func

__C_specific_handler

__dllonexit

_unlock

wcsrchr

_lock

wincorlib

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?__abi_FailFast@@YAXXZ

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?UninitializeData@Details@Platform@@YAXH@Z

?InitializeData@Details@Platform@@YAJH@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

??0InvalidArgumentException@Platform@@QE$AAA@XZ

??0NotImplementedException@Platform@@QE$AAA@XZ

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

??0Delegate@Platform@@QE$AAA@XZ

??0ChangedStateException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer

EventUnregister

EventSetInformation

EventRegister

EventActivityIdControl

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

GetProcAddress

GetModuleHandleW

GetModuleFileNameA

api-ms-win-core-heap-l1-1-0

HeapFree

GetProcessHeap

HeapAlloc

api-ms-win-core-synch-l1-1-0

WaitForSingleObjectEx

OpenSemaphoreW

ReleaseSemaphore

WaitForSingleObject

CreateSemaphoreExW

DeleteCriticalSection

EnterCriticalSection

LeaveCriticalSection

CreateMutexExW

ReleaseSRWLockShared

AcquireSRWLockShared

ReleaseSRWLockExclusive

AcquireSRWLockExclusive

InitializeCriticalSectionEx

InitializeCriticalSection

ReleaseMutex

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolTimer

SetThreadpoolTimer

CreateThreadpoolTimer

WaitForThreadpoolTimerCallbacks

api-ms-win-core-debug-l1-1-0

DebugBreak

OutputDebugStringW

IsDebuggerPresent

api-ms-win-core-processthreads-l1-1-0

GetStartupInfoW

TerminateProcess

GetCurrentProcess

GetCurrentThreadId

GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

GetLocaleInfoEx

FormatMessageW

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

UnhandledExceptionFilter

GetLastError

SetLastError

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-synch-l1-2-0

Sleep

InitOnceComplete

InitOnceExecuteOnce

InitOnceBeginInitialize

api-ms-win-core-com-l1-1-0

CoTaskMemFree

CoTaskMemAlloc

CoCreateFreeThreadedMarshaler

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount

api-ms-win-core-util-l1-1-0

DecodePointer

EncodePointer

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext

RoOriginateError

SetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsIsStringEmpty

WindowsGetStringRawBuffer

WindowsGetStringLen

WindowsDuplicateString

WindowsDeleteString

WindowsCreateStringReference

WindowsCreateString

WindowsConcatString

WindowsCompareStringOrdinal

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

WideCharToMultiByte

GetStringTypeW

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 331KB - Virtual size: 331KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 186KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.AccountsControl_cw5n1h2txyewy/AccountsControlUI.dll

.dll windows:10 windows x64 arch:x64

8e8f226af095b663a71029ee16c02427

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

AccountsControlUI.pdb

Imports

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

GetProcAddress

GetModuleFileNameA

GetModuleHandleW

api-ms-win-core-synch-l1-1-0

WaitForSingleObjectEx

OpenSemaphoreW

ReleaseSRWLockExclusive

SetEvent

InitializeCriticalSection

WaitForSingleObject

CreateMutexExW

CreateSemaphoreExW

CreateEventExW

InitializeCriticalSectionEx

EnterCriticalSection

ReleaseSRWLockShared

AcquireSRWLockShared

AcquireSRWLockExclusive

LeaveCriticalSection

DeleteCriticalSection

ReleaseSemaphore

ReleaseMutex

ResetEvent

api-ms-win-core-synch-l1-2-0

InitOnceComplete

Sleep

InitOnceExecuteOnce

InitOnceBeginInitialize

api-ms-win-core-heap-l1-1-0

HeapAlloc

HeapFree

GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetLastError

SetLastError

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer

EventActivityIdControl

EventSetInformation

EventRegister

EventUnregister

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolTimer

CloseThreadpoolTimer

WaitForThreadpoolTimerCallbacks

CreateThreadpoolTimer

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

GetCurrentProcess

GetCurrentThreadId

GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

FormatMessageW

LCMapStringEx

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

IsDebuggerPresent

DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc

CoGetInterfaceAndReleaseStream

CoGetObjectContext

CoCreateFreeThreadedMarshaler

CoGetApartmentType

CoMarshalInterThreadInterfaceInStream

CoTaskMemFree

CoCreateGuid

api-ms-win-core-string-l1-1-0

CompareStringOrdinal

WideCharToMultiByte

MultiByteToWideChar

GetStringTypeW

msvcrt

_wsetlocale

__crtLCMapStringW

__crtCompareStringW

_wcsdup

abort

memcmp

___lc_collate_cp_func

calloc

__pctype_func

_ismbblead

___lc_codepage_func

___lc_handle_func

___mb_cur_max_func

setlocale

memmove

memcpy

??0exception@@QEAA@AEBQEBDH@Z

_callnewh

_CxxThrowException

wcslen

memset

_initterm

malloc

_amsg_exit

_XcptFilter

??1type_info@@UEAA@XZ

__C_specific_handler

__dllonexit

_unlock

_lock

realloc

strchr

free

??0bad_cast@@QEAA@PEBD@Z

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@AEBV0@@Z

wcsrchr

wcstol

_errno

_memicmp

towlower

??0exception@@QEAA@AEBQEBD@Z

?what@exception@@UEBAPEBDXZ

_wcsicmp

__ExceptionPtrRethrow

?terminate@@YAXXZ

__ExceptionPtrCreate

__ExceptionPtrCurrentException

__ExceptionPtrCopy

__ExceptionPtrDestroy

memmove_s

wcsstr

_vsnprintf_s

??0exception@@QEAA@AEBV0@@Z

??0exception@@QEAA@XZ

??1exception@@UEAA@XZ

_purecall

??3@YAXPEAX@Z

memcpy_s

_vsnwprintf

__CxxFrameHandler3

_onexit

wincorlib

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?__abi_FailFast@@YAXXZ

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?UninitializeData@Details@Platform@@YAXH@Z

?InitializeData@Details@Platform@@YAJH@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

??0Exception@Platform@@QE$AAA@H@Z

?ToString@uint32@default@@QEAAPE$AAVString@Platform@@XZ

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

??0NotImplementedException@Platform@@QE$AAA@PE$AAVString@1@@Z

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

??0NotImplementedException@Platform@@QE$AAA@XZ

??0Delegate@Platform@@QE$AAA@XZ

??0Object@Platform@@QE$AAA@XZ

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount

api-ms-win-core-util-l1-1-0

EncodePointer

DecodePointer

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString

WindowsConcatString

WindowsCreateStringReference

WindowsIsStringEmpty

WindowsDeleteString

WindowsGetStringRawBuffer

WindowsDuplicateString

WindowsGetStringLen

WindowsCompareStringOrdinal

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 204KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.AccountsControl_cw5n1h2txyewy/AppxBlockMap.xml

.xml

SystemApps/Microsoft.AccountsControl_cw5n1h2txyewy/AppxManifest.xml

.xml

SystemApps/Microsoft.AccountsControl_cw5n1h2txyewy/AppxSignature.p7x

SystemApps/Microsoft.AccountsControl_cw5n1h2txyewy/Assets/Logo.Theme-Dark_Scale-100.png

.png

SystemApps/Microsoft.AccountsControl_cw5n1h2txyewy/Assets/Logo.Theme-Light_Scale-100.png

.png

SystemApps/Microsoft.AccountsControl_cw5n1h2txyewy/Assets/SmallLogo.Theme-Dark_Scale-100.png

.png

SystemApps/Microsoft.AccountsControl_cw5n1h2txyewy/Assets/SmallLogo.Theme-Light_Scale-100.png

.png

SystemApps/Microsoft.AccountsControl_cw5n1h2txyewy/Assets/SplashScreen.Theme-Dark_Scale-100.png

.png

SystemApps/Microsoft.AccountsControl_cw5n1h2txyewy/Assets/SplashScreen.Theme-Dark_Scale-140.png

.png

SystemApps/Microsoft.AccountsControl_cw5n1h2txyewy/Assets/SplashScreen.Theme-Dark_Scale-180.png

.png

SystemApps/Microsoft.AccountsControl_cw5n1h2txyewy/Assets/SplashScreen.Theme-Light_Scale-100.png

.png

SystemApps/Microsoft.AccountsControl_cw5n1h2txyewy/Assets/SplashScreen.Theme-Light_Scale-140.png

.png

SystemApps/Microsoft.AccountsControl_cw5n1h2txyewy/Assets/SplashScreen.Theme-Light_Scale-180.png

.png

SystemApps/Microsoft.AccountsControl_cw5n1h2txyewy/Assets/StoreLogo.Theme-Dark_Scale-100.png

.png

SystemApps/Microsoft.AccountsControl_cw5n1h2txyewy/Assets/StoreLogo.Theme-Light_Scale-100.png

.png

SystemApps/Microsoft.AccountsControl_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

SystemApps/Microsoft.AccountsControl_cw5n1h2txyewy/pris/resources.en-US.pri

SystemApps/Microsoft.AccountsControl_cw5n1h2txyewy/pris/resources.ru-RU.pri

SystemApps/Microsoft.AccountsControl_cw5n1h2txyewy/resources.pri

SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/AppxBlockMap.xml

.xml

SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/AppxManifest.xml

.xml

SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/AppxSignature.p7x

SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/Assets/Splashscreen.png

.png

SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/Assets/Square150x150Logo.png

.png

SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/Assets/Square44x44Logo.png

.png

SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/Assets/StoreLogo.png

.png

SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/Microsoft.AsyncTextService.exe

.exe windows:10 windows x64 arch:x64

51fa5b19a371c4c6dcf497ec4ce8816f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Microsoft.AsyncTextService.pdb

Imports

api-ms-win-core-synch-l1-2-0

InitOnceComplete

InitOnceBeginInitialize

WakeConditionVariable

InitializeConditionVariable

InitOnceExecuteOnce

SleepConditionVariableCS

Sleep

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

SetLastError

SetUnhandledExceptionFilter

GetLastError

api-ms-win-core-heap-l1-1-0

HeapFree

GetProcessHeap

HeapAlloc

api-ms-win-core-synch-l1-1-0

ReleaseSRWLockExclusive

InitializeCriticalSectionEx

DeleteCriticalSection

ReleaseSRWLockShared

TryEnterCriticalSection

CreateEventExW

OpenSemaphoreW

WaitForSingleObject

EnterCriticalSection

AcquireSRWLockShared

CreateSemaphoreExW

InitializeCriticalSection

AcquireSRWLockExclusive

WaitForSingleObjectEx

ReleaseMutex

ReleaseSemaphore

CreateMutexExW

ResetEvent

SetEvent

LeaveCriticalSection

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-processthreads-l1-1-0

GetStartupInfoW

TerminateProcess

GetCurrentProcessId

GetCurrentProcess

GetCurrentThreadId

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

GetModuleFileNameA

GetModuleHandleW

GetProcAddress

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

DebugBreak

OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer

EventUnregister

EventSetInformation

EventRegister

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler

CoMarshalInterThreadInterfaceInStream

CoTaskMemAlloc

CoTaskMemFree

CoGetObjectContext

CoGetInterfaceAndReleaseStream

CoGetApartmentType

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

QueryPerformanceFrequency

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolTimer

SetThreadpoolTimer

CloseThreadpoolTimer

WaitForThreadpoolTimerCallbacks

coremessaging

CoreUICallReceive

CoreUICreate

CoreUICallCreateEndpointHost

CoreUICallSend

api-ms-win-security-sddl-l1-1-0

ConvertStringSecurityDescriptorToSecurityDescriptorW

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-heap-l2-1-0

LocalFree

msvcrt

_commode

wcslen

_wsetlocale

__crtLCMapStringW

__crtCompareStringW

_wcsdup

memset

abort

memcmp

___lc_collate_cp_func

__pctype_func

___lc_codepage_func

___lc_handle_func

___mb_cur_max_func

setlocale

memmove

memcpy

_CxxThrowException

__setusermatherr

_acmdln

malloc

__set_app_type

__getmainargs

_ismbblead

_amsg_exit

_XcptFilter

_onexit

__C_specific_handler

__dllonexit

_unlock

_lock

??1type_info@@UEAA@XZ

strchr

free

??0bad_cast@@QEAA@PEBD@Z

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@AEBV0@@Z

wcsrchr

??0exception@@QEAA@AEBQEBD@Z

?what@exception@@UEBAPEBDXZ

wcstol

_errno

memmove_s

__ExceptionPtrRethrow

?terminate@@YAXXZ

__ExceptionPtrCreate

__ExceptionPtrCurrentException

__ExceptionPtrCopy

__ExceptionPtrDestroy

_purecall

??0exception@@QEAA@AEBV0@@Z

wcsstr

??3@YAXPEAX@Z

??1exception@@UEAA@XZ

??0exception@@QEAA@XZ

_vsnprintf_s

memcpy_s

_vsnwprintf

__CxxFrameHandler3

calloc

_fmode

_callnewh

_initterm

_cexit

_exit

??0exception@@QEAA@AEBQEBDH@Z

exit

realloc

wincorlib

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

??0Object@Platform@@QE$AAA@XZ

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

??0Delegate@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

GetStringTypeW

WideCharToMultiByte

api-ms-win-core-util-l1-1-0

DecodePointer

EncodePointer

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext

RoOriginateError

SetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsCompareStringOrdinal

WindowsGetStringRawBuffer

WindowsGetStringLen

WindowsDuplicateString

WindowsDeleteString

WindowsCreateStringReference

WindowsIsStringEmpty

WindowsCreateString

WindowsConcatString

Sections

.text
Size: 382KB - Virtual size: 382KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/pris/resources.en-US.pri

SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/resources.pri

SystemApps/Microsoft.BioEnrollment_cw5n1h2txyewy/AppxBlockMap.xml

.xml

SystemApps/Microsoft.BioEnrollment_cw5n1h2txyewy/AppxManifest.xml

.xml

SystemApps/Microsoft.BioEnrollment_cw5n1h2txyewy/AppxSignature.p7x

SystemApps/Microsoft.BioEnrollment_cw5n1h2txyewy/BioEnrollmentHost.exe

.exe windows:10 windows x64 arch:x64

0a9c4c929ba2c1d9668964d6dfdb1803

Code Sign

33:00:00:02:65:51:ae:1b:bd:00:5c:bf:bd:00:00:00:00:02:65
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:30

Not After

03-03-2021 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

bf:7e:4e:65:b4:74:cb:b4:a1:f0:22:a2:ae:18:8b:9a:d7:e7:77:8b:2f:9b:f1:32:47:05:af:76:5f:e7:39:f0
Signer

Actual PE Digest

bf:7e:4e:65:b4:74:cb:b4:a1:f0:22:a2:ae:18:8b:9a:d7:e7:77:8b:2f:9b:f1:32:47:05:af:76:5f:e7:39:f0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_APPCONTAINER

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

BioEnrollmentHost.pdb

Imports

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

OutputDebugStringW

DebugBreak

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

GetStartupInfoW

GetCurrentProcess

GetCurrentThreadId

GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

LCMapStringEx

GetLocaleInfoEx

FormatMessageW

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

SetLastError

SetUnhandledExceptionFilter

RaiseException

GetLastError

ntdll

NtQueryWnfStateData

RtlUnsubscribeWnfNotificationWaitForCompletion

RtlSubscribeWnfStateChangeNotification

api-ms-win-core-com-l1-1-0

CoTaskMemFree

CoCreateFreeThreadedMarshaler

CoTaskMemAlloc

CoGetContextToken

CoGetApartmentType

CoGetObjectContext

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW

GetModuleHandleExW

GetModuleFileNameA

GetProcAddress

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionAndSpinCount

ReleaseSemaphore

CreateSemaphoreExW

ResetEvent

CreateEventW

WaitForSingleObject

ReleaseMutex

InitializeCriticalSectionEx

EnterCriticalSection

WaitForSingleObjectEx

OpenSemaphoreW

AcquireSRWLockShared

SetEvent

AcquireSRWLockExclusive

CreateMutexExW

DeleteCriticalSection

ReleaseSRWLockExclusive

InitializeCriticalSection

LeaveCriticalSection

ReleaseSRWLockShared

InitializeSRWLock

TryAcquireSRWLockExclusive

api-ms-win-core-heap-l1-1-0

HeapFree

HeapAlloc

GetProcessHeap

api-ms-win-core-handle-l1-1-0

CloseHandle

wincorlib

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0NullReferenceException@Platform@@QE$AAA@XZ

??0InvalidArgumentException@Platform@@QE$AAA@XZ

??0NotImplementedException@Platform@@QE$AAA@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0Object@Platform@@QE$AAA@XZ

?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ

?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z

?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z

??0Delegate@Platform@@QE$AAA@XZ

??0DisconnectedException@Platform@@QE$AAA@XZ

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

api-ms-win-crt-string-l1-1-0

wcsnlen

memset

wcslen

api-ms-win-crt-locale-l1-1-0

_unlock_locales

_lock_locales

api-ms-win-crt-private-l1-1-0

_o___pctype_func

_o___std_exception_copy

_o___std_exception_destroy

_o___stdio_common_vsnprintf_s

_o___stdio_common_vswprintf

_o__callnewh

_o__calloc_base

_o__cexit

_o__configthreadlocale

_o__configure_narrow_argv

_o__crt_atexit

_o__errno

_o__exit

_o__free_base

_o__get_narrow_winmain_command_line

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__malloc_base

_o____lc_codepage_func

_o__purecall

_o__register_onexit_function

_o__set_app_type

_o__set_fmode

_o__set_new_mode

_o__wcsdup

_o_abort

_o_exit

_o_free

_o_malloc

_o_realloc

_o_setlocale

_o_terminate

_o_wcstol

__CxxFrameHandler4

__std_terminate

wcsstr

wcsrchr

strchr

_CxxThrowException

__CxxFrameHandler3

__current_exception

__AdjustPointer

__processing_throw

__GetPlatformExceptionInfo

__C_specific_handler

_o___p__commode

memcmp

_o____mb_cur_max_func

_o____lc_locale_name_func

_o__seh_filter_exe

_o____lc_collate_cp_func

memcpy

memmove

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

RoFailFastWithErrorContext

SetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsIsStringEmpty

WindowsGetStringRawBuffer

WindowsGetStringLen

WindowsDuplicateString

WindowsDeleteString

WindowsCreateStringReference

WindowsCreateString

WindowsConcatString

WindowsCompareStringOrdinal

api-ms-win-core-util-l1-1-0

EncodePointer

DecodePointer

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW

InitializeConditionVariable

WakeConditionVariable

WakeAllConditionVariable

InitOnceExecuteOnce

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlLookupFunctionEntry

RtlPcToFileHeader

RtlVirtualUnwind

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-threadpool-l1-2-0

SubmitThreadpoolWork

CreateThreadpoolWork

FreeLibraryWhenCallbackReturns

CloseThreadpoolWork

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

WideCharToMultiByte

CompareStringEx

GetStringTypeW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-crt-runtime-l1-1-0

_initterm

_initterm_e

_c_exit

_register_thread_local_exe_atexit_callback

Sections

.text
Size: 314KB - Virtual size: 314KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.BioEnrollment_cw5n1h2txyewy/BioEnrollmentUI.dll

.dll windows:10 windows x64 arch:x64

c80449814495c37987db0fb35717048d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_APPCONTAINER

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

BioEnrollmentUI.pdb

Imports

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-synch-l1-1-0

ReleaseSRWLockExclusive

InitializeCriticalSection

ReleaseSemaphore

ReleaseMutex

TryEnterCriticalSection

InitializeCriticalSectionEx

TryAcquireSRWLockExclusive

InitializeSRWLock

WaitForSingleObjectEx

WaitForSingleObject

AcquireSRWLockShared

CreateSemaphoreExW

CreateMutexExW

AcquireSRWLockExclusive

LeaveCriticalSection

DeleteCriticalSection

InitializeCriticalSectionAndSpinCount

ReleaseSRWLockShared

EnterCriticalSection

OpenSemaphoreW

CreateEventW

ResetEvent

SetEvent

api-ms-win-core-errorhandling-l1-1-0

SetLastError

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetLastError

RaiseException

api-ms-win-eventing-provider-l1-1-0

EventUnregister

EventRegister

EventActivityIdControl

EventWriteTransfer

EventSetInformation

api-ms-win-core-heap-l1-1-0

HeapFree

HeapAlloc

GetProcessHeap

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

GetTickCount64

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

WakeAllConditionVariable

SleepConditionVariableSRW

InitializeConditionVariable

InitOnceComplete

WakeConditionVariable

InitOnceBeginInitialize

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolTimer

SubmitThreadpoolWork

FreeLibraryWhenCallbackReturns

CreateThreadpoolWork

CreateThreadpoolTimer

WaitForThreadpoolTimerCallbacks

CloseThreadpoolWork

SetThreadpoolTimer

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

GetProcAddress

GetModuleHandleExW

GetModuleFileNameA

GetModuleHandleW

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler

CoGetObjectContext

CoTaskMemAlloc

CoTaskMemFree

CoGetContextToken

CoGetApartmentType

api-ms-win-core-debug-l1-1-0

DebugBreak

IsDebuggerPresent

OutputDebugStringW

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

GetCurrentProcessId

GetCurrentProcess

GetCurrentThreadId

api-ms-win-core-localization-l1-2-0

FormatMessageW

LCMapStringEx

GetLocaleInfoEx

wincorlib

?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ

?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z

?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z

??0Delegate@Platform@@QE$AAA@XZ

??0DisconnectedException@Platform@@QE$AAA@XZ

??0ChangedStateException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

??0Exception@Platform@@QE$AAA@HPE$AAVString@1@@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

??0GridLength@Xaml@UI@Windows@@QEAA@NW4GridUnitType@123@@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

??0InvalidArgumentException@Platform@@QE$AAA@XZ

??0NotImplementedException@Platform@@QE$AAA@XZ

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0Object@Platform@@QE$AAA@XZ

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

??0Exception@Platform@@QE$AAA@H@Z

?ToString@uint32@default@@QEAAPE$AAVString@Platform@@XZ

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

?ToString@int32@default@@QEAAPE$AAVString@Platform@@XZ

?Equals@float32@default@@QEAA_NPE$AAVObject@Platform@@@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

api-ms-win-crt-string-l1-1-0

wcsncmp

wcsnlen

wcslen

memset

api-ms-win-crt-locale-l1-1-0

_unlock_locales

_lock_locales

api-ms-win-crt-private-l1-1-0

_o___pctype_func

_o___std_exception_copy

_o___std_exception_destroy

_o___std_type_info_destroy_list

_o___stdio_common_vsnprintf_s

_o___stdio_common_vswprintf

_o__callnewh

_o__calloc_base

_o__cexit

_o__configure_narrow_argv

_o__crt_atexit

_o__errno

_o__execute_onexit_table

_o__fpclass

_o__free_base

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__malloc_base

_o____lc_collate_cp_func

_o__purecall

_o__register_onexit_function

_o__seh_filter_dll

_o__wcsdup

_o__wcsicmp

_o_abort

_o_cos

_o_free

_o_malloc

_o_realloc

_o_setlocale

_o_sin

_o_terminate

_o_wcstol

__CxxFrameHandler4

__std_terminate

wcsstr

wcsrchr

strchr

_o____lc_codepage_func

_CxxThrowException

__CxxFrameHandler3

__current_exception

__AdjustPointer

__processing_throw

__GetPlatformExceptionInfo

__C_specific_handler

_o____mb_cur_max_func

_o____lc_locale_name_func

memcmp

memcpy

memmove

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString

WindowsDeleteString

WindowsCreateStringReference

WindowsGetStringLen

WindowsDuplicateString

WindowsConcatString

WindowsCompareStringOrdinal

WindowsIsStringEmpty

WindowsGetStringRawBuffer

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo

RoFailFastWithErrorContext

RoOriginateError

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-util-l1-1-0

DecodePointer

EncodePointer

api-ms-win-core-rtlsupport-l1-1-0

RtlPcToFileHeader

RtlVirtualUnwind

RtlCaptureContext

RtlLookupFunctionEntry

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-string-l1-1-0

CompareStringEx

GetStringTypeW

MultiByteToWideChar

WideCharToMultiByte

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-crt-runtime-l1-1-0

_initterm_e

_initterm

api-ms-win-crt-math-l1-1-0

sqrtf

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.BioEnrollment_cw5n1h2txyewy/Fonts/BioMDL2.ttf

SystemApps/Microsoft.BioEnrollment_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

SystemApps/Microsoft.BioEnrollment_cw5n1h2txyewy/pris/resources.en-US.pri

SystemApps/Microsoft.BioEnrollment_cw5n1h2txyewy/pris/resources.ru-RU.pri

SystemApps/Microsoft.BioEnrollment_cw5n1h2txyewy/resources.pri

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/AppxBlockMap.xml

.xml

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/AppxManifest.xml

.xml

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/AppxSignature.p7x

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Assets/Close.png

.png

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Assets/CursorDot.png

.png

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Assets/DoubleClick.png

.png

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Assets/ECMDL2.ttf

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Assets/IndirectMask.png

.png

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Assets/LeftClick.png

.png

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Assets/RightClick.png

.png

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Assets/Splashscreen.png

.png

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Assets/Square150x150Logo.png

.png

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Assets/Square44x44Logo.png

.png

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Assets/StoreLogo.png

.png

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/GazeInputInternal.dll

.dll windows:10 windows x64 arch:x64

b4d65dc70ba118aa736c9da889247e0d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

GazeInputInternal.pdb

Imports

wincorlib

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

??0Delegate@Platform@@QE$AAA@XZ

??0DisconnectedException@Platform@@QE$AAA@XZ

??0ChangedStateException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?GetHashCode@Object@Platform@@QE$AAAHXZ

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

msvcrt

memcpy

memmove

_XcptFilter

_amsg_exit

free

_initterm

__C_specific_handler

_lock

_unlock

__dllonexit

_onexit

?terminate@@YAXXZ

sqrt

??1exception@@UEAA@XZ

??0exception@@QEAA@AEBV0@@Z

??0exception@@QEAA@AEBQEBDH@Z

??0exception@@QEAA@AEBQEBD@Z

_callnewh

malloc

memset

_CxxThrowException

_purecall

??3@YAXPEAX@Z

__CxxFrameHandler3

?what@exception@@UEBAPEBDXZ

??1type_info@@UEAA@XZ

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-synch-l1-1-0

ReleaseSRWLockExclusive

AcquireSRWLockShared

AcquireSRWLockExclusive

ReleaseSRWLockShared

api-ms-win-core-synch-l1-2-0

Sleep

InitOnceExecuteOnce

SleepConditionVariableSRW

WakeAllConditionVariable

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc

CoCreateFreeThreadedMarshaler

CoTaskMemFree

api-ms-win-core-winrt-string-l1-1-0

WindowsDuplicateString

WindowsDeleteString

WindowsCreateString

WindowsCreateStringReference

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess

GetCurrentProcessId

TerminateProcess

GetCurrentThreadId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

UnhandledExceptionFilter

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/GazeInputInternal.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/GazeInteraction.dll

.dll windows:10 windows x64 arch:x64

a32ef0e0463418d7d0d4d9bc6fedfd2d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

GazeInteraction.pdb

Imports

wincorlib

??0Rect@Foundation@Windows@@QEAA@VPoint@12@VSize@12@@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

??0Delegate@Platform@@QE$AAA@XZ

??0DisconnectedException@Platform@@QE$AAA@XZ

??0ChangedStateException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?Equals@ValueType@Platform@@QE$AAA_NPE$AAVObject@2@@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

msvcrt

??1exception@@UEAA@XZ

?what@exception@@UEBAPEBDXZ

memcpy

memmove

_XcptFilter

_amsg_exit

free

_initterm

__C_specific_handler

_lock

_unlock

__dllonexit

_onexit

sqrt

??1type_info@@UEAA@XZ

??0exception@@QEAA@AEBQEBDH@Z

??0exception@@QEAA@AEBQEBD@Z

_callnewh

malloc

_CxxThrowException

memset

_vsnwprintf

_purecall

??3@YAXPEAX@Z

__CxxFrameHandler3

??0exception@@QEAA@AEBV0@@Z

?terminate@@YAXXZ

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-synch-l1-1-0

AcquireSRWLockExclusive

AcquireSRWLockShared

ReleaseSRWLockExclusive

ReleaseSRWLockShared

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW

WakeAllConditionVariable

InitOnceExecuteOnce

Sleep

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc

CoCreateFreeThreadedMarshaler

CoTaskMemFree

api-ms-win-core-winrt-string-l1-1-0

WindowsDuplicateString

WindowsCreateStringReference

WindowsCreateString

WindowsDeleteString

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId

TerminateProcess

GetCurrentProcess

GetCurrentThreadId

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

SetUnhandledExceptionFilter

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/GazeInteraction.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Microsoft.ECApp.exe

.exe windows:10 windows x64 arch:x64

a6223163dcac1ee9250081e480477543

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Microsoft.ECApp.pdb

Imports

api-ms-win-eventing-provider-l1-1-0

EventSetInformation

EventUnregister

EventRegister

EventWriteTransfer

api-ms-win-core-heap-l1-1-0

HeapFree

GetProcessHeap

HeapAlloc

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW

Sleep

InitOnceExecuteOnce

WakeAllConditionVariable

InitOnceComplete

InitOnceBeginInitialize

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolTimer

CreateThreadpoolTimer

CloseThreadpoolTimer

WaitForThreadpoolTimerCallbacks

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

SetLastError

GetLastError

UnhandledExceptionFilter

api-ms-win-core-libraryloader-l2-1-0

LoadPackagedLibrary

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

GetModuleFileNameA

GetProcAddress

GetModuleHandleW

api-ms-win-core-synch-l1-1-0

InitializeCriticalSection

WaitForSingleObject

SetEvent

InitializeCriticalSectionEx

ReleaseSemaphore

ResetEvent

ReleaseMutex

CreateSemaphoreExW

DeleteCriticalSection

OpenSemaphoreW

EnterCriticalSection

LeaveCriticalSection

AcquireSRWLockExclusive

AcquireSRWLockShared

CreateMutexExW

CreateEventExW

ReleaseSRWLockExclusive

WaitForSingleObjectEx

ReleaseSRWLockShared

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

DebugBreak

IsDebuggerPresent

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

GetStartupInfoW

GetCurrentThreadId

GetCurrentProcess

GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-com-l1-1-0

CoGetApartmentType

CoTaskMemAlloc

CoTaskMemFree

CoMarshalInterThreadInterfaceInStream

CoCreateFreeThreadedMarshaler

CoGetInterfaceAndReleaseStream

CoGetObjectContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTime

GetTickCount

GetSystemTimeAsFileTime

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime

coremessaging

CoreUICreate

coreuicomponents

CoreUIFactoryCreate

ext-ms-win-ntuser-windowstation-l1-1-0

GetThreadDesktop

GetUserObjectInformationW

dxgi

CreateDXGIFactory1

api-ms-win-ntuser-rectangle-l1-1-0

IntersectRect

d3d11

D3D11CreateDevice

api-ms-win-ntuser-sysparams-l1-1-0

SystemParametersInfoW

ntdll

NtQueryInformationProcess

msvcrt

__setusermatherr

_initterm

_acmdln

_fmode

_commode

wcslen

_wsetlocale

__crtLCMapStringW

__crtCompareStringW

_wcsdup

memset

abort

memcmp

___lc_collate_cp_func

calloc

__pctype_func

___lc_codepage_func

___lc_handle_func

___mb_cur_max_func

setlocale

_cexit

memcpy

_CxxThrowException

??0exception@@QEAA@AEBQEBDH@Z

_callnewh

malloc

??1type_info@@UEAA@XZ

realloc

strchr

free

??0bad_cast@@QEAA@PEBD@Z

??0bad_cast@@QEAA@AEBV0@@Z

wcsrchr

??0exception@@QEAA@AEBQEBD@Z

?what@exception@@UEBAPEBDXZ

wcstol

_errno

swprintf_s

_wtoi

wcstod

__ExceptionPtrRethrow

memmove_s

wcsstr

_vsnprintf_s

iswalnum

wcstoul

__ExceptionPtrCreate

__ExceptionPtrCurrentException

__ExceptionPtrCopy

__ExceptionPtrDestroy

??0exception@@QEAA@AEBV0@@Z

??0exception@@QEAA@XZ

??1exception@@UEAA@XZ

_vsnwprintf

iswalpha

memcpy_s

_assert

?terminate@@YAXXZ

_purecall

??3@YAXPEAX@Z

__CxxFrameHandler3

_exit

exit

__set_app_type

__getmainargs

sqrt

_amsg_exit

_XcptFilter

_onexit

__C_specific_handler

__dllonexit

_ismbblead

_unlock

memmove

_lock

??1bad_cast@@UEAA@XZ

wincorlib

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?ToString@float32@default@@QEAAPE$AAVString@Platform@@XZ

?ToString@int32@default@@QEAAPE$AAVString@Platform@@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?ToString@uint32@default@@QEAAPE$AAVString@Platform@@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

??0GridLength@Xaml@UI@Windows@@QEAA@NW4GridUnitType@123@@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?Equals@Object@Platform@@QE$AAA_NPE$AAV12@@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

??0NullReferenceException@Platform@@QE$AAA@XZ

??0NotImplementedException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z

??0Delegate@Platform@@QE$AAA@XZ

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

WideCharToMultiByte

GetStringTypeW

api-ms-win-core-util-l1-1-0

DecodePointer

EncodePointer

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo

RoFailFastWithErrorContext

RoOriginateError

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsDeleteString

WindowsCompareStringOrdinal

WindowsCreateString

WindowsDuplicateString

WindowsGetStringLen

WindowsGetStringRawBuffer

WindowsIsStringEmpty

WindowsCreateStringReference

WindowsConcatString

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 502KB - Virtual size: 502KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/ecsystem.dll

.dll windows:10 windows x64 arch:x64

9bbcbfe77b0edb0c9eee50f2d35ac237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

ecsystem.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_initterm_e

_initterm

api-ms-win-crt-private-l1-1-0

_o___stdio_common_vsnprintf_s

_o___stdio_common_vswprintf

_o__callnewh

_o__cexit

_o__configure_narrow_argv

_o__errno

_o__execute_onexit_table

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__seh_filter_dll

memcpy

_o_free

_o_malloc

__C_specific_handler

_CxxThrowException

_o___std_type_info_destroy_list

_o___std_exception_destroy

_o___std_exception_copy

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

memset

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

DisableThreadLibraryCalls

GetModuleHandleW

GetModuleFileNameA

GetProcAddress

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId

GetCurrentProcessId

TerminateProcess

GetCurrentProcess

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind

RtlCaptureContext

RtlLookupFunctionEntry

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

DebugBreak

OutputDebugStringW

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

SetUnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

ext-ms-win-ntuser-window-l1-1-2

SetCursorPos

ext-ms-win-ntuser-keyboard-l1-1-0

ToUnicodeEx

GetKeyboardLayout

MapVirtualKeyExW

ext-ms-win-ntuser-windowstation-l1-1-0

GetUserObjectInformationW

GetThreadDesktop

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-heap-l1-1-0

HeapAlloc

GetProcessHeap

HeapFree

coremessaging

CoreUICallSend

CoreUICallCreateEndpointHost

CoreUICreate

CoreUICallReceive

ntdll

NtQueryInformationProcess

api-ms-win-security-sddl-l1-1-0

ConvertStringSecurityDescriptorToSecurityDescriptorW

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-heap-l2-1-0

LocalFree

Exports

FocusEC

GetHKL

GetSizeAppliedValue

GetTransparencyAppliedValue

GetWorkspaceSize

PositionMouseCursor

RegisterCallback

RegisterCallbackSizeApplied

RegisterCallbackTransparency

ScancodeToUnicode

SetNoActivate

SetSizeAndPosition

SetTransparent

Show

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/pris/resources.en-US.pri

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/pris/resources.ru-RU.pri

SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/resources.pri

SystemApps/Microsoft.LockApp_cw5n1h2txyewy/AppxBlockMap.xml

.xml

SystemApps/Microsoft.LockApp_cw5n1h2txyewy/AppxManifest.xml

.xml

SystemApps/Microsoft.LockApp_cw5n1h2txyewy/AppxSignature.p7x

SystemApps/Microsoft.LockApp_cw5n1h2txyewy/Assets/BadgeLogo.scale-100.png

.png

SystemApps/Microsoft.LockApp_cw5n1h2txyewy/Assets/LockMDL2.ttf

SystemApps/Microsoft.LockApp_cw5n1h2txyewy/Assets/Logo.scale-100.png

.png

SystemApps/Microsoft.LockApp_cw5n1h2txyewy/Assets/SmallLogo.scale-100.png

.png

SystemApps/Microsoft.LockApp_cw5n1h2txyewy/Assets/SplashScreen.contrast-black_scale-100.png

.png

SystemApps/Microsoft.LockApp_cw5n1h2txyewy/Assets/SplashScreen.contrast-white_scale-100.png

.png

SystemApps/Microsoft.LockApp_cw5n1h2txyewy/Assets/SplashScreen.scale-100.png

.png

SystemApps/Microsoft.LockApp_cw5n1h2txyewy/Assets/StoreLogo.scale-100.png

.png

SystemApps/Microsoft.LockApp_cw5n1h2txyewy/LockApp.exe

.exe windows:10 windows x64 arch:x64

7e7848230e4e8f8756d174d361b452fb

Code Sign

33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:23

Not After

01-09-2022 18:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

d4:6e:d3:dc:68:fb:4f:d3:c2:c8:ca:5c:9e:5b:eb:2e:e0:d0:48:e7:ea:84:8f:1d:83:a1:9e:c4:e9:16:c3:03
Signer

Actual PE Digest

d4:6e:d3:dc:68:fb:4f:d3:c2:c8:ca:5c:9e:5b:eb:2e:e0:d0:48:e7:ea:84:8f:1d:83:a1:9e:c4:e9:16:c3:03

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

lockapp.pdb

Imports

api-ms-win-core-heap-l1-1-0

GetProcessHeap

HeapAlloc

HeapFree

api-ms-win-core-synch-l1-1-0

SetEvent

ReleaseSRWLockShared

WaitForSingleObjectEx

InitializeCriticalSection

AcquireSRWLockExclusive

InitializeCriticalSectionEx

ReleaseSRWLockExclusive

ReleaseMutex

OpenSemaphoreW

AcquireSRWLockShared

LeaveCriticalSection

ReleaseSemaphore

WaitForSingleObject

CreateSemaphoreExW

CreateEventExW

ResetEvent

EnterCriticalSection

CreateEventW

DeleteCriticalSection

CreateMutexExW

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolTimer

CreateThreadpoolTimer

SetThreadpoolWait

WaitForThreadpoolTimerCallbacks

CreateThreadpoolWait

CloseThreadpoolTimer

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

SetLastError

SetUnhandledExceptionFilter

RaiseException

GetLastError

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

OutputDebugStringW

DebugBreak

api-ms-win-core-processthreads-l1-1-0

GetStartupInfoW

GetCurrentThreadId

GetCurrentProcessId

TerminateProcess

GetCurrentProcess

api-ms-win-core-localization-l1-2-0

GetLocaleInfoEx

ResolveLocaleName

GetUserDefaultLocaleName

FormatMessageW

api-ms-win-core-handle-l1-1-0

CloseHandle

DuplicateHandle

api-ms-win-core-featurestaging-l1-1-0

UnsubscribeFeatureStateChangeNotification

RecordFeatureError

SubscribeFeatureStateChangeNotification

GetFeatureEnabledState

RecordFeatureUsage

api-ms-win-core-featurestaging-l1-1-1

GetFeatureVariant

api-ms-win-eventing-provider-l1-1-0

EventUnregister

EventSetInformation

EventRegister

EventWriteTransfer

EventActivityIdControl

api-ms-win-core-string-l1-1-0

GetStringTypeExW

MultiByteToWideChar

GetStringTypeW

WideCharToMultiByte

api-ms-win-core-com-l1-1-0

CoGetInterfaceAndReleaseStream

CoTaskMemAlloc

CoTaskMemFree

CoMarshalInterThreadInterfaceInStream

CoCreateGuid

CoGetApartmentType

CoCreateFreeThreadedMarshaler

CoTaskMemRealloc

CoGetObjectContext

api-ms-win-core-synch-l1-2-0

InitOnceComplete

SleepConditionVariableSRW

InitOnceExecuteOnce

WakeAllConditionVariable

Sleep

InitOnceBeginInitialize

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference

WindowsGetStringRawBuffer

WindowsGetStringLen

WindowsDuplicateString

WindowsDeleteString

WindowsCreateString

WindowsConcatString

WindowsCompareStringOrdinal

WindowsIsStringEmpty

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

RoActivateInstance

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount64

GetVersionExW

GetTickCount

api-ms-win-ntuser-sysparams-l1-1-0

GetSystemMetrics

api-ms-win-core-registry-l1-1-0

RegQueryInfoKeyW

RegOpenKeyExW

RegCloseKey

RegQueryValueExW

RegGetValueW

api-ms-win-core-realtime-l1-1-0

QueryUnbiasedInterruptTime

api-ms-win-core-sysinfo-l1-2-0

GetProductInfo

api-ms-win-core-windowserrorreporting-l1-1-0

WerRegisterMemoryBlock

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress

GetModuleHandleExW

GetModuleHandleW

GetModuleFileNameA

msvcrt

pow

_wsetlocale

__crtLCMapStringW

__crtCompareStringW

_wcsdup

?terminate@@YAXXZ

abort

calloc

_wcsicmp

___lc_codepage_func

___lc_handle_func

___mb_cur_max_func

setlocale

_callnewh

malloc

memmove

memcpy

??0exception@@QEAA@AEBQEBDH@Z

_CxxThrowException

wcslen

memset

_set_errno

__ExceptionPtrCreate

_get_errno

_commode

memcmp

__ExceptionPtrCurrentException

__ExceptionPtrRethrow

__ExceptionPtrCopy

___lc_collate_cp_func

__ExceptionPtrDestroy

??0exception@@QEAA@XZ

_fmode

??1exception@@UEAA@XZ

??0exception@@QEAA@AEBV0@@Z

_purecall

memmove_s

??3@YAXPEAX@Z

time

_initterm

__setusermatherr

_ismbblead

_cexit

_exit

exit

__set_app_type

__getmainargs

_amsg_exit

_XcptFilter

??1type_info@@UEAA@XZ

_onexit

__C_specific_handler

__dllonexit

_unlock

_lock

strchr

free

??0bad_cast@@QEAA@PEBD@Z

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@AEBV0@@Z

wcsrchr

wcsstr

_wtof

_wcstoui64

_vsnwprintf

memcpy_s

wcschr

wcstol

_errno

??0exception@@QEAA@AEBQEBD@Z

?what@exception@@UEBAPEBDXZ

_vsnprintf_s

__pctype_func

difftime

__CxxFrameHandler3

_acmdln

realloc

wincorlib

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?__abi_FailFast@@YAXXZ

?UninitializeData@Details@Platform@@YAXH@Z

?InitializeData@Details@Platform@@YAJH@Z

??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z

?Equals@Object@Platform@@QE$AAA_NPE$AAV12@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?GetType@Object@Platform@@QE$AAAPE$AAVType@2@XZ

?Equals@ValueType@Platform@@QE$AAA_NPE$AAVObject@2@@Z

?GetHashCode@Object@Platform@@QE$AAAHXZ

??0Exception@Platform@@QE$AAA@HPE$AAVString@1@@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?ToString@int32@default@@QEAAPE$AAVString@Platform@@XZ

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?ToString@Guid@Platform@@QEAAPE$AAVString@2@XZ

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

?Allocate@Heap@Details@Platform@@SAPEAX_K@Z

??0Delegate@Platform@@QE$AAA@XZ

??0ChangedStateException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?__abi_WinRTraiseInvalidCastException@@YAXXZ

shcore

ord190

policymanager

PolicyManager_GetPolicyInt

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo

RoOriginateError

RoFailFastWithErrorContext

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind

RtlCaptureContext

RtlLookupFunctionEntry

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-util-l1-1-0

DecodePointer

EncodePointer

api-ms-win-security-base-l1-1-0

GetTokenInformation

api-ms-win-security-sddl-l1-1-0

ConvertSidToStringSidW

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-stateseparation-helpers-l1-1-0

GetPersistedRegistryLocationW

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 210KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.LockApp_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

SystemApps/Microsoft.LockApp_cw5n1h2txyewy/pris/resources.en-US.pri

SystemApps/Microsoft.LockApp_cw5n1h2txyewy/pris/resources.ru-RU.pri

SystemApps/Microsoft.LockApp_cw5n1h2txyewy/resources.pri

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/DataCategoryStyles.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/VisualProfiler.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/VisualProfiler.f12.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/VisualProfiler.html

.html

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/images/i_chartselection_clear.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/images/i_chartselection_clear_disabled.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/images/i_chartzoom_in.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/images/i_chartzoom_in_disabled.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/images/i_chartzoom_reset.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/images/i_chartzoom_reset_disabled.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/images/i_f12_chartselection_clear.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/images/i_f12_chartzoom_in.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/images/i_f12_chartzoom_reset.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/images/i_f12_context_chartselection_clear.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/images/i_f12_context_chartselection_clear_disabled.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/images/i_f12_context_chartzoom_in.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/images/i_f12_context_chartzoom_in_disabled.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/images/i_f12_context_chartzoom_reset.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/images/i_f12_context_chartzoom_reset_disabled.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/images/i_frame_grouping.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/js/CpuUsage/CpuUsageTreeGrid.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/js/CpuUsage/Grid.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/js/CpuUsage/MessageOverlayControl.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/js/controls/Divider.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/js/hubGraphs/StackedBarChart.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/VisualProfiler/visualProfiler.bundle.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/CommonMerged.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/CssUtilities.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/CutCopyPasteContextMenu.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/DomMutations/dmbp.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/DomMutations/images/domDeleteAllBreakpoints.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/DomMutations/images/domSelectAllBreakpoints.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/EncodingUtilities.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/Base64.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/Css/CssEmitter.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/Css/CssFormatWorker.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/Css/CssFormatter.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/Css/CssParser.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/FormattedTextMapping.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/Formatter.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/FormatterOptions.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/Html/HtmlEmitter.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/Html/HtmlFormatWorker.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/Html/HtmlFormatter.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/Html/HtmlParser.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/Html/HtmlTokenizer.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/IFormatService.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/SourceMapParserWorker.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/StateMachine.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/UnmappedTextMapping.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/formatWorker.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/htmlScriptFinder.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/position.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/sourceSpan.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/sourceSpanBuilder.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/sourcemapMappings.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/sourcemapParser.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/typescript/formatterTypescriptServices.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/typescript/formatterTypescriptServices.nls.keys.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Formatter/workerMessaging.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Grid/commonGridControl.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Grid/gridCellEditControl.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Grid/gridControl.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Intellisense/intellisenseListBox.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Intellisense/intellisenseRemoteHelpers.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/MediaTypeManager.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/ModelView/expandingListView.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/ObjectView/objectTreeView.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Remote/RemoteDiagnostics.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Remote/etw.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/Remote/rpc.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/ResourcesView/resourcesView.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/SlickGrid/plugins/slick.rowselectionmodel.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/SlickGrid/slick.core.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/SlickGrid/slick.dataview.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/SlickGrid/slick.editors.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/SlickGrid/slick.formatters.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/SlickGrid/slick.grid.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/SlickGrid/slick.grid.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/TabControl/sharedTabControl.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/assert.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/button.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/common.bundle.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/common.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/controls/ListControl/ListControl.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/controls/controls.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/dataTreeView.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/daytonaOptOut.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/editor/editor.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/editor/editorDefinitions.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/editor/f12Nls.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/external/JSTreeGridControl.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/htmlTreeView.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/F12Logo.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/add_row.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/checkmark.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/colorPicker/alphaColorBar.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/colorPicker/checkeredBackground.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/colorPicker/hueColorBar.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/colorPicker/lightnessColorBar.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/colorPicker/saturationColorBar.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/colorPicker/sliderButton.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/columnmove.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/common_icons.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/commonclose.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/commonhelp.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/critical.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/debuggerNextTab.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/debuggerPrevTab.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/diffIcon.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/filepicker.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/forceStorageCapState.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/i_delete.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/i_filtering_options.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/i_next.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/i_previous.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/i_warning.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/itemCollapsedIcon.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/itemExpandedIcon.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/maximize.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/minimize.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/misc_icons.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/options.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/previewTabClose.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/previewTabIcon.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/refresh.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/refreshState.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/restore.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/tabclose.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/togglePrettyPrint.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/toggleWordWrap.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/images/tree_icons.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/isDebugBuild.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/jQuery/jquery-2.1.1.min.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/jQuery/jquery.event.drag-2.2.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/listBox.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/messageThrottle.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/monaco-editor/min/vs/base/worker/workerMain.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/monaco-editor/min/vs/basic-languages/src/coffee.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/monaco-editor/min/vs/basic-languages/src/csharp.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/monaco-editor/min/vs/basic-languages/src/css.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/monaco-editor/min/vs/basic-languages/src/html.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/monaco-editor/min/vs/basic-languages/src/less.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/monaco-editor/min/vs/basic-languages/src/scss.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/monaco-editor/min/vs/basic-languages/src/xml.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/monaco-editor/min/vs/editor/editor.main.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/monaco-editor/min/vs/editor/editor.main.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/monaco-editor/min/vs/editor/editor.main.nls.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/monaco-editor/min/vs/language/css/cssMode.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/monaco-editor/min/vs/language/css/cssWorker.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/monaco-editor/min/vs/language/html/htmlMode.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/monaco-editor/min/vs/language/html/htmlWorker.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/monaco-editor/min/vs/language/json/jsonMode.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/monaco-editor/min/vs/language/json/jsonWorker.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/monaco-editor/min/vs/language/typescript/lib/typescriptServices.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/monaco-editor/min/vs/language/typescript/src/mode.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/monaco-editor/min/vs/language/typescript/src/worker.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/monaco-editor/min/vs/loader.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/monacoResolver.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/PerfRemoteHelpers.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/TokenExtractor.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/common.f12.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/commonPlugin.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/controls/MultiLineGraph.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/controls/Renderer.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/controls/Ruler.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/controls/Scrollbar.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/controls/Swimlane.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/controls/gridControl.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/controls/hubControls.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/controls/menuControl.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/images/CustomMark5_18x.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/images/i_appevent.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/images/i_checkered_background.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/images/i_open.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/images/i_save.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/images/i_sort_down.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/images/i_sort_up.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/images/i_start.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/images/i_stop.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/images/i_usermark.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/remoteEditStack.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/remoteHelpers.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/toolwindow.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/toolwindow.f12.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/trace.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/uri.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/console/console.html

.html

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/console/global.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Breakpoints/breakpoints.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Breakpoints/images/addEventBreakpoint.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Breakpoints/images/addEventTracepoint.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Breakpoints/images/addXHRBreakpoint.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Breakpoints/images/breakpointDisabled.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Breakpoints/images/breakpointGlyph.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Breakpoints/images/breakpointUnbound.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Breakpoints/images/conditionalBreakpoint.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Breakpoints/images/deleteAllBreakpoints.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Breakpoints/images/editCurrentBreakpoint.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Breakpoints/images/eventBreakpoint.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Breakpoints/images/eventBreakpointConditional.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Breakpoints/images/eventBreakpointDisabled.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Breakpoints/images/eventBreakpointUnbound.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Breakpoints/images/eventTracepoint.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Breakpoints/images/eventTracepointDisabled.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Breakpoints/images/eventTracepointUnbound.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Breakpoints/images/selectAllBreakpoints.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Breakpoints/images/tracepointBreakpoint.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Breakpoints/images/xhrBreakpoint.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Breakpoints/images/xhrBreakpointDisabled.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Breakpoints/images/xhrBreakpointUnbound.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Callstack/images/activeFrameGlyph.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Callstack/images/instructionPointerGlyph.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Cursor/images/currentLocationArrow.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/LanguageService/images/clearResults.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/LanguageService/images/debuggerclose.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/LanguageService/images/findResults.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/LanguageService/images/nextResult.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/LanguageService/images/pin.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/LanguageService/images/previousResult.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/LanguageService/images/unpin.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Remote/debuggerDiagRemote.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Remote/debuggerRemote.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Watches/images/addWatch.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Watches/images/deleteAll.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/Watches/watches.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/debugger.bundle.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/debugger.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/debugger.html

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/breakAll.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/breakOnExceptions.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/breakWorker.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/contentScriptEngineIcon.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/continue.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/copyToClipboard.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/cssfileicon.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/diffTabIcon.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/disconnectIcon.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/filesnodeicon.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/functionIcon.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/functionIconMapped.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/htmlfileicon.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/libraryCodeIcon.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/notAFunctionIcon.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/notAFunctionIconMapped.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/redirectIcon.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/returnValue.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/saveicon.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/scriptfileicon.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/search.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/stepInto.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/stepOut.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/stepOver.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/toggleSourceMap.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/toolbarMyCodeIcon.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/debugger/images/tsfileicon.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/DomExplorerMerged.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/DomExplorerRemote.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/DomTree/domTree.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/Styles/ChangesView/changesView.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/Styles/StyleView/styleView.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/Styles/WinningView/winningStyles.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/dom.html

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/domExplorer.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/domExplorer.f12.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/events.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/images/AddNewRuleIcon.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/images/BreadcrumbScrollLeft.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/images/BreadcrumbScrollLeftHover.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/images/BreadcrumbScrollRight.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/images/BreadcrumbScrollRightHover.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/images/EventsCollapseAll.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/images/accessibility.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/images/checkered_background.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/images/i_error.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/images/i_inspect.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/images/i_just_my_code.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/images/i_refresh.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/images/i_show_layout.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/images/i_show_pseudo_classes.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/images/red_squiggly.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/inspect.html

.html .js polyglot

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/dom/layout.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/emulation/emulation.bundle.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/emulation/emulation.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/emulation/emulation.html

.html

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/emulation/i_persistSettings.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/emulation/i_resetSettings.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/emulation/infoButton.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/emulation/remote/emulationRemote.bundle.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/f12host/f12host.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/f12host/f12host.html

.html

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/f12host/f12host.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/f12host/pluginHostShim.bundle.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/f12host/popupWindow.bundle.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/f12host/uwp.bundle.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/frontend/console.bundle.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/frontend/host/api/data/closeErrorBox.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/frontend/host/api/data/f12.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/frontend/host/api/data/helpErrorBox.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/frontend/host/api/data/i_alerterror.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/frontend/host/api/data/i_alertinfo.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/frontend/host/api/data/plugin.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/HeaderMerged.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/NavOverFlow_Break.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/NavOverFlow_Info.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/NavOverFlow_Start.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/NavOverFlow_Warning.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/badgeAlert.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/badgeBreak.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/badgeInfo.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/badgeRunning.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/console.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/dockH.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/dockV.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/emulation.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/emulationCombo.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/feedback.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/foreground.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/headerBadgeError.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/headercheckmark.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/headerclose.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/headerhelp.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/headermaximize.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/headerminimize.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/headerrestore.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/nextTab.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/overflow.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/prevTab.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Images/undock.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/Remote/headerRemote.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/header.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/header/header.html

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/memoryAnalyzer/images/i_foldin.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/memoryAnalyzer/images/i_info.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/memoryAnalyzer/images/i_snapshot.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/memoryAnalyzer/images/i_table_options.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/memoryAnalyzer/images/status_heap_decrease.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/memoryAnalyzer/images/status_heap_increase.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/memoryAnalyzer/images/takeSnapshot.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/memoryAnalyzer/memoryAnalyzer.bundle.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/memoryAnalyzer/memoryAnalyzer.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/memoryAnalyzer/memoryAnalyzer.f12.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/memoryAnalyzer/memoryAnalyzer.html

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/memoryAnalyzer/memoryAnalyzerRemote.bundle.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/memoryAnalyzer/snapshotTileView.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/memoryAnalyzer/tabControl.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/network/Images/NetworkStatus-Error.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/network/Images/NetworkStatus-OK.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/network/Images/NetworkStatus-Warning.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/network/Images/i_bypassServiceWorkers.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/network/Images/i_clearCache.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/network/Images/i_clearCookies.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/network/Images/i_clearOnNavigate.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/network/Images/i_clearSession.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/network/Images/i_refreshServer.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/network/Images/networkBadgeError.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/network/network.bundle.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/network/network.html

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/network/remote/networkRemote.bundle.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/network/remote/networkRemoteHelpers.bundle.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/network/styles/network.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/network/styles/networkGrid.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/network/styles/networkRuler.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/popup/popup.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/popup/popup.html

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/remote/console/console.remote.bundle.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/serviceworker/images/serviceworkericon.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/serviceworker/remote/serviceworkerRemote.bundle.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/serviceworker/serviceworker.bundle.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/serviceworker/serviceworker.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/serviceworker/serviceworker.html

.html

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/storage/images/cacheIcon.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/storage/images/clearCookies.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/storage/images/clearSessionCookies.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/storage/images/cookies.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/storage/images/gridHeaderHttpOnly.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/storage/images/gridHeaderSecure.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/storage/images/localStorage.png

.png

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/storage/remote/storageRemote.bundle.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/storage/storage.bundle.js

.js

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/storage/storage.css

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/storage/storage.html

.html

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/AppxBlockMap.xml

.xml

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/AppxManifest.xml

.xml

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/AppxSignature.p7x

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/pris/resources.en-US.pri

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/pris/resources.ru-RU.pri

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/resources.pri

SystemApps/Microsoft.MicrosoftEdge_8wekyb3d8bbwe/AppxBlockMap.xml

.xml

SystemApps/Microsoft.MicrosoftEdge_8wekyb3d8bbwe/AppxManifest.xml

.xml

SystemApps/Microsoft.MicrosoftEdge_8wekyb3d8bbwe/AppxSignature.p7x

SystemApps/Microsoft.MicrosoftEdge_8wekyb3d8bbwe/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

SystemApps/Microsoft.MicrosoftEdge_8wekyb3d8bbwe/resources.pri

SystemApps/Microsoft.Win32WebViewHost_cw5n1h2txyewy/AppxBlockMap.xml

.xml

SystemApps/Microsoft.Win32WebViewHost_cw5n1h2txyewy/AppxManifest.xml

.xml

SystemApps/Microsoft.Win32WebViewHost_cw5n1h2txyewy/AppxSignature.p7x

SystemApps/Microsoft.Win32WebViewHost_cw5n1h2txyewy/Assets/solidsquare.png

.png

SystemApps/Microsoft.Win32WebViewHost_cw5n1h2txyewy/Win32WebViewHost.exe

.exe windows:10 windows x64 arch:x64

ffd4cde8e7a048a780931445be622364

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Win32WebViewHost.pdb

Imports

msvcrt

_exit

exit

_vsnwprintf

_cexit

__set_app_type

_callnewh

__setusermatherr

_amsg_exit

_initterm

__C_specific_handler

_fmode

_commode

_lock

memcpy

wcschr

memcpy_s

_XcptFilter

free

_unlock

__dllonexit

_onexit

__getmainargs

__CxxFrameHandler3

malloc

?terminate@@YAXXZ

memset

_purecall

wcscmp

edgemanager

CreateCoreWebViewHostProcess

CreateWebViewControlMoveFocusRequestedEventArgs

CreateWebViewControlAcceleratorKeyPressedEventArgs

CreateCoreWebViewOOP

api-ms-win-core-com-l1-1-0

CoTaskMemFree

CoGetInterfaceAndReleaseStream

CoReleaseMarshalData

CoTaskMemAlloc

CoDecrementMTAUsage

CoIncrementMTAUsage

CoCreateFreeThreadedMarshaler

CoCreateInstance

CreateStreamOnHGlobal

CoMarshalInterface

api-ms-win-core-com-l1-1-1

RoGetAgileReference

api-ms-win-core-winrt-l1-1-0

RoInitialize

RoActivateInstance

RoGetActivationFactory

RoUninitialize

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString

WindowsCreateStringReference

WindowsGetStringRawBuffer

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress

FreeLibrary

GetModuleHandleExW

GetModuleFileNameA

GetModuleHandleW

api-ms-win-core-synch-l1-1-0

ReleaseMutex

WaitForSingleObject

CreateMutexExW

ReleaseSemaphore

ReleaseSRWLockShared

OpenSemaphoreW

AcquireSRWLockExclusive

AcquireSRWLockShared

InitializeSRWLock

ReleaseSRWLockExclusive

CreateSemaphoreExW

WaitForSingleObjectEx

api-ms-win-core-heap-l1-1-0

HeapAlloc

GetProcessHeap

HeapFree

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RaiseException

SetLastError

GetLastError

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess

TerminateProcess

GetCurrentProcessId

OpenProcessToken

GetCurrentThreadId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

DebugBreak

OutputDebugStringW

IsDebuggerPresent

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

SetRestrictedErrorInfo

RoOriginateErrorW

RoTransformError

GetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

IsErrorPropagationEnabled

RoReportFailedDelegate

RoGetMatchingRestrictedErrorInfo

api-ms-win-core-processenvironment-l1-1-0

GetEnvironmentVariableW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll

WaitOnAddress

Sleep

InitOnceExecuteOnce

oleaut32

SysFreeString

SafeArrayCreateVector

SafeArrayPutElement

SysAllocString

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolWork

SubmitThreadpoolWork

FreeLibraryWhenCallbackReturns

CreateThreadpoolWork

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-security-base-l1-1-0

GetTokenInformation

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind

RtlCaptureContext

RtlLookupFunctionEntry

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount

api-ms-win-shcore-taskpool-l1-1-0

SHTaskPoolQueueTask

SHTaskPoolAllowThreadReuse

ext-ms-win-uiacore-l1-1-1

UiaRaiseStructureChangedEvent

UiaRaiseAutomationPropertyChangedEvent

UiaDisconnectProvider

api-ms-win-rtcore-ntuser-window-l1-1-0

GetWindowRect

ntdll

RtlInitUnicodeString

RtlFreeHeap

RtlAllocateHeap

RtlNtStatusToDosErrorNoTeb

RtlCompareUnicodeString

NtQueryInformationToken

ext-ms-win-rtcore-ntuser-dpi-l1-2-0

SetThreadDpiAwarenessContext

GetThreadDpiAwarenessContext

GetDpiForSystem

GetAwarenessFromDpiAwarenessContext

dcomp

ord1038

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Win32WebViewHost_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

SystemApps/Microsoft.Win32WebViewHost_cw5n1h2txyewy/pris/resources.en-US.pri

SystemApps/Microsoft.Win32WebViewHost_cw5n1h2txyewy/pris/resources.ru-RU.pri

SystemApps/Microsoft.Win32WebViewHost_cw5n1h2txyewy/resources.pri

SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/AddSuggestedFoldersToLibraryDialog.exe

.exe windows:10 windows x64 arch:x64

f0afe50a912a0e5b660fae4c50bd403b

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:30

Not After

03-03-2021 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

9a:3d:68:f4:0d:83:0c:09:cb:b3:22:52:41:d2:e7:6c:39:2a:53:28:0b:b1:69:9b:15:cf:d6:09:45:f8:c8:97
Signer

Actual PE Digest

9a:3d:68:f4:0d:83:0c:09:cb:b3:22:52:41:d2:e7:6c:39:2a:53:28:0b:b1:69:9b:15:cf:d6:09:45:f8:c8:97

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

AddSuggestedFoldersToLibraryDialog.pdb

Imports

api-ms-win-eventing-provider-l1-1-0

EventSetInformation

EventUnregister

EventRegister

EventWriteTransfer

EventActivityIdControl

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId

GetCurrentProcess

GetCurrentThreadId

TerminateProcess

GetStartupInfoW

api-ms-win-core-heap-l1-1-0

GetProcessHeap

HeapFree

HeapAlloc

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW

GetModuleFileNameA

GetProcAddress

GetModuleHandleExW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

IsDebuggerPresent

DebugBreak

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

GetLastError

SetLastError

SetUnhandledExceptionFilter

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-synch-l1-1-0

CreateEventExW

ReleaseSRWLockShared

EnterCriticalSection

DeleteCriticalSection

InitializeCriticalSection

LeaveCriticalSection

CreateSemaphoreExW

ReleaseSRWLockExclusive

CreateMutexExW

OpenSemaphoreW

WaitForSingleObject

AcquireSRWLockExclusive

WaitForSingleObjectEx

ReleaseMutex

ReleaseSemaphore

AcquireSRWLockShared

SetEvent

ResetEvent

InitializeCriticalSectionEx

api-ms-win-core-synch-l1-2-0

InitOnceComplete

Sleep

InitOnceBeginInitialize

InitOnceExecuteOnce

api-ms-win-core-com-l1-1-0

CoGetApartmentType

CoGetInterfaceAndReleaseStream

CoMarshalInterThreadInterfaceInStream

CoTaskMemAlloc

CoGetObjectContext

CoCreateFreeThreadedMarshaler

CoTaskMemFree

ext-ms-win-shell32-shellfolders-l1-1-0

SHGetKnownFolderPath

api-ms-win-core-string-l1-1-0

CompareStringOrdinal

MultiByteToWideChar

WideCharToMultiByte

GetStringTypeW

api-ms-win-core-registry-l1-1-0

RegQueryInfoKeyW

RegQueryValueExW

RegOpenKeyExW

RegEnumKeyExW

RegCloseKey

wincorlib

?__abi_WinRTraiseCOMException@@YAXJ@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z

?Equals@Object@Platform@@QE$AAA_NPE$AAV12@@Z

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

??0Delegate@Platform@@QE$AAA@XZ

??0NotImplementedException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

??0Object@Platform@@QE$AAA@XZ

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

msvcrt

memcpy

memmove

setlocale

___lc_handle_func

___lc_codepage_func

__pctype_func

calloc

___lc_collate_cp_func

abort

__CxxFrameHandler3

_vsnwprintf

memcpy_s

_vsnprintf_s

??0exception@@QEAA@XZ

??1exception@@UEAA@XZ

??3@YAXPEAX@Z

wcsstr

??0exception@@QEAA@AEBV0@@Z

_purecall

??_U@YAPEAX_K@Z

??_V@YAXPEAX@Z

__ExceptionPtrDestroy

__ExceptionPtrCopy

__ExceptionPtrRethrow

__ExceptionPtrCurrentException

__ExceptionPtrCreate

?terminate@@YAXXZ

_errno

wcstol

?what@exception@@UEBAPEBDXZ

??0exception@@QEAA@AEBQEBD@Z

wcsrchr

??0bad_cast@@QEAA@AEBV0@@Z

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@PEBD@Z

free

strchr

realloc

memset

wcslen

_CxxThrowException

??1type_info@@UEAA@XZ

_callnewh

_unlock

__dllonexit

__C_specific_handler

_onexit

_XcptFilter

_amsg_exit

__getmainargs

__set_app_type

exit

_exit

_cexit

_ismbblead

__setusermatherr

_initterm

_acmdln

_fmode

_commode

_wcsdup

__crtCompareStringW

__crtLCMapStringW

_wsetlocale

??0exception@@QEAA@AEBQEBDH@Z

_lock

malloc

___mb_cur_max_func

ntdll

RtlLookupFunctionEntry

RtlCaptureContext

RtlVirtualUnwind

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext

SetRestrictedErrorInfo

RoOriginateError

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsCompareStringOrdinal

WindowsConcatString

WindowsCreateString

WindowsCreateStringReference

WindowsDeleteString

WindowsIsStringEmpty

WindowsGetStringLen

WindowsDuplicateString

WindowsGetStringRawBuffer

api-ms-win-core-util-l1-1-0

DecodePointer

EncodePointer

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

Sections

.text
Size: 441KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/AppxBlockMap.xml

.xml

SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/AppxManifest.xml

.xml

SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/AppxSignature.p7x

SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/Assets/LockScreenLogo.scale-200.png

.png

SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/Assets/SplashScreen.scale-200.png

.png

SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/Assets/Square150x150Logo.scale-200.png

.png

SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/Assets/Square44x44Logo.scale-200.png

.png

SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-24_altform-unplated.png

.png

SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/Assets/StoreLogo.png

.png

SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/Assets/Wide310x150Logo.scale-200.png

.png

SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/pris/resources.en-US.pri

SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/pris/resources.ru-RU.pri

SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/resources.pri

SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/App.xbf

SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/AppxBlockMap.xml

.xml

SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/AppxSignature.p7x

SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/Assets/Logo.scale-100.png

.png

SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/Assets/SmallLogo.scale-100.png

.png

SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/Assets/Splashscreen.scale-100.png

.png

SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/Assets/StoreLogo.scale-100.png

.png

SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/Assets/baseTemplate.html

.js

SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/Assets/templateStyle.css

SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/CHXSmartScreen.exe

.exe windows:10 windows x64 arch:x64

2d98333547d6bf163598ca465bba8134

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:30

Not After

03-03-2021 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

8b:7d:a7:43:6b:88:32:30:6f:b4:51:61:4f:be:16:f4:2e:97:e3:ce:e7:bf:ba:36:e5:23:a0:09:d7:32:49:08
Signer

Actual PE Digest

8b:7d:a7:43:6b:88:32:30:6f:b4:51:61:4f:be:16:f4:2e:97:e3:ce:e7:bf:ba:36:e5:23:a0:09:d7:32:49:08

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

CHXSmartScreen.pdb

Imports

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer

EventUnregister

EventSetInformation

EventRegister

api-ms-win-core-synch-l1-1-0

ReleaseSRWLockShared

SetEvent

InitializeCriticalSectionEx

AcquireSRWLockExclusive

ResetEvent

AcquireSRWLockShared

ReleaseSRWLockExclusive

InitializeCriticalSection

DeleteCriticalSection

EnterCriticalSection

LeaveCriticalSection

CreateEventExA

WaitForSingleObjectEx

api-ms-win-core-com-l1-1-0

CoGetObjectContext

CoGetApartmentType

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

GetCurrentProcessId

GetCurrentProcess

GetCurrentThreadId

GetStartupInfoW

api-ms-win-core-handle-l1-1-0

CloseHandle

wincorlib

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?UninitializeData@Details@Platform@@YAXH@Z

?__abi_FailFast@@YAXXZ

?InitializeData@Details@Platform@@YAJH@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

?ToString@Enum@Platform@@QE$AAAPE$AAVString@2@XZ

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

??0Delegate@Platform@@QE$AAA@XZ

??0DisconnectedException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

msvcrt

_commode

_fmode

_acmdln

__setusermatherr

_cexit

_exit

exit

__CxxFrameHandler3

_purecall

??3@YAXPEAX@Z

??0exception@@QEAA@AEBV0@@Z

?what@exception@@UEBAPEBDXZ

??1exception@@UEAA@XZ

??0exception@@QEAA@AEBQEBD@Z

sprintf_s

??0bad_cast@@QEAA@AEBV0@@Z

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@PEBD@Z

free

??_V@YAXPEAX@Z

localeconv

strcspn

??0exception@@QEAA@XZ

__ExceptionPtrDestroy

__ExceptionPtrCopy

__ExceptionPtrRethrow

__ExceptionPtrCurrentException

__ExceptionPtrCreate

?terminate@@YAXXZ

wcsrchr

_errno

_CxxThrowException

memcpy

memmove

??0exception@@QEAA@AEBQEBDH@Z

malloc

_callnewh

__uncaught_exception

setlocale

_lock

_unlock

___mb_cur_max_func

___lc_handle_func

___lc_codepage_func

_ismbblead

__pctype_func

calloc

abort

memset

_wcsdup

__crtLCMapStringW

_wsetlocale

wcslen

??1type_info@@UEAA@XZ

__dllonexit

__C_specific_handler

_onexit

_XcptFilter

_amsg_exit

_initterm

__getmainargs

__set_app_type

pow

ole32

CoCreateFreeThreadedMarshaler

CoTaskMemAlloc

CoTaskMemFree

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext

RoOriginateError

SetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsConcatString

WindowsCompareStringOrdinal

WindowsIsStringEmpty

WindowsCreateString

WindowsGetStringRawBuffer

WindowsDuplicateString

WindowsDeleteString

WindowsCreateStringReference

api-ms-win-core-string-l1-1-0

GetStringTypeW

WideCharToMultiByte

MultiByteToWideChar

api-ms-win-core-util-l1-1-0

EncodePointer

DecodePointer

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

Sleep

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlVirtualUnwind

RtlLookupFunctionEntry

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

UnhandledExceptionFilter

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW

Exports

DllCanUnloadNow

DllGetActivationFactory

VSDesignerDllMain

Sections

.text
Size: 202KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/MainPage.xbf

SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/appxmanifest.xml

.xml

SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/pris/resources.en-US.pri

SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/pris/resources.ru-RU.pri

SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/resources.pri

SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/AppResolverUX.exe

.exe windows:10 windows x64 arch:x64

02520f7949c2457aa776745e981b4245

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:30

Not After

03-03-2021 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

16:11:1d:30:dd:50:0d:10:8b:83:7d:86:2e:66:6b:d2:39:96:4b:57:a0:b1:fe:a3:cd:25:f9:13:e8:f1:52:60
Signer

Actual PE Digest

16:11:1d:30:dd:50:0d:10:8b:83:7d:86:2e:66:6b:d2:39:96:4b:57:a0:b1:fe:a3:cd:25:f9:13:e8:f1:52:60

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

AppResolverUX.pdb

Imports

api-ms-win-eventing-provider-l1-1-0

EventSetInformation

EventUnregister

EventWriteTransfer

EventRegister

EventProviderEnabled

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

IsDebuggerPresent

DebugBreak

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess

GetStartupInfoW

GetCurrentThreadId

TerminateProcess

GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler

CoGetContextToken

CoTaskMemAlloc

CoTaskMemFree

api-ms-win-core-errorhandling-l1-1-0

SetLastError

UnhandledExceptionFilter

GetLastError

SetUnhandledExceptionFilter

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference

WindowsDuplicateString

WindowsGetStringLen

WindowsIsStringEmpty

WindowsCreateString

WindowsConcatString

WindowsGetStringRawBuffer

WindowsDeleteString

WindowsCompareStringOrdinal

api-ms-win-core-string-l1-1-0

CompareStringEx

CompareStringOrdinal

api-ms-win-core-sysinfo-l1-2-0

GetProductInfo

ntdll

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

RtlGetDeviceFamilyInfoEnum

api-ms-win-core-synch-l1-2-0

InitOnceComplete

InitOnceExecuteOnce

Sleep

InitOnceBeginInitialize

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

GetModuleFileNameA

GetModuleHandleW

GetProcAddress

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolTimer

CreateThreadpoolTimer

WaitForThreadpoolTimerCallbacks

SetThreadpoolTimer

api-ms-win-core-synch-l1-1-0

LeaveCriticalSection

EnterCriticalSection

InitializeCriticalSectionEx

CreateMutexExW

AcquireSRWLockExclusive

InitializeCriticalSection

CreateEventW

ResetEvent

DeleteCriticalSection

ReleaseMutex

AcquireSRWLockShared

SetEvent

InitializeCriticalSectionAndSpinCount

OpenSemaphoreW

ReleaseSemaphore

ReleaseSRWLockExclusive

WaitForSingleObject

ReleaseSRWLockShared

CreateSemaphoreExW

WaitForSingleObjectEx

api-ms-win-core-heap-l1-1-0

HeapAlloc

HeapFree

GetProcessHeap

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-crt-private-l1-1-0

_o__callnewh

_o__cexit

_o__configthreadlocale

_o__configure_narrow_argv

_o__crt_atexit

_o__errno

_o__exit

_o__get_narrow_winmain_command_line

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__register_onexit_function

_o__seh_filter_exe

_o__set_app_type

_o__set_fmode

_o__set_new_mode

memmove

_o_exit

_o_free

_o_malloc

_o_terminate

_o_toupper

_o_wcsncpy_s

__CxxFrameHandler4

__std_terminate

wcsstr

wcsrchr

_o___p__commode

_o___stdio_common_vswprintf

__C_specific_handler

__CxxFrameHandler3

_CxxThrowException

memcmp

_o___stdio_common_vsnprintf_s

_o___std_exception_destroy

_o___std_exception_copy

memcpy

_o__purecall

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback

_c_exit

_initterm_e

_initterm

msvcp_win

?_Xlength_error@std@@YAXPEBD@Z

?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ

?_XGetLastError@std@@YAXXZ

?__ExceptionPtrDestroy@@YAXPEAX@Z

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

?__ExceptionPtrRethrow@@YAXPEBX@Z

?__ExceptionPtrToBool@@YA_NPEBX@Z

?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z

?__ExceptionPtrCurrentException@@YAXPEAX@Z

?__ExceptionPtrCreate@@YAXPEAX@Z

?__ExceptionPtrAssign@@YAXPEAXPEBX@Z

_Mtx_unlock

?_Throw_C_error@std@@YAXH@Z

_Mtx_lock

?_ReportUnobservedException@details@Concurrency@@YAXXZ

?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ

?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z

?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z

?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z

?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ

?_Xbad_function_call@std@@YAXXZ

?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z

_Cnd_broadcast

?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z

?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ

_Mtx_destroy_in_situ

_Cnd_destroy_in_situ

_Mtx_init_in_situ

_Cnd_init_in_situ

?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ

_Cnd_wait

?_IsNonBlockingThread@_Task_impl_base@details@Concurrency@@SA_NXZ

?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z

?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ

?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

wincorlib

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?__abi_FailFast@@YAXXZ

?UninitializeData@Details@Platform@@YAXH@Z

?InitializeData@Details@Platform@@YAJH@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?Equals@Object@Platform@@QE$AAA_NPE$AAV12@@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

??0ChangedStateException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0GridLength@Xaml@UI@Windows@@QEAA@NW4GridUnitType@123@@Z

?GetType@Object@Platform@@QE$AAAPE$AAVType@2@XZ

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ

?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z

?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z

??0Delegate@Platform@@QE$AAA@XZ

??0DisconnectedException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo

RoFailFastWithErrorContext

RoOriginateError

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-heap-l2-1-0

LocalAlloc

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-crt-string-l1-1-0

wcslen

memset

Sections

.text
Size: 332KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/AppxBlockMap.xml

.xml

SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/AppxManifest.xml

.xml

SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/AppxSignature.p7x

SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/Assets/SquareTile150x150.scale-100.png

.png

SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/Assets/SquareTile310x150.scale-100.png

.png

SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/Assets/SquareTile44x44.scale-100.png

.png

SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/Assets/SquareTile71x71.scale-100.png

.png

SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/pris/resources.en-US.pri

SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/pris/resources.ru-RU.pri

SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/resources.pri

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/App.xaml

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/AppxBlockMap.xml

.xml

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/AppxManifest.xml

.xml

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/AppxSignature.p7x

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/LockScreenLogo.scale-200.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-100.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-100_contrast-black.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-100_contrast-white.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-125.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-125_contrast-black.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-125_contrast-white.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-150.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-150_contrast-black.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-150_contrast-white.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-200.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-200_contrast-black.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-200_contrast-white.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-400.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-400_contrast-black.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-400_contrast-white.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-16_altform-lightunplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-16_altform-unplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-20.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-20_altform-lightunplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-20_altform-unplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-24.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-24_altform-lightunplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-24_altform-unplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-256.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-256_altform-lightunplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-256_altform-unplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-30.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-30_altform-lightunplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-30_altform-unplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-32.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-32_altform-lightunplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-32_altform-unplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-36.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-36_altform-lightunplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-36_altform-unplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-40.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-40_altform-lightunplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-40_altform-unplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-48.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-48_altform-lightunplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-48_altform-unplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-60.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-60_altform-lightunplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-60_altform-unplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-64.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-64_altform-lightunplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-64_altform-unplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-72.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-72_altform-lightunplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-72_altform-unplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-80.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-80_altform-lightunplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-80_altform-unplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-96.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-96_altform-lightunplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-96_altform-unplated.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/StoreLogo.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-100.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-100_contrast-black.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-100_contrast-white.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-125.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-125_contrast-black.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-125_contrast-white.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-150.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-150_contrast-black.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-150_contrast-white.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-200.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-200_contrast-black.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-200_contrast-white.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-400.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-400_contrast-black.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-400_contrast-white.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-100.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-100_contrast-black.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-100_contrast-white.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-125.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-125_contrast-black.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-125_contrast-white.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-150.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-150_contrast-black.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-150_contrast-white.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-200.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-200_contrast-black.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-200_contrast-white.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-400.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-400_contrast-black.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-400_contrast-white.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-100.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-100_contrast-black.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-100_contrast-white.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-125.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-125_contrast-black.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-125_contrast-white.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-150.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-150_contrast-black.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-150_contrast-white.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-200.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-200_contrast-black.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-200_contrast-white.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-400.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-400_contrast-black.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-400_contrast-white.png

.png

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/CallingShellApp.exe

.exe windows:10 windows x64 arch:x64

b5960a682bd4ddb8b60c1fe8588a5b6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_APPCONTAINER

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

CallingShellApp.pdb

Imports

api-ms-win-core-synch-l1-1-0

AcquireSRWLockExclusive

LeaveCriticalSection

CreateMutexExW

AcquireSRWLockShared

OpenSemaphoreW

DeleteCriticalSection

WaitForSingleObjectEx

ReleaseMutex

WaitForSingleObject

ReleaseSemaphore

CreateSemaphoreExW

ReleaseSRWLockExclusive

InitializeCriticalSection

EnterCriticalSection

CreateEventW

ResetEvent

SetEvent

InitializeCriticalSectionAndSpinCount

ReleaseSRWLockShared

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler

CoGetContextToken

CoTaskMemFree

CoTaskMemAlloc

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress

GetModuleHandleW

GetModuleHandleExW

GetModuleFileNameA

api-ms-win-core-heap-l1-1-0

HeapAlloc

HeapFree

GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

GetLastError

UnhandledExceptionFilter

SetLastError

SetUnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

GetCurrentProcessId

GetCurrentThreadId

GetCurrentProcess

GetStartupInfoW

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

OutputDebugStringW

DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle

wincorlib

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?__abi_FailFast@@YAXXZ

??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z

?Equals@Object@Platform@@QE$AAA_NPE$AAV12@@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z

?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ

??0GridLength@Xaml@UI@Windows@@QEAA@NW4GridUnitType@123@@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

??0Delegate@Platform@@QE$AAA@XZ

?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?InitializeData@Details@Platform@@YAJH@Z

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

api-ms-win-crt-private-l1-1-0

__C_specific_handler

__CxxFrameHandler3

_CxxThrowException

wcsrchr

wcsstr

__std_terminate

__CxxFrameHandler4

_o___p__commode

_o___std_exception_copy

_o___std_exception_destroy

_o___stdio_common_vsnprintf_s

_o___stdio_common_vswprintf

_o__callnewh

_o__cexit

_o__configthreadlocale

_o__configure_narrow_argv

_o__crt_atexit

_o__errno

_o__exit

_o__get_narrow_winmain_command_line

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__purecall

_o__register_onexit_function

_o__seh_filter_exe

_o__set_app_type

_o__set_fmode

_o__set_new_mode

_o_exit

_o_free

_o_malloc

_o_terminate

memcpy

api-ms-win-crt-string-l1-1-0

memset

wcslen

api-ms-win-crt-runtime-l1-1-0

_initterm

_register_thread_local_exe_atexit_callback

_c_exit

_initterm_e

msvcp_win

?_Xlength_error@std@@YAXPEBD@Z

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

RoFailFastWithErrorContext

SetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsIsStringEmpty

WindowsGetStringRawBuffer

WindowsGetStringLen

WindowsDuplicateString

WindowsDeleteString

WindowsCreateStringReference

WindowsCreateString

WindowsConcatString

WindowsCompareStringOrdinal

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry

RtlVirtualUnwind

RtlCaptureContext

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/CallingShellAppPresenters.dll

.dll windows:6 windows x64 arch:x64

fa28012a8436853732ee62b50e40150c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

CallingShellAppPresenters.pdb

Imports

phoneom

PhoneEnd

PhoneRejectIncoming

PhoneSetForegroundLine

PhoneFreeCallInfo

PhoneNotificationHelper_CreateInstance

PhoneGetNetworkAlert

PhoneSetMute

PhoneSetBluetoothHfpCallAudioTransfer

PhoneGetProviderLineServiceInfo

PhoneAPIInitialize

RetrieveSystemNotificationCallbackPayload

PhoneGetCallState

PhoneExplicitCallTransfer

PhonePauseRecording

PhoneGetProviderLineInfo

PhoneAcceptUpgradingRealTimeTextCall

PhoneAcceptVideo

PhoneReinitiateCallerIdLookup

PhoneSetHold

PhoneSendDTMFStart

PhoneAPIUninitialize

PhoneSendDTMF

PhoneInitiateCallUpgrade

PhoneGetCallCounts

PhoneGetAvailableActions

PhoneAcceptIncomingEx

PhoneSendDTMFStop

PhoneDropVideo

PhoneAddVideo

PhoneSetVideoPaused

PhoneGetWiredHeadsetState

PhoneExecutePendingDtmfWait

PhoneConference

PhoneIsDtmfWaitPending

PhoneConfirmNonSeamlessUpgrade

PhoneStartRecording

PhoneDropAcceptEx

PhoneIsEmergencyNumber

PhoneCancelNonSeamlessUpgrade

PhoneRejectVideo

PhoneSwap

PhoneGetCallsInConference

PhoneUpgradeToRealTimeTextCall

PhoneFlash

PhoneSetLocalVideo

PhoneGetState

PhoneDowngradeFromRealTimeTextCall

PhoneGetContactPictureHandle

phoneutil

GetTimeDeltaFormat

GetDisplayNameFromCallInformation

CreateBrandingInfo

GetDisplayNumberWithLeftToRightMarker

CreateAudioHardwareHelper

OneShotTimer_CreateInstance

msvcrt

memmove

_initterm

_amsg_exit

_XcptFilter

_onexit

__dllonexit

_unlock

_lock

_callnewh

malloc

free

qsort

swprintf_s

toupper

wcscpy_s

__CxxFrameHandler3

memmove_s

memcpy_s

_vsnwprintf

_purecall

__C_specific_handler

memcmp

memcpy

memset

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc

StringFromCLSID

CoCreateGuid

CoTaskMemFree

CLSIDFromString

CoCreateFreeThreadedMarshaler

CoCreateInstance

api-ms-win-eventing-provider-l1-1-0

EventUnregister

EventRegister

EventSetInformation

EventProviderEnabled

EventWriteTransfer

api-ms-win-core-synch-l1-1-0

LeaveCriticalSection

OpenSemaphoreW

CreateSemaphoreExW

AcquireSRWLockExclusive

EnterCriticalSection

ReleaseSRWLockShared

InitializeSRWLock

InitializeCriticalSectionEx

InitializeCriticalSection

ReleaseSRWLockExclusive

WaitForSingleObjectEx

OpenEventW

CreateEventW

SetEvent

AcquireSRWLockShared

CreateMutexExW

ReleaseMutex

ReleaseSemaphore

DeleteCriticalSection

WaitForSingleObject

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

UnhandledExceptionFilter

GetLastError

SetLastError

RaiseException

oleaut32

SysAllocString

SysFreeString

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

GetProcAddress

GetModuleHandleW

GetModuleFileNameA

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

IsDebuggerPresent

DebugBreak

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString

WindowsCreateStringReference

WindowsGetStringLen

WindowsGetStringRawBuffer

WindowsCompareStringOrdinal

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-file-l1-1-0

CompareFileTime

api-ms-win-core-threadpool-l1-2-0

SubmitThreadpoolWork

WaitForThreadpoolWorkCallbacks

CloseThreadpoolWork

SetThreadpoolTimer

CreateThreadpoolTimer

WaitForThreadpoolTimerCallbacks

CreateThreadpoolWork

CloseThreadpoolTimer

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount

api-ms-win-core-heap-l1-1-0

HeapAlloc

GetProcessHeap

HeapFree

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess

CreateThread

TerminateProcess

GetCurrentProcessId

GetCurrentThreadId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-heap-l2-1-0

LocalAlloc

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry

RtlVirtualUnwind

RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

Exports

CreateCallingShellPresenterStore

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/MainPage.xaml

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/WindowsInternal.Shell.Experiences.Calling.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/WindowsInternal.Shell.Experiences.CallingShellAppControls.dll

.dll windows:10 windows x64 arch:x64

a9bf9fcdaa788f3301472d4eba69e1ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_APPCONTAINER

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

WindowsInternal.Shell.Experiences.CallingShellAppControls.pdb

Imports

callingshellapppresenters

CreateCallingShellPresenterStore

api-ms-win-core-debug-l1-1-0

DebugBreak

OutputDebugStringW

IsDebuggerPresent

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId

TerminateProcess

GetCurrentThreadId

GetCurrentProcess

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-eventing-provider-l1-1-0

EventSetInformation

EventUnregister

EventRegister

EventWriteTransfer

EventProviderEnabled

api-ms-win-core-synch-l1-1-0

ReleaseSRWLockShared

EnterCriticalSection

LeaveCriticalSection

InitializeCriticalSection

CreateEventW

AcquireSRWLockShared

ResetEvent

SetEvent

InitializeCriticalSectionAndSpinCount

DeleteCriticalSection

WaitForSingleObjectEx

AcquireSRWLockExclusive

ReleaseSRWLockExclusive

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

GetProcAddress

GetModuleHandleW

DisableThreadLibraryCalls

GetModuleFileNameA

api-ms-win-core-heap-l1-1-0

HeapFree

HeapAlloc

GetProcessHeap

api-ms-win-core-file-l1-1-0

ReadFile

GetFileSizeEx

api-ms-win-core-errorhandling-l1-1-0

GetLastError

UnhandledExceptionFilter

SetUnhandledExceptionFilter

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-heap-l2-1-0

LocalAlloc

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

api-ms-win-core-synch-l1-2-0

Sleep

InitOnceExecuteOnce

wincorlib

?InitializeData@Details@Platform@@YAJH@Z

??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z

?Equals@Object@Platform@@QE$AAA_NPE$AAV12@@Z

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?GetType@Object@Platform@@QE$AAAPE$AAVType@2@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

??0Rect@Foundation@Windows@@QEAA@VPoint@12@VSize@12@@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

??0WrongThreadException@Platform@@QE$AAA@PE$AAVString@1@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

??0Delegate@Platform@@QE$AAA@XZ

??0DisconnectedException@Platform@@QE$AAA@XZ

??0NullReferenceException@Platform@@QE$AAA@XZ

??0NotImplementedException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?UninitializeData@Details@Platform@@YAXH@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

api-ms-win-crt-private-l1-1-0

__C_specific_handler

memcpy

__CxxFrameHandler3

_CxxThrowException

wcsrchr

wcsstr

__std_terminate

__CxxFrameHandler4

_o___std_exception_copy

_o___std_exception_destroy

_o___std_type_info_destroy_list

_o___stdio_common_vsnprintf_s

_o___stdio_common_vswprintf

_o__callnewh

_o__cexit

_o__configure_narrow_argv

_o__crt_atexit

_o__errno

_o__execute_onexit_table

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__purecall

_o__register_onexit_function

_o__seh_filter_dll

_o_free

_o_malloc

_o_toupper

memmove

api-ms-win-crt-string-l1-1-0

wcslen

memset

api-ms-win-crt-runtime-l1-1-0

_initterm

_initterm_e

msvcp_win

?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ

?_XGetLastError@std@@YAXXZ

?__ExceptionPtrDestroy@@YAXPEAX@Z

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

?__ExceptionPtrRethrow@@YAXPEBX@Z

?__ExceptionPtrToBool@@YA_NPEBX@Z

?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z

?__ExceptionPtrCurrentException@@YAXPEAX@Z

?__ExceptionPtrCreate@@YAXPEAX@Z

?__ExceptionPtrAssign@@YAXPEAXPEBX@Z

?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ

?GetNextAsyncId@platform@details@Concurrency@@YAIXZ

_Cnd_broadcast

?_Throw_C_error@std@@YAXH@Z

_Mtx_unlock

_Mtx_lock

?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ

?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z

_Cnd_wait

?_ReportUnobservedException@details@Concurrency@@YAXXZ

?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ

?_IsNonBlockingThread@_Task_impl_base@details@Concurrency@@SA_NXZ

?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z

?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z

?_Xbad_function_call@std@@YAXXZ

?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z

?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ

_Mtx_destroy_in_situ

_Cnd_destroy_in_situ

?_Xlength_error@std@@YAXPEBD@Z

?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z

_Mtx_init_in_situ

_Cnd_init_in_situ

?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ

?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

api-ms-win-core-winrt-string-l1-1-0

WindowsIsStringEmpty

WindowsGetStringRawBuffer

WindowsGetStringLen

WindowsDuplicateString

WindowsDeleteString

WindowsCreateStringReference

WindowsCreateString

WindowsConcatString

WindowsCompareStringOrdinal

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-com-l1-1-0

CoTaskMemFree

CoTaskMemAlloc

CoCreateFreeThreadedMarshaler

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlVirtualUnwind

RtlLookupFunctionEntry

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 393KB - Virtual size: 393KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/pris/resources.en-US.pri

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/pris/resources.ru-RU.pri

SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/resources.pri

SystemApps/Microsoft.Windows.CapturePicker_cw5n1h2txyewy/AppxBlockMap.xml

.xml

SystemApps/Microsoft.Windows.CapturePicker_cw5n1h2txyewy/AppxManifest.xml

.xml

SystemApps/Microsoft.Windows.CapturePicker_cw5n1h2txyewy/AppxSignature.p7x

SystemApps/Microsoft.Windows.CapturePicker_cw5n1h2txyewy/CapturePicker.exe

.exe windows:10 windows x64 arch:x64

21e63282482cddc14bc8f24072146f04

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:30

Not After

03-03-2021 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

cb:b0:b4:69:29:06:56:5b:a8:1a:74:c1:5d:1f:85:63:e8:b1:b6:e5:6e:40:bb:5c:09:ce:2f:ea:2c:df:3d:37
Signer

Actual PE Digest

cb:b0:b4:69:29:06:56:5b:a8:1a:74:c1:5d:1f:85:63:e8:b1:b6:e5:6e:40:bb:5c:09:ce:2f:ea:2c:df:3d:37

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

CapturePicker.pdb

Imports

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameA

GetModuleHandleW

GetModuleHandleExW

GetProcAddress

api-ms-win-core-heap-l1-1-0

HeapFree

HeapAlloc

GetProcessHeap

api-ms-win-core-synch-l1-1-0

AcquireSRWLockShared

InitializeCriticalSection

DeleteCriticalSection

CreateSemaphoreExW

AcquireSRWLockExclusive

WaitForSingleObject

ReleaseSemaphore

LeaveCriticalSection

EnterCriticalSection

CreateMutexExW

WaitForSingleObjectEx

ReleaseSRWLockShared

InitializeCriticalSectionEx

ReleaseSRWLockExclusive

OpenSemaphoreW

ReleaseMutex

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolTimerCallbacks

CloseThreadpoolTimer

CreateThreadpoolTimer

SetThreadpoolTimer

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer

EventUnregister

EventSetInformation

EventRegister

api-ms-win-core-processthreads-l1-1-0

GetStartupInfoW

GetCurrentProcessId

GetCurrentProcess

TerminateProcess

GetCurrentThreadId

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

IsDebuggerPresent

DebugBreak

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

GetLastError

SetLastError

RaiseException

UnhandledExceptionFilter

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference

WindowsIsStringEmpty

WindowsGetStringRawBuffer

WindowsGetStringLen

WindowsDuplicateString

WindowsCreateString

WindowsConcatString

WindowsCompareStringOrdinal

WindowsDeleteString

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-synch-l1-2-0

InitOnceComplete

Sleep

WakeAllConditionVariable

InitOnceExecuteOnce

InitOnceBeginInitialize

SleepConditionVariableSRW

wincorlib

?__abi_WinRTraiseCOMException@@YAXJ@Z

??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0Delegate@Platform@@QE$AAA@XZ

??0ChangedStateException@Platform@@QE$AAA@XZ

??0NullReferenceException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?Equals@Object@Platform@@QE$AAA_NPE$AAV12@@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

msvcrt

__CxxFrameHandler3

memcpy_s

memmove_s

_vsnwprintf

_purecall

??3@YAXPEAX@Z

_errno

wcstol

??1exception@@UEAA@XZ

??0exception@@QEAA@XZ

??0exception@@QEAA@AEBV0@@Z

_vsnprintf_s

wcsstr

?what@exception@@UEBAPEBDXZ

??0exception@@QEAA@AEBQEBD@Z

wcsrchr

??0bad_cast@@QEAA@AEBV0@@Z

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@PEBD@Z

free

realloc

memset

wcslen

_CxxThrowException

?terminate@@YAXXZ

_lock

_unlock

__dllonexit

__C_specific_handler

_onexit

??1type_info@@UEAA@XZ

_XcptFilter

_amsg_exit

__getmainargs

__set_app_type

exit

_exit

_cexit

_ismbblead

__setusermatherr

_initterm

_acmdln

_fmode

_commode

??0exception@@QEAA@AEBQEBDH@Z

memmove

malloc

_callnewh

setlocale

___mb_cur_max_func

___lc_handle_func

___lc_codepage_func

__pctype_func

calloc

___lc_collate_cp_func

memcmp

abort

_wcsdup

__crtCompareStringW

__crtLCMapStringW

_wsetlocale

strchr

memcpy

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

SetRestrictedErrorInfo

RoFailFastWithErrorContext

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-util-l1-1-0

DecodePointer

EncodePointer

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler

CoTaskMemFree

CoTaskMemAlloc

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

api-ms-win-core-string-l1-1-0

GetStringTypeW

WideCharToMultiByte

MultiByteToWideChar

Sections

.text
Size: 331KB - Virtual size: 331KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CapturePicker_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

SystemApps/Microsoft.Windows.CapturePicker_cw5n1h2txyewy/pris/resources.en-US.pri

SystemApps/Microsoft.Windows.CapturePicker_cw5n1h2txyewy/pris/resources.ru-RU.pri

SystemApps/Microsoft.Windows.CapturePicker_cw5n1h2txyewy/resources.pri

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/AntiTheft.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/ApplicationTheme.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/AppxBlockMap.xml

.xml

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/AppxManifest.xml

.xml

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/AppxSignature.p7x

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/CloudDomainJoin.DataModel.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/CloudExperienceHostAPI.SyncSettings.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/CloudExperienceHostAPI.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/CloudExperienceHostBroker.Account.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/CloudExperienceHostBroker.Cortana.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/CloudExperienceHostBroker.Hello.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/CloudExperienceHostBroker.LocalNgc.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/CloudExperienceHostBroker.RetailDemo.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/CloudExperienceHostBroker.SyncEngine.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/ContentManagement.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/Family.Cache.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/Microsoft.CloudExperienceHost.dll

.dll windows:10 windows x64 arch:x64

76b934a669aac0b0cccc75b551a041ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

Microsoft.CloudExperienceHost.pdb

Imports

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

GetCurrentProcess

GetCurrentThreadId

GetCurrentProcessId

api-ms-win-eventing-provider-l1-1-0

EventRegister

EventActivityIdControl

EventUnregister

EventSetInformation

EventWriteTransfer

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

InitOnceBeginInitialize

InitOnceComplete

Sleep

api-ms-win-core-heap-l1-1-0

HeapFree

GetProcessHeap

HeapAlloc

api-ms-win-core-synch-l1-1-0

ReleaseMutex

WaitForSingleObject

OpenSemaphoreW

CreateSemaphoreExW

CreateMutexExW

AcquireSRWLockExclusive

ReleaseSRWLockExclusive

WaitForSingleObjectEx

ReleaseSemaphore

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

OutputDebugStringW

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler

IIDFromString

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

GetLastError

SetUnhandledExceptionFilter

SetLastError

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-handle-l1-1-0

CloseHandle

msvcrt

free

_XcptFilter

??1type_info@@UEAA@XZ

__C_specific_handler

__dllonexit

_unlock

_lock

malloc

_vsnprintf_s

??0exception@@QEAA@AEBV0@@Z

??0exception@@QEAA@XZ

??1exception@@UEAA@XZ

memcpy_s

_vsnwprintf

??3@YAXPEAX@Z

__CxxFrameHandler3

_amsg_exit

_initterm

wcslen

memset

wcsstr

_CxxThrowException

_onexit

wincorlib

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?__abi_FailFast@@YAXXZ

?UninitializeData@Details@Platform@@YAXH@Z

?InitializeData@Details@Platform@@YAJH@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString

WindowsDeleteString

WindowsDuplicateString

WindowsGetStringRawBuffer

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry

RtlCaptureContext

RtlVirtualUnwind

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount

api-ms-win-core-util-l1-1-0

DecodePointer

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/Microsoft.CloudExperienceHost.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/Microsoft.WinJS-reduced/css/ui-dark.css

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/Microsoft.WinJS-reduced/css/ui-light.css

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/Microsoft.WinJS-reduced/js/base.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/Microsoft.WinJS-reduced/js/ui.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/MicrosoftAccount.Extension.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/MicrosoftAccount.TokenProvider.Core.dll

.dll windows:10 windows x64 arch:x64

ba017c2646ff6aba3a602409f4d9b20e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

MicrosoftAccount.TokenProvider.Core.pdb

Imports

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess

GetCurrentThreadId

GetCurrentProcessId

TerminateProcess

api-ms-win-eventing-provider-l1-1-0

EventActivityIdControl

EventUnregister

EventWriteTransfer

EventSetInformation

EventRegister

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

InitOnceBeginInitialize

InitOnceComplete

Sleep

api-ms-win-core-heap-l1-1-0

HeapFree

GetProcessHeap

HeapAlloc

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionEx

CreateEventExW

ResetEvent

SetEvent

AcquireSRWLockExclusive

LeaveCriticalSection

ReleaseSemaphore

ReleaseSRWLockExclusive

ReleaseSRWLockShared

AcquireSRWLockShared

CreateSemaphoreExW

WaitForSingleObject

EnterCriticalSection

CreateMutexExW

ReleaseMutex

OpenSemaphoreW

WaitForSingleObjectEx

DeleteCriticalSection

api-ms-win-core-debug-l1-1-0

DebugBreak

OutputDebugStringW

IsDebuggerPresent

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress

GetModuleHandleExW

GetModuleHandleW

GetModuleFileNameA

api-ms-win-core-errorhandling-l1-1-0

RaiseException

SetUnhandledExceptionFilter

GetLastError

UnhandledExceptionFilter

SetLastError

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolTimerCallbacks

CloseThreadpoolTimer

CreateThreadpoolTimer

SetThreadpoolTimer

api-ms-win-core-com-l1-1-0

CoCreateInstance

CoCreateFreeThreadedMarshaler

CoGetApartmentType

CoGetObjectContext

CoGetInterfaceAndReleaseStream

CoMarshalInterThreadInterfaceInStream

IIDFromString

wincorlib

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?UninitializeData@Details@Platform@@YAXH@Z

?InitializeData@Details@Platform@@YAJH@Z

?ToString@int32@default@@QEAAPE$AAVString@Platform@@XZ

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0Delegate@Platform@@QE$AAA@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

?ToString@Boolean@Platform@@QEAAPE$AAVString@2@XZ

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?ToString@Enum@Platform@@QE$AAAPE$AAVString@2@XZ

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

??0NotImplementedException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?ToString@Guid@Platform@@QEAAPE$AAVString@2@XZ

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?__abi_FailFast@@YAXXZ

msvcrt

??3@YAXPEAX@Z

_purecall

_vsnwprintf

_vsnwprintf_s

??_V@YAXPEAX@Z

??1exception@@UEAA@XZ

??0exception@@QEAA@XZ

??0exception@@QEAA@AEBV0@@Z

_vsnprintf_s

wcsstr

wcstoul

_wcsicmp

_errno

memmove_s

__ExceptionPtrDestroy

__ExceptionPtrCopy

__ExceptionPtrRethrow

__ExceptionPtrCurrentException

__ExceptionPtrCreate

__CxxFrameHandler3

?what@exception@@UEBAPEBDXZ

??0exception@@QEAA@AEBQEBD@Z

memset

wcslen

_CxxThrowException

_lock

_unlock

__dllonexit

__C_specific_handler

_onexit

??1type_info@@UEAA@XZ

_XcptFilter

_amsg_exit

free

malloc

_initterm

memcpy_s

_callnewh

??0exception@@QEAA@AEBQEBDH@Z

memcpy

memmove

?terminate@@YAXXZ

memcmp

ntdll

RtlLookupFunctionEntry

RtlCaptureContext

RtlVirtualUnwind

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

api-ms-win-core-winrt-string-l1-1-0

WindowsConcatString

WindowsDeleteString

WindowsCompareStringOrdinal

WindowsCreateStringReference

WindowsCreateString

WindowsIsStringEmpty

WindowsGetStringRawBuffer

WindowsDuplicateString

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

combase

ord90

ord157

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 510KB - Virtual size: 509KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 217KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/MicrosoftAccount.TokenProvider.Core.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/MicrosoftAccount.UserOperations.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo.Internal.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoAdmin.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoAdmin.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoAdvanced.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoAdvanced.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoAdvancedInclusive.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoAdvancedInclusive.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoLocal.html

.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoLocal.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoMsa.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoMsa.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoMsaInclusive.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoMsaInclusive.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoSecurity.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoSecurity.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoSecurityInclusive.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoSecurityInclusive.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoSetup.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoSetup.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoSetupInclusive.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoSetupInclusive.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoShared.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoShutdowns.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoShutdowns.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoShutdownsInclusive.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/RetailDemo/retailDemoShutdownsInclusive.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/SystemSettings.DataModel.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/UnifiedEnrollment.DataModel.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/WindowsUdk.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/cloudexperiencehostapi.provisioning.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/appLaunchers/HostedApplication.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/appLaunchers/InPlaceResume.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/appLaunchers/OobeAntiTheftEnable.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/appLaunchers/OobeAutoPilot.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/appLaunchers/OobeCloudContentHydrant.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/appLaunchers/OobeEnableDriverUpdate.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/appLaunchers/OobeEnterpriseProvisioningAfterConnectivity.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/appLaunchers/OobeReboot.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/appLaunchers/OobeRetailDemoEntry.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/appLaunchers/OobeSettingsSelector.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/appLaunchers/OobeSkipNode.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/appLaunchers/OobeStartSelector.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/appLaunchers/OobeTelemetryFlush.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/appLaunchers/ScoobeAccountState.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/appLaunchers/WindowsCoreLocalAccountCreator.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/autopilotcore.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/backstack-chrome-breadcrumb-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/close-chrome-breadcrumb-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/default-contentView-vm.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/default-frame-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/default-progress-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/default-vm.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/knockouthelpers.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/oobe-chrome-breadcrumb-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/oobe-chrome-contentview-vm.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/oobe-chrome-footer-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/oobe-frame-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/oobe-light-contentView-vm.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/oobe-light-footer-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/oobe-light-frame-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/oobe-light-progress-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/oobe-progress-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/oobeFooterHost.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/oobelightfooterhost.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/require-helpers.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/requirePath-config-core.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/js/sspr-frame-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/view/backstack-chrome-breadcrumb-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/view/close-chrome-breadcrumb-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/view/default-contentview-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/view/default-frame-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/view/default-progress-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/view/oobe-chrome-breadcrumb-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/view/oobe-chrome-contentview-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/view/oobe-chrome-footer-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/view/oobe-frame-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/view/oobe-light-contentview-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/view/oobe-light-footer-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/view/oobe-light-frame-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/view/oobe-light-progress-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/view/oobe-progress-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/view/oobeFooterHost.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/view/oobelightfooterhost.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/core/view/sspr-frame-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/css/common.css

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/css/default.css

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/css/hololens.css

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/css/inclusiveoobe-desktop.css

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/css/oobe-desktop.css

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/css/oobe-mobile.css

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/css/oobe-surface.css

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/css/settings-desktop.css

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/css/settings-mobile.css

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/css/test.css

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/css/xbox-ui-dark.css

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/css/xbox-ui-light.css

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/css/xbox.css

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/data/oobeSections.json

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/data/prod/navigation-scoobe.json

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/data/prod/navigation.json

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/data/prod/uriRules.json

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/default.html

.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/enterprisedevicemanagement.enrollment.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/enterprisedevicemanagement.service.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/fonts/OOBMDL2.ttf

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/images/AccountLogo.png

.png

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/images/AccountSmallLogo.png

.png

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/images/NetworkProfiles.svg

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/images/NetworkProfilesWhite.png

.png

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/images/ProvisionedApplications.svg

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/images/ProvisionedApplicationsWhite.png

.png

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/images/ProvisionedCertificates.svg

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/images/ProvisionedCertificatesWhite.png

.png

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/images/SecurityPolicies.svg

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/images/SecurityPoliciesWhite.png

.png

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/images/logo.png

.png

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/images/smalllogo.png

.png

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/images/splashscreen.png

.png

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/images/storelogo.png

.png

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/images/xbox-ring.svg

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/OEMRegistrationPage.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/app.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/appFrame.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/appManager.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/appObjectFactory.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/appViewManager.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/autoPilot.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/bridge.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/cloudDomainJoin.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/core.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/cortana.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/cortanaPage.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/default.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/deviceDisplayNameSetup.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/deviceUser.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/devicereactivation.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/discovery.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/enterpriseNgcEnrollment.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/environment.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/error.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/errorHandler.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/events.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/expeditedupdate.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/family.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/globalization.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/hello.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/helloEnrollmentPage.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/hololensWorkAccount.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/hololensWorkAccountPage.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/localAccount.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/localAccountPage.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/localNgc.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/microsoftAccount.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/mobileExperience.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/msaUIHandler.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/navigationManager.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/navigator.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/navmesh.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/nointernetpage.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/oemRegistrationInfo.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/oemregistrationHelper.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/policy.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/resources.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/retailDemo.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/rewards.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/roamingDisambiguationPage.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/roamingSettings.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/sessionState.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/sqsaLocalAccountPage.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/stateManager.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/storage.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/stringResources.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/styling.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/surfaceHubAccount.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/surfaceHubAccountPage.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/syncengine.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/telemetry.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/test.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/tokenManagerErrorHandler.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/tokenProviderManager.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/uiHelpers.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/unifiedEnrollment.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/js/xboxTcuiContext.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/lib/knockout-3.4.0.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/lib/knockout-winjs-src.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/lib/knockout-winjs-wrapper.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/lib/lottie.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/lib/optional.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/lib/require.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/lib/text.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/media/CortanaAnimation.gif

.gif

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/media/CortanaAnimationJa.gif

.gif

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/media/HelloFaceAnimation.gif

.gif

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/microsoft.resourceaccountmanager.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/moderndeployment.autopilot.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/pris/resources.en-US.pri

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/pris/resources.ru-RU.pri

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/resources.pri

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/speech/0407/tokens_deDE.xml

.xml

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/speech/0409/tokens_enUS.xml

.xml

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/speech/040c/tokens_frFR.xml

.xml

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/speech/0410/tokens_itIT.xml

.xml

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/speech/0411/tokens_jaJP.xml

.xml

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/speech/0416/tokens_ptBR.xml

.xml

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/speech/0804/tokens_zhCN.xml

.xml

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/speech/0809/tokens_enGB.xml

.xml

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/speech/080a/tokens_esMX.xml

.xml

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/speech/0c09/tokens_enAU.xml

.xml

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/speech/0c0a/tokens_esES.xml

.xml

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/speech/0c0c/tokens_frCA.xml

.xml

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/speech/1009/tokens_enCA.xml

.xml

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/speech/4009/tokens_enIN.xml

.xml

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/userdeviceregistration.ngc.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/views/OEMRegistration.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/views/cortana.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/views/errorHandler.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/views/helloEnrollment.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/views/hololensWorkAccount.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/views/localAccount.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/views/nointernet.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/views/roamingDisambiguation.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/views/sqsaLocalAccount.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/views/surfaceHubAccount.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/views/test.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/views/tokenManagerErrorHandler.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/AntiTheft/js/OobeAntiTheft-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/AntiTheft/js/OobeAntiTheft-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/AntiTheft/views/OobeAntiTheft-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/enterpriseNgcEnrollment/js/enterpriseNgcEnrollmentPage.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/enterpriseNgcEnrollment/views/enterpriseNgcEnrollment.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/hololensDiagnostics/js/hololensDiagnostics-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/hololensDiagnostics/js/hololensDiagnostics-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/hololensDiagnostics/views/hololensDiagnostics.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/css/inclusive-common.css

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/css/inclusive-mseula.css

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/autopilot-telemetry.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/autopilot/accountsetupcategoryviewmodel.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/autopilot/autopilotespprogress-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/autopilot/autopilotespprogress-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/autopilot/bootstrapsessiongeneralutilities.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/autopilot/bootstrapstatuscategoryview.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/autopilot/bootstrapstatussubcategoryviewmodel.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/autopilot/commercialDiagnosticsUtilities.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/autopilot/devicepreparationcategoryviewmodel.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/autopilot/devicesetupcategoryviewmodel.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/autopilot/exportdiagnostics-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/autopilot/exportdiagnostics-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/autopilot/mdmbootstrapsessionutilities.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/autopilotwhiteglovelanding-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/autopilotwhiteglovelanding-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/autopilotwhitegloveresult-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/autopilotwhitegloveresult-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/common/GifSequencePlayer.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/common/knockout-helpers.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/common/oobe-button-vm.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/common/oobe-footer-vm.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/common/oobe-gesture-manager.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/common/oobe-header-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/common/oobe-listview-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/common/oobe-retaildemo-dialog-vm.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/common/oobe-retaildemo-exit-dialog-vm.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/common/oobe-textinput-vm.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/common/oobe-toggle-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeactivitysyncconsent-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeactivitysyncconsent-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeautopilotactivation-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeautopilotactivation-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeautopilotreboot-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeautopilotreboot-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeautopilotupdate-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeautopilotupdate-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobecortana-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobedevicepairing-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobedevicepairing-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeenterpriseprovisioning-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeenterpriseprovisioning-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeerror-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeerror-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeeula-data.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeeula-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeeula-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobehello-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobehello-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobekeyboard-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobekeyboard-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobelanguage-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobelanguage-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobelocalaccount-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobelocalaccount-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobelocalngc-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobelocalngc-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobenetworklossaversion-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobenetworklossaversion-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeoemregistration-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeoemregistration-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeoutro-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeoutro-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeprovisioningentry-data.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeprovisioningentry-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeprovisioningentry-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeprovisioningprogress-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeprovisioningprogress-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeprovisioningstatus-data.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeprovisioningstatus-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeprovisioningstatus-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/ooberegion-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/ooberegion-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobesettings-data.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobesettings-multipage-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobesettings-multipage-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobesettings-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobesettings-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeupdatesettings-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobeupdatesettings-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobewelcome-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobewelcome-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobezdp-helpers.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobezdp-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/oobezdp-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/media/activity-sync-consent.svg

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/media/network-loss-aversion.svg

.xml

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/media/oobe-bookend-cortanain-outro.gif

.gif

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/media/oobe-bookend-cortanain.gif

.gif

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/media/oobe-bookend-cortanaout.gif

.gif

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/media/oobe-bookend-cortanaspeak.gif

.gif

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/media/oobe-cortana-skills.svg

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/media/oobe-update-settings.svg

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/autopilot/autopilotespprogress-main.html

.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/autopilot/exportdiagnostics-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/autopilotwhiteglovelanding-main.html

.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/autopilotwhitegloveresult-main.html

.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobeactivitysyncconsent-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobeautopilotactivation-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobeautopilotreboot-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobeautopilotupdate-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobecortana-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobedevicepairing-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobeenterpriseprovisioning-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobeerror-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobeeula-hololens.html

.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobeeula-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobehello-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobekeyboard-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobelanguage-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobelocalaccount-main.html

.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobelocalngc-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobenetworklossaversion-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobenetworklossaversionv2-main.html

.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobeoemregistration-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobeoutro-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobeprovisioningentry-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobeprovisioningprogress-main.html

.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobeprovisioningstatus-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/ooberegion-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobesettings-main.html

.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobesettings-multipage-main.html

.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobeupdatesettings-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobewelcome-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/oobezdp-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/templates/oobe-button-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/templates/oobe-footer-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/templates/oobe-header-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/templates/oobe-listview-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/templates/oobe-retaildemo-dialog-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/templates/oobe-retaildemo-exit-dialog-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/templates/oobe-textinput-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/view/templates/oobe-toggle-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveSspr/js/ssprerror-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveSspr/js/ssprerror-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveSspr/view/ssprerror-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/scoobe/js/common/scoobe-knockout-helpers.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/scoobe/js/scoobeoutro-page.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/scoobe/js/scoobeoutro-vm.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/scoobe/media/scoobe-outro.svg

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/scoobe/view/scoobeoutro-main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/surfaceHubDeviceUser/js/deviceUserPage.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/surfaceHubDeviceUser/view/main.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/templates/js/common-button-vm.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/templates/js/common-footer-vm.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/templates/js/common-header-vm.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/templates/js/common-listview-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/templates/js/common-textinput-vm.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/templates/js/common-toggle-vm.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/templates/view/common-button-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/templates/view/common-footer-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/templates/view/common-header-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/templates/view/common-listview-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/templates/view/common-textinput-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/templates/view/common-toggle-template.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/unifiedEnrollment/js/unifiedEnrollmentDiscoveryErrorPage.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/unifiedEnrollment/js/unifiedEnrollmentDiscoveryPage.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/unifiedEnrollment/js/unifiedEnrollmentFinishedPage.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/unifiedEnrollment/js/unifiedEnrollmentOnPremAuthPage.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/unifiedEnrollment/js/unifiedEnrollmentPage.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/unifiedEnrollment/js/unifiedEnrollmentProgressPage.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/unifiedEnrollment/js/unifiedEnrollmentProvisioningProgressPage.js

.js

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/unifiedEnrollment/views/unifiedEnrollment.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/unifiedEnrollment/views/unifiedEnrollmentDiscovery.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/unifiedEnrollment/views/unifiedEnrollmentDiscoveryError.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/unifiedEnrollment/views/unifiedEnrollmentFinished.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/unifiedEnrollment/views/unifiedEnrollmentOnPremAuth.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/unifiedEnrollment/views/unifiedEnrollmentProgress.html

SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/unifiedEnrollment/views/unifiedEnrollmentProvisioningProgress.html

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/AppxBlockMap.xml

.xml

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/AppxManifest.xml

.xml

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/AppxSignature.p7x

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/ContentDeliveryManager.Background.dll

.dll windows:10 windows x64 arch:x64

6822d4478beea64bc0b5ad32078f26d7

Code Sign

33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:23

Not After

01-09-2022 18:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2e:4d:df:5c:9e:77:56:dc:7e:c9:de:5e:dc:8b:8d:f8:e3:55:7d:5a:a1:7a:c8:98:4a:22:dc:e2:4e:96:54:8e
Signer

Actual PE Digest

2e:4d:df:5c:9e:77:56:dc:7e:c9:de:5e:dc:8b:8d:f8:e3:55:7d:5a:a1:7a:c8:98:4a:22:dc:e2:4e:96:54:8e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

ContentDeliveryManager.Background.pdb

Imports

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExW

FreeLibrary

GetModuleFileNameA

FindStringOrdinal

GetModuleHandleExW

GetProcAddress

GetModuleHandleW

api-ms-win-core-synch-l1-1-0

CreateEventExW

EnterCriticalSection

AcquireSRWLockShared

OpenSemaphoreW

CreateMutexExW

ReleaseSRWLockExclusive

ReleaseMutex

LeaveCriticalSection

SetEvent

InitializeCriticalSectionEx

CreateSemaphoreExW

ReleaseSRWLockShared

OpenEventW

WaitForSingleObjectEx

DeleteCriticalSection

AcquireSRWLockExclusive

ResetEvent

WaitForSingleObject

ReleaseSemaphore

TryAcquireSRWLockExclusive

TryAcquireSRWLockShared

api-ms-win-core-synch-l1-2-0

InitOnceComplete

SleepConditionVariableSRW

InitOnceBeginInitialize

InitOnceExecuteOnce

WakeAllConditionVariable

Sleep

api-ms-win-core-heap-l1-1-0

HeapFree

GetProcessHeap

HeapAlloc

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

RaiseException

GetLastError

SetLastError

SetUnhandledExceptionFilter

api-ms-win-eventing-provider-l1-1-0

EventSetInformation

EventRegister

EventWriteTransfer

EventActivityIdControl

EventUnregister

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolTimer

SetThreadpoolTimer

WaitForThreadpoolTimerCallbacks

CreateThreadpoolTimer

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

GetCurrentProcess

OpenProcessToken

GetCurrentThreadId

GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

GetLocaleInfoW

FormatMessageW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

OutputDebugStringW

DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-string-l1-1-0

GetStringTypeW

CompareStringOrdinal

MultiByteToWideChar

WideCharToMultiByte

api-ms-win-core-com-l1-1-0

CoCreateGuid

StringFromGUID2

CoGetContextToken

CoCreateInstance

CoGetApartmentType

CoGetInterfaceAndReleaseStream

CoMarshalInterThreadInterfaceInStream

CoTaskMemRealloc

CoWaitForMultipleHandles

CoCreateFreeThreadedMarshaler

CoTaskMemFree

CoTaskMemAlloc

CoGetObjectContext

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount

GlobalMemoryStatusEx

sspicli

GetUserNameExW

api-ms-win-core-registry-l1-1-0

RegQueryInfoKeyW

RegEnumKeyExW

RegCreateKeyExW

RegEnumValueW

RegGetValueW

RegCloseKey

RegDeleteKeyExW

RegQueryValueExW

RegSetValueExW

RegOpenKeyExW

api-ms-win-core-registry-l1-1-1

RegDeleteKeyValueW

RegSetKeyValueW

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

rpcrt4

UuidCreate

api-ms-win-core-path-l1-1-0

PathCchAppend

api-ms-win-core-file-l1-1-0

GetDiskFreeSpaceExW

FileTimeToLocalFileTime

GetFileAttributesW

api-ms-win-core-sysinfo-l1-2-0

VerSetConditionMask

GetNativeSystemInfo

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime

FileTimeToSystemTime

api-ms-win-security-base-l1-1-0

GetTokenInformation

GetLengthSid

CopySid

api-ms-win-core-registry-l2-1-0

RegEnumKeyW

RegDeleteKeyW

api-ms-win-security-lsalookup-l1-1-2

LsaLookupUserAccountType

ext-ms-win-devmgmt-policy-l1-1-0

PolicyManager_GetPolicyString

PolicyManager_FreeStringValue

PolicyManager_IsPolicySetByMobileDeviceManager

PolicyManager_GetPolicyInt

ext-ms-win-security-slc-l1-1-0

SLGetWindowsInformationDWORD

wldp

WldpQueryWindowsLockdownMode

user32

GetDC

ReleaseDC

ext-ms-win-appmodel-state-ext-l1-2-0

CloseState

GetStateFolder

OpenStateExplicit

ext-ms-win-rtcore-gdi-devcaps-l1-1-0

GetDeviceCaps

cdp

CDPCreateMicrosoftAccount

CDPGetActivityStoreForAccount

CDPCreateAzureActiveDirectoryAccount

CDPCreateDeviceQuery

CDPInitialize

ntdll

RtlPublishWnfStateData

RtlGetDeviceFamilyInfoEnum

RtlIsMultiSessionSku

NtQueryLicenseValue

NtQueryWnfStateData

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-shcore-obsolete-l1-1-0

CommandLineToArgvW

api-ms-win-core-winrt-string-l1-1-0

WindowsIsStringEmpty

WindowsGetStringLen

WindowsDuplicateString

WindowsCreateString

WindowsDeleteString

WindowsConcatString

WindowsCreateStringReference

WindowsGetStringRawBuffer

WindowsCompareStringOrdinal

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

RoActivateInstance

api-ms-win-appmodel-runtime-l1-1-1

FormatApplicationUserModelId

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

wincorlib

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?ToString@Guid@Platform@@QEAAPE$AAVString@2@XZ

??0Object@Platform@@QE$AAA@XZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

??0Delegate@Platform@@QE$AAA@XZ

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z

?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

msvcrt

?terminate@@YAXXZ

?what@exception@@UEBAPEBDXZ

??0exception@@QEAA@AEBQEBD@Z

??0bad_cast@@QEAA@AEBV0@@Z

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@PEBD@Z

free

rand

srand

wcscspn

wcsncpy_s

swscanf_s

__mb_cur_max

_set_errno

_get_errno

swprintf_s

malloc

sprintf_s

ldexp

??_V@YAXPEAX@Z

??_U@YAPEAX_K@Z

localeconv

wcscpy_s

wcscat_s

_i64tow_s

strncpy_s

_errno

strtol

strrchr

strchr

_itow_s

strcspn

towlower

_vscwprintf

vswprintf_s

_Wcsftime

_W_Gettnames

wcschr

_wcsicmp

??1exception@@UEAA@XZ

wcslen

_CxxThrowException

_lock

_unlock

__dllonexit

memmove_s

__ExceptionPtrCurrentException

??1type_info@@UEAA@XZ

_XcptFilter

_amsg_exit

_initterm

isupper

calloc

__uncaught_exception

realloc

isspace

tolower

memchr

abort

_wcsdup

__crtCompareStringA

__crtLCMapStringW

__crtLCMapStringA

_wsetlocale

islower

_Getdays

_Getmonths

_W_Getdays

_W_Getmonths

_Gettnames

_Strftime

isalnum

isdigit

_purecall

??3@YAXPEAX@Z

sqrt

memcpy_s

___lc_collate_cp_func

_vsnwprintf

memcmp

__RTDynamicCast

floor

__CxxFrameHandler3

__pctype_func

_ismbblead

___lc_codepage_func

___lc_handle_func

___mb_cur_max_func

__ExceptionPtrRethrow

__ExceptionPtrCopy

wcsstr

setlocale

memmove

__ExceptionPtrCreate

_onexit

__ExceptionPtrDestroy

_vsnprintf_s

??0exception@@QEAA@AEBV0@@Z

__C_specific_handler

??0exception@@QEAA@XZ

memcpy

_callnewh

??0exception@@QEAA@AEBQEBDH@Z

memset

pow

__crtCompareStringW

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

api-ms-win-core-util-l1-1-0

DecodePointer

EncodePointer

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

shcore

ord190

Exports

??4FeatureConfigurationChannel@FeatureConfiguration@@QEAAAEAV01@$$QEAV01@@Z

??4FeatureConfigurationChannel@FeatureConfiguration@@QEAAAEAV01@AEBV01@@Z

?IsSupportedForCurrentUser@FeatureConfigurationChannel@FeatureConfiguration@@SA_NXZ

?OnFeatureConfigurationMessageReceived@FeatureConfigurationChannel@FeatureConfiguration@@SAXPE$AAVString@Platform@@PE$AAVJsonValue@Json@Data@Windows@@@Z

?OnMessageProcessingFailed@FeatureConfigurationChannel@FeatureConfiguration@@SAXIPE$AAVString@Platform@@0J@Z

?OnRegister@FeatureConfigurationChannel@FeatureConfiguration@@SAXPE$AAVString@Platform@@@Z

?OnUpdate@FeatureConfigurationChannel@FeatureConfiguration@@SAXPE$AAVString@Platform@@@Z

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1011KB - Virtual size: 1011KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 294KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/ContentManagementSDK.dll

.dll windows:10 windows x64 arch:x64

97e3bcc37b4176446f6ad32d2657ddc7

Code Sign

33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:23

Not After

01-09-2022 18:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

96:93:96:ec:bb:ef:05:ed:ee:65:80:cb:62:b2:f2:48:f8:3f:16:fe:d1:05:93:aa:e5:07:a9:5a:d0:8d:23:8f
Signer

Actual PE Digest

96:93:96:ec:bb:ef:05:ed:ee:65:80:cb:62:b2:f2:48:f8:3f:16:fe:d1:05:93:aa:e5:07:a9:5a:d0:8d:23:8f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

ContentManagementSDK.pdb

Imports

ext-ms-win-devmgmt-policy-l1-1-0

PolicyManager_IsPolicySetByMobileDeviceManager

PolicyManager_GetPolicyInt

api-ms-win-core-winrt-l1-1-0

RoActivateInstance

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringRawBuffer

WindowsDeleteString

WindowsCreateStringReference

WindowsCreateString

WindowsDuplicateString

WindowsGetStringLen

WindowsCompareStringOrdinal

WindowsIsStringEmpty

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

GetModuleFileNameA

GetModuleHandleW

GetProcAddress

api-ms-win-core-heap-l1-1-0

GetProcessHeap

HeapAlloc

HeapFree

api-ms-win-core-synch-l1-1-0

EnterCriticalSection

DeleteCriticalSection

LeaveCriticalSection

InitializeCriticalSectionEx

ResetEvent

WaitForSingleObject

OpenSemaphoreW

ReleaseSemaphore

ReleaseSRWLockShared

AcquireSRWLockShared

SetEvent

ReleaseSRWLockExclusive

AcquireSRWLockExclusive

CreateMutexExW

CreateSemaphoreExW

WaitForSingleObjectEx

CreateEventExW

ReleaseMutex

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolTimer

CloseThreadpoolTimer

WaitForThreadpoolTimerCallbacks

SetThreadpoolTimer

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

OutputDebugStringW

DebugBreak

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

api-ms-win-core-localization-l1-2-0

FormatMessageW

GetLocaleInfoW

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

GetLastError

RaiseException

SetUnhandledExceptionFilter

SetLastError

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount

GetSystemTime

api-ms-win-core-com-l1-1-0

CLSIDFromString

CoGetObjectContext

CoTaskMemAlloc

CoTaskMemFree

CoCreateGuid

CoCreateFreeThreadedMarshaler

CoGetInterfaceAndReleaseStream

CoMarshalInterThreadInterfaceInStream

CoGetApartmentType

StringFromGUID2

api-ms-win-eventing-provider-l1-1-0

EventUnregister

EventWriteTransfer

EventActivityIdControl

EventSetInformation

EventRegister

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize

InitOnceComplete

Sleep

InitOnceExecuteOnce

WakeAllConditionVariable

SleepConditionVariableSRW

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

WideCharToMultiByte

CompareStringOrdinal

GetStringTypeW

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency

QueryPerformanceCounter

api-ms-win-core-registry-l1-1-0

RegGetValueW

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime

api-ms-win-core-file-l1-1-0

LocalFileTimeToFileTime

api-ms-win-security-base-l1-1-0

GetTokenInformation

sspicli

GetUserNameExW

api-ms-win-security-sddl-l1-1-0

ConvertSidToStringSidW

ConvertStringSidToSidW

api-ms-win-security-lsalookup-l2-1-0

LookupAccountSidW

api-ms-win-security-cryptoapi-l1-1-0

CryptGetHashParam

CryptHashData

CryptReleaseContext

CryptAcquireContextW

CryptDestroyHash

CryptCreateHash

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-security-lsalookup-l1-1-2

LsaLookupUserAccountType

wincorlib

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

??0Exception@Platform@@QE$AAA@HPE$AAVString@1@@Z

?ToString@Guid@Platform@@QEAAPE$AAVString@2@XZ

??0NotImplementedException@Platform@@QE$AAA@PE$AAVString@1@@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0Delegate@Platform@@QE$AAA@XZ

??0ChangedStateException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

msvcrt

memmove

_callnewh

__uncaught_exception

setlocale

___mb_cur_max_func

_errno

___lc_handle_func

___lc_codepage_func

_ismbblead

__CxxFrameHandler3

memcpy_s

memmove_s

_vsnwprintf

??3@YAXPEAX@Z

_purecall

??0exception@@QEAA@AEBV0@@Z

??1exception@@UEAA@XZ

??0exception@@QEAA@XZ

__ExceptionPtrDestroy

__ExceptionPtrCopy

__ExceptionPtrRethrow

__ExceptionPtrCurrentException

__ExceptionPtrCreate

?terminate@@YAXXZ

?what@exception@@UEBAPEBDXZ

??0exception@@QEAA@AEBQEBD@Z

??0bad_cast@@QEAA@AEBV0@@Z

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@PEBD@Z

free

ldexp

??_V@YAXPEAX@Z

??_U@YAPEAX_K@Z

localeconv

sprintf_s

strcspn

_time64

swprintf_s

srand

rand

__mb_cur_max

malloc

_vsnprintf_s

wcsstr

iswdigit

_wtoi

__RTDynamicCast

vswprintf_s

_vscwprintf

towlower

_W_Getdays

_W_Getmonths

towupper

wcscspn

wcsncpy_s

_Wcsftime

_W_Gettnames

memset

wcslen

_CxxThrowException

??1type_info@@UEAA@XZ

_lock

_unlock

__dllonexit

__C_specific_handler

_onexit

_XcptFilter

_amsg_exit

_initterm

__pctype_func

isupper

calloc

isspace

tolower

memchr

islower

realloc

abort

_wcsdup

__crtCompareStringW

__crtCompareStringA

__crtLCMapStringW

__crtLCMapStringA

_wsetlocale

isalnum

isdigit

_Getmonths

_Gettnames

_Strftime

___lc_collate_cp_func

memcmp

memcpy

iswspace

??0exception@@QEAA@AEBQEBDH@Z

_Getdays

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

api-ms-win-core-util-l1-1-0

DecodePointer

EncodePointer

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 695KB - Virtual size: 694KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 281KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Experiences/PreInstalledApps/DefaultSquareTileLogo1.contrast-black_scale-100.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Experiences/PreInstalledApps/DefaultSquareTileLogo1.contrast-black_scale-140.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Experiences/PreInstalledApps/DefaultSquareTileLogo1.contrast-black_scale-180.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Experiences/PreInstalledApps/DefaultSquareTileLogo1.contrast-black_scale-80.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Experiences/PreInstalledApps/DefaultSquareTileLogo1.contrast-white_scale-100.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Experiences/PreInstalledApps/DefaultSquareTileLogo1.contrast-white_scale-140.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Experiences/PreInstalledApps/DefaultSquareTileLogo1.contrast-white_scale-180.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Experiences/PreInstalledApps/DefaultSquareTileLogo1.contrast-white_scale-80.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Experiences/PreInstalledApps/DefaultSquareTileLogo1.scale-100.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Experiences/PreInstalledApps/DefaultSquareTileLogo1.scale-140.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Experiences/PreInstalledApps/DefaultSquareTileLogo1.scale-180.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Experiences/PreInstalledApps/DefaultSquareTileLogo1.scale-80.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Experiences/SubscribedContent/experience

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Images/BadgeLogo.scale-100.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Images/Logo.scale-100.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Images/SmallLogo.scale-100.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Images/Splashscreen.scale-100.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Images/StoreLogo.scale-100.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars30.contrast-black_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars30.contrast-white_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars30.scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars31.contrast-black_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars31.contrast-white_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars31.scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars32.contrast-black_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars32.contrast-white_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars32.scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars33.contrast-black_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars33.contrast-white_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars33.scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars34.contrast-black_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars34.contrast-white_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars34.scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars35.contrast-black_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars35.contrast-white_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars35.scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars36.contrast-black_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars36.contrast-white_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars36.scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars37.contrast-black_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars37.contrast-white_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars37.scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars38.contrast-black_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars38.contrast-white_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars38.scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars39.contrast-black_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars39.contrast-white_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars39.scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars40.contrast-black_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars40.contrast-white_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars40.scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars41.contrast-black_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars41.contrast-white_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars41.scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars42.contrast-black_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars42.contrast-white_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars42.scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars43.contrast-black_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars43.contrast-white_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars43.scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars44.contrast-black_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars44.contrast-white_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars44.scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars45.contrast-black_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars45.contrast-white_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars45.scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars46.contrast-black_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars46.contrast-white_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars46.scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars47.contrast-black_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars47.contrast-white_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars47.scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars48.contrast-black_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars48.contrast-white_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars48.scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars49.contrast-black_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars49.contrast-white_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars49.scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars50.contrast-black_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars50.contrast-white_scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/Ratings/RatingStars50.scale-200.png

.png

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/pris/resources.en-US.pri

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/pris/resources.ru-RU.pri

SystemApps/Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy/resources.pri

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/AppxBlockMap.xml

.xml

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/AppxManifest.xml

.xml

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/AppxSignature.p7x

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/BitMDL2.ttf

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/Folder_Large.scale-100.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/Folder_Large.scale-200.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/Folder_Large.scale-400.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/Folder_Small.scale-100.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/Folder_Small.scale-200.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/Folder_Small.scale-400.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/PPIRemovableStorageDevicesSquareTile150x150.scale-100.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/PPIRemovableStorageDevicesSquareTile150x150.scale-200.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/PPIRemovableStorageDevicesSquareTile150x150.scale-400.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/PPIRemovableStorageDevicesSquareTile44x44.scale-100.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/PPIRemovableStorageDevicesSquareTile44x44.scale-200.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/PPIRemovableStorageDevicesSquareTile44x44.scale-400.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SplashScreen.scale-100.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile150x150.scale-100.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile150x150.scale-200.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile150x150.scale-400.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile310x150.scale-100.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile310x150.scale-200.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile310x150.scale-400.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile44x44.scale-100.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile44x44.scale-200.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile44x44.scale-400.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile44x44.targetsize-24.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile44x44.targetsize-256_altform-lightunplated_devicefamily-colorfulunplated.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile44x44.targetsize-256_altform-unplated_contrast-black_devicefamily-colorfulunplated.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile44x44.targetsize-256_altform-unplated_contrast-white_devicefamily-colorfulunplated.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile44x44.targetsize-256_altform-unplated_devicefamily-colorfulunplated.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile44x44.targetsize-48_altform-lightunplated_devicefamily-colorfulunplated.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile44x44.targetsize-48_altform-unplated_contrast-black_devicefamily-colorfulunplated.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile44x44.targetsize-48_altform-unplated_contrast-white_devicefamily-colorfulunplated.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile44x44.targetsize-48_altform-unplated_devicefamily-colorfulunplated.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile44x44.targetsize-96_altform-lightunplated_devicefamily-colorfulunplated.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile44x44.targetsize-96_altform-unplated_contrast-black_devicefamily-colorfulunplated.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile44x44.targetsize-96_altform-unplated_contrast-white_devicefamily-colorfulunplated.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile44x44.targetsize-96_altform-unplated_devicefamily-colorfulunplated.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile71x71.scale-100.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile71x71.scale-200.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/Assets/SquareTile71x71.scale-400.png

.png

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/FileExplorer.exe

.exe windows:10 windows x64 arch:x64

04172261b6924cea0607d0ae8b7d25bb

Code Sign

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05-05-2022 19:23

Not After

04-05-2023 19:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

d2:96:7c:16:77:0c:54:c6:72:36:2b:2e:23:8a:4d:9a:2c:d1:16:0b:80:86:2f:b8:14:df:a8:b3:02:9a:f4:c7
Signer

Actual PE Digest

d2:96:7c:16:77:0c:54:c6:72:36:2b:2e:23:8a:4d:9a:2c:d1:16:0b:80:86:2f:b8:14:df:a8:b3:02:9a:f4:c7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

FileExplorer.pdb

Imports

dwrite

DWriteCreateFactory

api-ms-win-core-shlwapi-legacy-l1-1-0

PathFindFileNameW

api-ms-win-core-processthreads-l1-1-0

GetStartupInfoW

GetCurrentProcessId

GetCurrentThreadId

GetCurrentProcess

TerminateProcess

api-ms-win-eventing-provider-l1-1-0

EventSetInformation

EventRegister

EventUnregister

EventWriteTransfer

EventActivityIdControl

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize

InitOnceExecuteOnce

InitOnceComplete

api-ms-win-core-heap-l1-1-0

GetProcessHeap

HeapAlloc

HeapFree

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection

ResetEvent

CreateSemaphoreExW

CreateEventW

EnterCriticalSection

InitializeCriticalSectionEx

WaitForSingleObject

ReleaseSemaphore

AcquireSRWLockShared

InitializeCriticalSection

ReleaseSRWLockShared

SetEvent

OpenSemaphoreW

AcquireSRWLockExclusive

ReleaseSRWLockExclusive

CreateMutexExW

LeaveCriticalSection

WaitForSingleObjectEx

InitializeCriticalSectionAndSpinCount

ReleaseMutex

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

IsDebuggerPresent

DebugBreak

api-ms-win-core-localization-l1-2-0

FindNLSStringEx

FormatMessageW

api-ms-win-core-com-l1-1-0

CoTaskMemFree

CoTaskMemAlloc

CoCreateFreeThreadedMarshaler

CoGetContextToken

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

SetUnhandledExceptionFilter

SetLastError

GetLastError

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringRawBuffer

WindowsIsStringEmpty

WindowsGetStringLen

WindowsDuplicateString

WindowsDeleteString

WindowsCreateStringReference

WindowsCreateString

WindowsConcatString

WindowsCompareStringOrdinal

api-ms-win-core-string-l1-1-0

CompareStringOrdinal

ntdll

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

RtlGetDeviceFamilyInfoEnum

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolTimerCallbacks

CreateThreadpoolTimer

CloseThreadpoolTimer

SetThreadpoolTimer

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-path-l1-1-0

PathIsUNCEx

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount64

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress

GetModuleFileNameA

GetModuleHandleW

GetModuleHandleExW

api-ms-win-crt-private-l1-1-0

_o___stdio_common_vsnprintf_s

_o___stdio_common_vswprintf

_o__callnewh

_o__cexit

_o__configthreadlocale

_o__configure_narrow_argv

_o__crt_atexit

_o__errno

_o__exit

_o__get_narrow_winmain_command_line

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__purecall

_o__register_onexit_function

_o__seh_filter_exe

_o__set_app_type

_o__set_fmode

_o__set_new_mode

_o__wtof

_o_exit

_o_floor

_o_free

_o_iswalpha

_o_iswspace

_o_malloc

_o_realloc

_o_terminate

_o_towlower

_o_towupper

_o_wcstol

__CxxFrameHandler4

__std_terminate

wcschr

__std_type_info_compare

wcsstr

wcsrchr

strchr

memmove

memcpy

memcmp

_CxxThrowException

__CxxFrameHandler3

__C_specific_handler

_o___p__commode

_o___std_exception_copy

_o___std_exception_destroy

api-ms-win-crt-runtime-l1-1-0

_initterm_e

_initterm

_c_exit

_register_thread_local_exe_atexit_callback

msvcp_win

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

?id@?$ctype@_W@std@@2V0locale@2@A

??Bid@locale@std@@QEAA_KXZ

?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

?_Xbad_alloc@std@@YAXXZ

?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ

?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z

?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z

?tolower@?$ctype@_W@std@@QEBA_W_W@Z

??0_Lockit@std@@QEAA@H@Z

??0_Locinfo@std@@QEAA@PEBD@Z

?_Incref@facet@locale@std@@UEAAXXZ

_Wcscoll

_Wcsxfrm

??1_Lockit@std@@QEAA@XZ

?_Xinvalid_argument@std@@YAXPEBD@Z

??1_Locinfo@std@@QEAA@XZ

??1facet@locale@std@@MEAA@XZ

??0facet@locale@std@@IEAA@_K@Z

?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ

?is@?$ctype@_W@std@@QEBA_NF_W@Z

?id@?$collate@_W@std@@2V0locale@2@A

?_Xlength_error@std@@YAXPEBD@Z

?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ

?_XGetLastError@std@@YAXXZ

?__ExceptionPtrDestroy@@YAXPEAX@Z

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

?__ExceptionPtrRethrow@@YAXPEBX@Z

?__ExceptionPtrToBool@@YA_NPEBX@Z

?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z

?__ExceptionPtrCurrentException@@YAXPEAX@Z

?__ExceptionPtrCreate@@YAXPEAX@Z

_Cnd_broadcast

?_Throw_C_error@std@@YAXH@Z

_Mtx_unlock

_Mtx_lock

?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ

_Mtx_destroy_in_situ

_Cnd_destroy_in_situ

_Mtx_init_in_situ

_Cnd_init_in_situ

?_ReportUnobservedException@details@Concurrency@@YAXXZ

?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ

?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z

?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z

?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z

?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ

?_Xbad_function_call@std@@YAXXZ

?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z

?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ

_Cnd_wait

?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_Xout_of_range@std@@YAXPEBD@Z

?_IsNonBlockingThread@_Task_impl_base@details@Concurrency@@SA_NXZ

?GetNextAsyncId@platform@details@Concurrency@@YAIXZ

?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z

?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ

?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z

wincorlib

?GetType@uint32@default@@QEAAPE$AAVType@Platform@@XZ

?GetType@Object@Platform@@QE$AAAPE$AAVType@2@XZ

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

?Equals@Object@Platform@@QE$AAA_NPE$AAV12@@Z

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?ToString@uint32@default@@QEAAPE$AAVString@Platform@@XZ

?ToString@int32@default@@QEAAPE$AAVString@Platform@@XZ

?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ

?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0Rect@Foundation@Windows@@QEAA@VPoint@12@VSize@12@@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?Allocate@Heap@Details@Platform@@SAPEAX_K@Z

??0Delegate@Platform@@QE$AAA@XZ

??0DisconnectedException@Platform@@QE$AAA@XZ

??0ChangedStateException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

??0Object@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?__abi_WinRTraiseFailureException@@YAXXZ

?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

SetRestrictedErrorInfo

RoFailFastWithErrorContext

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-crt-string-l1-1-0

memset

wcslen

api-ms-win-crt-math-l1-1-0

floorf

ceilf

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 431KB - Virtual size: 431KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 229KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/pris/resources.en-US.pri

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/pris/resources.ru-RU.pri

SystemApps/Microsoft.Windows.FileExplorer_cw5n1h2txyewy/resources.pri

SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/AppxBlockMap.xml

.xml

SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/AppxManifest.xml

.xml

SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/AppxSignature.p7x

SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SplashScreen.scale-100.png

.png

SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile150x150.scale-100.png

.png

SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile150x150.scale-200.png

.png

SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile150x150.scale-400.png

.png

SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile310x150.scale-100.png

.png

SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile310x150.scale-200.png

.png

SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile310x150.scale-400.png

.png

SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile44x44.scale-100.png

.png

SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile44x44.scale-200.png

.png

SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile44x44.scale-400.png

.png

SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile44x44.targetsize-24.png

.png

SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile71x71.scale-100.png

.png

SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile71x71.scale-200.png

.png

SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile71x71.scale-400.png

.png

SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/FilePicker.exe

.exe windows:10 windows x64 arch:x64

b228380e2357086711eb8b2649378142

Code Sign

33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:23

Not After

01-09-2022 18:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

5a:89:c3:a8:bc:96:f6:f7:5d:49:18:16:71:e8:1e:5e:25:80:f6:9e:09:25:5d:1c:37:c8:21:c3:5e:6e:a5:41
Signer

Actual PE Digest

5a:89:c3:a8:bc:96:f6:f7:5d:49:18:16:71:e8:1e:5e:25:80:f6:9e:09:25:5d:1c:37:c8:21:c3:5e:6e:a5:41

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

FilePicker.pdb

Imports

ext-ms-win-session-usermgr-l1-1-0

UMgrQueryUserToken

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

IsDebuggerPresent

DebugBreak

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

GetStartupInfoW

GetCurrentThreadId

GetCurrentProcess

GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer

EventUnregister

EventSetInformation

EventRegister

EventActivityIdControl

api-ms-win-core-heap-l1-1-0

GetProcessHeap

HeapFree

HeapAlloc

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection

AcquireSRWLockShared

CreateEventExW

CreateSemaphoreExW

CreateMutexExW

EnterCriticalSection

ResetEvent

CreateEventW

ReleaseSRWLockShared

ReleaseSemaphore

OpenSemaphoreW

AcquireSRWLockExclusive

WaitForSingleObjectEx

InitializeCriticalSection

SetEvent

ReleaseMutex

WaitForSingleObject

InitializeCriticalSectionEx

LeaveCriticalSection

ReleaseSRWLockExclusive

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize

InitOnceExecuteOnce

Sleep

InitOnceComplete

api-ms-win-core-errorhandling-l1-1-0

SetLastError

GetLastError

UnhandledExceptionFilter

SetUnhandledExceptionFilter

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

CompareStringOrdinal

GetStringTypeW

WideCharToMultiByte

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress

GetModuleHandleW

GetModuleFileNameA

GetModuleHandleExW

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolTimer

WaitForThreadpoolTimerCallbacks

CloseThreadpoolTimer

SetThreadpoolTimer

api-ms-win-core-handle-l1-1-0

CloseHandle

ntdll

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

RtlGetDeviceFamilyInfoEnum

NtQueryWnfStateData

api-ms-win-security-base-l1-1-0

CreateWellKnownSid

api-ms-win-security-base-l1-2-0

CheckTokenMembershipEx

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler

CoGetObjectContext

CoTaskMemAlloc

CoTaskMemFree

CoGetApartmentType

CoGetInterfaceAndReleaseStream

CoMarshalInterThreadInterfaceInStream

wincorlib

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

??0GridLength@Xaml@UI@Windows@@QEAA@NW4GridUnitType@123@@Z

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

??0Delegate@Platform@@QE$AAA@XZ

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?GetType@Object@Platform@@QE$AAAPE$AAVType@2@XZ

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

msvcrt

memcpy

memmove

malloc

_callnewh

setlocale

___lc_collate_cp_func

___lc_handle_func

___lc_codepage_func

__pctype_func

calloc

memcmp

abort

__CxxFrameHandler3

_vsnwprintf

memcpy_s

_purecall

??3@YAXPEAX@Z

wcsncpy_s

??1exception@@UEAA@XZ

??0exception@@QEAA@XZ

??0exception@@QEAA@AEBV0@@Z

_vsnprintf_s

wcsstr

memmove_s

__ExceptionPtrDestroy

__ExceptionPtrCopy

__ExceptionPtrRethrow

__ExceptionPtrCurrentException

__ExceptionPtrCreate

?terminate@@YAXXZ

_HUGE

?what@exception@@UEBAPEBDXZ

??0exception@@QEAA@AEBQEBD@Z

wcsrchr

_errno

wcstol

free

??0bad_cast@@QEAA@AEBV0@@Z

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@PEBD@Z

strchr

realloc

memset

wcslen

_CxxThrowException

??1type_info@@UEAA@XZ

_lock

_unlock

__dllonexit

__C_specific_handler

_onexit

_XcptFilter

_amsg_exit

__getmainargs

__set_app_type

exit

_exit

_cexit

_ismbblead

__setusermatherr

_initterm

_acmdln

_fmode

_commode

_wcsdup

__crtCompareStringW

__crtLCMapStringW

_wsetlocale

??0exception@@QEAA@AEBQEBDH@Z

___mb_cur_max_func

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo

RoOriginateError

RoFailFastWithErrorContext

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString

WindowsConcatString

WindowsCompareStringOrdinal

WindowsCreateStringReference

WindowsDeleteString

WindowsDuplicateString

WindowsGetStringLen

WindowsGetStringRawBuffer

WindowsIsStringEmpty

api-ms-win-core-util-l1-1-0

DecodePointer

EncodePointer

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

Sections

.text
Size: 576KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/pris/resources.en-US.pri

SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/pris/resources.ru-RU.pri

SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/resources.pri

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/AppxBlockMap.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/AppxManifest.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/AppxSignature.p7x

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/Assets/Fonts/BrowserMDL.ttf

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/OOBENetworkCaptivePortal.exe

.exe windows:10 windows x64 arch:x64

b9f9161c70721a82f623fab957e5e353

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:30

Not After

03-03-2021 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

42:13:65:aa:82:6a:c6:d9:5e:33:16:5b:b9:9b:2f:2a:50:da:30:64:4c:9d:ff:98:67:1a:2b:2f:85:9f:cd:47
Signer

Actual PE Digest

42:13:65:aa:82:6a:c6:d9:5e:33:16:5b:b9:9b:2f:2a:50:da:30:64:4c:9d:ff:98:67:1a:2b:2f:85:9f:cd:47

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

OOBENetworkCaptivePortal.pdb

Imports

api-ms-win-core-debug-l1-1-0

DebugBreak

OutputDebugStringW

IsDebuggerPresent

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId

GetStartupInfoW

TerminateProcess

GetCurrentProcessId

GetCurrentProcess

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-errorhandling-l1-1-0

GetLastError

SetLastError

UnhandledExceptionFilter

SetUnhandledExceptionFilter

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc

CoGetInterfaceAndReleaseStream

CoMarshalInterThreadInterfaceInStream

CoGetApartmentType

CoTaskMemFree

CoCreateFreeThreadedMarshaler

CoGetObjectContext

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

GetModuleHandleW

GetModuleFileNameA

GetProcAddress

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection

AcquireSRWLockExclusive

ResetEvent

ReleaseSRWLockShared

WaitForSingleObjectEx

OpenSemaphoreW

CreateMutexExW

AcquireSRWLockShared

SetEvent

ReleaseSRWLockExclusive

ReleaseMutex

WaitForSingleObject

InitializeCriticalSectionEx

LeaveCriticalSection

ReleaseSemaphore

EnterCriticalSection

CreateEventExW

CreateSemaphoreExW

api-ms-win-core-heap-l1-1-0

HeapAlloc

GetProcessHeap

HeapFree

api-ms-win-core-handle-l1-1-0

CloseHandle

ntdll

RtlSubscribeWnfStateChangeNotification

NtQueryWnfStateData

RtlQueryWnfStateData

RtlUnsubscribeWnfNotificationWaitForCompletion

msvcrt

_wsetlocale

__crtLCMapStringW

__crtCompareStringW

abort

___lc_collate_cp_func

calloc

__pctype_func

___lc_codepage_func

___lc_handle_func

___mb_cur_max_func

setlocale

_callnewh

memmove

memcpy

??0exception@@QEAA@AEBQEBDH@Z

_CxxThrowException

wcslen

memset

_commode

_fmode

_acmdln

_ismbblead

_cexit

_exit

exit

__set_app_type

__getmainargs

_initterm

malloc

_amsg_exit

_XcptFilter

_onexit

__dllonexit

_unlock

_lock

__C_specific_handler

??1type_info@@UEAA@XZ

realloc

strchr

free

??0bad_cast@@QEAA@PEBD@Z

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@AEBV0@@Z

wcsrchr

wcstol

_errno

wcsstr

_vsnprintf_s

memcpy_s

??0exception@@QEAA@AEBQEBD@Z

?what@exception@@UEBAPEBDXZ

?terminate@@YAXXZ

_purecall

__ExceptionPtrCreate

__ExceptionPtrCurrentException

__ExceptionPtrRethrow

__ExceptionPtrCopy

__ExceptionPtrDestroy

??0exception@@QEAA@AEBV0@@Z

??0exception@@QEAA@XZ

??1exception@@UEAA@XZ

_assert

??3@YAXPEAX@Z

_vsnwprintf

__CxxFrameHandler3

_wcsdup

__setusermatherr

nlaapi

NlaIndicateReprobe

wincorlib

?InitializeData@Details@Platform@@YAJH@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?__abi_FailFast@@YAXXZ

??0Delegate@Platform@@QE$AAA@XZ

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext

RoOriginateError

SetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringRawBuffer

WindowsGetStringLen

WindowsDuplicateString

WindowsDeleteString

WindowsIsStringEmpty

WindowsCompareStringOrdinal

WindowsConcatString

WindowsCreateString

WindowsCreateStringReference

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry

RtlCaptureContext

RtlVirtualUnwind

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount

api-ms-win-core-util-l1-1-0

DecodePointer

EncodePointer

api-ms-win-core-string-l1-1-0

GetStringTypeW

MultiByteToWideChar

WideCharToMultiByte

Exports

DllCanUnloadNow

DllGetActivationFactory

VSDesignerDllMain

Sections

.text
Size: 347KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/pris/resources.en-US.pri

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/pris/resources.ru-RU.pri

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/resources.pri

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/0407/tokens_deDE.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/0409/tokens_enUS.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/040c/tokens_frFR.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/0410/tokens_itIT.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/0411/tokens_jaJP.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/0416/tokens_ptBR.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/0804/tokens_zhCN.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/0809/tokens_enGB.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/080a/tokens_esMX.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/0c09/tokens_enAU.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/0c0a/tokens_esES.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/0c0c/tokens_frCA.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/1009/tokens_enCA.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/4009/tokens_enIN.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/AppxBlockMap.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/AppxManifest.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/AppxSignature.p7x

SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/OOBENetworkConnectionFlow.exe

.exe windows:10 windows x64 arch:x64

dd435dd80bbfeb0cf8d8c8b87aec3a53

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:30

Not After

03-03-2021 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

c1:20:db:63:76:84:f2:68:49:f2:0b:b0:1e:e1:45:04:55:1e:7d:ef:ec:5d:b0:20:f2:46:c3:ec:5c:d3:c6:09
Signer

Actual PE Digest

c1:20:db:63:76:84:f2:68:49:f2:0b:b0:1e:e1:45:04:55:1e:7d:ef:ec:5d:b0:20:f2:46:c3:ec:5c:d3:c6:09

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

OOBENetworkConnectionFlow.pdb

Imports

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress

GetModuleHandleExW

GetModuleFileNameA

GetModuleHandleW

api-ms-win-core-synch-l1-1-0

LeaveCriticalSection

ReleaseSRWLockShared

InitializeCriticalSectionEx

WaitForSingleObject

OpenSemaphoreW

ReleaseMutex

WaitForSingleObjectEx

ReleaseSemaphore

EnterCriticalSection

ReleaseSRWLockExclusive

AcquireSRWLockExclusive

CreateSemaphoreExW

DeleteCriticalSection

AcquireSRWLockShared

CreateMutexExW

api-ms-win-core-heap-l1-1-0

HeapAlloc

HeapFree

GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

GetLastError

UnhandledExceptionFilter

SetLastError

SetUnhandledExceptionFilter

api-ms-win-core-com-l1-1-0

CoTaskMemFree

CoTaskMemAlloc

CoCreateFreeThreadedMarshaler

api-ms-win-core-processthreads-l1-1-0

GetStartupInfoW

GetCurrentProcess

GetCurrentProcessId

TerminateProcess

GetCurrentThreadId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

DebugBreak

OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle

msvcrt

_wsetlocale

__crtLCMapStringW

__crtCompareStringW

_wcsdup

abort

___lc_collate_cp_func

calloc

__pctype_func

___lc_codepage_func

___lc_handle_func

___mb_cur_max_func

setlocale

memmove

memcpy

??0exception@@QEAA@AEBQEBDH@Z

_callnewh

_CxxThrowException

wcslen

memset

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@AEBV0@@Z

wcsrchr

??0exception@@QEAA@AEBQEBD@Z

?what@exception@@UEBAPEBDXZ

??0bad_cast@@QEAA@PEBD@Z

wcstol

_errno

wcsstr

_vsnprintf_s

?terminate@@YAXXZ

??0exception@@QEAA@AEBV0@@Z

_commode

_fmode

_acmdln

__setusermatherr

_ismbblead

_cexit

_exit

exit

__set_app_type

__getmainargs

_initterm

malloc

_amsg_exit

_XcptFilter

_onexit

__dllonexit

_unlock

_lock

__C_specific_handler

??1type_info@@UEAA@XZ

realloc

strchr

free

??0exception@@QEAA@XZ

??1exception@@UEAA@XZ

_purecall

memcpy_s

_vsnwprintf

??3@YAXPEAX@Z

__CxxFrameHandler3

wincorlib

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?__abi_FailFast@@YAXXZ

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?UninitializeData@Details@Platform@@YAXH@Z

?InitializeData@Details@Platform@@YAJH@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

??0InvalidArgumentException@Platform@@QE$AAA@XZ

??0NotImplementedException@Platform@@QE$AAA@XZ

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

??0Delegate@Platform@@QE$AAA@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

??0Object@Platform@@QE$AAA@XZ

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo

RoOriginateError

RoFailFastWithErrorContext

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsIsStringEmpty

WindowsGetStringRawBuffer

WindowsGetStringLen

WindowsDeleteString

WindowsCreateStringReference

WindowsCreateString

WindowsConcatString

WindowsCompareStringOrdinal

WindowsDuplicateString

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry

RtlCaptureContext

RtlVirtualUnwind

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount

api-ms-win-core-util-l1-1-0

EncodePointer

DecodePointer

api-ms-win-core-string-l1-1-0

GetStringTypeW

MultiByteToWideChar

WideCharToMultiByte

Exports

DllCanUnloadNow

DllGetActivationFactory

VSDesignerDllMain

Sections

.text
Size: 334KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/pris/resources.en-US.pri

SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/pris/resources.ru-RU.pri

SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/resources.pri

SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/0407/tokens_deDE.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/0409/tokens_enUS.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/040c/tokens_frFR.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/0410/tokens_itIT.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/0411/tokens_jaJP.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/0416/tokens_ptBR.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/0804/tokens_zhCN.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/0809/tokens_enGB.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/080a/tokens_esMX.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/0c09/tokens_enAU.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/0c0a/tokens_esES.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/0c0c/tokens_frCA.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/1009/tokens_enCA.xml

.xml

SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/4009/tokens_enIN.xml

.xml

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/AppxBlockMap.xml

.xml

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/AppxManifest.xml

.xml

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/AppxSignature.p7x

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-100.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-100_contrast-black.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-100_contrast-white.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-125.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-125_contrast-black.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-125_contrast-white.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-150.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-150_contrast-black.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-150_contrast-white.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-200.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-200_contrast-black.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-200_contrast-white.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-400.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-400_contrast-black.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-400_contrast-white.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-16_altform-unplated.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-16_altform-unplated_contrast-black.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-16_altform-unplated_contrast-white.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-20_altform-unplated.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-20_altform-unplated_contrast-black.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-20_altform-unplated_contrast-white.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-24_altform-unplated.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-24_altform-unplated_contrast-black.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-24_altform-unplated_contrast-white.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-256_altform-unplated.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-256_altform-unplated_contrast-black.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-256_altform-unplated_contrast-white.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-30_altform-unplated.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-30_altform-unplated_contrast-black.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-30_altform-unplated_contrast-white.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-32_altform-unplated.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-32_altform-unplated_contrast-black.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-32_altform-unplated_contrast-white.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-36_altform-unplated.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-36_altform-unplated_contrast-black.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-36_altform-unplated_contrast-white.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-40_altform-unplated.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-40_altform-unplated_contrast-black.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-40_altform-unplated_contrast-white.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-48_altform-unplated.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-48_altform-unplated_contrast-black.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-48_altform-unplated_contrast-white.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-60_altform-unplated.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-60_altform-unplated_contrast-black.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-60_altform-unplated_contrast-white.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-64_altform-unplated.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-64_altform-unplated_contrast-black.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-64_altform-unplated_contrast-white.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-72_altform-unplated.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-72_altform-unplated_contrast-black.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-72_altform-unplated_contrast-white.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-80_altform-unplated.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-80_altform-unplated_contrast-black.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-80_altform-unplated_contrast-white.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-96_altform-unplated.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-96_altform-unplated_contrast-black.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-96_altform-unplated_contrast-white.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/SplashScreen.scale-200.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/Square150x150Logo.scale-200.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/StoreLogo.png

.png

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/PeopleExperienceHost.exe

.exe windows:10 windows x64 arch:x64

180179aabab9eecb319183b94cf867c0

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:30

Not After

03-03-2021 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

54:f7:04:e3:0a:aa:41:8a:3c:0b:03:43:d0:de:85:c5:84:66:67:ae:30:e3:df:6a:b8:64:1a:2e:bc:71:44:2a
Signer

Actual PE Digest

54:f7:04:e3:0a:aa:41:8a:3c:0b:03:43:d0:de:85:c5:84:66:67:ae:30:e3:df:6a:b8:64:1a:2e:bc:71:44:2a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

PeopleExperienceHost.pdb

Imports

api-ms-win-eventing-provider-l1-1-0

EventSetInformation

EventRegister

EventWriteTransfer

EventUnregister

api-ms-win-core-heap-l1-1-0

HeapAlloc

GetProcessHeap

HeapFree

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId

TerminateProcess

GetCurrentProcessId

GetStartupInfoW

GetCurrentProcess

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

DebugBreak

IsDebuggerPresent

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-synch-l1-1-0

InitializeSRWLock

SetEvent

ResetEvent

LeaveCriticalSection

InitializeCriticalSection

AcquireSRWLockShared

CreateMutexExW

WaitForSingleObjectEx

ReleaseMutex

OpenSemaphoreW

AcquireSRWLockExclusive

EnterCriticalSection

ReleaseSemaphore

WaitForSingleObject

CreateSemaphoreExW

CreateEventExW

InitializeCriticalSectionEx

DeleteCriticalSection

ReleaseSRWLockShared

ReleaseSRWLockExclusive

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolTimerCallbacks

CreateThreadpoolTimer

SetThreadpoolTimer

CloseThreadpoolTimer

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

GetModuleHandleW

GetProcAddress

GetModuleFileNameA

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

GetLastError

SetLastError

SetUnhandledExceptionFilter

api-ms-win-shcore-sysinfo-l1-1-0

IsOS

api-ms-win-core-com-l1-1-0

CoGetContextToken

CoGetInterfaceAndReleaseStream

CoGetObjectContext

CoMarshalInterThreadInterfaceInStream

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

InitOnceComplete

InitOnceBeginInitialize

Sleep

wincorlib

?__abi_WinRTraiseCOMException@@YAXJ@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

??0InvalidArgumentException@Platform@@QE$AAA@XZ

??0NotImplementedException@Platform@@QE$AAA@XZ

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0Object@Platform@@QE$AAA@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_FailFast@@YAXXZ

?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z

??0Delegate@Platform@@QE$AAA@XZ

?Allocate@Heap@Details@Platform@@SAPEAX_K@Z

?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ

?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

msvcrt

setlocale

___mb_cur_max_func

___lc_handle_func

__CxxFrameHandler3

_vsnwprintf

memcpy_s

_purecall

___lc_codepage_func

memmove_s

?set_terminate@@YAP6AXXZP6AXXZ@Z

_set_error_mode

??0exception@@QEAA@AEBV0@@Z

?what@exception@@UEBAPEBDXZ

??1exception@@UEAA@XZ

??0exception@@QEAA@AEBQEBD@Z

__ExceptionPtrDestroy

__ExceptionPtrCopy

__ExceptionPtrCurrentException

__ExceptionPtrCreate

?terminate@@YAXXZ

??0exception@@QEAA@XZ

_vsnprintf_s

wcsstr

_errno

wcstol

wcsrchr

??0bad_cast@@QEAA@AEBV0@@Z

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@PEBD@Z

free

_callnewh

realloc

memset

wcslen

_CxxThrowException

_lock

_unlock

__dllonexit

__C_specific_handler

_onexit

??1type_info@@UEAA@XZ

_XcptFilter

_amsg_exit

memcpy

__set_app_type

exit

_exit

_cexit

_ismbblead

__setusermatherr

_initterm

_acmdln

_fmode

_commode

__pctype_func

calloc

___lc_collate_cp_func

memcmp

malloc

strchr

_wcsdup

__crtCompareStringW

__crtLCMapStringW

_wsetlocale

memmove

__getmainargs

??0exception@@QEAA@AEBQEBDH@Z

??3@YAXPEAX@Z

ole32

CoTaskMemAlloc

CoCreateFreeThreadedMarshaler

CoTaskMemFree

api-ms-win-crt-runtime-l1-1-0

abort

ext-ms-win-devmgmt-policy-l1-1-0

PolicyManager_GetPolicyInt

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext

RoOriginateError

SetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsConcatString

WindowsCreateString

WindowsCreateStringReference

WindowsCompareStringOrdinal

WindowsIsStringEmpty

WindowsDuplicateString

WindowsDeleteString

WindowsGetStringLen

WindowsGetStringRawBuffer

api-ms-win-core-util-l1-1-0

EncodePointer

DecodePointer

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry

RtlVirtualUnwind

RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

GetStringTypeW

WideCharToMultiByte

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

Sections

.text
Size: 261KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/pris/resources.en-US.pri

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/pris/resources.ru-RU.pri

SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/resources.pri

SystemApps/Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy/AppxBlockMap.xml

.xml

SystemApps/Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy/AppxManifest.xml

.xml

SystemApps/Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy/AppxSignature.p7x

SystemApps/Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy/PinningConfirmationDialog.exe

.exe windows:10 windows x64 arch:x64

8cc7f5b6db78c8599c66a2ac9db47801

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

pinningconfirmationdialog.pdb

Imports

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress

GetModuleHandleW

GetModuleHandleExW

GetModuleFileNameA

api-ms-win-core-synch-l1-2-0

InitOnceComplete

Sleep

InitOnceBeginInitialize

InitOnceExecuteOnce

api-ms-win-core-synch-l1-1-0

EnterCriticalSection

ReleaseSRWLockShared

AcquireSRWLockExclusive

ReleaseMutex

ReleaseSRWLockExclusive

WaitForSingleObject

WaitForSingleObjectEx

CreateMutexExW

ReleaseSemaphore

DeleteCriticalSection

LeaveCriticalSection

AcquireSRWLockShared

InitializeCriticalSection

OpenSemaphoreW

CreateSemaphoreExW

InitializeCriticalSectionEx

api-ms-win-core-heap-l1-1-0

HeapAlloc

GetProcessHeap

HeapFree

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

SetLastError

GetLastError

SetUnhandledExceptionFilter

api-ms-win-eventing-provider-l1-1-0

EventUnregister

EventRegister

EventWriteTransfer

EventSetInformation

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolTimer

WaitForThreadpoolTimerCallbacks

CloseThreadpoolTimer

SetThreadpoolTimer

api-ms-win-core-processthreads-l1-1-0

GetStartupInfoW

TerminateProcess

GetCurrentProcess

GetCurrentThreadId

GetCurrentProcessId

api-ms-win-core-debug-l1-1-0

DebugBreak

IsDebuggerPresent

OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle

msvcrt

_wsetlocale

?terminate@@YAXXZ

??1type_info@@UEAA@XZ

__C_specific_handler

__dllonexit

_onexit

_XcptFilter

_amsg_exit

__getmainargs

__set_app_type

exit

_exit

__setusermatherr

_initterm

_acmdln

_fmode

_commode

wcslen

memset

realloc

strchr

??0bad_cast@@QEAA@PEBD@Z

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@AEBV0@@Z

free

wcstol

_errno

wcsrchr

??0exception@@QEAA@AEBQEBD@Z

?what@exception@@UEBAPEBDXZ

memmove_s

wcsstr

_vsnprintf_s

??0exception@@QEAA@AEBV0@@Z

??0exception@@QEAA@XZ

??1exception@@UEAA@XZ

_purecall

memcpy_s

_vsnwprintf

??3@YAXPEAX@Z

__CxxFrameHandler3

__crtLCMapStringW

__crtCompareStringW

_wcsdup

_CxxThrowException

abort

memcmp

calloc

__pctype_func

_ismbblead

___lc_codepage_func

___lc_handle_func

___mb_cur_max_func

_unlock

_lock

___lc_collate_cp_func

setlocale

memmove

memcpy

??0exception@@QEAA@AEBQEBDH@Z

_callnewh

_cexit

malloc

wincorlib

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?InitializeData@Details@Platform@@YAJH@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

??0Delegate@Platform@@QE$AAA@XZ

??0DisconnectedException@Platform@@QE$AAA@XZ

??0ChangedStateException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0NullReferenceException@Platform@@QE$AAA@XZ

??0InvalidArgumentException@Platform@@QE$AAA@XZ

??0NotImplementedException@Platform@@QE$AAA@XZ

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext

RoOriginateError

SetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsConcatString

WindowsCreateString

WindowsCreateStringReference

WindowsCompareStringOrdinal

WindowsDuplicateString

WindowsGetStringLen

WindowsGetStringRawBuffer

WindowsDeleteString

WindowsIsStringEmpty

api-ms-win-core-util-l1-1-0

EncodePointer

DecodePointer

api-ms-win-core-com-l1-1-0

CoTaskMemFree

CoTaskMemAlloc

CoCreateFreeThreadedMarshaler

api-ms-win-core-string-l1-1-0

WideCharToMultiByte

GetStringTypeW

MultiByteToWideChar

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 195KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

SystemApps/Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy/pris/resources.en-US.pri

SystemApps/Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy/pris/resources.ru-RU.pri

SystemApps/Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy/resources.pri

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/AppxBlockMap.xml

.xml

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/AppxManifest.xml

.xml

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/AppxSignature.p7x

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/BaselineGleamDark.svg

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/BaselineGleamLight.svg

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Fonts/CortMDL2.ttf

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/HCBlack_Search_TraySearchBox_Glyph_100.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/HCWhite_Search_TraySearchBox_Glyph_100.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.scale-100.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.scale-125.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.scale-150.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.scale-200.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.scale-400.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.targetsize-16.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.targetsize-16_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.targetsize-20.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.targetsize-20_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.targetsize-24.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.targetsize-24_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.targetsize-256.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.targetsize-256_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.targetsize-32.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.targetsize-32_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.targetsize-40.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.targetsize-40_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.targetsize-48.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.targetsize-48_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.targetsize-64.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.targetsize-64_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.targetsize-80.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.targetsize-80_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.targetsize-96.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/AppListIcon.targetsize-96_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/MediumTile.scale-100.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/MediumTile.scale-125.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/MediumTile.scale-150.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/MediumTile.scale-200.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/MediumTile.scale-400.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/SmallTile.scale-100.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/SmallTile.scale-125.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/SmallTile.scale-150.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/SmallTile.scale-200.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/SmallTile.scale-400.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/WideTile.scale-100.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/WideTile.scale-125.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/WideTile.scale-150.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/WideTile.scale-200.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/WideTile.scale-400.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.scale-100.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.scale-125.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.scale-150.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.scale-200.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.scale-400.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.targetsize-16.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.targetsize-16_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.targetsize-20.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.targetsize-20_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.targetsize-24.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.targetsize-24_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.targetsize-256.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.targetsize-256_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.targetsize-32.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.targetsize-32_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.targetsize-40.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.targetsize-40_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.targetsize-48.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.targetsize-48_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.targetsize-64.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.targetsize-64_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.targetsize-80.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.targetsize-80_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.targetsize-96.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/AppListIcon.targetsize-96_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/MediumTile.scale-100.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/MediumTile.scale-125.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/MediumTile.scale-150.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/MediumTile.scale-200.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/MediumTile.scale-400.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/SmallTile.scale-100.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/SmallTile.scale-125.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/SmallTile.scale-150.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/SmallTile.scale-200.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/SmallTile.scale-400.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/WideTile.scale-100.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/WideTile.scale-125.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/WideTile.scale-150.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/WideTile.scale-200.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-black/WideTile.scale-400.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.scale-100.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.scale-125.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.scale-150.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.scale-200.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.scale-400.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.targetsize-16.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.targetsize-16_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.targetsize-20.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.targetsize-20_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.targetsize-24.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.targetsize-24_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.targetsize-256.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.targetsize-256_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.targetsize-32.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.targetsize-32_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.targetsize-40.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.targetsize-40_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.targetsize-48.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.targetsize-48_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.targetsize-64.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.targetsize-64_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.targetsize-80.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.targetsize-80_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.targetsize-96.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/AppListIcon.targetsize-96_altform-unplated.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/MediumTile.scale-100.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/MediumTile.scale-125.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/MediumTile.scale-150.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/MediumTile.scale-200.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/MediumTile.scale-400.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/SmallTile.scale-100.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/SmallTile.scale-125.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/SmallTile.scale-150.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/SmallTile.scale-200.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/SmallTile.scale-400.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/WideTile.scale-100.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/WideTile.scale-125.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/WideTile.scale-150.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/WideTile.scale-200.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Icons/contrast-white/WideTile.scale-400.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/SmallIcon.targetsize-16.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/SmallIcon.targetsize-32.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/SmallLogo.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/SplashScreen.contrast-black.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/SplashScreen.contrast-black_scale-100.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/SplashScreen.contrast-black_scale-140.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/SplashScreen.contrast-black_scale-180.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/SplashScreen.contrast-white.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/SplashScreen.contrast-white_scale-100.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/SplashScreen.contrast-white_scale-140.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/SplashScreen.contrast-white_scale-180.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/SplashScreen.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/SplashScreen.scale-100.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/SplashScreen.scale-140.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/SplashScreen.scale-180.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Splashscreen.contrast-black_scale-80.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Splashscreen.contrast-white_scale-80.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/Splashscreen.scale-80.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/StoreLogo.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/badge.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/dismiss.contrast-black.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/dismiss.contrast-white.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/dismiss.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/openlink.white.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/store.contrast-black.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Assets/store.png

.png

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/BingConfiguration/BingConfiguration_common.xml

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/BingConfiguration/BingConfiguration_de-DE.xml

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/BingConfiguration/BingConfiguration_en-AU.xml

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/BingConfiguration/BingConfiguration_en-CA.xml

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/BingConfiguration/BingConfiguration_en-GB.xml

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/BingConfiguration/BingConfiguration_en-IN.xml

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/BingConfiguration/BingConfiguration_en-US.xml

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/BingConfiguration/BingConfiguration_es-ES.xml

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/BingConfiguration/BingConfiguration_es-MX.xml

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/BingConfiguration/BingConfiguration_fr-CA.xml

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/BingConfiguration/BingConfiguration_fr-FR.xml

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/BingConfiguration/BingConfiguration_it-IT.xml

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/BingConfiguration/BingConfiguration_ja-JP.xml

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/BingConfiguration/BingConfiguration_pt-BR.xml

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/BingConfiguration/BingConfiguration_zh-CN.xml

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/BingConfigurationClient.dll

.dll windows:10 windows x64 arch:x64

b9756b4d0d9b95fa702609f696138153

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

BingConfigurationClient.pdb

Imports

msvcrt

_XcptFilter

_amsg_exit

_initterm

malloc

??3@YAXPEAX@Z

_wcsicmp

_wcsnicmp

_wtoi

_wtof

_callnewh

?terminate@@YAXXZ

_lock

_unlock

__dllonexit

_onexit

??1type_info@@UEAA@XZ

_vsnprintf_s

??0exception@@QEAA@AEBV0@@Z

??0exception@@QEAA@XZ

??1exception@@UEAA@XZ

_purecall

memcpy_s

memmove

_vsnwprintf

??_V@YAXPEAX@Z

__C_specific_handler

__CxxFrameHandler3

free

_CxxThrowException

memcpy

memset

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameA

GetProcAddress

GetModuleHandleExW

GetModuleHandleW

DisableThreadLibraryCalls

api-ms-win-core-synch-l1-2-0

Sleep

InitOnceBeginInitialize

InitOnceComplete

api-ms-win-core-synch-l1-1-0

EnterCriticalSection

LeaveCriticalSection

WaitForSingleObjectEx

CreateMutexExW

OpenSemaphoreW

DeleteCriticalSection

ReleaseMutex

WaitForSingleObject

InitializeCriticalSection

CreateSemaphoreExW

ReleaseSemaphore

api-ms-win-core-heap-l1-1-0

GetProcessHeap

HeapAlloc

HeapFree

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

SetLastError

RaiseException

SetUnhandledExceptionFilter

GetLastError

api-ms-win-core-com-l1-1-0

CoCreateInstance

CreateStreamOnHGlobal

api-ms-win-eventing-provider-l1-1-0

EventUnregister

EventSetInformation

EventRegister

EventWriteTransfer

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

TerminateProcess

api-ms-win-core-localization-l1-2-0

GetLocaleInfoEx

FormatMessageW

ResolveLocaleName

api-ms-win-core-debug-l1-1-0

DebugBreak

IsDebuggerPresent

OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-string-l1-1-0

CompareStringOrdinal

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlVirtualUnwind

RtlLookupFunctionEntry

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

msvcp110_win

?_Syserror_map@std@@YAPEBDH@Z

?_Winerror_map@std@@YAPEBDH@Z

?_Xout_of_range@std@@YAXPEBD@Z

??0id@locale@std@@QEAA@_K@Z

?_Xlength_error@std@@YAXPEBD@Z

?_Xbad_alloc@std@@YAXXZ

api-ms-win-core-file-l1-1-0

CreateFileW

GetFileSize

ReadFile

api-ms-win-core-winrt-string-l1-1-0

WindowsDeleteString

WindowsGetStringRawBuffer

WindowsCreateStringReference

api-ms-win-core-winrt-l1-1-0

RoActivateInstance

RoGetActivationFactory

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

BingConfigurationClient_GetBrowserLocaleConfiguration

BingConfigurationClient_GetLocaleConfiguration

BingConfigurationClient_GetMarketAsLocale

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/ConstraintIndex/ConstraintIndex.cab

.cab

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Cortana.Internal.Search.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.rdata
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Cortana.Search.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/DefaultSettings.xml

.xml

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/Search.Core.dll

.dll windows:10 windows x64 arch:x64

5e078e725c7452a5cc3db3554bf38c6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

Search.Core.pdb

Imports

api-ms-win-crt-private-l1-1-0

_o__get_errno

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__purecall

_o__register_onexit_function

_o__seh_filter_dll

_o__set_errno

_o__wtoi

_o_free

_o_malloc

_o_terminate

_o_wcstol

__CxxFrameHandler4

__std_terminate

wcsstr

memcpy

memcmp

_o__execute_onexit_table

_o__errno

_CxxThrowException

__CxxFrameHandler3

__C_specific_handler

_o__crt_atexit

_o__configure_narrow_argv

_o__cexit

_o__callnewh

_o___stdio_common_vswscanf

_o___stdio_common_vswprintf

_o___stdio_common_vsnprintf_s

_o___std_type_info_destroy_list

_o___std_exception_destroy

_o___std_exception_copy

memmove

api-ms-win-crt-runtime-l1-1-0

_initterm

_initterm_e

msvcp_win

?_Xlength_error@std@@YAXPEBD@Z

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

GetModuleFileNameA

GetModuleHandleW

GetProcAddress

DisableThreadLibraryCalls

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW

RoOriginateError

GetRestrictedErrorInfo

RoTransformError

SetRestrictedErrorInfo

api-ms-win-core-util-l1-1-0

DecodePointer

EncodePointer

api-ms-win-core-synch-l1-1-0

OpenSemaphoreW

WaitForSingleObjectEx

ReleaseSemaphore

WaitForSingleObject

LeaveCriticalSection

CreateEventExW

SetEvent

InitializeCriticalSectionEx

DeleteCriticalSection

EnterCriticalSection

InitializeSRWLock

AcquireSRWLockShared

ReleaseSRWLockShared

CreateMutexExW

AcquireSRWLockExclusive

ReleaseSRWLockExclusive

CreateSemaphoreExW

ReleaseMutex

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize

InitOnceComplete

InitOnceExecuteOnce

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference

WindowsDuplicateString

WindowsDeleteString

WindowsCreateString

WindowsGetStringRawBuffer

WindowsStringHasEmbeddedNull

WindowsIsStringEmpty

WindowsCompareStringOrdinal

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer

EventUnregister

EventSetInformation

EventRegister

EventActivityIdControl

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

DebugBreak

OutputDebugStringW

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess

TerminateProcess

GetCurrentThreadId

OpenProcessToken

GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

GetUserPreferredUILanguages

FormatMessageW

GetGeoInfoW

GetUserGeoID

api-ms-win-core-heap-l1-1-0

HeapFree

HeapAlloc

GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

SetLastError

GetLastError

RaiseException

SetUnhandledExceptionFilter

UnhandledExceptionFilter

api-ms-win-core-com-l1-1-0

CoIncrementMTAUsage

CreateStreamOnHGlobal

CoReleaseMarshalData

CoTaskMemRealloc

CoGetInterfaceAndReleaseStream

CoGetMalloc

CoMarshalInterface

CoCreateFreeThreadedMarshaler

CoWaitForMultipleHandles

CoTaskMemAlloc

CoTaskMemFree

CoCreateInstance

CoCreateGuid

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolTimer

WaitForThreadpoolTimerCallbacks

CloseThreadpoolTimer

CreateThreadpoolTimer

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

WideCharToMultiByte

CompareStringOrdinal

api-ms-win-appmodel-runtime-l1-1-0

GetCurrentApplicationUserModelId

api-ms-win-shcore-taskpool-l1-1-0

SHTaskPoolQueueTask

SHTaskPoolAllowThreadReuse

api-ms-win-core-winrt-l1-1-0

RoActivateInstance

RoGetActivationFactory

api-ms-win-core-com-l1-1-1

RoGetAgileReference

api-ms-win-core-winrt-error-l1-1-1

RoReportFailedDelegate

IsErrorPropagationEnabled

RoGetMatchingRestrictedErrorInfo

RoOriginateLanguageException

api-ms-win-core-processthreads-l1-1-1

OpenProcess

IsProcessorFeaturePresent

api-ms-win-security-base-l1-1-0

GetTokenInformation

api-ms-win-core-registry-l1-1-0

RegQueryValueExW

RegCloseKey

RegGetValueW

RegEnumKeyExW

RegDeleteValueW

RegSetValueExW

RegCreateKeyExW

RegDeleteTreeW

RegOpenKeyExW

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-core-sysinfo-l1-1-0

GetSystemTime

GetVersionExW

GetSystemTimeAsFileTime

api-ms-win-rtcore-ntuser-window-l1-1-0

PostMessageW

FindWindowW

RegisterWindowMessageW

api-ms-win-security-sddl-l1-1-0

ConvertSidToStringSidW

api-ms-win-core-file-l1-1-0

CreateFileW

GetFileAttributesW

CreateDirectoryW

ReadFile

SetFileInformationByHandle

WriteFile

api-ms-win-core-file-l2-1-0

GetFileInformationByHandleEx

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime

api-ms-win-shcore-stream-l1-1-0

SHCreateStreamOnFileEx

api-ms-win-shcore-obsolete-l1-1-0

SHStrDupW

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind

RtlCaptureContext

RtlLookupFunctionEntry

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

InterlockedPushEntrySList

bingconfigurationclient

BingConfigurationClient_GetBrowserLocaleConfiguration

shcore

ord190

bcp47langs

Bcp47GetDistance

GetUserLanguages

Bcp47GetDirectionality

Bcp47GetMuiForm

api-ms-win-crt-string-l1-1-0

memset

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

oleaut32

SysFreeString

Exports

DllCanUnloadNow

DllGetActivationFactory

DllGetClassObject

Sections

.text
Size: 314KB - Virtual size: 314KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/SearchApi.CppWinrt.dll

.dll windows:10 windows x64 arch:x64

39f04f5eeb406571252c81ac044b5a2a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

SearchApi.CppWinrt.pdb

Imports

msvcp_win

?__ExceptionPtrCurrentException@@YAXPEAX@Z

?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z

?__ExceptionPtrRethrow@@YAXPEBX@Z

?__ExceptionPtrCreate@@YAXPEAX@Z

?_Xlength_error@std@@YAXPEBD@Z

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

?__ExceptionPtrDestroy@@YAXPEAX@Z

?__ExceptionPtrAssign@@YAXPEAXPEBX@Z

api-ms-win-crt-runtime-l1-1-0

_initterm_e

_initterm

api-ms-win-crt-private-l1-1-0

_o__callnewh

_o__cexit

_o__configure_narrow_argv

_o__crt_atexit

_o__errno

_o__execute_onexit_table

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__register_onexit_function

_o__seh_filter_dll

memmove

_o_free

_o_iswspace

_o_malloc

_o_terminate

__C_specific_handler

__CxxFrameHandler3

_CxxThrowException

_o___stdio_common_vswprintf_s

_o___stdio_common_vswprintf

_o___stdio_common_vsnprintf_s

_o___std_type_info_destroy_list

_o___std_exception_destroy

_o___std_exception_copy

__std_terminate

__CxxFrameHandler4

memcmp

memcpy

api-ms-win-crt-string-l1-1-0

memset

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameA

GetModuleHandleW

DisableThreadLibraryCalls

GetProcAddress

GetModuleHandleExW

api-ms-win-core-synch-l1-2-0

InitOnceComplete

InitOnceExecuteOnce

InitOnceBeginInitialize

api-ms-win-core-synch-l1-1-0

ReleaseSRWLockShared

AcquireSRWLockShared

ReleaseMutex

CreateSemaphoreExW

WaitForSingleObjectEx

ReleaseSemaphore

AcquireSRWLockExclusive

ReleaseSRWLockExclusive

WaitForSingleObject

OpenSemaphoreW

CreateMutexExW

api-ms-win-core-heap-l1-1-0

HeapAlloc

GetProcessHeap

HeapFree

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

GetLastError

SetUnhandledExceptionFilter

SetLastError

api-ms-win-eventing-provider-l1-1-0

EventUnregister

EventWriteTransfer

EventSetInformation

EventRegister

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

TerminateProcess

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

DebugBreak

IsDebuggerPresent

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW

RoTransformError

GetRestrictedErrorInfo

RoOriginateError

SetRestrictedErrorInfo

api-ms-win-core-util-l1-1-0

DecodePointer

EncodePointer

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference

WindowsGetStringRawBuffer

WindowsStringHasEmbeddedNull

WindowsDuplicateString

WindowsIsStringEmpty

WindowsDeleteString

WindowsCreateString

WindowsPromoteStringBuffer

WindowsPreallocateStringBuffer

WindowsDeleteStringBuffer

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList

InterlockedPushEntrySList

InitializeSListHead

oleaut32

SysStringLen

SysFreeString

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler

CoIncrementMTAUsage

CoTaskMemAlloc

CoGetObjectContext

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-threadpool-l1-2-0

TrySubmitThreadpoolCallback

api-ms-win-core-com-l1-1-1

RoGetAgileReference

Exports

DllCanUnloadNow

DllGetActivationFactory

DllGetClassObject

Sections

.text
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/SearchApi.ProxyStub.dll

.dll windows:10 windows x64 arch:x64

ba2bdcc083ed1d395497df12fe06846f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

SearchApi.ProxyStub.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_initterm_e

_initterm

api-ms-win-crt-private-l1-1-0

_o__configure_narrow_argv

_o__execute_onexit_table

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__seh_filter_dll

memcmp

__C_specific_handler

_o__cexit

_o___std_type_info_destroy_list

api-ms-win-crt-string-l1-1-0

memset

rpcrt4

NdrCStdStubBuffer2_Release

IUnknown_AddRef_Proxy

CStdStubBuffer_DebugServerQueryInterface

CStdStubBuffer_CountRefs

CStdStubBuffer_QueryInterface

NdrOleAllocate

CStdStubBuffer_DebugServerRelease

CStdStubBuffer_AddRef

CStdStubBuffer_Disconnect

IUnknown_QueryInterface_Proxy

CStdStubBuffer_Invoke

NdrStubCall3

CStdStubBuffer_IsIIDSupported

CStdStubBuffer_Connect

IUnknown_Release_Proxy

NdrStubForwardingFunction

NdrDllGetClassObject

NdrDllCanUnloadNow

NdrCStdStubBuffer_Release

NdrOleFree

api-ms-win-core-winrt-string-l1-1-0

HSTRING_UserUnmarshal

HSTRING_UserMarshal64

HSTRING_UserFree

HSTRING_UserSize64

HSTRING_UserFree64

HSTRING_UserMarshal

HSTRING_UserSize

HSTRING_UserUnmarshal64

api-ms-win-core-com-midlproxystub-l1-1-0

CStdStubBuffer2_QueryInterface

ObjectStublessClient19

ObjectStublessClient11

ObjectStublessClient13

ObjectStublessClient31

ObjectStublessClient12

ObjectStublessClient7

ObjectStublessClient25

ObjectStublessClient24

CStdStubBuffer2_Disconnect

CStdStubBuffer2_Connect

ObjectStublessClient23

ObjectStublessClient15

ObjectStublessClient20

NdrProxyForwardingFunction3

ObjectStublessClient21

ObjectStublessClient28

ObjectStublessClient29

ObjectStublessClient16

ObjectStublessClient18

ObjectStublessClient14

ObjectStublessClient27

ObjectStublessClient3

ObjectStublessClient10

ObjectStublessClient17

ObjectStublessClient26

ObjectStublessClient22

ObjectStublessClient9

ObjectStublessClient8

ObjectStublessClient6

NdrProxyForwardingFunction5

NdrProxyForwardingFunction4

ObjectStublessClient30

CStdStubBuffer2_CountRefs

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess

GetCurrentThreadId

GetCurrentProcessId

TerminateProcess

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

UnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

Exports

DllCanUnloadNow

DllGetClassObject

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 328KB - Virtual size: 327KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/SearchApi.dll

.dll windows:10 windows x64 arch:x64

dd0ce74a56583ee3ac41af01265a1875

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

SearchApi.pdb

Imports

api-ms-win-crt-private-l1-1-0

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__itow_s

_o__lock_file

_o__purecall

_o__register_onexit_function

_o__seh_filter_dll

_o__set_errno

_o__stricmp

_o__unlock_file

_o__wcsicmp

_o__wcsnicmp

_o__wsplitpath_s

_o__wtoi64

_o_atoi

_o_fclose

_o_fflush

_o_fgetc

_o_fgetpos

_o_fputc

_o_fread

_o_free

_o_fsetpos

_o_fwrite

_o_iswspace

_o_malloc

_o_realloc

_o_setvbuf

_o_strtok_s

_o_tolower

_o_towlower

_o_towupper

_o_ungetc

_o_wcstok_s

__CxxFrameHandler4

__std_terminate

strchr

wcsstr

memmove

memcpy

memcmp

_o__get_stream_buffer_pointers

_o__get_errno

_CxxThrowException

__CxxFrameHandler3

__C_specific_handler

_o__fseeki64

_o__execute_onexit_table

_o__errno

_o__crt_atexit

_o__configure_narrow_argv

_o__cexit

_o__callnewh

_o___stdio_common_vswscanf

_o___stdio_common_vswprintf

_o___stdio_common_vsprintf

_o___stdio_common_vsnprintf_s

_o___std_type_info_destroy_list

_o___std_exception_destroy

_o___std_exception_copy

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-runtime-l1-1-0

_initterm_e

_initterm

msvcp_win

?_ReportUnobservedException@details@Concurrency@@YAXXZ

_Cnd_destroy_in_situ

?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ

_Mtx_init_in_situ

_Cnd_init_in_situ

?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?GetNextAsyncId@platform@details@Concurrency@@YAIXZ

_Wcsxfrm

_Wcscoll

?_Incref@facet@locale@std@@UEAAXXZ

?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

_Cnd_broadcast

?is@?$ctype@_W@std@@QEBA_NF_W@Z

?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z

?_Xbad_function_call@std@@YAXXZ

?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ

??1_Locinfo@std@@QEAA@XZ

??1_Lockit@std@@QEAA@XZ

?c_str@?$_Yarn@D@std@@QEBAPEBDXZ

??0_Locinfo@std@@QEAA@PEBD@Z

_Mtx_lock

??0_Lockit@std@@QEAA@H@Z

_Mtx_unlock

?_Throw_C_error@std@@YAXH@Z

_Cnd_wait

?_IsNonBlockingThread@_Task_impl_base@details@Concurrency@@SA_NXZ

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

?id@?$ctype@_W@std@@2V0locale@2@A

??Bid@locale@std@@QEAA_KXZ

?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

?_Xout_of_range@std@@YAXPEBD@Z

?_Xbad_alloc@std@@YAXXZ

?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ

?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z

?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z

?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?__ExceptionPtrAssign@@YAXPEAXPEBX@Z

?__ExceptionPtrCreate@@YAXPEAX@Z

?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ

?__ExceptionPtrCurrentException@@YAXPEAX@Z

?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

?__ExceptionPtrToBool@@YA_NPEBX@Z

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ

?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z

?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z

?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

?__ExceptionPtrRethrow@@YAXPEBX@Z

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

?__ExceptionPtrDestroy@@YAXPEAX@Z

?_XGetLastError@std@@YAXXZ

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ

?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z

?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A

?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z

_Mtx_destroy_in_situ

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ

?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z

?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

??1facet@locale@std@@MEAA@XZ

??0facet@locale@std@@IEAA@_K@Z

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z

?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ

?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z

?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ

?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ

?eof@ios_base@std@@QEBA_NXZ

?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ

?exceptions@ios_base@std@@QEAAXH@Z

?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ

??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z

??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A

?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z

?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z

??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z

??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z

?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z

??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ

??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z

?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ

?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z

?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ

?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ

?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ

?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z

?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ

?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ

?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z

?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z

?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z

?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z

?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z

?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ

?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ

?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ

?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ

?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ

?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ

?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ

??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ

?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z

?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ

?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ

??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

?fail@ios_base@std@@QEBA_NXZ

??Bios_base@std@@QEBA_NXZ

?_Xlength_error@std@@YAXPEBD@Z

?_Random_device@std@@YAIXZ

?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z

?tolower@?$ctype@_W@std@@QEBA_W_W@Z

?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z

?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?always_noconv@codecvt_base@std@@QEBA_NXZ

?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ

?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ

?id@?$collate@_W@std@@2V0locale@2@A

?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z

?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z

?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z

wincorlib

?Free@Heap@Details@Platform@@SAXPEAX@Z

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

??0Object@Platform@@QE$AAA@XZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

??0OutOfMemoryException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z

?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

?ToString@uint32@default@@QEAAPE$AAVString@Platform@@XZ

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?GetType@Object@Platform@@QE$AAAPE$AAVType@2@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K@Z

??0Delegate@Platform@@QE$AAA@XZ

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

??0DisconnectedException@Platform@@QE$AAA@XZ

?ToString@Enum@Platform@@QE$AAAPE$AAVString@2@XZ

?ToString@float64@default@@QEAAPE$AAVString@Platform@@XZ

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?ToString@Guid@Platform@@QEAAPE$AAVString@2@XZ

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

??0NotImplementedException@Platform@@QE$AAA@PE$AAVString@1@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

??0AccessDeniedException@Platform@@QE$AAA@XZ

?ToString@int32@default@@QEAAPE$AAVString@Platform@@XZ

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

??0Exception@Platform@@QE$AAA@H@Z

?InitializeData@Details@Platform@@YAJH@Z

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

?UninitializeData@Details@Platform@@YAXH@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

api-ms-win-core-registry-l1-1-0

RegQueryValueExW

RegCreateKeyExW

RegSetValueExW

RegCloseKey

RegGetValueW

RegOpenKeyExW

RegQueryInfoKeyW

RegEnumValueW

RegOpenCurrentUser

RegDeleteTreeW

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

RaiseException

SetLastError

GetLastError

UnhandledExceptionFilter

api-ms-win-core-com-l1-1-0

CoTaskMemRealloc

CoGetContextToken

CoTaskMemAlloc

CoTaskMemFree

CoCreateFreeThreadedMarshaler

CLSIDFromString

StringFromGUID2

PropVariantClear

CoCreateInstance

CoCreateGuid

api-ms-win-core-registry-l2-1-0

RegEnumKeyW

RegOpenKeyW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

DebugBreak

OutputDebugStringW

api-ms-win-core-processthreads-l1-1-0

ProcessIdToSessionId

GetCurrentProcess

GetCurrentProcessId

TerminateProcess

GetCurrentThreadId

api-ms-win-core-localization-l1-2-0

LocaleNameToLCID

GetLocaleInfoW

GetThreadUILanguage

ResolveLocaleName

FormatMessageW

GetLocaleInfoEx

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-eventing-provider-l1-1-0

EventRegister

EventSetInformation

EventUnregister

EventActivityIdControl

EventWriteTransfer

api-ms-win-core-heap-l1-1-0

HeapAlloc

HeapFree

GetProcessHeap

api-ms-win-core-synch-l1-1-0

SetEvent

CreateEventW

CreateEventExW

AcquireSRWLockShared

ReleaseSRWLockShared

WaitForSingleObjectEx

LeaveCriticalSection

EnterCriticalSection

DeleteCriticalSection

InitializeCriticalSectionEx

CreateSemaphoreExW

WaitForSingleObject

CreateMutexW

ResetEvent

ReleaseSemaphore

InitializeCriticalSectionAndSpinCount

OpenSemaphoreW

ReleaseSRWLockExclusive

ReleaseMutex

AcquireSRWLockExclusive

CreateMutexExW

api-ms-win-core-synch-l1-2-0

Sleep

WakeConditionVariable

InitOnceBeginInitialize

InitOnceComplete

InitOnceExecuteOnce

SleepConditionVariableSRW

api-ms-win-core-file-l1-1-0

CreateDirectoryW

CreateFileW

WriteFile

ReadFile

DeleteFileW

GetFileSizeEx

SetFileAttributesW

SetFileTime

GetFileAttributesW

SetFilePointer

GetFullPathNameW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-sysinfo-l1-2-0

GetProductInfo

GetSystemTimePreciseAsFileTime

api-ms-win-core-string-l1-1-0

WideCharToMultiByte

CompareStringOrdinal

MultiByteToWideChar

api-ms-win-core-shlwapi-legacy-l1-1-0

PathRemoveExtensionW

PathParseIconLocationW

PathFileExistsW

PathFindFileNameW

PathIsPrefixW

PathCommonPrefixW

PathFindExtensionW

PathIsFileSpecW

ext-ms-win-shell32-shellfolders-l1-1-0

SHGetKnownFolderPath

api-ms-win-core-string-obsolete-l1-1-0

lstrlenW

api-ms-win-shlwapi-winrt-storage-l1-1-1

ord24

api-ms-win-appmodel-runtime-l1-1-1

GetStagedPackageOrigin

api-ms-win-core-registry-l1-1-1

RegSetKeyValueW

RegDeleteKeyValueW

api-ms-win-shcore-stream-winrt-l1-1-0

CreateRandomAccessStreamOnFile

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount64

GetSystemTime

GetVersionExW

GlobalMemoryStatusEx

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress

DisableThreadLibraryCalls

GetModuleHandleW

GetModuleFileNameA

GetModuleHandleExW

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolTimer

SetThreadpoolTimer

CloseThreadpoolTimer

WaitForThreadpoolTimerCallbacks

ntdll

RtlGetDeviceFamilyInfoEnum

api-ms-win-rtcore-ntuser-window-l1-1-0

SendNotifyMessageW

SendMessageW

IsWindow

FindWindowW

RegisterWindowMessageW

PostMessageW

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime

SystemTimeToFileTime

GetDynamicTimeZoneInformation

crypt32

CryptBinaryToStringW

api-ms-win-core-url-l1-1-0

UrlEscapeW

api-ms-win-core-string-l2-1-0

CharUpperBuffW

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency

QueryPerformanceCounter

api-ms-win-core-psapi-l1-1-0

K32GetProcessMemoryInfo

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringLen

WindowsGetStringRawBuffer

WindowsIsStringEmpty

WindowsCompareStringOrdinal

WindowsDeleteString

WindowsDuplicateString

WindowsCreateString

WindowsConcatString

WindowsCreateStringReference

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-shcore-taskpool-l1-1-0

SHTaskPoolQueueTask

SHTaskPoolGetUniqueContext

api-ms-win-eventing-controller-l1-1-0

StartTraceW

EnableTraceEx2

StopTraceW

api-ms-win-eventing-legacy-l1-1-0

UpdateTraceW

api-ms-win-ntuser-sysparams-l1-1-0

SystemParametersInfoW

GetSystemMetrics

api-ms-win-core-normalization-l1-1-0

GetStringScripts

api-ms-win-appmodel-runtime-l1-1-0

GetCurrentPackageFamilyName

api-ms-win-core-com-l1-1-1

RoGetAgileReference

api-ms-win-core-path-l1-1-0

PathCchCanonicalize

PathAllocCanonicalize

PathCchRemoveBackslash

sspicli

GetUserNameExW

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrStrIW

StrChrW

StrCmpNICW

api-ms-win-shcore-obsolete-l1-1-0

SHStrDupW

api-ms-win-security-sddl-l1-1-0

ConvertSidToStringSidW

api-ms-win-core-heap-l2-1-0

LocalFree

LocalAlloc

api-ms-win-security-base-l1-1-0

GetTokenInformation

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

api-ms-win-crt-string-l1-1-0

wcscmp

memset

wcslen

wcsncmp

cabinet

ord21

ord20

ord23

ord22

api-ms-win-core-kernel32-legacy-l1-1-0

DosDateTimeToFileTime

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-crt-math-l1-1-0

logf

ceilf

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

RT_CODE
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 484KB - Virtual size: 490KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 341KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

SystemApps/Microsoft.Windows.Search_cw5n1h2txyewy/SearchApp.exe

.exe windows:10 windows x64 arch:x64

d3bb3467d2e2788579d264fc1baaa4dc

Code Sign

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05-05-2022 19:23

Not After

04-05-2023 19:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

77:b1:b7:66:9a:da:bc:4b:f1:46:c2:9b:0f:25:35:48:61:05:f4:6e:3f:2b:bd:da:1d:87:fd:9d:cf:af:2c:aa
Signer

Actual PE Digest

77:b1:b7:66:9a:da:bc:4b:f1:46:c2:9b:0f:25:35:48:61:05:f4:6e:3f:2b:bd:da:1d:87:fd:9d:cf:af:2c:aa

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

SearchApp.pdb

Imports

api-ms-win-crt-private-l1-1-0

_o__get_narrow_winmain_command_line

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__purecall

_o__register_onexit_function

_o__seh_filter_exe

_o__set_app_type

_o__set_fmode

_o__set_new_mode

_o__wcsicmp

_o__wcsnicmp

_o_exit

_o_free

_o_malloc

_o_rand

_o_realloc

_o_srand

_o_terminate

_o_wcstol

_o_wcstombs_s

__CxxFrameHandler4

__std_terminate

wcsstr

wcsrchr

strchr

memmove

memcpy

memcmp

_CxxThrowException

__C_specific_handler

__CxxFrameHandler3

_o__crt_atexit

_o__errno

_o___stdio_common_vswprintf

_o___stdio_common_vsnprintf_s

_o__configure_narrow_argv

_o__configthreadlocale

_o___std_exception_destroy

_o__exit

_o___std_exception_copy

_o__dtest

_o___p__commode

_o__cexit

_o__callnewh

_o__difftime64

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-string-l1-1-0

wcscmp

wcsncmp

wcslen

memset

api-ms-win-crt-runtime-l1-1-0

_c_exit

_initterm_e

_register_thread_local_exe_atexit_callback

_initterm

msvcp_win

?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z

?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ

?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z

_Mtx_lock

?_Throw_C_error@std@@YAXH@Z

?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z

_Mtx_unlock

?_Xbad_function_call@std@@YAXXZ

?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ

_Cnd_broadcast

_Mtx_destroy_in_situ

?__ExceptionPtrAssign@@YAXPEAXPEBX@Z

_Cnd_destroy_in_situ

_Cnd_wait

?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ

_Mtx_init_in_situ

_Cnd_init_in_situ

?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ

?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z

?_Xout_of_range@std@@YAXPEBD@Z

?_IsNonBlockingThread@_Task_impl_base@details@Concurrency@@SA_NXZ

??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

?_Xinvalid_argument@std@@YAXPEBD@Z

?GetNextAsyncId@platform@details@Concurrency@@YAIXZ

??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ

?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ

?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z

?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ

??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

?_Xbad_alloc@std@@YAXXZ

?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ

?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ

?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ

?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ

?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ

?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z

?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z

?__ExceptionPtrCreate@@YAXPEAX@Z

?tolower@?$ctype@_W@std@@QEBA_W_W@Z

?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z

?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z

?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ

?__ExceptionPtrCurrentException@@YAXPEAX@Z

?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z

?id@?$collate@_W@std@@2V0locale@2@A

?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z

?__ExceptionPtrToBool@@YA_NPEBX@Z

?__ExceptionPtrRethrow@@YAXPEBX@Z

?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z

??0_Locinfo@std@@QEAA@PEBD@Z

?c_str@?$_Yarn@D@std@@QEBAPEBDXZ

??1_Locinfo@std@@QEAA@XZ

?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ

?is@?$ctype@_W@std@@QEBA_NF_W@Z

?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

?_Incref@facet@locale@std@@UEAAXXZ

_Wcscoll

?__ExceptionPtrDestroy@@YAXPEAX@Z

_Wcsxfrm

??1facet@locale@std@@MEAA@XZ

??0facet@locale@std@@IEAA@_K@Z

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z

?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z

?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ

?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z

?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z

?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z

?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z

?_XGetLastError@std@@YAXXZ

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ

?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ

?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ

?_Xlength_error@std@@YAXPEBD@Z

?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ

?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z

?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?getloc@ios_base@std@@QEBA?AVlocale@2@XZ

?_ReportUnobservedException@details@Concurrency@@YAXXZ

?id@?$ctype@_W@std@@2V0locale@2@A

?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ

??Bid@locale@std@@QEAA_KXZ

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

??0_Lockit@std@@QEAA@H@Z

??1_Lockit@std@@QEAA@XZ

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ

_Xtime_get_ticks