Roblox Executor Aurora X BYFRON BYPASS PC 2024[.]rar

resource
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/AAD.Core.winmd
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Microsoft.AAD.BrokerPlugin.winmd
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/Microsoft.AsyncTextService.exe
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.BioEnrollment_cw5n1h2txyewy/BioEnrollmentUI.dll
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/GazeInputInternal.dll
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/GazeInputInternal.winmd
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/GazeInteraction.dll
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/GazeInteraction.winmd
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Microsoft.ECApp.exe
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/ecsystem.dll
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Win32WebViewHost_cw5n1h2txyewy/Win32WebViewHost.exe
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/CallingShellApp.exe
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/CallingShellAppPresenters.dll
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/WindowsInternal.Shell.Experiences.Calling.winmd
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/WindowsInternal.Shell.Experiences.CallingShellAppControls.dll
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy/PinningConfirmationDialog.exe
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/GamingTcuiHelpers.dll
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/GamingUI.XboxLive.InternalHelpers.winmd
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Toolkit.dll
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/XBox.TCUI.Resource.dll
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/XBox.TCUI.Shell.dll
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/XBox.TCUI.Tracing.dll
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/XBox.TCUI.exe
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/XboxExperienceServices.dll
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy/windowsudk.winmd
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/NcsiUwpApp_8wekyb3d8bbwe/NcsiUwpApp.winmd
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/NcsiUwpApp_8wekyb3d8bbwe/NcsiUwpBackgroundTasks.winmd
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Windows.CBSPreview_cw5n1h2txyewy/CameraBarcodeScannerPreview.exe
unpack001/Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/NarratorQuickStart.exe

Roblox Executor Aurora X BYFRON BYPASS PC 2024.rar

.rar

Password: 1703

Roblox Executor Aurora X BYFRON BYPASS PC 2024/CBSPreview/App.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/CBSPreview/Assets/Digimarc-Logo.png

.png

Password: 1703

Roblox Executor Aurora X BYFRON BYPASS PC 2024/CBSPreview/Assets/SplashScreen.png

.png

Password: 1703

Roblox Executor Aurora X BYFRON BYPASS PC 2024/CBSPreview/Assets/Square150x150Logo.png

.png

Password: 1703

Roblox Executor Aurora X BYFRON BYPASS PC 2024/CBSPreview/Assets/Square44x44Logo.png

.png

Password: 1703

Roblox Executor Aurora X BYFRON BYPASS PC 2024/CBSPreview/Assets/StoreLogo.png

.png

Password: 1703

Roblox Executor Aurora X BYFRON BYPASS PC 2024/CBSPreview/Assets/Wide310x150Logo.png

.png

Password: 1703

Roblox Executor Aurora X BYFRON BYPASS PC 2024/CBSPreview/MainPage.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/CBSPreview/appxblockmap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/CBSPreview/appxmanifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/CBSPreview/appxsignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/CBSPreview/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/CBSPreview/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/CBSPreview/pris/resources.ru-RU.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/CBSPreview/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/Setup.exe

.exe windows:4 windows x86 arch:x86

Password: 1703

56a78d55f3f7af51443e58e0ce2fb5f6

Code Sign

09:59:9d:a1:98:ab:73:b3:9c:e6:63:8b
Certificate

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

22/08/2023, 08:26

Not After

08/11/2026, 12:04

Subject

CN=IP Izmaylov Artem Andreevich,O=IP Izmaylov Artem Andreevich,L=Tula,ST=Tula Oblast,C=RU,1.2.840.113549.1.9.1=#0c0f737570706f72744061696d702e7275

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

06/04/2022, 07:44

Not After

08/05/2033, 07:44

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

20/02/2019, 00:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18/03/2009, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

07:3f:de:b6:ab:e3:97:42:11:6b:1a:30:63:2a:c8:38:28:d2:01:1b:f1:d8:54:08:61:80:8a:ec:d7:0d:b5:7c
Signer

Actual PE Digest

07:3f:de:b6:ab:e3:97:42:11:6b:1a:30:63:2a:c8:38:28:d2:01:1b:f1:d8:54:08:61:80:8a:ec:d7:0d:b5:7c

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExW

RegEnumKeyW

RegQueryValueExW

RegSetValueExW

RegCloseKey

RegDeleteValueW

RegDeleteKeyW

AdjustTokenPrivileges

LookupPrivilegeValueW

OpenProcessToken

SetFileSecurityW

RegOpenKeyExW

RegEnumValueW

shell32

SHGetSpecialFolderLocation

SHFileOperationW

SHBrowseForFolderW

SHGetPathFromIDListW

ShellExecuteExW

SHGetFileInfoW

ole32

OleInitialize

OleUninitialize

CoCreateInstance

IIDFromString

CoTaskMemFree

comctl32

ord17

ImageList_Create

ImageList_Destroy

ImageList_AddMasked

user32

GetClientRect

EndPaint

DrawTextW

IsWindowEnabled

DispatchMessageW

wsprintfA

CharNextA

CharPrevW

MessageBoxIndirectW

GetDlgItemTextW

SetDlgItemTextW

GetSystemMetrics

FillRect

AppendMenuW

TrackPopupMenu

OpenClipboard

SetClipboardData

CloseClipboard

IsWindowVisible

CallWindowProcW

GetMessagePos

CheckDlgButton

LoadCursorW

SetCursor

GetSysColor

SetWindowPos

GetWindowLongW

PeekMessageW

SetClassLongW

GetSystemMenu

EnableMenuItem

GetWindowRect

ScreenToClient

EndDialog

RegisterClassW

SystemParametersInfoW

CreateWindowExW

GetClassInfoW

DialogBoxParamW

CharNextW

ExitWindowsEx

DestroyWindow

CreateDialogParamW

SetTimer

SetWindowTextW

PostQuitMessage

SetForegroundWindow

ShowWindow

wsprintfW

SendMessageTimeoutW

FindWindowExW

IsWindow

GetDlgItem

SetWindowLongW

LoadImageW

GetDC

ReleaseDC

EnableWindow

InvalidateRect

SendMessageW

DefWindowProcW

BeginPaint

EmptyClipboard

CreatePopupMenu

gdi32

SetBkMode

SetBkColor

GetDeviceCaps

CreateFontIndirectW

CreateBrushIndirect

DeleteObject

SetTextColor

SelectObject

kernel32

GetExitCodeProcess

WaitForSingleObject

GetModuleHandleA

GetProcAddress

GetSystemDirectoryW

lstrcatW

Sleep

lstrcpyA

WriteFile

GetTempFileNameW

CreateFileW

lstrcmpiA

RemoveDirectoryW

CreateProcessW

CreateDirectoryW

GetLastError

CreateThread

GlobalLock

GlobalUnlock

GetDiskFreeSpaceW

WideCharToMultiByte

lstrcpynW

lstrlenW

SetErrorMode

GetVersionExW

GetCommandLineW

GetTempPathW

GetWindowsDirectoryW

SetEnvironmentVariableW

CopyFileW

ExitProcess

GetCurrentProcess

GetModuleFileNameW

GetFileSize

GetTickCount

MulDiv

SetFileAttributesW

GetFileAttributesW

SetCurrentDirectoryW

MoveFileW

GetFullPathNameW

GetShortPathNameW

SearchPathW

CompareFileTime

SetFileTime

CloseHandle

lstrcmpiW

lstrcmpW

ExpandEnvironmentStringsW

GlobalFree

GlobalAlloc

GetModuleHandleW

LoadLibraryExW

MoveFileExW

FreeLibrary

WritePrivateProfileStringW

GetPrivateProfileStringW

lstrlenA

MultiByteToWideChar

ReadFile

SetFilePointer

FindClose

FindNextFileW

FindFirstFileW

DeleteFileW

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

$INTERNET_CACHE/Can

$INTERNET_CACHE/Conferencing

$INTERNET_CACHE/Drawing

$INTERNET_CACHE/Editorial

$INTERNET_CACHE/Foundations

$INTERNET_CACHE/Geo

$INTERNET_CACHE/Holding

$INTERNET_CACHE/Kinds

$INTERNET_CACHE/Nylon

$INTERNET_CACHE/Recognised

$INTERNET_CACHE/Recovery

$INTERNET_CACHE/Twins

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/AAD.Core.winmd

.dll windows:6 windows x86 arch:x86

Password: 1703

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/App.xaml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/AppxManifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/AccountSmallLogo.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/Logo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.contrast-black_scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.contrast-black_scale-125.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.contrast-black_scale-150.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.contrast-black_scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.contrast-black_scale-400.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.contrast-white_scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.contrast-white_scale-125.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.contrast-white_scale-150.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.contrast-white_scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.contrast-white_scale-400.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.scale-125.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.scale-150.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/PasswordExpiry.scale-400.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/SmallLogo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/SplashScreen.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Assets/StoreLogo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Error.htm

.js

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Loading.htm

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/MainPage.xaml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Microsoft.AAD.BrokerPlugin.exe

.exe windows:10 windows x64 arch:x64

1c7722ebbdcee129017e54a6fbaf1a83

Code Sign

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05/05/2022, 19:23

Not After

04/05/2023, 19:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

c9:b9:77:de:9e:5c:a7:b1:6c:3a:2c:35:0d:f1:6c:f3:69:8c:7e:5e:81:c8:6b:db:b6:9c:a0:53:2e:32:b5:e6
Signer

Actual PE Digest

c9:b9:77:de:9e:5c:a7:b1:6c:3a:2c:35:0d:f1:6c:f3:69:8c:7e:5e:81:c8:6b:db:b6:9c:a0:53:2e:32:b5:e6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Microsoft.AAD.BrokerPlugin.pdb

Imports

api-ms-win-eventing-classicprovider-l1-1-0

GetTraceEnableLevel

GetTraceEnableFlags

GetTraceLoggerHandle

RegisterTraceGuidsW

UnregisterTraceGuids

TraceMessage

api-ms-win-core-synch-l1-1-0

AcquireSRWLockExclusive

AcquireSRWLockShared

DeleteCriticalSection

ReleaseSRWLockExclusive

ReleaseSRWLockShared

InitializeCriticalSectionEx

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext

SetRestrictedErrorInfo

RoOriginateError

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

UnhandledExceptionFilter

api-ms-win-core-util-l1-1-0

DecodePointer

wincorlib

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

??0Delegate@Platform@@QE$AAA@XZ

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

??0OutOfMemoryException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

msvcrt

memset

wcslen

_CxxThrowException

?terminate@@YAXXZ

??1type_info@@UEAA@XZ

_lock

_unlock

__dllonexit

__C_specific_handler

_onexit

_XcptFilter

_amsg_exit

__getmainargs

__set_app_type

exit

_exit

_cexit

_ismbblead

__setusermatherr

_initterm

_acmdln

_fmode

_commode

malloc

_callnewh

??0exception@@QEAA@AEBQEBDH@Z

memcpy

??0exception@@QEAA@AEBV0@@Z

wcsrchr

??0exception@@QEAA@AEBQEBD@Z

??1exception@@UEAA@XZ

?what@exception@@UEBAPEBDXZ

_purecall

__CxxFrameHandler3

??3@YAXPEAX@Z

memmove

_vsnprintf

ntdll

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

RtlImageNtHeader

RtlAllocateHeap

RtlFreeHeap

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsConcatString

WindowsCompareStringOrdinal

WindowsIsStringEmpty

WindowsCreateString

WindowsGetStringRawBuffer

WindowsDuplicateString

WindowsDeleteString

WindowsCreateStringReference

api-ms-win-core-synch-l1-2-0

Sleep

InitOnceExecuteOnce

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc

CoCreateFreeThreadedMarshaler

CoTaskMemFree

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

SetThreadStackGuarantee

GetCurrentProcessId

GetStartupInfoW

GetCurrentThreadId

GetCurrentProcess

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemInfo

GetSystemTimeAsFileTime

api-ms-win-core-memory-l1-1-0

VirtualQuery

VirtualProtect

VirtualAlloc

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/Microsoft.AAD.BrokerPlugin.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/css/app.css

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/css/ui-light.css

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/pris/resources.ru-RU.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/AppxManifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/Assets/Splashscreen.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/Assets/Square150x150Logo.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/Assets/Square44x44Logo.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/Assets/StoreLogo.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/Microsoft.AsyncTextService.exe

.exe windows:10 windows x64 arch:x64

51fa5b19a371c4c6dcf497ec4ce8816f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Microsoft.AsyncTextService.pdb

Imports

api-ms-win-core-synch-l1-2-0

InitOnceComplete

InitOnceBeginInitialize

WakeConditionVariable

InitializeConditionVariable

InitOnceExecuteOnce

SleepConditionVariableCS

Sleep

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

SetLastError

SetUnhandledExceptionFilter

GetLastError

api-ms-win-core-heap-l1-1-0

HeapFree

GetProcessHeap

HeapAlloc

api-ms-win-core-synch-l1-1-0

ReleaseSRWLockExclusive

InitializeCriticalSectionEx

DeleteCriticalSection

ReleaseSRWLockShared

TryEnterCriticalSection

CreateEventExW

OpenSemaphoreW

WaitForSingleObject

EnterCriticalSection

AcquireSRWLockShared

CreateSemaphoreExW

InitializeCriticalSection

AcquireSRWLockExclusive

WaitForSingleObjectEx

ReleaseMutex

ReleaseSemaphore

CreateMutexExW

ResetEvent

SetEvent

LeaveCriticalSection

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-processthreads-l1-1-0

GetStartupInfoW

TerminateProcess

GetCurrentProcessId

GetCurrentProcess

GetCurrentThreadId

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

GetModuleFileNameA

GetModuleHandleW

GetProcAddress

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

DebugBreak

OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer

EventUnregister

EventSetInformation

EventRegister

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler

CoMarshalInterThreadInterfaceInStream

CoTaskMemAlloc

CoTaskMemFree

CoGetObjectContext

CoGetInterfaceAndReleaseStream

CoGetApartmentType

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

QueryPerformanceFrequency

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolTimer

SetThreadpoolTimer

CloseThreadpoolTimer

WaitForThreadpoolTimerCallbacks

coremessaging

CoreUICallReceive

CoreUICreate

CoreUICallCreateEndpointHost

CoreUICallSend

api-ms-win-security-sddl-l1-1-0

ConvertStringSecurityDescriptorToSecurityDescriptorW

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-heap-l2-1-0

LocalFree

msvcrt

_commode

wcslen

_wsetlocale

__crtLCMapStringW

__crtCompareStringW

_wcsdup

memset

abort

memcmp

___lc_collate_cp_func

__pctype_func

___lc_codepage_func

___lc_handle_func

___mb_cur_max_func

setlocale

memmove

memcpy

_CxxThrowException

__setusermatherr

_acmdln

malloc

__set_app_type

__getmainargs

_ismbblead

_amsg_exit

_XcptFilter

_onexit

__C_specific_handler

__dllonexit

_unlock

_lock

??1type_info@@UEAA@XZ

strchr

free

??0bad_cast@@QEAA@PEBD@Z

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@AEBV0@@Z

wcsrchr

??0exception@@QEAA@AEBQEBD@Z

?what@exception@@UEBAPEBDXZ

wcstol

_errno

memmove_s

__ExceptionPtrRethrow

?terminate@@YAXXZ

__ExceptionPtrCreate

__ExceptionPtrCurrentException

__ExceptionPtrCopy

__ExceptionPtrDestroy

_purecall

??0exception@@QEAA@AEBV0@@Z

wcsstr

??3@YAXPEAX@Z

??1exception@@UEAA@XZ

??0exception@@QEAA@XZ

_vsnprintf_s

memcpy_s

_vsnwprintf

__CxxFrameHandler3

calloc

_fmode

_callnewh

_initterm

_cexit

_exit

??0exception@@QEAA@AEBQEBDH@Z

exit

realloc

wincorlib

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

??0Object@Platform@@QE$AAA@XZ

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

??0Delegate@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

GetStringTypeW

WideCharToMultiByte

api-ms-win-core-util-l1-1-0

DecodePointer

EncodePointer

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext

RoOriginateError

SetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsCompareStringOrdinal

WindowsGetStringRawBuffer

WindowsGetStringLen

WindowsDuplicateString

WindowsDeleteString

WindowsCreateStringReference

WindowsIsStringEmpty

WindowsCreateString

WindowsConcatString

Sections

.text
Size: 382KB - Virtual size: 382KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.AsyncTextService_8wekyb3d8bbwe/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.BioEnrollment_cw5n1h2txyewy/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.BioEnrollment_cw5n1h2txyewy/AppxManifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.BioEnrollment_cw5n1h2txyewy/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.BioEnrollment_cw5n1h2txyewy/BioEnrollmentHost.exe

.exe windows:10 windows x64 arch:x64

0a9c4c929ba2c1d9668964d6dfdb1803

Code Sign

33:00:00:02:65:51:ae:1b:bd:00:5c:bf:bd:00:00:00:00:02:65
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:30

Not After

03/03/2021, 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

bf:7e:4e:65:b4:74:cb:b4:a1:f0:22:a2:ae:18:8b:9a:d7:e7:77:8b:2f:9b:f1:32:47:05:af:76:5f:e7:39:f0
Signer

Actual PE Digest

bf:7e:4e:65:b4:74:cb:b4:a1:f0:22:a2:ae:18:8b:9a:d7:e7:77:8b:2f:9b:f1:32:47:05:af:76:5f:e7:39:f0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_APPCONTAINER

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

BioEnrollmentHost.pdb

Imports

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

OutputDebugStringW

DebugBreak

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

GetStartupInfoW

GetCurrentProcess

GetCurrentThreadId

GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

LCMapStringEx

GetLocaleInfoEx

FormatMessageW

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

SetLastError

SetUnhandledExceptionFilter

RaiseException

GetLastError

ntdll

NtQueryWnfStateData

RtlUnsubscribeWnfNotificationWaitForCompletion

RtlSubscribeWnfStateChangeNotification

api-ms-win-core-com-l1-1-0

CoTaskMemFree

CoCreateFreeThreadedMarshaler

CoTaskMemAlloc

CoGetContextToken

CoGetApartmentType

CoGetObjectContext

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW

GetModuleHandleExW

GetModuleFileNameA

GetProcAddress

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionAndSpinCount

ReleaseSemaphore

CreateSemaphoreExW

ResetEvent

CreateEventW

WaitForSingleObject

ReleaseMutex

InitializeCriticalSectionEx

EnterCriticalSection

WaitForSingleObjectEx

OpenSemaphoreW

AcquireSRWLockShared

SetEvent

AcquireSRWLockExclusive

CreateMutexExW

DeleteCriticalSection

ReleaseSRWLockExclusive

InitializeCriticalSection

LeaveCriticalSection

ReleaseSRWLockShared

InitializeSRWLock

TryAcquireSRWLockExclusive

api-ms-win-core-heap-l1-1-0

HeapFree

HeapAlloc

GetProcessHeap

api-ms-win-core-handle-l1-1-0

CloseHandle

wincorlib

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0NullReferenceException@Platform@@QE$AAA@XZ

??0InvalidArgumentException@Platform@@QE$AAA@XZ

??0NotImplementedException@Platform@@QE$AAA@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0Object@Platform@@QE$AAA@XZ

?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ

?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z

?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z

??0Delegate@Platform@@QE$AAA@XZ

??0DisconnectedException@Platform@@QE$AAA@XZ

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

api-ms-win-crt-string-l1-1-0

wcsnlen

memset

wcslen

api-ms-win-crt-locale-l1-1-0

_unlock_locales

_lock_locales

api-ms-win-crt-private-l1-1-0

_o___pctype_func

_o___std_exception_copy

_o___std_exception_destroy

_o___stdio_common_vsnprintf_s

_o___stdio_common_vswprintf

_o__callnewh

_o__calloc_base

_o__cexit

_o__configthreadlocale

_o__configure_narrow_argv

_o__crt_atexit

_o__errno

_o__exit

_o__free_base

_o__get_narrow_winmain_command_line

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__malloc_base

_o____lc_codepage_func

_o__purecall

_o__register_onexit_function

_o__set_app_type

_o__set_fmode

_o__set_new_mode

_o__wcsdup

_o_abort

_o_exit

_o_free

_o_malloc

_o_realloc

_o_setlocale

_o_terminate

_o_wcstol

__CxxFrameHandler4

__std_terminate

wcsstr

wcsrchr

strchr

_CxxThrowException

__CxxFrameHandler3

__current_exception

__AdjustPointer

__processing_throw

__GetPlatformExceptionInfo

__C_specific_handler

_o___p__commode

memcmp

_o____mb_cur_max_func

_o____lc_locale_name_func

_o__seh_filter_exe

_o____lc_collate_cp_func

memcpy

memmove

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

RoFailFastWithErrorContext

SetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsIsStringEmpty

WindowsGetStringRawBuffer

WindowsGetStringLen

WindowsDuplicateString

WindowsDeleteString

WindowsCreateStringReference

WindowsCreateString

WindowsConcatString

WindowsCompareStringOrdinal

api-ms-win-core-util-l1-1-0

EncodePointer

DecodePointer

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW

InitializeConditionVariable

WakeConditionVariable

WakeAllConditionVariable

InitOnceExecuteOnce

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlLookupFunctionEntry

RtlPcToFileHeader

RtlVirtualUnwind

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-threadpool-l1-2-0

SubmitThreadpoolWork

CreateThreadpoolWork

FreeLibraryWhenCallbackReturns

CloseThreadpoolWork

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

WideCharToMultiByte

CompareStringEx

GetStringTypeW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-crt-runtime-l1-1-0

_initterm

_initterm_e

_c_exit

_register_thread_local_exe_atexit_callback

Sections

.text
Size: 314KB - Virtual size: 314KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.BioEnrollment_cw5n1h2txyewy/BioEnrollmentUI.dll

.dll windows:10 windows x64 arch:x64

c80449814495c37987db0fb35717048d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_APPCONTAINER

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

BioEnrollmentUI.pdb

Imports

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-synch-l1-1-0

ReleaseSRWLockExclusive

InitializeCriticalSection

ReleaseSemaphore

ReleaseMutex

TryEnterCriticalSection

InitializeCriticalSectionEx

TryAcquireSRWLockExclusive

InitializeSRWLock

WaitForSingleObjectEx

WaitForSingleObject

AcquireSRWLockShared

CreateSemaphoreExW

CreateMutexExW

AcquireSRWLockExclusive

LeaveCriticalSection

DeleteCriticalSection

InitializeCriticalSectionAndSpinCount

ReleaseSRWLockShared

EnterCriticalSection

OpenSemaphoreW

CreateEventW

ResetEvent

SetEvent

api-ms-win-core-errorhandling-l1-1-0

SetLastError

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetLastError

RaiseException

api-ms-win-eventing-provider-l1-1-0

EventUnregister

EventRegister

EventActivityIdControl

EventWriteTransfer

EventSetInformation

api-ms-win-core-heap-l1-1-0

HeapFree

HeapAlloc

GetProcessHeap

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

GetTickCount64

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

WakeAllConditionVariable

SleepConditionVariableSRW

InitializeConditionVariable

InitOnceComplete

WakeConditionVariable

InitOnceBeginInitialize

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolTimer

SubmitThreadpoolWork

FreeLibraryWhenCallbackReturns

CreateThreadpoolWork

CreateThreadpoolTimer

WaitForThreadpoolTimerCallbacks

CloseThreadpoolWork

SetThreadpoolTimer

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

GetProcAddress

GetModuleHandleExW

GetModuleFileNameA

GetModuleHandleW

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler

CoGetObjectContext

CoTaskMemAlloc

CoTaskMemFree

CoGetContextToken

CoGetApartmentType

api-ms-win-core-debug-l1-1-0

DebugBreak

IsDebuggerPresent

OutputDebugStringW

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

GetCurrentProcessId

GetCurrentProcess

GetCurrentThreadId

api-ms-win-core-localization-l1-2-0

FormatMessageW

LCMapStringEx

GetLocaleInfoEx

wincorlib

?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ

?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z

?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z

??0Delegate@Platform@@QE$AAA@XZ

??0DisconnectedException@Platform@@QE$AAA@XZ

??0ChangedStateException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

??0Exception@Platform@@QE$AAA@HPE$AAVString@1@@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

??0GridLength@Xaml@UI@Windows@@QEAA@NW4GridUnitType@123@@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

??0InvalidArgumentException@Platform@@QE$AAA@XZ

??0NotImplementedException@Platform@@QE$AAA@XZ

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0Object@Platform@@QE$AAA@XZ

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

??0Exception@Platform@@QE$AAA@H@Z

?ToString@uint32@default@@QEAAPE$AAVString@Platform@@XZ

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

?ToString@int32@default@@QEAAPE$AAVString@Platform@@XZ

?Equals@float32@default@@QEAA_NPE$AAVObject@Platform@@@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

api-ms-win-crt-string-l1-1-0

wcsncmp

wcsnlen

wcslen

memset

api-ms-win-crt-locale-l1-1-0

_unlock_locales

_lock_locales

api-ms-win-crt-private-l1-1-0

_o___pctype_func

_o___std_exception_copy

_o___std_exception_destroy

_o___std_type_info_destroy_list

_o___stdio_common_vsnprintf_s

_o___stdio_common_vswprintf

_o__callnewh

_o__calloc_base

_o__cexit

_o__configure_narrow_argv

_o__crt_atexit

_o__errno

_o__execute_onexit_table

_o__fpclass

_o__free_base

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__malloc_base

_o____lc_collate_cp_func

_o__purecall

_o__register_onexit_function

_o__seh_filter_dll

_o__wcsdup

_o__wcsicmp

_o_abort

_o_cos

_o_free

_o_malloc

_o_realloc

_o_setlocale

_o_sin

_o_terminate

_o_wcstol

__CxxFrameHandler4

__std_terminate

wcsstr

wcsrchr

strchr

_o____lc_codepage_func

_CxxThrowException

__CxxFrameHandler3

__current_exception

__AdjustPointer

__processing_throw

__GetPlatformExceptionInfo

__C_specific_handler

_o____mb_cur_max_func

_o____lc_locale_name_func

memcmp

memcpy

memmove

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString

WindowsDeleteString

WindowsCreateStringReference

WindowsGetStringLen

WindowsDuplicateString

WindowsConcatString

WindowsCompareStringOrdinal

WindowsIsStringEmpty

WindowsGetStringRawBuffer

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo

RoFailFastWithErrorContext

RoOriginateError

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-util-l1-1-0

DecodePointer

EncodePointer

api-ms-win-core-rtlsupport-l1-1-0

RtlPcToFileHeader

RtlVirtualUnwind

RtlCaptureContext

RtlLookupFunctionEntry

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-string-l1-1-0

CompareStringEx

GetStringTypeW

MultiByteToWideChar

WideCharToMultiByte

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-crt-runtime-l1-1-0

_initterm_e

_initterm

api-ms-win-crt-math-l1-1-0

sqrtf

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.BioEnrollment_cw5n1h2txyewy/Fonts/BioMDL2.ttf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.BioEnrollment_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.BioEnrollment_cw5n1h2txyewy/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.BioEnrollment_cw5n1h2txyewy/pris/resources.ru-RU.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.BioEnrollment_cw5n1h2txyewy/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/AppxManifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Assets/Close.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Assets/CursorDot.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Assets/DoubleClick.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Assets/ECMDL2.ttf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Assets/IndirectMask.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Assets/LeftClick.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Assets/RightClick.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Assets/Splashscreen.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Assets/Square150x150Logo.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Assets/Square44x44Logo.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Assets/StoreLogo.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/GazeInputInternal.dll

.dll windows:10 windows x64 arch:x64

b4d65dc70ba118aa736c9da889247e0d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

GazeInputInternal.pdb

Imports

wincorlib

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

??0Delegate@Platform@@QE$AAA@XZ

??0DisconnectedException@Platform@@QE$AAA@XZ

??0ChangedStateException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?GetHashCode@Object@Platform@@QE$AAAHXZ

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

msvcrt

memcpy

memmove

_XcptFilter

_amsg_exit

free

_initterm

__C_specific_handler

_lock

_unlock

__dllonexit

_onexit

?terminate@@YAXXZ

sqrt

??1exception@@UEAA@XZ

??0exception@@QEAA@AEBV0@@Z

??0exception@@QEAA@AEBQEBDH@Z

??0exception@@QEAA@AEBQEBD@Z

_callnewh

malloc

memset

_CxxThrowException

_purecall

??3@YAXPEAX@Z

__CxxFrameHandler3

?what@exception@@UEBAPEBDXZ

??1type_info@@UEAA@XZ

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-synch-l1-1-0

ReleaseSRWLockExclusive

AcquireSRWLockShared

AcquireSRWLockExclusive

ReleaseSRWLockShared

api-ms-win-core-synch-l1-2-0

Sleep

InitOnceExecuteOnce

SleepConditionVariableSRW

WakeAllConditionVariable

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc

CoCreateFreeThreadedMarshaler

CoTaskMemFree

api-ms-win-core-winrt-string-l1-1-0

WindowsDuplicateString

WindowsDeleteString

WindowsCreateString

WindowsCreateStringReference

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess

GetCurrentProcessId

TerminateProcess

GetCurrentThreadId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

UnhandledExceptionFilter

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/GazeInputInternal.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/GazeInteraction.dll

.dll windows:10 windows x64 arch:x64

a32ef0e0463418d7d0d4d9bc6fedfd2d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

GazeInteraction.pdb

Imports

wincorlib

??0Rect@Foundation@Windows@@QEAA@VPoint@12@VSize@12@@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

??0Delegate@Platform@@QE$AAA@XZ

??0DisconnectedException@Platform@@QE$AAA@XZ

??0ChangedStateException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?Equals@ValueType@Platform@@QE$AAA_NPE$AAVObject@2@@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

msvcrt

??1exception@@UEAA@XZ

?what@exception@@UEBAPEBDXZ

memcpy

memmove

_XcptFilter

_amsg_exit

free

_initterm

__C_specific_handler

_lock

_unlock

__dllonexit

_onexit

sqrt

??1type_info@@UEAA@XZ

??0exception@@QEAA@AEBQEBDH@Z

??0exception@@QEAA@AEBQEBD@Z

_callnewh

malloc

_CxxThrowException

memset

_vsnwprintf

_purecall

??3@YAXPEAX@Z

__CxxFrameHandler3

??0exception@@QEAA@AEBV0@@Z

?terminate@@YAXXZ

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-synch-l1-1-0

AcquireSRWLockExclusive

AcquireSRWLockShared

ReleaseSRWLockExclusive

ReleaseSRWLockShared

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW

WakeAllConditionVariable

InitOnceExecuteOnce

Sleep

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc

CoCreateFreeThreadedMarshaler

CoTaskMemFree

api-ms-win-core-winrt-string-l1-1-0

WindowsDuplicateString

WindowsCreateStringReference

WindowsCreateString

WindowsDeleteString

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId

TerminateProcess

GetCurrentProcess

GetCurrentThreadId

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

SetUnhandledExceptionFilter

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/GazeInteraction.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/Microsoft.ECApp.exe

.exe windows:10 windows x64 arch:x64

a6223163dcac1ee9250081e480477543

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Microsoft.ECApp.pdb

Imports

api-ms-win-eventing-provider-l1-1-0

EventSetInformation

EventUnregister

EventRegister

EventWriteTransfer

api-ms-win-core-heap-l1-1-0

HeapFree

GetProcessHeap

HeapAlloc

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW

Sleep

InitOnceExecuteOnce

WakeAllConditionVariable

InitOnceComplete

InitOnceBeginInitialize

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolTimer

CreateThreadpoolTimer

CloseThreadpoolTimer

WaitForThreadpoolTimerCallbacks

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

SetLastError

GetLastError

UnhandledExceptionFilter

api-ms-win-core-libraryloader-l2-1-0

LoadPackagedLibrary

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

GetModuleFileNameA

GetProcAddress

GetModuleHandleW

api-ms-win-core-synch-l1-1-0

InitializeCriticalSection

WaitForSingleObject

SetEvent

InitializeCriticalSectionEx

ReleaseSemaphore

ResetEvent

ReleaseMutex

CreateSemaphoreExW

DeleteCriticalSection

OpenSemaphoreW

EnterCriticalSection

LeaveCriticalSection

AcquireSRWLockExclusive

AcquireSRWLockShared

CreateMutexExW

CreateEventExW

ReleaseSRWLockExclusive

WaitForSingleObjectEx

ReleaseSRWLockShared

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

DebugBreak

IsDebuggerPresent

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

GetStartupInfoW

GetCurrentThreadId

GetCurrentProcess

GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-com-l1-1-0

CoGetApartmentType

CoTaskMemAlloc

CoTaskMemFree

CoMarshalInterThreadInterfaceInStream

CoCreateFreeThreadedMarshaler

CoGetInterfaceAndReleaseStream

CoGetObjectContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTime

GetTickCount

GetSystemTimeAsFileTime

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime

coremessaging

CoreUICreate

coreuicomponents

CoreUIFactoryCreate

ext-ms-win-ntuser-windowstation-l1-1-0

GetThreadDesktop

GetUserObjectInformationW

dxgi

CreateDXGIFactory1

api-ms-win-ntuser-rectangle-l1-1-0

IntersectRect

d3d11

D3D11CreateDevice

api-ms-win-ntuser-sysparams-l1-1-0

SystemParametersInfoW

ntdll

NtQueryInformationProcess

msvcrt

__setusermatherr

_initterm

_acmdln

_fmode

_commode

wcslen

_wsetlocale

__crtLCMapStringW

__crtCompareStringW

_wcsdup

memset

abort

memcmp

___lc_collate_cp_func

calloc

__pctype_func

___lc_codepage_func

___lc_handle_func

___mb_cur_max_func

setlocale

_cexit

memcpy

_CxxThrowException

??0exception@@QEAA@AEBQEBDH@Z

_callnewh

malloc

??1type_info@@UEAA@XZ

realloc

strchr

free

??0bad_cast@@QEAA@PEBD@Z

??0bad_cast@@QEAA@AEBV0@@Z

wcsrchr

??0exception@@QEAA@AEBQEBD@Z

?what@exception@@UEBAPEBDXZ

wcstol

_errno

swprintf_s

_wtoi

wcstod

__ExceptionPtrRethrow

memmove_s

wcsstr

_vsnprintf_s

iswalnum

wcstoul

__ExceptionPtrCreate

__ExceptionPtrCurrentException

__ExceptionPtrCopy

__ExceptionPtrDestroy

??0exception@@QEAA@AEBV0@@Z

??0exception@@QEAA@XZ

??1exception@@UEAA@XZ

_vsnwprintf

iswalpha

memcpy_s

_assert

?terminate@@YAXXZ

_purecall

??3@YAXPEAX@Z

__CxxFrameHandler3

_exit

exit

__set_app_type

__getmainargs

sqrt

_amsg_exit

_XcptFilter

_onexit

__C_specific_handler

__dllonexit

_ismbblead

_unlock

memmove

_lock

??1bad_cast@@UEAA@XZ

wincorlib

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?ToString@float32@default@@QEAAPE$AAVString@Platform@@XZ

?ToString@int32@default@@QEAAPE$AAVString@Platform@@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?ToString@uint32@default@@QEAAPE$AAVString@Platform@@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

??0GridLength@Xaml@UI@Windows@@QEAA@NW4GridUnitType@123@@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?Equals@Object@Platform@@QE$AAA_NPE$AAV12@@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

??0NullReferenceException@Platform@@QE$AAA@XZ

??0NotImplementedException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z

??0Delegate@Platform@@QE$AAA@XZ

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

WideCharToMultiByte

GetStringTypeW

api-ms-win-core-util-l1-1-0

DecodePointer

EncodePointer

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo

RoFailFastWithErrorContext

RoOriginateError

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsDeleteString

WindowsCompareStringOrdinal

WindowsCreateString

WindowsDuplicateString

WindowsGetStringLen

WindowsGetStringRawBuffer

WindowsIsStringEmpty

WindowsCreateStringReference

WindowsConcatString

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 502KB - Virtual size: 502KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/ecsystem.dll

.dll windows:10 windows x64 arch:x64

9bbcbfe77b0edb0c9eee50f2d35ac237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

ecsystem.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_initterm_e

_initterm

api-ms-win-crt-private-l1-1-0

_o___stdio_common_vsnprintf_s

_o___stdio_common_vswprintf

_o__callnewh

_o__cexit

_o__configure_narrow_argv

_o__errno

_o__execute_onexit_table

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__seh_filter_dll

memcpy

_o_free

_o_malloc

__C_specific_handler

_CxxThrowException

_o___std_type_info_destroy_list

_o___std_exception_destroy

_o___std_exception_copy

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

memset

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

DisableThreadLibraryCalls

GetModuleHandleW

GetModuleFileNameA

GetProcAddress

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId

GetCurrentProcessId

TerminateProcess

GetCurrentProcess

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind

RtlCaptureContext

RtlLookupFunctionEntry

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

DebugBreak

OutputDebugStringW

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

SetUnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

ext-ms-win-ntuser-window-l1-1-2

SetCursorPos

ext-ms-win-ntuser-keyboard-l1-1-0

ToUnicodeEx

GetKeyboardLayout

MapVirtualKeyExW

ext-ms-win-ntuser-windowstation-l1-1-0

GetUserObjectInformationW

GetThreadDesktop

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-heap-l1-1-0

HeapAlloc

GetProcessHeap

HeapFree

coremessaging

CoreUICallSend

CoreUICallCreateEndpointHost

CoreUICreate

CoreUICallReceive

ntdll

NtQueryInformationProcess

api-ms-win-security-sddl-l1-1-0

ConvertStringSecurityDescriptorToSecurityDescriptorW

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-heap-l2-1-0

LocalFree

Exports

FocusEC

GetHKL

GetSizeAppliedValue

GetTransparencyAppliedValue

GetWorkspaceSize

PositionMouseCursor

RegisterCallback

RegisterCallbackSizeApplied

RegisterCallbackTransparency

ScancodeToUnicode

SetNoActivate

SetSizeAndPosition

SetTransparent

Show

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/pris/resources.ru-RU.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.ECApp_8wekyb3d8bbwe/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.MicrosoftEdge_8wekyb3d8bbwe/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.MicrosoftEdge_8wekyb3d8bbwe/AppxManifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.MicrosoftEdge_8wekyb3d8bbwe/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.MicrosoftEdge_8wekyb3d8bbwe/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.MicrosoftEdge_8wekyb3d8bbwe/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Win32WebViewHost_cw5n1h2txyewy/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Win32WebViewHost_cw5n1h2txyewy/AppxManifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Win32WebViewHost_cw5n1h2txyewy/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Win32WebViewHost_cw5n1h2txyewy/Assets/solidsquare.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Win32WebViewHost_cw5n1h2txyewy/Win32WebViewHost.exe

.exe windows:10 windows x64 arch:x64

ffd4cde8e7a048a780931445be622364

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Win32WebViewHost.pdb

Imports

msvcrt

_exit

exit

_vsnwprintf

_cexit

__set_app_type

_callnewh

__setusermatherr

_amsg_exit

_initterm

__C_specific_handler

_fmode

_commode

_lock

memcpy

wcschr

memcpy_s

_XcptFilter

free

_unlock

__dllonexit

_onexit

__getmainargs

__CxxFrameHandler3

malloc

?terminate@@YAXXZ

memset

_purecall

wcscmp

edgemanager

CreateCoreWebViewHostProcess

CreateWebViewControlMoveFocusRequestedEventArgs

CreateWebViewControlAcceleratorKeyPressedEventArgs

CreateCoreWebViewOOP

api-ms-win-core-com-l1-1-0

CoTaskMemFree

CoGetInterfaceAndReleaseStream

CoReleaseMarshalData

CoTaskMemAlloc

CoDecrementMTAUsage

CoIncrementMTAUsage

CoCreateFreeThreadedMarshaler

CoCreateInstance

CreateStreamOnHGlobal

CoMarshalInterface

api-ms-win-core-com-l1-1-1

RoGetAgileReference

api-ms-win-core-winrt-l1-1-0

RoInitialize

RoActivateInstance

RoGetActivationFactory

RoUninitialize

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString

WindowsCreateStringReference

WindowsGetStringRawBuffer

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress

FreeLibrary

GetModuleHandleExW

GetModuleFileNameA

GetModuleHandleW

api-ms-win-core-synch-l1-1-0

ReleaseMutex

WaitForSingleObject

CreateMutexExW

ReleaseSemaphore

ReleaseSRWLockShared

OpenSemaphoreW

AcquireSRWLockExclusive

AcquireSRWLockShared

InitializeSRWLock

ReleaseSRWLockExclusive

CreateSemaphoreExW

WaitForSingleObjectEx

api-ms-win-core-heap-l1-1-0

HeapAlloc

GetProcessHeap

HeapFree

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RaiseException

SetLastError

GetLastError

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess

TerminateProcess

GetCurrentProcessId

OpenProcessToken

GetCurrentThreadId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

DebugBreak

OutputDebugStringW

IsDebuggerPresent

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

SetRestrictedErrorInfo

RoOriginateErrorW

RoTransformError

GetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

IsErrorPropagationEnabled

RoReportFailedDelegate

RoGetMatchingRestrictedErrorInfo

api-ms-win-core-processenvironment-l1-1-0

GetEnvironmentVariableW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll

WaitOnAddress

Sleep

InitOnceExecuteOnce

oleaut32

SysFreeString

SafeArrayCreateVector

SafeArrayPutElement

SysAllocString

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolWork

SubmitThreadpoolWork

FreeLibraryWhenCallbackReturns

CreateThreadpoolWork

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-security-base-l1-1-0

GetTokenInformation

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind

RtlCaptureContext

RtlLookupFunctionEntry

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount

api-ms-win-shcore-taskpool-l1-1-0

SHTaskPoolQueueTask

SHTaskPoolAllowThreadReuse

ext-ms-win-uiacore-l1-1-1

UiaRaiseStructureChangedEvent

UiaRaiseAutomationPropertyChangedEvent

UiaDisconnectProvider

api-ms-win-rtcore-ntuser-window-l1-1-0

GetWindowRect

ntdll

RtlInitUnicodeString

RtlFreeHeap

RtlAllocateHeap

RtlNtStatusToDosErrorNoTeb

RtlCompareUnicodeString

NtQueryInformationToken

ext-ms-win-rtcore-ntuser-dpi-l1-2-0

SetThreadDpiAwarenessContext

GetThreadDpiAwarenessContext

GetDpiForSystem

GetAwarenessFromDpiAwarenessContext

dcomp

ord1038

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Win32WebViewHost_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Win32WebViewHost_cw5n1h2txyewy/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Win32WebViewHost_cw5n1h2txyewy/pris/resources.ru-RU.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Win32WebViewHost_cw5n1h2txyewy/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/AddSuggestedFoldersToLibraryDialog.exe

.exe windows:10 windows x64 arch:x64

f0afe50a912a0e5b660fae4c50bd403b

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:30

Not After

03/03/2021, 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

9a:3d:68:f4:0d:83:0c:09:cb:b3:22:52:41:d2:e7:6c:39:2a:53:28:0b:b1:69:9b:15:cf:d6:09:45:f8:c8:97
Signer

Actual PE Digest

9a:3d:68:f4:0d:83:0c:09:cb:b3:22:52:41:d2:e7:6c:39:2a:53:28:0b:b1:69:9b:15:cf:d6:09:45:f8:c8:97

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

AddSuggestedFoldersToLibraryDialog.pdb

Imports

api-ms-win-eventing-provider-l1-1-0

EventSetInformation

EventUnregister

EventRegister

EventWriteTransfer

EventActivityIdControl

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId

GetCurrentProcess

GetCurrentThreadId

TerminateProcess

GetStartupInfoW

api-ms-win-core-heap-l1-1-0

GetProcessHeap

HeapFree

HeapAlloc

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW

GetModuleFileNameA

GetProcAddress

GetModuleHandleExW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

IsDebuggerPresent

DebugBreak

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

GetLastError

SetLastError

SetUnhandledExceptionFilter

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-synch-l1-1-0

CreateEventExW

ReleaseSRWLockShared

EnterCriticalSection

DeleteCriticalSection

InitializeCriticalSection

LeaveCriticalSection

CreateSemaphoreExW

ReleaseSRWLockExclusive

CreateMutexExW

OpenSemaphoreW

WaitForSingleObject

AcquireSRWLockExclusive

WaitForSingleObjectEx

ReleaseMutex

ReleaseSemaphore

AcquireSRWLockShared

SetEvent

ResetEvent

InitializeCriticalSectionEx

api-ms-win-core-synch-l1-2-0

InitOnceComplete

Sleep

InitOnceBeginInitialize

InitOnceExecuteOnce

api-ms-win-core-com-l1-1-0

CoGetApartmentType

CoGetInterfaceAndReleaseStream

CoMarshalInterThreadInterfaceInStream

CoTaskMemAlloc

CoGetObjectContext

CoCreateFreeThreadedMarshaler

CoTaskMemFree

ext-ms-win-shell32-shellfolders-l1-1-0

SHGetKnownFolderPath

api-ms-win-core-string-l1-1-0

CompareStringOrdinal

MultiByteToWideChar

WideCharToMultiByte

GetStringTypeW

api-ms-win-core-registry-l1-1-0

RegQueryInfoKeyW

RegQueryValueExW

RegOpenKeyExW

RegEnumKeyExW

RegCloseKey

wincorlib

?__abi_WinRTraiseCOMException@@YAXJ@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z

?Equals@Object@Platform@@QE$AAA_NPE$AAV12@@Z

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

??0Delegate@Platform@@QE$AAA@XZ

??0NotImplementedException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

??0Object@Platform@@QE$AAA@XZ

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

msvcrt

memcpy

memmove

setlocale

___lc_handle_func

___lc_codepage_func

__pctype_func

calloc

___lc_collate_cp_func

abort

__CxxFrameHandler3

_vsnwprintf

memcpy_s

_vsnprintf_s

??0exception@@QEAA@XZ

??1exception@@UEAA@XZ

??3@YAXPEAX@Z

wcsstr

??0exception@@QEAA@AEBV0@@Z

_purecall

??_U@YAPEAX_K@Z

??_V@YAXPEAX@Z

__ExceptionPtrDestroy

__ExceptionPtrCopy

__ExceptionPtrRethrow

__ExceptionPtrCurrentException

__ExceptionPtrCreate

?terminate@@YAXXZ

_errno

wcstol

?what@exception@@UEBAPEBDXZ

??0exception@@QEAA@AEBQEBD@Z

wcsrchr

??0bad_cast@@QEAA@AEBV0@@Z

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@PEBD@Z

free

strchr

realloc

memset

wcslen

_CxxThrowException

??1type_info@@UEAA@XZ

_callnewh

_unlock

__dllonexit

__C_specific_handler

_onexit

_XcptFilter

_amsg_exit

__getmainargs

__set_app_type

exit

_exit

_cexit

_ismbblead

__setusermatherr

_initterm

_acmdln

_fmode

_commode

_wcsdup

__crtCompareStringW

__crtLCMapStringW

_wsetlocale

??0exception@@QEAA@AEBQEBDH@Z

_lock

malloc

___mb_cur_max_func

ntdll

RtlLookupFunctionEntry

RtlCaptureContext

RtlVirtualUnwind

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext

SetRestrictedErrorInfo

RoOriginateError

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsCompareStringOrdinal

WindowsConcatString

WindowsCreateString

WindowsCreateStringReference

WindowsDeleteString

WindowsIsStringEmpty

WindowsGetStringLen

WindowsDuplicateString

WindowsGetStringRawBuffer

api-ms-win-core-util-l1-1-0

DecodePointer

EncodePointer

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

Sections

.text
Size: 441KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/AppxManifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/Assets/LockScreenLogo.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/Assets/SplashScreen.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/Assets/Square150x150Logo.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/Assets/Square44x44Logo.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-24_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/Assets/StoreLogo.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/Assets/Wide310x150Logo.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/pris/resources.ru-RU.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/App.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/Assets/Logo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/Assets/SmallLogo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/Assets/Splashscreen.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/Assets/StoreLogo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/Assets/baseTemplate.html

.js

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/Assets/templateStyle.css

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/CHXSmartScreen.exe

.exe windows:10 windows x64 arch:x64

2d98333547d6bf163598ca465bba8134

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:30

Not After

03/03/2021, 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

8b:7d:a7:43:6b:88:32:30:6f:b4:51:61:4f:be:16:f4:2e:97:e3:ce:e7:bf:ba:36:e5:23:a0:09:d7:32:49:08
Signer

Actual PE Digest

8b:7d:a7:43:6b:88:32:30:6f:b4:51:61:4f:be:16:f4:2e:97:e3:ce:e7:bf:ba:36:e5:23:a0:09:d7:32:49:08

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

CHXSmartScreen.pdb

Imports

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer

EventUnregister

EventSetInformation

EventRegister

api-ms-win-core-synch-l1-1-0

ReleaseSRWLockShared

SetEvent

InitializeCriticalSectionEx

AcquireSRWLockExclusive

ResetEvent

AcquireSRWLockShared

ReleaseSRWLockExclusive

InitializeCriticalSection

DeleteCriticalSection

EnterCriticalSection

LeaveCriticalSection

CreateEventExA

WaitForSingleObjectEx

api-ms-win-core-com-l1-1-0

CoGetObjectContext

CoGetApartmentType

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

GetCurrentProcessId

GetCurrentProcess

GetCurrentThreadId

GetStartupInfoW

api-ms-win-core-handle-l1-1-0

CloseHandle

wincorlib

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?UninitializeData@Details@Platform@@YAXH@Z

?__abi_FailFast@@YAXXZ

?InitializeData@Details@Platform@@YAJH@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

?ToString@Enum@Platform@@QE$AAAPE$AAVString@2@XZ

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

??0Delegate@Platform@@QE$AAA@XZ

??0DisconnectedException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

msvcrt

_commode

_fmode

_acmdln

__setusermatherr

_cexit

_exit

exit

__CxxFrameHandler3

_purecall

??3@YAXPEAX@Z

??0exception@@QEAA@AEBV0@@Z

?what@exception@@UEBAPEBDXZ

??1exception@@UEAA@XZ

??0exception@@QEAA@AEBQEBD@Z

sprintf_s

??0bad_cast@@QEAA@AEBV0@@Z

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@PEBD@Z

free

??_V@YAXPEAX@Z

localeconv

strcspn

??0exception@@QEAA@XZ

__ExceptionPtrDestroy

__ExceptionPtrCopy

__ExceptionPtrRethrow

__ExceptionPtrCurrentException

__ExceptionPtrCreate

?terminate@@YAXXZ

wcsrchr

_errno

_CxxThrowException

memcpy

memmove

??0exception@@QEAA@AEBQEBDH@Z

malloc

_callnewh

__uncaught_exception

setlocale

_lock

_unlock

___mb_cur_max_func

___lc_handle_func

___lc_codepage_func

_ismbblead

__pctype_func

calloc

abort

memset

_wcsdup

__crtLCMapStringW

_wsetlocale

wcslen

??1type_info@@UEAA@XZ

__dllonexit

__C_specific_handler

_onexit

_XcptFilter

_amsg_exit

_initterm

__getmainargs

__set_app_type

pow

ole32

CoCreateFreeThreadedMarshaler

CoTaskMemAlloc

CoTaskMemFree

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext

RoOriginateError

SetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsConcatString

WindowsCompareStringOrdinal

WindowsIsStringEmpty

WindowsCreateString

WindowsGetStringRawBuffer

WindowsDuplicateString

WindowsDeleteString

WindowsCreateStringReference

api-ms-win-core-string-l1-1-0

GetStringTypeW

WideCharToMultiByte

MultiByteToWideChar

api-ms-win-core-util-l1-1-0

EncodePointer

DecodePointer

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

Sleep

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlVirtualUnwind

RtlLookupFunctionEntry

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

UnhandledExceptionFilter

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW

Exports

DllCanUnloadNow

DllGetActivationFactory

VSDesignerDllMain

Sections

.text
Size: 202KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/MainPage.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/appxmanifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/pris/resources.ru-RU.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/AppResolverUX.exe

.exe windows:10 windows x64 arch:x64

02520f7949c2457aa776745e981b4245

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:30

Not After

03/03/2021, 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

16:11:1d:30:dd:50:0d:10:8b:83:7d:86:2e:66:6b:d2:39:96:4b:57:a0:b1:fe:a3:cd:25:f9:13:e8:f1:52:60
Signer

Actual PE Digest

16:11:1d:30:dd:50:0d:10:8b:83:7d:86:2e:66:6b:d2:39:96:4b:57:a0:b1:fe:a3:cd:25:f9:13:e8:f1:52:60

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

AppResolverUX.pdb

Imports

api-ms-win-eventing-provider-l1-1-0

EventSetInformation

EventUnregister

EventWriteTransfer

EventRegister

EventProviderEnabled

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

IsDebuggerPresent

DebugBreak

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess

GetStartupInfoW

GetCurrentThreadId

TerminateProcess

GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler

CoGetContextToken

CoTaskMemAlloc

CoTaskMemFree

api-ms-win-core-errorhandling-l1-1-0

SetLastError

UnhandledExceptionFilter

GetLastError

SetUnhandledExceptionFilter

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference

WindowsDuplicateString

WindowsGetStringLen

WindowsIsStringEmpty

WindowsCreateString

WindowsConcatString

WindowsGetStringRawBuffer

WindowsDeleteString

WindowsCompareStringOrdinal

api-ms-win-core-string-l1-1-0

CompareStringEx

CompareStringOrdinal

api-ms-win-core-sysinfo-l1-2-0

GetProductInfo

ntdll

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

RtlGetDeviceFamilyInfoEnum

api-ms-win-core-synch-l1-2-0

InitOnceComplete

InitOnceExecuteOnce

Sleep

InitOnceBeginInitialize

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

GetModuleFileNameA

GetModuleHandleW

GetProcAddress

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolTimer

CreateThreadpoolTimer

WaitForThreadpoolTimerCallbacks

SetThreadpoolTimer

api-ms-win-core-synch-l1-1-0

LeaveCriticalSection

EnterCriticalSection

InitializeCriticalSectionEx

CreateMutexExW

AcquireSRWLockExclusive

InitializeCriticalSection

CreateEventW

ResetEvent

DeleteCriticalSection

ReleaseMutex

AcquireSRWLockShared

SetEvent

InitializeCriticalSectionAndSpinCount

OpenSemaphoreW

ReleaseSemaphore

ReleaseSRWLockExclusive

WaitForSingleObject

ReleaseSRWLockShared

CreateSemaphoreExW

WaitForSingleObjectEx

api-ms-win-core-heap-l1-1-0

HeapAlloc

HeapFree

GetProcessHeap

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-crt-private-l1-1-0

_o__callnewh

_o__cexit

_o__configthreadlocale

_o__configure_narrow_argv

_o__crt_atexit

_o__errno

_o__exit

_o__get_narrow_winmain_command_line

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__register_onexit_function

_o__seh_filter_exe

_o__set_app_type

_o__set_fmode

_o__set_new_mode

memmove

_o_exit

_o_free

_o_malloc

_o_terminate

_o_toupper

_o_wcsncpy_s

__CxxFrameHandler4

__std_terminate

wcsstr

wcsrchr

_o___p__commode

_o___stdio_common_vswprintf

__C_specific_handler

__CxxFrameHandler3

_CxxThrowException

memcmp

_o___stdio_common_vsnprintf_s

_o___std_exception_destroy

_o___std_exception_copy

memcpy

_o__purecall

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback

_c_exit

_initterm_e

_initterm

msvcp_win

?_Xlength_error@std@@YAXPEBD@Z

?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ

?_XGetLastError@std@@YAXXZ

?__ExceptionPtrDestroy@@YAXPEAX@Z

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

?__ExceptionPtrRethrow@@YAXPEBX@Z

?__ExceptionPtrToBool@@YA_NPEBX@Z

?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z

?__ExceptionPtrCurrentException@@YAXPEAX@Z

?__ExceptionPtrCreate@@YAXPEAX@Z

?__ExceptionPtrAssign@@YAXPEAXPEBX@Z

_Mtx_unlock

?_Throw_C_error@std@@YAXH@Z

_Mtx_lock

?_ReportUnobservedException@details@Concurrency@@YAXXZ

?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ

?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z

?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z

?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z

?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ

?_Xbad_function_call@std@@YAXXZ

?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z

_Cnd_broadcast

?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z

?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ

_Mtx_destroy_in_situ

_Cnd_destroy_in_situ

_Mtx_init_in_situ

_Cnd_init_in_situ

?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ

_Cnd_wait

?_IsNonBlockingThread@_Task_impl_base@details@Concurrency@@SA_NXZ

?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z

?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ

?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

wincorlib

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?__abi_FailFast@@YAXXZ

?UninitializeData@Details@Platform@@YAXH@Z

?InitializeData@Details@Platform@@YAJH@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?Equals@Object@Platform@@QE$AAA_NPE$AAV12@@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

??0ChangedStateException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0GridLength@Xaml@UI@Windows@@QEAA@NW4GridUnitType@123@@Z

?GetType@Object@Platform@@QE$AAAPE$AAVType@2@XZ

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ

?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z

?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z

??0Delegate@Platform@@QE$AAA@XZ

??0DisconnectedException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo

RoFailFastWithErrorContext

RoOriginateError

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-heap-l2-1-0

LocalAlloc

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-crt-string-l1-1-0

wcslen

memset

Sections

.text
Size: 332KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/AppxManifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/Assets/SquareTile150x150.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/Assets/SquareTile310x150.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/Assets/SquareTile44x44.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/Assets/SquareTile71x71.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/pris/resources.ru-RU.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.AppResolverUX_cw5n1h2txyewy/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/App.xaml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/AppxManifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/LockScreenLogo.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-100_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-100_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-125.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-125_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-125_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-150.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-150_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-150_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-200_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-200_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-400.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-400_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Splashscreen.scale-400_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-16_altform-lightunplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-16_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-20.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-20_altform-lightunplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-20_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-24.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-24_altform-lightunplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-24_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-256.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-256_altform-lightunplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-256_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-30.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-30_altform-lightunplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-30_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-32.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-32_altform-lightunplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-32_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-36.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-36_altform-lightunplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-36_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-40.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-40_altform-lightunplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-40_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-48.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-48_altform-lightunplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-48_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-60.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-60_altform-lightunplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-60_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-64.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-64_altform-lightunplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-64_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-72.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-72_altform-lightunplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-72_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-80.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-80_altform-lightunplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-80_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-96.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-96_altform-lightunplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/Square44x44Logo.targetsize-96_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/StoreLogo.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-100_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-100_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-125.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-125_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-125_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-150.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-150_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-150_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-200_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-200_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-400.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-400_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square150x150logo.scale-400_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-100_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-100_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-125.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-125_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-125_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-150.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-150_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-150_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-200_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-200_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-400.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-400_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/square44x44logo.scale-400_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-100_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-100_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-125.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-125_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-125_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-150.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-150_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-150_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-200_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-200_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-400.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-400_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/Assets/wide310x150logo.scale-400_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/CallingShellApp.exe

.exe windows:10 windows x64 arch:x64

b5960a682bd4ddb8b60c1fe8588a5b6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_APPCONTAINER

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

CallingShellApp.pdb

Imports

api-ms-win-core-synch-l1-1-0

AcquireSRWLockExclusive

LeaveCriticalSection

CreateMutexExW

AcquireSRWLockShared

OpenSemaphoreW

DeleteCriticalSection

WaitForSingleObjectEx

ReleaseMutex

WaitForSingleObject

ReleaseSemaphore

CreateSemaphoreExW

ReleaseSRWLockExclusive

InitializeCriticalSection

EnterCriticalSection

CreateEventW

ResetEvent

SetEvent

InitializeCriticalSectionAndSpinCount

ReleaseSRWLockShared

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler

CoGetContextToken

CoTaskMemFree

CoTaskMemAlloc

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress

GetModuleHandleW

GetModuleHandleExW

GetModuleFileNameA

api-ms-win-core-heap-l1-1-0

HeapAlloc

HeapFree

GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

GetLastError

UnhandledExceptionFilter

SetLastError

SetUnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

GetCurrentProcessId

GetCurrentThreadId

GetCurrentProcess

GetStartupInfoW

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

OutputDebugStringW

DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle

wincorlib

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?__abi_FailFast@@YAXXZ

??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z

?Equals@Object@Platform@@QE$AAA_NPE$AAV12@@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z

?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ

??0GridLength@Xaml@UI@Windows@@QEAA@NW4GridUnitType@123@@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

??0Delegate@Platform@@QE$AAA@XZ

?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?InitializeData@Details@Platform@@YAJH@Z

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

api-ms-win-crt-private-l1-1-0

__C_specific_handler

__CxxFrameHandler3

_CxxThrowException

wcsrchr

wcsstr

__std_terminate

__CxxFrameHandler4

_o___p__commode

_o___std_exception_copy

_o___std_exception_destroy

_o___stdio_common_vsnprintf_s

_o___stdio_common_vswprintf

_o__callnewh

_o__cexit

_o__configthreadlocale

_o__configure_narrow_argv

_o__crt_atexit

_o__errno

_o__exit

_o__get_narrow_winmain_command_line

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__purecall

_o__register_onexit_function

_o__seh_filter_exe

_o__set_app_type

_o__set_fmode

_o__set_new_mode

_o_exit

_o_free

_o_malloc

_o_terminate

memcpy

api-ms-win-crt-string-l1-1-0

memset

wcslen

api-ms-win-crt-runtime-l1-1-0

_initterm

_register_thread_local_exe_atexit_callback

_c_exit

_initterm_e

msvcp_win

?_Xlength_error@std@@YAXPEBD@Z

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

RoFailFastWithErrorContext

SetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsIsStringEmpty

WindowsGetStringRawBuffer

WindowsGetStringLen

WindowsDuplicateString

WindowsDeleteString

WindowsCreateStringReference

WindowsCreateString

WindowsConcatString

WindowsCompareStringOrdinal

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry

RtlVirtualUnwind

RtlCaptureContext

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/CallingShellAppPresenters.dll

.dll windows:6 windows x64 arch:x64

fa28012a8436853732ee62b50e40150c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

CallingShellAppPresenters.pdb

Imports

phoneom

PhoneEnd

PhoneRejectIncoming

PhoneSetForegroundLine

PhoneFreeCallInfo

PhoneNotificationHelper_CreateInstance

PhoneGetNetworkAlert

PhoneSetMute

PhoneSetBluetoothHfpCallAudioTransfer

PhoneGetProviderLineServiceInfo

PhoneAPIInitialize

RetrieveSystemNotificationCallbackPayload

PhoneGetCallState

PhoneExplicitCallTransfer

PhonePauseRecording

PhoneGetProviderLineInfo

PhoneAcceptUpgradingRealTimeTextCall

PhoneAcceptVideo

PhoneReinitiateCallerIdLookup

PhoneSetHold

PhoneSendDTMFStart

PhoneAPIUninitialize

PhoneSendDTMF

PhoneInitiateCallUpgrade

PhoneGetCallCounts

PhoneGetAvailableActions

PhoneAcceptIncomingEx

PhoneSendDTMFStop

PhoneDropVideo

PhoneAddVideo

PhoneSetVideoPaused

PhoneGetWiredHeadsetState

PhoneExecutePendingDtmfWait

PhoneConference

PhoneIsDtmfWaitPending

PhoneConfirmNonSeamlessUpgrade

PhoneStartRecording

PhoneDropAcceptEx

PhoneIsEmergencyNumber

PhoneCancelNonSeamlessUpgrade

PhoneRejectVideo

PhoneSwap

PhoneGetCallsInConference

PhoneUpgradeToRealTimeTextCall

PhoneFlash

PhoneSetLocalVideo

PhoneGetState

PhoneDowngradeFromRealTimeTextCall

PhoneGetContactPictureHandle

phoneutil

GetTimeDeltaFormat

GetDisplayNameFromCallInformation

CreateBrandingInfo

GetDisplayNumberWithLeftToRightMarker

CreateAudioHardwareHelper

OneShotTimer_CreateInstance

msvcrt

memmove

_initterm

_amsg_exit

_XcptFilter

_onexit

__dllonexit

_unlock

_lock

_callnewh

malloc

free

qsort

swprintf_s

toupper

wcscpy_s

__CxxFrameHandler3

memmove_s

memcpy_s

_vsnwprintf

_purecall

__C_specific_handler

memcmp

memcpy

memset

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc

StringFromCLSID

CoCreateGuid

CoTaskMemFree

CLSIDFromString

CoCreateFreeThreadedMarshaler

CoCreateInstance

api-ms-win-eventing-provider-l1-1-0

EventUnregister

EventRegister

EventSetInformation

EventProviderEnabled

EventWriteTransfer

api-ms-win-core-synch-l1-1-0

LeaveCriticalSection

OpenSemaphoreW

CreateSemaphoreExW

AcquireSRWLockExclusive

EnterCriticalSection

ReleaseSRWLockShared

InitializeSRWLock

InitializeCriticalSectionEx

InitializeCriticalSection

ReleaseSRWLockExclusive

WaitForSingleObjectEx

OpenEventW

CreateEventW

SetEvent

AcquireSRWLockShared

CreateMutexExW

ReleaseMutex

ReleaseSemaphore

DeleteCriticalSection

WaitForSingleObject

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

UnhandledExceptionFilter

GetLastError

SetLastError

RaiseException

oleaut32

SysAllocString

SysFreeString

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

GetProcAddress

GetModuleHandleW

GetModuleFileNameA

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

IsDebuggerPresent

DebugBreak

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString

WindowsCreateStringReference

WindowsGetStringLen

WindowsGetStringRawBuffer

WindowsCompareStringOrdinal

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-file-l1-1-0

CompareFileTime

api-ms-win-core-threadpool-l1-2-0

SubmitThreadpoolWork

WaitForThreadpoolWorkCallbacks

CloseThreadpoolWork

SetThreadpoolTimer

CreateThreadpoolTimer

WaitForThreadpoolTimerCallbacks

CreateThreadpoolWork

CloseThreadpoolTimer

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount

api-ms-win-core-heap-l1-1-0

HeapAlloc

GetProcessHeap

HeapFree

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess

CreateThread

TerminateProcess

GetCurrentProcessId

GetCurrentThreadId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-heap-l2-1-0

LocalAlloc

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry

RtlVirtualUnwind

RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

Exports

CreateCallingShellPresenterStore

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/MainPage.xaml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/WindowsInternal.Shell.Experiences.Calling.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/WindowsInternal.Shell.Experiences.CallingShellAppControls.dll

.dll windows:10 windows x64 arch:x64

a9bf9fcdaa788f3301472d4eba69e1ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_APPCONTAINER

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

WindowsInternal.Shell.Experiences.CallingShellAppControls.pdb

Imports

callingshellapppresenters

CreateCallingShellPresenterStore

api-ms-win-core-debug-l1-1-0

DebugBreak

OutputDebugStringW

IsDebuggerPresent

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId

TerminateProcess

GetCurrentThreadId

GetCurrentProcess

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-eventing-provider-l1-1-0

EventSetInformation

EventUnregister

EventRegister

EventWriteTransfer

EventProviderEnabled

api-ms-win-core-synch-l1-1-0

ReleaseSRWLockShared

EnterCriticalSection

LeaveCriticalSection

InitializeCriticalSection

CreateEventW

AcquireSRWLockShared

ResetEvent

SetEvent

InitializeCriticalSectionAndSpinCount

DeleteCriticalSection

WaitForSingleObjectEx

AcquireSRWLockExclusive

ReleaseSRWLockExclusive

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

GetProcAddress

GetModuleHandleW

DisableThreadLibraryCalls

GetModuleFileNameA

api-ms-win-core-heap-l1-1-0

HeapFree

HeapAlloc

GetProcessHeap

api-ms-win-core-file-l1-1-0

ReadFile

GetFileSizeEx

api-ms-win-core-errorhandling-l1-1-0

GetLastError

UnhandledExceptionFilter

SetUnhandledExceptionFilter

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-heap-l2-1-0

LocalAlloc

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

api-ms-win-core-synch-l1-2-0

Sleep

InitOnceExecuteOnce

wincorlib

?InitializeData@Details@Platform@@YAJH@Z

??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z

?Equals@Object@Platform@@QE$AAA_NPE$AAV12@@Z

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?GetType@Object@Platform@@QE$AAAPE$AAVType@2@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

??0Rect@Foundation@Windows@@QEAA@VPoint@12@VSize@12@@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

??0WrongThreadException@Platform@@QE$AAA@PE$AAVString@1@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

??0Delegate@Platform@@QE$AAA@XZ

??0DisconnectedException@Platform@@QE$AAA@XZ

??0NullReferenceException@Platform@@QE$AAA@XZ

??0NotImplementedException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?UninitializeData@Details@Platform@@YAXH@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

api-ms-win-crt-private-l1-1-0

__C_specific_handler

memcpy

__CxxFrameHandler3

_CxxThrowException

wcsrchr

wcsstr

__std_terminate

__CxxFrameHandler4

_o___std_exception_copy

_o___std_exception_destroy

_o___std_type_info_destroy_list

_o___stdio_common_vsnprintf_s

_o___stdio_common_vswprintf

_o__callnewh

_o__cexit

_o__configure_narrow_argv

_o__crt_atexit

_o__errno

_o__execute_onexit_table

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__purecall

_o__register_onexit_function

_o__seh_filter_dll

_o_free

_o_malloc

_o_toupper

memmove

api-ms-win-crt-string-l1-1-0

wcslen

memset

api-ms-win-crt-runtime-l1-1-0

_initterm

_initterm_e

msvcp_win

?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ

?_XGetLastError@std@@YAXXZ

?__ExceptionPtrDestroy@@YAXPEAX@Z

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

?__ExceptionPtrRethrow@@YAXPEBX@Z

?__ExceptionPtrToBool@@YA_NPEBX@Z

?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z

?__ExceptionPtrCurrentException@@YAXPEAX@Z

?__ExceptionPtrCreate@@YAXPEAX@Z

?__ExceptionPtrAssign@@YAXPEAXPEBX@Z

?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ

?GetNextAsyncId@platform@details@Concurrency@@YAIXZ

_Cnd_broadcast

?_Throw_C_error@std@@YAXH@Z

_Mtx_unlock

_Mtx_lock

?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ

?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z

_Cnd_wait

?_ReportUnobservedException@details@Concurrency@@YAXXZ

?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ

?_IsNonBlockingThread@_Task_impl_base@details@Concurrency@@SA_NXZ

?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z

?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z

?_Xbad_function_call@std@@YAXXZ

?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z

?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ

_Mtx_destroy_in_situ

_Cnd_destroy_in_situ

?_Xlength_error@std@@YAXPEBD@Z

?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z

_Mtx_init_in_situ

_Cnd_init_in_situ

?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ

?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

api-ms-win-core-winrt-string-l1-1-0

WindowsIsStringEmpty

WindowsGetStringRawBuffer

WindowsGetStringLen

WindowsDuplicateString

WindowsDeleteString

WindowsCreateStringReference

WindowsCreateString

WindowsConcatString

WindowsCompareStringOrdinal

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-com-l1-1-0

CoTaskMemFree

CoTaskMemAlloc

CoCreateFreeThreadedMarshaler

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlVirtualUnwind

RtlLookupFunctionEntry

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 393KB - Virtual size: 393KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/pris/resources.ru-RU.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CallingShellApp_cw5n1h2txyewy/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CapturePicker_cw5n1h2txyewy/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CapturePicker_cw5n1h2txyewy/AppxManifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CapturePicker_cw5n1h2txyewy/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CapturePicker_cw5n1h2txyewy/CapturePicker.exe

.exe windows:10 windows x64 arch:x64

21e63282482cddc14bc8f24072146f04

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:30

Not After

03/03/2021, 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

cb:b0:b4:69:29:06:56:5b:a8:1a:74:c1:5d:1f:85:63:e8:b1:b6:e5:6e:40:bb:5c:09:ce:2f:ea:2c:df:3d:37
Signer

Actual PE Digest

cb:b0:b4:69:29:06:56:5b:a8:1a:74:c1:5d:1f:85:63:e8:b1:b6:e5:6e:40:bb:5c:09:ce:2f:ea:2c:df:3d:37

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

CapturePicker.pdb

Imports

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameA

GetModuleHandleW

GetModuleHandleExW

GetProcAddress

api-ms-win-core-heap-l1-1-0

HeapFree

HeapAlloc

GetProcessHeap

api-ms-win-core-synch-l1-1-0

AcquireSRWLockShared

InitializeCriticalSection

DeleteCriticalSection

CreateSemaphoreExW

AcquireSRWLockExclusive

WaitForSingleObject

ReleaseSemaphore

LeaveCriticalSection

EnterCriticalSection

CreateMutexExW

WaitForSingleObjectEx

ReleaseSRWLockShared

InitializeCriticalSectionEx

ReleaseSRWLockExclusive

OpenSemaphoreW

ReleaseMutex

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolTimerCallbacks

CloseThreadpoolTimer

CreateThreadpoolTimer

SetThreadpoolTimer

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer

EventUnregister

EventSetInformation

EventRegister

api-ms-win-core-processthreads-l1-1-0

GetStartupInfoW

GetCurrentProcessId

GetCurrentProcess

TerminateProcess

GetCurrentThreadId

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

IsDebuggerPresent

DebugBreak

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

GetLastError

SetLastError

RaiseException

UnhandledExceptionFilter

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference

WindowsIsStringEmpty

WindowsGetStringRawBuffer

WindowsGetStringLen

WindowsDuplicateString

WindowsCreateString

WindowsConcatString

WindowsCompareStringOrdinal

WindowsDeleteString

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-synch-l1-2-0

InitOnceComplete

Sleep

WakeAllConditionVariable

InitOnceExecuteOnce

InitOnceBeginInitialize

SleepConditionVariableSRW

wincorlib

?__abi_WinRTraiseCOMException@@YAXJ@Z

??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0Delegate@Platform@@QE$AAA@XZ

??0ChangedStateException@Platform@@QE$AAA@XZ

??0NullReferenceException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?Equals@Object@Platform@@QE$AAA_NPE$AAV12@@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

msvcrt

__CxxFrameHandler3

memcpy_s

memmove_s

_vsnwprintf

_purecall

??3@YAXPEAX@Z

_errno

wcstol

??1exception@@UEAA@XZ

??0exception@@QEAA@XZ

??0exception@@QEAA@AEBV0@@Z

_vsnprintf_s

wcsstr

?what@exception@@UEBAPEBDXZ

??0exception@@QEAA@AEBQEBD@Z

wcsrchr

??0bad_cast@@QEAA@AEBV0@@Z

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@PEBD@Z

free

realloc

memset

wcslen

_CxxThrowException

?terminate@@YAXXZ

_lock

_unlock

__dllonexit

__C_specific_handler

_onexit

??1type_info@@UEAA@XZ

_XcptFilter

_amsg_exit

__getmainargs

__set_app_type

exit

_exit

_cexit

_ismbblead

__setusermatherr

_initterm

_acmdln

_fmode

_commode

??0exception@@QEAA@AEBQEBDH@Z

memmove

malloc

_callnewh

setlocale

___mb_cur_max_func

___lc_handle_func

___lc_codepage_func

__pctype_func

calloc

___lc_collate_cp_func

memcmp

abort

_wcsdup

__crtCompareStringW

__crtLCMapStringW

_wsetlocale

strchr

memcpy

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

SetRestrictedErrorInfo

RoFailFastWithErrorContext

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-util-l1-1-0

DecodePointer

EncodePointer

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler

CoTaskMemFree

CoTaskMemAlloc

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

api-ms-win-core-string-l1-1-0

GetStringTypeW

WideCharToMultiByte

MultiByteToWideChar

Sections

.text
Size: 331KB - Virtual size: 331KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CapturePicker_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CapturePicker_cw5n1h2txyewy/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CapturePicker_cw5n1h2txyewy/pris/resources.ru-RU.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.CapturePicker_cw5n1h2txyewy/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/AppxManifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SplashScreen.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile150x150.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile150x150.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile150x150.scale-400.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile310x150.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile310x150.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile310x150.scale-400.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile44x44.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile44x44.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile44x44.scale-400.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile44x44.targetsize-24.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile71x71.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile71x71.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/Assets/SquareTile71x71.scale-400.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/FilePicker.exe

.exe windows:10 windows x64 arch:x64

b228380e2357086711eb8b2649378142

Code Sign

33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:23

Not After

01/09/2022, 18:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

5a:89:c3:a8:bc:96:f6:f7:5d:49:18:16:71:e8:1e:5e:25:80:f6:9e:09:25:5d:1c:37:c8:21:c3:5e:6e:a5:41
Signer

Actual PE Digest

5a:89:c3:a8:bc:96:f6:f7:5d:49:18:16:71:e8:1e:5e:25:80:f6:9e:09:25:5d:1c:37:c8:21:c3:5e:6e:a5:41

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

FilePicker.pdb

Imports

ext-ms-win-session-usermgr-l1-1-0

UMgrQueryUserToken

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

IsDebuggerPresent

DebugBreak

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

GetStartupInfoW

GetCurrentThreadId

GetCurrentProcess

GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer

EventUnregister

EventSetInformation

EventRegister

EventActivityIdControl

api-ms-win-core-heap-l1-1-0

GetProcessHeap

HeapFree

HeapAlloc

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection

AcquireSRWLockShared

CreateEventExW

CreateSemaphoreExW

CreateMutexExW

EnterCriticalSection

ResetEvent

CreateEventW

ReleaseSRWLockShared

ReleaseSemaphore

OpenSemaphoreW

AcquireSRWLockExclusive

WaitForSingleObjectEx

InitializeCriticalSection

SetEvent

ReleaseMutex

WaitForSingleObject

InitializeCriticalSectionEx

LeaveCriticalSection

ReleaseSRWLockExclusive

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize

InitOnceExecuteOnce

Sleep

InitOnceComplete

api-ms-win-core-errorhandling-l1-1-0

SetLastError

GetLastError

UnhandledExceptionFilter

SetUnhandledExceptionFilter

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

CompareStringOrdinal

GetStringTypeW

WideCharToMultiByte

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress

GetModuleHandleW

GetModuleFileNameA

GetModuleHandleExW

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolTimer

WaitForThreadpoolTimerCallbacks

CloseThreadpoolTimer

SetThreadpoolTimer

api-ms-win-core-handle-l1-1-0

CloseHandle

ntdll

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

RtlGetDeviceFamilyInfoEnum

NtQueryWnfStateData

api-ms-win-security-base-l1-1-0

CreateWellKnownSid

api-ms-win-security-base-l1-2-0

CheckTokenMembershipEx

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler

CoGetObjectContext

CoTaskMemAlloc

CoTaskMemFree

CoGetApartmentType

CoGetInterfaceAndReleaseStream

CoMarshalInterThreadInterfaceInStream

wincorlib

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

??0GridLength@Xaml@UI@Windows@@QEAA@NW4GridUnitType@123@@Z

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

??0Delegate@Platform@@QE$AAA@XZ

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?GetType@Object@Platform@@QE$AAAPE$AAVType@2@XZ

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

msvcrt

memcpy

memmove

malloc

_callnewh

setlocale

___lc_collate_cp_func

___lc_handle_func

___lc_codepage_func

__pctype_func

calloc

memcmp

abort

__CxxFrameHandler3

_vsnwprintf

memcpy_s

_purecall

??3@YAXPEAX@Z

wcsncpy_s

??1exception@@UEAA@XZ

??0exception@@QEAA@XZ

??0exception@@QEAA@AEBV0@@Z

_vsnprintf_s

wcsstr

memmove_s

__ExceptionPtrDestroy

__ExceptionPtrCopy

__ExceptionPtrRethrow

__ExceptionPtrCurrentException

__ExceptionPtrCreate

?terminate@@YAXXZ

_HUGE

?what@exception@@UEBAPEBDXZ

??0exception@@QEAA@AEBQEBD@Z

wcsrchr

_errno

wcstol

free

??0bad_cast@@QEAA@AEBV0@@Z

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@PEBD@Z

strchr

realloc

memset

wcslen

_CxxThrowException

??1type_info@@UEAA@XZ

_lock

_unlock

__dllonexit

__C_specific_handler

_onexit

_XcptFilter

_amsg_exit

__getmainargs

__set_app_type

exit

_exit

_cexit

_ismbblead

__setusermatherr

_initterm

_acmdln

_fmode

_commode

_wcsdup

__crtCompareStringW

__crtLCMapStringW

_wsetlocale

??0exception@@QEAA@AEBQEBDH@Z

___mb_cur_max_func

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo

RoOriginateError

RoFailFastWithErrorContext

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString

WindowsConcatString

WindowsCompareStringOrdinal

WindowsCreateStringReference

WindowsDeleteString

WindowsDuplicateString

WindowsGetStringLen

WindowsGetStringRawBuffer

WindowsIsStringEmpty

api-ms-win-core-util-l1-1-0

DecodePointer

EncodePointer

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

Sections

.text
Size: 576KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/pris/resources.ru-RU.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.FilePicker_cw5n1h2txyewy/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/AppxManifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/Assets/Fonts/BrowserMDL.ttf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/OOBENetworkCaptivePortal.exe

.exe windows:10 windows x64 arch:x64

b9f9161c70721a82f623fab957e5e353

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:30

Not After

03/03/2021, 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

42:13:65:aa:82:6a:c6:d9:5e:33:16:5b:b9:9b:2f:2a:50:da:30:64:4c:9d:ff:98:67:1a:2b:2f:85:9f:cd:47
Signer

Actual PE Digest

42:13:65:aa:82:6a:c6:d9:5e:33:16:5b:b9:9b:2f:2a:50:da:30:64:4c:9d:ff:98:67:1a:2b:2f:85:9f:cd:47

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

OOBENetworkCaptivePortal.pdb

Imports

api-ms-win-core-debug-l1-1-0

DebugBreak

OutputDebugStringW

IsDebuggerPresent

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId

GetStartupInfoW

TerminateProcess

GetCurrentProcessId

GetCurrentProcess

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-errorhandling-l1-1-0

GetLastError

SetLastError

UnhandledExceptionFilter

SetUnhandledExceptionFilter

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc

CoGetInterfaceAndReleaseStream

CoMarshalInterThreadInterfaceInStream

CoGetApartmentType

CoTaskMemFree

CoCreateFreeThreadedMarshaler

CoGetObjectContext

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

GetModuleHandleW

GetModuleFileNameA

GetProcAddress

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection

AcquireSRWLockExclusive

ResetEvent

ReleaseSRWLockShared

WaitForSingleObjectEx

OpenSemaphoreW

CreateMutexExW

AcquireSRWLockShared

SetEvent

ReleaseSRWLockExclusive

ReleaseMutex

WaitForSingleObject

InitializeCriticalSectionEx

LeaveCriticalSection

ReleaseSemaphore

EnterCriticalSection

CreateEventExW

CreateSemaphoreExW

api-ms-win-core-heap-l1-1-0

HeapAlloc

GetProcessHeap

HeapFree

api-ms-win-core-handle-l1-1-0

CloseHandle

ntdll

RtlSubscribeWnfStateChangeNotification

NtQueryWnfStateData

RtlQueryWnfStateData

RtlUnsubscribeWnfNotificationWaitForCompletion

msvcrt

_wsetlocale

__crtLCMapStringW

__crtCompareStringW

abort

___lc_collate_cp_func

calloc

__pctype_func

___lc_codepage_func

___lc_handle_func

___mb_cur_max_func

setlocale

_callnewh

memmove

memcpy

??0exception@@QEAA@AEBQEBDH@Z

_CxxThrowException

wcslen

memset

_commode

_fmode

_acmdln

_ismbblead

_cexit

_exit

exit

__set_app_type

__getmainargs

_initterm

malloc

_amsg_exit

_XcptFilter

_onexit

__dllonexit

_unlock

_lock

__C_specific_handler

??1type_info@@UEAA@XZ

realloc

strchr

free

??0bad_cast@@QEAA@PEBD@Z

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@AEBV0@@Z

wcsrchr

wcstol

_errno

wcsstr

_vsnprintf_s

memcpy_s

??0exception@@QEAA@AEBQEBD@Z

?what@exception@@UEBAPEBDXZ

?terminate@@YAXXZ

_purecall

__ExceptionPtrCreate

__ExceptionPtrCurrentException

__ExceptionPtrRethrow

__ExceptionPtrCopy

__ExceptionPtrDestroy

??0exception@@QEAA@AEBV0@@Z

??0exception@@QEAA@XZ

??1exception@@UEAA@XZ

_assert

??3@YAXPEAX@Z

_vsnwprintf

__CxxFrameHandler3

_wcsdup

__setusermatherr

nlaapi

NlaIndicateReprobe

wincorlib

?InitializeData@Details@Platform@@YAJH@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?__abi_FailFast@@YAXXZ

??0Delegate@Platform@@QE$AAA@XZ

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext

RoOriginateError

SetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringRawBuffer

WindowsGetStringLen

WindowsDuplicateString

WindowsDeleteString

WindowsIsStringEmpty

WindowsCompareStringOrdinal

WindowsConcatString

WindowsCreateString

WindowsCreateStringReference

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry

RtlCaptureContext

RtlVirtualUnwind

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount

api-ms-win-core-util-l1-1-0

DecodePointer

EncodePointer

api-ms-win-core-string-l1-1-0

GetStringTypeW

MultiByteToWideChar

WideCharToMultiByte

Exports

DllCanUnloadNow

DllGetActivationFactory

VSDesignerDllMain

Sections

.text
Size: 347KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/pris/resources.ru-RU.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/0407/tokens_deDE.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/0409/tokens_enUS.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/040c/tokens_frFR.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/0410/tokens_itIT.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/0411/tokens_jaJP.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/0416/tokens_ptBR.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/0804/tokens_zhCN.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/0809/tokens_enGB.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/080a/tokens_esMX.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/0c09/tokens_enAU.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/0c0a/tokens_esES.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/0c0c/tokens_frCA.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/1009/tokens_enCA.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy/speech/4009/tokens_enIN.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/AppxManifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/OOBENetworkConnectionFlow.exe

.exe windows:10 windows x64 arch:x64

dd435dd80bbfeb0cf8d8c8b87aec3a53

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:30

Not After

03/03/2021, 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

c1:20:db:63:76:84:f2:68:49:f2:0b:b0:1e:e1:45:04:55:1e:7d:ef:ec:5d:b0:20:f2:46:c3:ec:5c:d3:c6:09
Signer

Actual PE Digest

c1:20:db:63:76:84:f2:68:49:f2:0b:b0:1e:e1:45:04:55:1e:7d:ef:ec:5d:b0:20:f2:46:c3:ec:5c:d3:c6:09

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

OOBENetworkConnectionFlow.pdb

Imports

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress

GetModuleHandleExW

GetModuleFileNameA

GetModuleHandleW

api-ms-win-core-synch-l1-1-0

LeaveCriticalSection

ReleaseSRWLockShared

InitializeCriticalSectionEx

WaitForSingleObject

OpenSemaphoreW

ReleaseMutex

WaitForSingleObjectEx

ReleaseSemaphore

EnterCriticalSection

ReleaseSRWLockExclusive

AcquireSRWLockExclusive

CreateSemaphoreExW

DeleteCriticalSection

AcquireSRWLockShared

CreateMutexExW

api-ms-win-core-heap-l1-1-0

HeapAlloc

HeapFree

GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

GetLastError

UnhandledExceptionFilter

SetLastError

SetUnhandledExceptionFilter

api-ms-win-core-com-l1-1-0

CoTaskMemFree

CoTaskMemAlloc

CoCreateFreeThreadedMarshaler

api-ms-win-core-processthreads-l1-1-0

GetStartupInfoW

GetCurrentProcess

GetCurrentProcessId

TerminateProcess

GetCurrentThreadId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

DebugBreak

OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle

msvcrt

_wsetlocale

__crtLCMapStringW

__crtCompareStringW

_wcsdup

abort

___lc_collate_cp_func

calloc

__pctype_func

___lc_codepage_func

___lc_handle_func

___mb_cur_max_func

setlocale

memmove

memcpy

??0exception@@QEAA@AEBQEBDH@Z

_callnewh

_CxxThrowException

wcslen

memset

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@AEBV0@@Z

wcsrchr

??0exception@@QEAA@AEBQEBD@Z

?what@exception@@UEBAPEBDXZ

??0bad_cast@@QEAA@PEBD@Z

wcstol

_errno

wcsstr

_vsnprintf_s

?terminate@@YAXXZ

??0exception@@QEAA@AEBV0@@Z

_commode

_fmode

_acmdln

__setusermatherr

_ismbblead

_cexit

_exit

exit

__set_app_type

__getmainargs

_initterm

malloc

_amsg_exit

_XcptFilter

_onexit

__dllonexit

_unlock

_lock

__C_specific_handler

??1type_info@@UEAA@XZ

realloc

strchr

free

??0exception@@QEAA@XZ

??1exception@@UEAA@XZ

_purecall

memcpy_s

_vsnwprintf

??3@YAXPEAX@Z

__CxxFrameHandler3

wincorlib

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?__abi_FailFast@@YAXXZ

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?UninitializeData@Details@Platform@@YAXH@Z

?InitializeData@Details@Platform@@YAJH@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

??0InvalidArgumentException@Platform@@QE$AAA@XZ

??0NotImplementedException@Platform@@QE$AAA@XZ

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

??0Delegate@Platform@@QE$AAA@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

??0Object@Platform@@QE$AAA@XZ

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo

RoOriginateError

RoFailFastWithErrorContext

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsIsStringEmpty

WindowsGetStringRawBuffer

WindowsGetStringLen

WindowsDeleteString

WindowsCreateStringReference

WindowsCreateString

WindowsConcatString

WindowsCompareStringOrdinal

WindowsDuplicateString

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry

RtlCaptureContext

RtlVirtualUnwind

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount

api-ms-win-core-util-l1-1-0

EncodePointer

DecodePointer

api-ms-win-core-string-l1-1-0

GetStringTypeW

MultiByteToWideChar

WideCharToMultiByte

Exports

DllCanUnloadNow

DllGetActivationFactory

VSDesignerDllMain

Sections

.text
Size: 334KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/pris/resources.ru-RU.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/0407/tokens_deDE.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/0409/tokens_enUS.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/040c/tokens_frFR.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/0410/tokens_itIT.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/0411/tokens_jaJP.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/0416/tokens_ptBR.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/0804/tokens_zhCN.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/0809/tokens_enGB.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/080a/tokens_esMX.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/0c09/tokens_enAU.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/0c0a/tokens_esES.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/0c0c/tokens_frCA.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/1009/tokens_enCA.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy/speech/4009/tokens_enIN.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/AppxManifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-100_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-100_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-125.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-125_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-125_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-150.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-150_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-150_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-200_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-200_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-400.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-400_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.scale-400_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-16_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-16_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-16_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-20_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-20_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-20_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-24_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-24_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-24_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-256_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-256_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-256_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-30_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-30_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-30_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-32_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-32_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-32_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-36_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-36_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-36_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-40_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-40_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-40_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-48_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-48_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-48_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-60_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-60_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-60_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-64_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-64_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-64_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-72_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-72_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-72_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-80_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-80_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-80_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-96_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-96_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/PeopleLogo.targetsize-96_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/SplashScreen.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/Square150x150Logo.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/Assets/StoreLogo.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/PeopleExperienceHost.exe

.exe windows:10 windows x64 arch:x64

180179aabab9eecb319183b94cf867c0

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:30

Not After

03/03/2021, 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

54:f7:04:e3:0a:aa:41:8a:3c:0b:03:43:d0:de:85:c5:84:66:67:ae:30:e3:df:6a:b8:64:1a:2e:bc:71:44:2a
Signer

Actual PE Digest

54:f7:04:e3:0a:aa:41:8a:3c:0b:03:43:d0:de:85:c5:84:66:67:ae:30:e3:df:6a:b8:64:1a:2e:bc:71:44:2a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

PeopleExperienceHost.pdb

Imports

api-ms-win-eventing-provider-l1-1-0

EventSetInformation

EventRegister

EventWriteTransfer

EventUnregister

api-ms-win-core-heap-l1-1-0

HeapAlloc

GetProcessHeap

HeapFree

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId

TerminateProcess

GetCurrentProcessId

GetStartupInfoW

GetCurrentProcess

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

DebugBreak

IsDebuggerPresent

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-synch-l1-1-0

InitializeSRWLock

SetEvent

ResetEvent

LeaveCriticalSection

InitializeCriticalSection

AcquireSRWLockShared

CreateMutexExW

WaitForSingleObjectEx

ReleaseMutex

OpenSemaphoreW

AcquireSRWLockExclusive

EnterCriticalSection

ReleaseSemaphore

WaitForSingleObject

CreateSemaphoreExW

CreateEventExW

InitializeCriticalSectionEx

DeleteCriticalSection

ReleaseSRWLockShared

ReleaseSRWLockExclusive

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolTimerCallbacks

CreateThreadpoolTimer

SetThreadpoolTimer

CloseThreadpoolTimer

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

GetModuleHandleW

GetProcAddress

GetModuleFileNameA

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

GetLastError

SetLastError

SetUnhandledExceptionFilter

api-ms-win-shcore-sysinfo-l1-1-0

IsOS

api-ms-win-core-com-l1-1-0

CoGetContextToken

CoGetInterfaceAndReleaseStream

CoGetObjectContext

CoMarshalInterThreadInterfaceInStream

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

InitOnceComplete

InitOnceBeginInitialize

Sleep

wincorlib

?__abi_WinRTraiseCOMException@@YAXJ@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

??0InvalidArgumentException@Platform@@QE$AAA@XZ

??0NotImplementedException@Platform@@QE$AAA@XZ

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0Object@Platform@@QE$AAA@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_FailFast@@YAXXZ

?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z

??0Delegate@Platform@@QE$AAA@XZ

?Allocate@Heap@Details@Platform@@SAPEAX_K@Z

?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ

?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

msvcrt

setlocale

___mb_cur_max_func

___lc_handle_func

__CxxFrameHandler3

_vsnwprintf

memcpy_s

_purecall

___lc_codepage_func

memmove_s

?set_terminate@@YAP6AXXZP6AXXZ@Z

_set_error_mode

??0exception@@QEAA@AEBV0@@Z

?what@exception@@UEBAPEBDXZ

??1exception@@UEAA@XZ

??0exception@@QEAA@AEBQEBD@Z

__ExceptionPtrDestroy

__ExceptionPtrCopy

__ExceptionPtrCurrentException

__ExceptionPtrCreate

?terminate@@YAXXZ

??0exception@@QEAA@XZ

_vsnprintf_s

wcsstr

_errno

wcstol

wcsrchr

??0bad_cast@@QEAA@AEBV0@@Z

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@PEBD@Z

free

_callnewh

realloc

memset

wcslen

_CxxThrowException

_lock

_unlock

__dllonexit

__C_specific_handler

_onexit

??1type_info@@UEAA@XZ

_XcptFilter

_amsg_exit

memcpy

__set_app_type

exit

_exit

_cexit

_ismbblead

__setusermatherr

_initterm

_acmdln

_fmode

_commode

__pctype_func

calloc

___lc_collate_cp_func

memcmp

malloc

strchr

_wcsdup

__crtCompareStringW

__crtLCMapStringW

_wsetlocale

memmove

__getmainargs

??0exception@@QEAA@AEBQEBDH@Z

??3@YAXPEAX@Z

ole32

CoTaskMemAlloc

CoCreateFreeThreadedMarshaler

CoTaskMemFree

api-ms-win-crt-runtime-l1-1-0

abort

ext-ms-win-devmgmt-policy-l1-1-0

PolicyManager_GetPolicyInt

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext

RoOriginateError

SetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsConcatString

WindowsCreateString

WindowsCreateStringReference

WindowsCompareStringOrdinal

WindowsIsStringEmpty

WindowsDuplicateString

WindowsDeleteString

WindowsGetStringLen

WindowsGetStringRawBuffer

api-ms-win-core-util-l1-1-0

EncodePointer

DecodePointer

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry

RtlVirtualUnwind

RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

GetStringTypeW

WideCharToMultiByte

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

Sections

.text
Size: 261KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/pris/resources.ru-RU.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy/AppxManifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy/PinningConfirmationDialog.exe

.exe windows:10 windows x64 arch:x64

8cc7f5b6db78c8599c66a2ac9db47801

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

pinningconfirmationdialog.pdb

Imports

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress

GetModuleHandleW

GetModuleHandleExW

GetModuleFileNameA

api-ms-win-core-synch-l1-2-0

InitOnceComplete

Sleep

InitOnceBeginInitialize

InitOnceExecuteOnce

api-ms-win-core-synch-l1-1-0

EnterCriticalSection

ReleaseSRWLockShared

AcquireSRWLockExclusive

ReleaseMutex

ReleaseSRWLockExclusive

WaitForSingleObject

WaitForSingleObjectEx

CreateMutexExW

ReleaseSemaphore

DeleteCriticalSection

LeaveCriticalSection

AcquireSRWLockShared

InitializeCriticalSection

OpenSemaphoreW

CreateSemaphoreExW

InitializeCriticalSectionEx

api-ms-win-core-heap-l1-1-0

HeapAlloc

GetProcessHeap

HeapFree

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

SetLastError

GetLastError

SetUnhandledExceptionFilter

api-ms-win-eventing-provider-l1-1-0

EventUnregister

EventRegister

EventWriteTransfer

EventSetInformation

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolTimer

WaitForThreadpoolTimerCallbacks

CloseThreadpoolTimer

SetThreadpoolTimer

api-ms-win-core-processthreads-l1-1-0

GetStartupInfoW

TerminateProcess

GetCurrentProcess

GetCurrentThreadId

GetCurrentProcessId

api-ms-win-core-debug-l1-1-0

DebugBreak

IsDebuggerPresent

OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle

msvcrt

_wsetlocale

?terminate@@YAXXZ

??1type_info@@UEAA@XZ

__C_specific_handler

__dllonexit

_onexit

_XcptFilter

_amsg_exit

__getmainargs

__set_app_type

exit

_exit

__setusermatherr

_initterm

_acmdln

_fmode

_commode

wcslen

memset

realloc

strchr

??0bad_cast@@QEAA@PEBD@Z

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@AEBV0@@Z

free

wcstol

_errno

wcsrchr

??0exception@@QEAA@AEBQEBD@Z

?what@exception@@UEBAPEBDXZ

memmove_s

wcsstr

_vsnprintf_s

??0exception@@QEAA@AEBV0@@Z

??0exception@@QEAA@XZ

??1exception@@UEAA@XZ

_purecall

memcpy_s

_vsnwprintf

??3@YAXPEAX@Z

__CxxFrameHandler3

__crtLCMapStringW

__crtCompareStringW

_wcsdup

_CxxThrowException

abort

memcmp

calloc

__pctype_func

_ismbblead

___lc_codepage_func

___lc_handle_func

___mb_cur_max_func

_unlock

_lock

___lc_collate_cp_func

setlocale

memmove

memcpy

??0exception@@QEAA@AEBQEBDH@Z

_callnewh

_cexit

malloc

wincorlib

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?InitializeData@Details@Platform@@YAJH@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

??0Delegate@Platform@@QE$AAA@XZ

??0DisconnectedException@Platform@@QE$AAA@XZ

??0ChangedStateException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0NullReferenceException@Platform@@QE$AAA@XZ

??0InvalidArgumentException@Platform@@QE$AAA@XZ

??0NotImplementedException@Platform@@QE$AAA@XZ

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext

RoOriginateError

SetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsConcatString

WindowsCreateString

WindowsCreateStringReference

WindowsCompareStringOrdinal

WindowsDuplicateString

WindowsGetStringLen

WindowsGetStringRawBuffer

WindowsDeleteString

WindowsIsStringEmpty

api-ms-win-core-util-l1-1-0

EncodePointer

DecodePointer

api-ms-win-core-com-l1-1-0

CoTaskMemFree

CoTaskMemAlloc

CoCreateFreeThreadedMarshaler

api-ms-win-core-string-l1-1-0

WideCharToMultiByte

GetStringTypeW

MultiByteToWideChar

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 195KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy/pris/resources.ru-RU.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy/AppxManifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy/Assets/SquareTile150x150.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy/Assets/SquareTile150x150.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy/Assets/SquareTile150x150.scale-400.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy/Assets/SquareTile310x150.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy/Assets/SquareTile310x150.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy/Assets/SquareTile310x150.scale-400.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy/Assets/SquareTile44x44.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy/Assets/SquareTile44x44.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy/Assets/SquareTile44x44.scale-400.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy/Assets/SquareTile71x71.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy/Assets/SquareTile71x71.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy/Assets/SquareTile71x71.scale-400.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy/XGpuEjectDialog.exe

.exe windows:10 windows x64 arch:x64

0487ea951dc4014b583d512c3f8c9d24

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:30

Not After

03/03/2021, 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

24:59:55:5b:3a:37:f0:3e:4c:af:9b:08:f4:1e:58:4f:f1:e1:73:76:3a:ed:01:1c:35:91:45:65:cd:dd:c4:fe
Signer

Actual PE Digest

24:59:55:5b:3a:37:f0:3e:4c:af:9b:08:f4:1e:58:4f:f1:e1:73:76:3a:ed:01:1c:35:91:45:65:cd:dd:c4:fe

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

XGpuEjectDialog.pdb

Imports

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionEx

AcquireSRWLockShared

LeaveCriticalSection

EnterCriticalSection

ReleaseSRWLockShared

AcquireSRWLockExclusive

InitializeCriticalSection

ReleaseSRWLockExclusive

DeleteCriticalSection

wincorlib

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?ToString@uint32@default@@QEAAPE$AAVString@Platform@@XZ

??0NotImplementedException@Platform@@QE$AAA@XZ

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

??0OutOfMemoryException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

??0DisconnectedException@Platform@@QE$AAA@XZ

??0Delegate@Platform@@QE$AAA@XZ

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

??0InvalidArgumentException@Platform@@QE$AAA@XZ

??0NullReferenceException@Platform@@QE$AAA@XZ

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z

?__abi_WinRTraiseCOMException@@YAXJ@Z

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

msvcrt

memset

wcslen

_CxxThrowException

?terminate@@YAXXZ

??1type_info@@UEAA@XZ

_lock

_unlock

__dllonexit

__C_specific_handler

_onexit

_XcptFilter

_amsg_exit

__getmainargs

__set_app_type

exit

_exit

_cexit

_ismbblead

__setusermatherr

_initterm

_acmdln

_fmode

_commode

??0exception@@QEAA@AEBV0@@Z

wcsrchr

??0exception@@QEAA@AEBQEBD@Z

??1exception@@UEAA@XZ

?what@exception@@UEBAPEBDXZ

_purecall

??3@YAXPEAX@Z

__CxxFrameHandler3

memmove

memcpy

??0exception@@QEAA@AEBQEBDH@Z

_callnewh

malloc

ntdll

RtlLookupFunctionEntry

RtlVirtualUnwind

RtlCaptureContext

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

RoFailFastWithErrorContext

SetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsIsStringEmpty

WindowsGetStringRawBuffer

WindowsDuplicateString

WindowsDeleteString

WindowsCreateStringReference

WindowsCreateString

WindowsConcatString

WindowsCompareStringOrdinal

WindowsGetStringLen

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

Sleep

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler

CoTaskMemFree

CoTaskMemAlloc

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess

TerminateProcess

GetCurrentProcessId

GetCurrentThreadId

GetStartupInfoW

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

UnhandledExceptionFilter

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy/pris/resources.ru-RU.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/App.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/AppxManifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Assets/Logo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Assets/SmallLogo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Assets/SplashScreen.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Assets/StoreLogo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Assets/WideLogo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Control/ErrorStatePane.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Control/GameProgress/GameProgressStatItem.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Control/GameProgress/GameProgressView.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Control/ProgressRing/ProgressRing.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Fonts/Icons.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Fonts/segxsym.ttf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/GamingTcuiHelpers.dll

.dll windows:10 windows x64 arch:x64

71f0046a88da213e610d07de3847ed40

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

GamingTcuiHelpers.pdb

Imports

msvcrt

??0exception@@QEAA@AEBV0@@Z

_vsnprintf_s

_purecall

__CxxFrameHandler3

??0exception@@QEAA@AEBQEBD@Z

??0exception@@QEAA@AEBQEBDH@Z

?what@exception@@UEBAPEBDXZ

_CxxThrowException

memcpy

memmove

??0exception@@QEAA@XZ

??1exception@@UEAA@XZ

malloc

_callnewh

_XcptFilter

_amsg_exit

free

_initterm

__C_specific_handler

??3@YAXPEAX@Z

memcpy_s

?terminate@@YAXXZ

??1type_info@@UEAA@XZ

_vsnwprintf

??_V@YAXPEAX@Z

_onexit

__dllonexit

_unlock

_lock

memset

ntdll

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

GetProcAddress

GetModuleHandleW

GetModuleFileNameA

DisableThreadLibraryCalls

api-ms-win-core-synch-l1-1-0

CreateSemaphoreExW

WaitForSingleObject

EnterCriticalSection

ReleaseMutex

LeaveCriticalSection

ReleaseSemaphore

AcquireSRWLockShared

InitializeCriticalSectionEx

WaitForSingleObjectEx

OpenSemaphoreW

ReleaseSRWLockShared

AcquireSRWLockExclusive

ReleaseSRWLockExclusive

DeleteCriticalSection

CreateMutexExW

InitializeSRWLock

api-ms-win-core-heap-l1-1-0

HeapAlloc

HeapFree

GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

SetLastError

GetLastError

SetUnhandledExceptionFilter

UnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId

TerminateProcess

GetCurrentProcessId

GetCurrentProcess

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

DebugBreak

OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-winrt-error-l1-1-0

RoTransformError

RoOriginateError

RoOriginateErrorW

api-ms-win-core-util-l1-1-0

DecodePointer

EncodePointer

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

Sleep

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringRawBuffer

WindowsStringHasEmbeddedNull

WindowsDuplicateString

WindowsCompareStringOrdinal

WindowsIsStringEmpty

WindowsDeleteString

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc

CoCreateFreeThreadedMarshaler

CoCreateInstance

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW

RegGetValueW

RegCloseKey

api-ms-win-core-winrt-error-l1-1-1

RoGetMatchingRestrictedErrorInfo

RoReportFailedDelegate

IsErrorPropagationEnabled

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

Exports

DllCanUnloadNow

DllGetActivationFactory

DllGetClassObject

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/GamingUI.XboxLive.InternalHelpers.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/MainPage.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Microsoft.Diagnostics.Tracing.EventSource.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:8a:57:ea:89:a3:49:eb:8b:e8:00:00:00:00:00:8a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/10/2015, 18:14

Not After

07/01/2017, 18:14

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B1B7-F67F-FEC2,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/06/2015, 17:42

Not After

04/09/2016, 17:42

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

86:36:be:f5:07:0f:7f:ea:7d:63:9d:e4:0b:2a:5e:94:0a:41:3c:07:fe:f5:ae:a9:b3:0b:3a:d2:d8:90:04:d2
Signer

Actual PE Digest

86:36:be:f5:07:0f:7f:ea:7d:63:9d:e4:0b:2a:5e:94:0a:41:3c:07:fe:f5:ae:a9:b3:0b:3a:d2:d8:90:04:d2

Digest Algorithm

sha256

PE Digest Matches

true

77:92:c6:92:23:7d:d3:cf:83:15:65:55:c9:4c:92:fd:4b:28:a8:f2
Signer

Actual PE Digest

77:92:c6:92:23:7d:d3:cf:83:15:65:55:c9:4c:92:fd:4b:28:a8:f2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

c:\b\4745\3307\src\intermediate\EventSourcePcl.csproj_58b0f35f\Release\Microsoft.Diagnostics.Tracing.EventSource.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Pages/ConnectedStorage/ConflictResolutionPage.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Pages/ConnectedStorage/ConnectedStorageHomePage.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Pages/ConnectedStorage/LockContentionPage.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Pages/ConnectedStorage/StopOrKeepSyncingPage.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Pages/ConnectedStorage/SyncFailurePage.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Pages/ConnectedStorage/SyncProgressPage.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Pages/DebugDashboard/DebugDashboard.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Resources/Colors_Dark.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Resources/Colors_HighContrast.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Resources/Colors_Light.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Resources/Resources.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Resources/Styles.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/StyleDictionary.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Themes/Generic.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Toolkit.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

Toolkit.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Toolkit/Images/DfaultProfileImage.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Toolkit/Images/dash.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Toolkit/Resources/Icons.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Toolkit/Resources/ToolkitStyles.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Toolkit/Resources/segxsym.ttf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/Toolkit/Shell/Styles.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/XBox.TCUI.Resource.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

XBox.TCUI.Resource.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/XBox.TCUI.Shell.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

XBox.TCUI.Shell.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/XBox.TCUI.Tracing.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

XBox.TCUI.Tracing.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/XBox.TCUI.exe

.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_APPCONTAINER

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

XBox.TCUI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/XboxExperienceServices.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

XboxExperienceServices.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 301KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/pris/resources.ru-RU.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Microsoft.XboxGameCallableUI_cw5n1h2txyewy/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy/AppxManifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy/Assets/Logo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy/Assets/SmallLogo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy/Assets/StoreLogo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy/UndockedDevKit.exe

.exe windows:10 windows x64 arch:x64

1afa0949661b16256427e705407df538

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:30

Not After

03/03/2021, 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

73:cc:00:1b:d3:3d:51:d4:4c:2b:16:3c:0a:1f:35:e6:d7:33:b7:ed:83:48:2b:ff:30:86:ed:c1:b4:a1:e5:f8
Signer

Actual PE Digest

73:cc:00:1b:d3:3d:51:d4:4c:2b:16:3c:0a:1f:35:e6:d7:33:b7:ed:83:48:2b:ff:30:86:ed:c1:b4:a1:e5:f8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_APPCONTAINER

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

UndockedDevKit.pdb

Imports

api-ms-win-crt-private-l1-1-0

_o__cexit

_o__configthreadlocale

_o__configure_wide_argv

_o__crt_atexit

_o__exit

_o__get_wide_winmain_command_line

_o__initialize_onexit_table

_o__initialize_wide_environment

_o__register_onexit_function

_o__seh_filter_exe

_o__set_app_type

_o__set_fmode

_o__set_new_mode

_o_exit

_o_terminate

__C_specific_handler

_o___p__commode

api-ms-win-crt-string-l1-1-0

memset

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

UnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-0

GetStartupInfoW

TerminateProcess

GetCurrentProcess

GetCurrentThreadId

GetCurrentProcessId

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW

api-ms-win-crt-runtime-l1-1-0

_initterm

_register_thread_local_exe_atexit_callback

_c_exit

_initterm_e

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy/windowsudk.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 209KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/NcsiUwpApp_8wekyb3d8bbwe/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/NcsiUwpApp_8wekyb3d8bbwe/AppxManifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/NcsiUwpApp_8wekyb3d8bbwe/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/NcsiUwpApp_8wekyb3d8bbwe/Assets/1X1.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/NcsiUwpApp_8wekyb3d8bbwe/NcsiUwpApp.exe

.exe windows:10 windows x64 arch:x64

50543d972b7881279790c37e7f68d3bc

Code Sign

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:ed
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:29

Not After

02/12/2021, 21:29

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

48:04:47:8a:91:0b:f9:8a:74:79:02:1e:4f:26:d1:bd:b7:7b:d4:85:59:41:c2:29:d8:40:3f:77:96:7e:c9:f8
Signer

Actual PE Digest

48:04:47:8a:91:0b:f9:8a:74:79:02:1e:4f:26:d1:bd:b7:7b:d4:85:59:41:c2:29:d8:40:3f:77:96:7e:c9:f8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

NcsiUwpApp.pdb

Imports

api-ms-win-crt-string-l1-1-0

memset

api-ms-win-crt-private-l1-1-0

_o__cexit

_o__configthreadlocale

_o__configure_wide_argv

_o__crt_atexit

_o__exit

_o__get_wide_winmain_command_line

_o__initialize_onexit_table

_o__initialize_wide_environment

_o__invalid_parameter_noinfo_noreturn

_o__purecall

_o__register_onexit_function

_o__seh_filter_exe

_o__set_app_type

_o__set_fmode

_o__set_new_mode

_o__callnewh

_o_exit

_o_free

_o_malloc

_o_terminate

__CxxFrameHandler4

__std_terminate

wcsrchr

__CxxFrameHandler3

__C_specific_handler

_CxxThrowException

_o___std_exception_destroy

_o___std_exception_copy

_o___p__commode

memcpy

memmove

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-synch-l1-1-0

EnterCriticalSection

SetEvent

LeaveCriticalSection

DeleteCriticalSection

CreateEventW

WaitForSingleObjectEx

InitializeCriticalSectionAndSpinCount

ResetEvent

InitializeCriticalSectionEx

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress

GetModuleHandleW

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry

RtlCaptureContext

RtlVirtualUnwind

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

UnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId

GetCurrentProcess

TerminateProcess

GetStartupInfoW

GetCurrentThreadId

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList

InitializeSListHead

api-ms-win-crt-runtime-l1-1-0

_initterm_e

_initterm

_register_thread_local_exe_atexit_callback

_c_exit

oleaut32

SysFreeString

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo

GetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringLen

WindowsCreateStringReference

WindowsDeleteString

WindowsPromoteStringBuffer

WindowsDeleteStringBuffer

WindowsPreallocateStringBuffer

WindowsCreateString

WindowsGetStringRawBuffer

WindowsDuplicateString

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

RoInitialize

api-ms-win-core-com-l1-1-0

CoIncrementMTAUsage

CoCreateFreeThreadedMarshaler

CoTaskMemFree

CoTaskMemAlloc

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/NcsiUwpApp_8wekyb3d8bbwe/NcsiUwpApp.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/NcsiUwpApp_8wekyb3d8bbwe/NcsiUwpBackgroundTasks.dll

.dll windows:10 windows x64 arch:x64

c94ed5d397dc1a43f256e213d9412c97

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:30

Not After

03/03/2021, 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

f7:a1:e8:05:2d:56:8b:3f:b0:ae:d5:58:80:b5:2b:6e:48:31:20:51:27:07:04:ed:c0:0d:19:8f:91:ce:38:a7
Signer

Actual PE Digest

f7:a1:e8:05:2d:56:8b:3f:b0:ae:d5:58:80:b5:2b:6e:48:31:20:51:27:07:04:ed:c0:0d:19:8f:91:ce:38:a7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

NcsiUwpBackgroundTasks.pdb

Imports

ncsi

NcsiGetWebProbeConfig

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer

EventSetInformation

EventRegister

EventUnregister

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId

GetCurrentThreadId

GetCurrentProcess

TerminateProcess

api-ms-win-core-heap-l1-1-0

HeapFree

GetProcessHeap

HeapAlloc

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

GetModuleFileNameA

GetModuleHandleW

GetProcAddress

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

DebugBreak

OutputDebugStringW

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

SetLastError

GetLastError

SetUnhandledExceptionFilter

api-ms-win-core-synch-l1-1-0

EnterCriticalSection

WaitForSingleObjectEx

WaitForSingleObject

InitializeCriticalSectionEx

CreateMutexExW

LeaveCriticalSection

ReleaseMutex

DeleteCriticalSection

OpenSemaphoreW

CreateEventW

SetEvent

ReleaseSemaphore

ReleaseSRWLockShared

AcquireSRWLockShared

ReleaseSRWLockExclusive

AcquireSRWLockExclusive

CreateSemaphoreExW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolTimer

CreateThreadpoolTimer

CloseThreadpoolTimer

WaitForThreadpoolTimerCallbacks

api-ms-win-core-registry-l1-1-0

RegGetValueW

api-ms-win-core-synch-l1-2-0

InitOnceComplete

Sleep

InitOnceBeginInitialize

api-ms-win-crt-private-l1-1-0

_o___stdio_common_vsnprintf_s

_o___stdio_common_vswprintf

_o__callnewh

_o__cexit

_o__configure_narrow_argv

_o__crt_atexit

_o__errno

_o__execute_onexit_table

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__purecall

memmove

_o__register_onexit_function

_o__seh_filter_dll

_o_free

_o_iswspace

_o_malloc

_o_terminate

__CxxFrameHandler4

__std_terminate

__CxxFrameHandler3

__C_specific_handler

_CxxThrowException

_o___std_type_info_destroy_list

_o___std_exception_destroy

_o___std_exception_copy

memcmp

memcpy

api-ms-win-crt-string-l1-1-0

memset

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList

InterlockedPushEntrySList

InitializeSListHead

api-ms-win-crt-runtime-l1-1-0

_initterm

_initterm_e

oleaut32

SysStringLen

SysFreeString

api-ms-win-core-winrt-error-l1-1-0

GetRestrictedErrorInfo

SetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException

api-ms-win-core-winrt-string-l1-1-0

WindowsDeleteString

WindowsGetStringRawBuffer

WindowsPromoteStringBuffer

WindowsCreateString

WindowsCreateStringReference

WindowsPreallocateStringBuffer

WindowsDeleteStringBuffer

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-com-l1-1-0

CoIncrementMTAUsage

CoCreateFreeThreadedMarshaler

CoTaskMemAlloc

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/NcsiUwpApp_8wekyb3d8bbwe/NcsiUwpBackgroundTasks.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/NcsiUwpApp_8wekyb3d8bbwe/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/NcsiUwpApp_8wekyb3d8bbwe/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/NcsiUwpApp_8wekyb3d8bbwe/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/ParentalControls_cw5n1h2txyewy/App.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/ParentalControls_cw5n1h2txyewy/AppLimitPage.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/ParentalControls_cw5n1h2txyewy/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/ParentalControls_cw5n1h2txyewy/AppxManifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/ParentalControls_cw5n1h2txyewy/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/ParentalControls_cw5n1h2txyewy/Assets/Logo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/ParentalControls_cw5n1h2txyewy/Assets/SmallLogo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/ParentalControls_cw5n1h2txyewy/Assets/Splashscreen.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/ParentalControls_cw5n1h2txyewy/Assets/StoreLogo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/ParentalControls_cw5n1h2txyewy/Assets/offline.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/ParentalControls_cw5n1h2txyewy/Assets/[email protected]

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/ParentalControls_cw5n1h2txyewy/BlankPage.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/ParentalControls_cw5n1h2txyewy/Blocked.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/ParentalControls_cw5n1h2txyewy/MSAVerificationPage.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/ParentalControls_cw5n1h2txyewy/MainPage.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/ParentalControls_cw5n1h2txyewy/WpcUapApp.exe

.exe windows:10 windows x64 arch:x64

765712636cd585845bfb6f6788b6d1bf

Code Sign

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:ed
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:29

Not After

02/12/2021, 21:29

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

9c:58:7c:56:44:01:4d:ed:e9:d1:59:c0:f8:8b:00:5b:de:77:73:23:f7:27:99:ae:be:9b:aa:11:23:ac:f5:9f
Signer

Actual PE Digest

9c:58:7c:56:44:01:4d:ed:e9:d1:59:c0:f8:8b:00:5b:de:77:73:23:f7:27:99:ae:be:9b:aa:11:23:ac:f5:9f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

WpcUapApp.pdb

Imports

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId

GetStartupInfoW

TerminateProcess

GetCurrentProcess

GetCurrentThreadId

api-ms-win-core-synch-l1-1-0

WaitForSingleObjectEx

ReleaseSRWLockShared

InitializeCriticalSectionEx

SetEvent

EnterCriticalSection

LeaveCriticalSection

AcquireSRWLockShared

ReleaseSRWLockExclusive

ResetEvent

DeleteCriticalSection

AcquireSRWLockExclusive

CreateEventExA

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-com-l1-1-0

CoMarshalInterThreadInterfaceInStream

CoGetObjectContext

CoGetApartmentType

CoGetInterfaceAndReleaseStream

msvcrt

??1type_info@@UEAA@XZ

__dllonexit

__C_specific_handler

_onexit

_XcptFilter

_amsg_exit

_initterm

__getmainargs

__set_app_type

exit

_exit

_cexit

__setusermatherr

_acmdln

_fmode

_commode

__CxxFrameHandler3

??3@YAXPEAX@Z

_purecall

_ismbblead

_unlock

_lock

_callnewh

malloc

memmove

memcpy

??0exception@@QEAA@AEBQEBDH@Z

_CxxThrowException

wcslen

memset

swprintf_s

free

wcsrchr

??0exception@@QEAA@AEBQEBD@Z

?what@exception@@UEBAPEBDXZ

?terminate@@YAXXZ

__ExceptionPtrCreate

__ExceptionPtrCurrentException

__ExceptionPtrRethrow

__ExceptionPtrCopy

__ExceptionPtrDestroy

??0exception@@QEAA@AEBV0@@Z

??0exception@@QEAA@XZ

??1exception@@UEAA@XZ

wincorlib

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?__abi_FailFast@@YAXXZ

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?UninitializeData@Details@Platform@@YAXH@Z

?InitializeData@Details@Platform@@YAJH@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

??0Delegate@Platform@@QE$AAA@XZ

??0DisconnectedException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

ole32

CoTaskMemFree

CoTaskMemAlloc

CoCreateFreeThreadedMarshaler

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext

RoOriginateError

SetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsIsStringEmpty

WindowsDuplicateString

WindowsDeleteString

WindowsCreateStringReference

WindowsCreateString

WindowsGetStringRawBuffer

WindowsCompareStringOrdinal

WindowsConcatString

api-ms-win-eventing-provider-l1-1-0

EventRegister

EventSetInformation

EventWriteTransfer

EventUnregister

api-ms-win-core-registry-l1-1-0

RegGetValueW

RegCloseKey

RegOpenKeyExW

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

Sleep

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

SetUnhandledExceptionFilter

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW

ntdll

RtlPublishWnfStateData

Exports

DllCanUnloadNow

DllGetActivationFactory

VSDesignerDllMain

Sections

.text
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/ParentalControls_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/ParentalControls_cw5n1h2txyewy/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/ParentalControls_cw5n1h2txyewy/pris/resources.ru-RU.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/ParentalControls_cw5n1h2txyewy/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Windows.CBSPreview_cw5n1h2txyewy/App.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Windows.CBSPreview_cw5n1h2txyewy/Assets/Digimarc-Logo.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Windows.CBSPreview_cw5n1h2txyewy/Assets/SplashScreen.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Windows.CBSPreview_cw5n1h2txyewy/Assets/Square150x150Logo.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Windows.CBSPreview_cw5n1h2txyewy/Assets/Square44x44Logo.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Windows.CBSPreview_cw5n1h2txyewy/Assets/StoreLogo.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Windows.CBSPreview_cw5n1h2txyewy/Assets/Wide310x150Logo.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Windows.CBSPreview_cw5n1h2txyewy/CameraBarcodeScannerPreview.exe

.exe windows:10 windows x64 arch:x64

5343d8f9de418fbb505870f23fa26b53

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_APPCONTAINER

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

CameraBarcodeScannerPreview.pdb

Imports

api-ms-win-core-synch-l1-1-0

WaitForSingleObjectEx

ResetEvent

SetEvent

InitializeCriticalSectionAndSpinCount

TryAcquireSRWLockExclusive

InitializeSRWLock

LeaveCriticalSection

InitializeCriticalSectionEx

EnterCriticalSection

DeleteCriticalSection

InitializeCriticalSection

AcquireSRWLockShared

ReleaseSRWLockShared

AcquireSRWLockExclusive

ReleaseSRWLockExclusive

CreateEventW

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler

CoGetObjectContext

CoTaskMemAlloc

CoTaskMemFree

CoGetApartmentType

CoGetContextToken

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameA

GetModuleHandleW

GetProcAddress

GetModuleHandleExW

api-ms-win-core-heap-l1-1-0

HeapAlloc

GetProcessHeap

HeapFree

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId

GetCurrentProcess

GetCurrentThreadId

GetStartupInfoW

TerminateProcess

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

DebugBreak

OutputDebugStringW

wincorlib

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

??0DisconnectedException@Platform@@QE$AAA@XZ

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ

?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z

??0Delegate@Platform@@QE$AAA@XZ

?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

??0NotImplementedException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?ToString@int32@default@@QEAAPE$AAVString@Platform@@XZ

??0NullReferenceException@Platform@@QE$AAA@XZ

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

?Equals@Object@Platform@@QE$AAA_NPE$AAV12@@Z

??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

??0Object@Platform@@QE$AAA@XZ

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

api-ms-win-crt-string-l1-1-0

wcscmp

wcslen

memset

api-ms-win-crt-private-l1-1-0

_o___std_exception_destroy

_o___stdio_common_vsnprintf_s

_o___stdio_common_vswprintf

_o__callnewh

_o__cexit

_o__configthreadlocale

_o__configure_narrow_argv

_o__crt_atexit

_o__errno

_o__exit

_o__get_narrow_winmain_command_line

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__purecall

_o__register_onexit_function

_o__seh_filter_exe

_o__set_app_type

_o__set_fmode

_o__set_new_mode

_o__wcsnicmp

_o_abort

_o_exit

_o_free

_o_malloc

_o_terminate

_o_toupper

__CxxFrameHandler4

__std_terminate

wcsstr

wcsrchr

_CxxThrowException

__CxxFrameHandler3

__current_exception

__AdjustPointer

__processing_throw

__GetPlatformExceptionInfo

__C_specific_handler

_o___p__commode

_o___std_exception_copy

memcpy

memmove

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo

RoFailFastWithErrorContext

RoOriginateError

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsIsStringEmpty

WindowsDeleteString

WindowsCreateStringReference

WindowsCreateString

WindowsConcatString

WindowsCompareStringOrdinal

WindowsGetStringLen

WindowsGetStringRawBuffer

WindowsDuplicateString

api-ms-win-core-util-l1-1-0

DecodePointer

EncodePointer

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

SleepConditionVariableSRW

InitializeConditionVariable

WakeConditionVariable

WakeAllConditionVariable

Sleep

api-ms-win-core-rtlsupport-l1-1-0

RtlPcToFileHeader

RtlLookupFunctionEntry

RtlVirtualUnwind

RtlCaptureContext

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

RaiseException

SetUnhandledExceptionFilter

GetLastError

api-ms-win-core-threadpool-l1-2-0

SubmitThreadpoolWork

FreeLibraryWhenCallbackReturns

CloseThreadpoolWork

CreateThreadpoolWork

api-ms-win-core-string-l1-1-0

WideCharToMultiByte

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer

EventProviderEnabled

EventSetInformation

EventUnregister

EventRegister

api-ms-win-core-heap-l2-1-0

LocalAlloc

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback

_initterm

_initterm_e

_c_exit

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 317KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Windows.CBSPreview_cw5n1h2txyewy/MainPage.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Windows.CBSPreview_cw5n1h2txyewy/appxblockmap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Windows.CBSPreview_cw5n1h2txyewy/appxmanifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Windows.CBSPreview_cw5n1h2txyewy/appxsignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Windows.CBSPreview_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Windows.CBSPreview_cw5n1h2txyewy/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Windows.CBSPreview_cw5n1h2txyewy/pris/resources.ru-RU.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/Windows.CBSPreview_cw5n1h2txyewy/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.creddialoghost_cw5n1h2txyewy/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.creddialoghost_cw5n1h2txyewy/AppxManifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.creddialoghost_cw5n1h2txyewy/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.creddialoghost_cw5n1h2txyewy/Assets/Splashscreen.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.creddialoghost_cw5n1h2txyewy/CredDialogHost.exe

.exe windows:10 windows x64 arch:x64

192406a2f7d4b070926e244bcbeb566e

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:30

Not After

03/03/2021, 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

92:5f:68:8e:33:f6:0b:06:c8:41:d3:77:1a:ca:f6:d0:3f:35:97:f9:ed:23:d4:da:b3:f6:1b:3f:20:09:8d:4d
Signer

Actual PE Digest

92:5f:68:8e:33:f6:0b:06:c8:41:d3:77:1a:ca:f6:d0:3f:35:97:f9:ed:23:d4:da:b3:f6:1b:3f:20:09:8d:4d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

CredDialogHost.pdb

Imports

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection

CreateMutexExW

ResetEvent

OpenSemaphoreW

WaitForSingleObjectEx

SetEvent

ReleaseMutex

InitializeCriticalSectionEx

LeaveCriticalSection

ReleaseSemaphore

EnterCriticalSection

CreateEventExW

CreateSemaphoreExW

AcquireSRWLockShared

ReleaseSRWLockShared

AcquireSRWLockExclusive

ReleaseSRWLockExclusive

WaitForSingleObject

InitializeSRWLock

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

GetCurrentThreadId

GetCurrentProcess

GetCurrentProcessId

GetStartupInfoW

api-ms-win-eventing-provider-l1-1-0

EventRegister

EventSetInformation

EventWriteTransfer

EventActivityIdControl

EventUnregister

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize

Sleep

InitOnceComplete

InitOnceExecuteOnce

api-ms-win-core-heap-l1-1-0

GetProcessHeap

HeapFree

HeapAlloc

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

IsDebuggerPresent

api-ms-win-core-localization-l1-2-0

GetLocaleInfoEx

FormatMessageW

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

GetLastError

SetLastError

SetUnhandledExceptionFilter

api-ms-win-core-com-l1-1-0

CoTaskMemFree

CoCreateFreeThreadedMarshaler

CoTaskMemAlloc

CoGetApartmentType

CoGetObjectContext

CoMarshalInterThreadInterfaceInStream

CoGetInterfaceAndReleaseStream

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-handle-l1-1-0

CloseHandle

msvcrt

_callnewh

memmove

memcpy

??0exception@@QEAA@AEBQEBDH@Z

_CxxThrowException

wcslen

memset

_vsnprintf_s

?terminate@@YAXXZ

__ExceptionPtrCreate

__ExceptionPtrCurrentException

__ExceptionPtrRethrow

__ExceptionPtrCopy

__ExceptionPtrDestroy

??0exception@@QEAA@XZ

wcsncmp

memcpy_s

_commode

_vsnwprintf

_purecall

wcsstr

_acmdln

__setusermatherr

_ismbblead

_cexit

_exit

exit

__set_app_type

__getmainargs

_initterm

malloc

_amsg_exit

_XcptFilter

_onexit

__C_specific_handler

__dllonexit

_unlock

_lock

??1type_info@@UEAA@XZ

wcsrchr

??3@YAXPEAX@Z

??0exception@@QEAA@AEBV0@@Z

??1exception@@UEAA@XZ

__CxxFrameHandler3

??0exception@@QEAA@AEBQEBD@Z

?what@exception@@UEBAPEBDXZ

free

_fmode

wincorlib

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?__abi_FailFast@@YAXXZ

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?UninitializeData@Details@Platform@@YAXH@Z

?InitializeData@Details@Platform@@YAJH@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

??0ChangedStateException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0Delegate@Platform@@QE$AAA@XZ

??0DisconnectedException@Platform@@QE$AAA@XZ

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo

RoFailFastWithErrorContext

RoOriginateError

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsIsStringEmpty

WindowsDuplicateString

WindowsDeleteString

WindowsCreateStringReference

WindowsCreateString

WindowsConcatString

WindowsCompareStringOrdinal

WindowsGetStringRawBuffer

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW

api-ms-win-core-util-l1-1-0

DecodePointer

Exports

DllCanUnloadNow

DllGetActivationFactory

VSDesignerDllMain

Sections

.text
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.creddialoghost_cw5n1h2txyewy/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.creddialoghost_cw5n1h2txyewy/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.creddialoghost_cw5n1h2txyewy/pris/resources.ru-RU.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.creddialoghost_cw5n1h2txyewy/resources.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/App.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/AppxBlockMap.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/AppxManifest.xml

.xml

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/AppxSignature.p7x

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/ConfirmCloseContentDialog.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/MainPage.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/NarratorHomePage.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/NarratorQuickStart.exe

.exe windows:10 windows x64 arch:x64

757b2d8f5b5e67f3e4f8898c87984d5d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

narratorquickstart.pdb

Imports

ole32

CoMarshalInterThreadInterfaceInStream

CoGetApartmentType

CoGetInterfaceAndReleaseStream

CoGetObjectContext

kernel32

WaitForSingleObject

DebugBreak

ResetEvent

SetEvent

GetModuleHandleExW

CloseThreadpoolWait

WaitForThreadpoolWaitCallbacks

SetThreadpoolWait

CloseHandle

OutputDebugStringW

GetCurrentThreadId

FormatMessageW

IsDebuggerPresent

GetLastError

ReleaseSRWLockExclusive

SetLastError

AcquireSRWLockExclusive

GetProcAddress

GetModuleHandleW

HeapFree

GetProcessHeap

HeapAlloc

AcquireSRWLockShared

ReleaseSRWLockShared

SetThreadpoolTimer

LeaveCriticalSection

EnterCriticalSection

DeleteCriticalSection

CloseThreadpoolTimer

WaitForThreadpoolTimerCallbacks

InitializeCriticalSectionEx

CreateSemaphoreExW

ReleaseSemaphore

OpenSemaphoreW

ReleaseMutex

WaitForSingleObjectEx

CreateMutexExW

GetCurrentProcessId

InitOnceBeginInitialize

InitOnceComplete

CreateThreadpoolTimer

CreateThreadpoolWait

CreateEventExW

TerminateProcess

GetCurrentProcess

GetModuleFileNameA

InitializeCriticalSection

user32

PostMessageW

SendInput

IsWindow

FindWindowExW

GetParent

IsIconic

msvcrt

memset

memcmp

wcslen

_callnewh

memmove

memcpy

_CxxThrowException

??0exception@@QEAA@AEBQEBDH@Z

_commode

_fmode

_acmdln

_initterm

__setusermatherr

_ismbblead

_cexit

_exit

exit

malloc

__set_app_type

__getmainargs

_amsg_exit

_XcptFilter

??1type_info@@UEAA@XZ

_onexit

__C_specific_handler

__dllonexit

_unlock

_lock

wcsrchr

wcsstr

_vsnprintf_s

??0exception@@QEAA@AEBQEBD@Z

?what@exception@@UEBAPEBDXZ

__ExceptionPtrRethrow

_wcsicmp

towlower

??0exception@@QEAA@AEBV0@@Z

??0exception@@QEAA@XZ

??1exception@@UEAA@XZ

?terminate@@YAXXZ

__ExceptionPtrCreate

__ExceptionPtrCurrentException

__ExceptionPtrCopy

__ExceptionPtrDestroy

_purecall

memmove_s

memcpy_s

_vsnwprintf

??3@YAXPEAX@Z

__CxxFrameHandler3

wincorlib

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?__abi_FailFast@@YAXXZ

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?UninitializeData@Details@Platform@@YAXH@Z

?InitializeData@Details@Platform@@YAJH@Z

??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

??0InvalidArgumentException@Platform@@QE$AAA@XZ

??0NotImplementedException@Platform@@QE$AAA@XZ

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0Delegate@Platform@@QE$AAA@XZ

??0DisconnectedException@Platform@@QE$AAA@XZ

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

??0Object@Platform@@QE$AAA@XZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseCOMException@@YAXJ@Z

?CreateException@Exception@Platform@@SAPE$AAV12@H@Z

api-ms-win-core-registry-l1-1-0

RegQueryValueExW

RegSetValueExW

RegNotifyChangeKeyValue

RegCreateKeyExW

RegOpenKeyExW

RegCloseKey

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer

EventUnregister

EventRegister

EventSetInformation

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

UnhandledExceptionFilter

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

Sleep

api-ms-win-core-processthreads-l1-1-0

GetStartupInfoW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext

RoOriginateError

SetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler

CoTaskMemAlloc

CoTaskMemFree

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString

WindowsConcatString

WindowsCreateStringReference

WindowsCompareStringOrdinal

WindowsDeleteString

WindowsGetStringRawBuffer

WindowsIsStringEmpty

WindowsDuplicateString

WindowsGetStringLen

Sections

.text
Size: 462KB - Virtual size: 461KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/OnlinePage.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/QuickStartOfflinePage.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/TileButton.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/WhatsNewOfflinePage.xbf

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/Content.json

.js

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSplashScreen.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSplashScreen.scale-100_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSplashScreen.scale-100_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSplashScreen.scale-125.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSplashScreen.scale-125_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSplashScreen.scale-125_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSplashScreen.scale-150.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSplashScreen.scale-150_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSplashScreen.scale-150_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSplashScreen.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSplashScreen.scale-200_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSplashScreen.scale-200_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSplashScreen.scale-400.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSplashScreen.scale-400_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSplashScreen.scale-400_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare150x150Logo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare150x150Logo.scale-100_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare150x150Logo.scale-100_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare150x150Logo.scale-125.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare150x150Logo.scale-125_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare150x150Logo.scale-125_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare150x150Logo.scale-150.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare150x150Logo.scale-150_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare150x150Logo.scale-150_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare150x150Logo.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare150x150Logo.scale-200_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare150x150Logo.scale-200_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare150x150Logo.scale-400.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare150x150Logo.scale-400_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare150x150Logo.scale-400_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.scale-100_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.scale-100_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.scale-125.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.scale-125_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.scale-125_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.scale-150.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.scale-150_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.scale-150_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.scale-200_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.scale-200_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.scale-400.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.scale-400_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.scale-400_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-16.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-16_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-16_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-16_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-16_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-16_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-20.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-20_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-20_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-20_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-20_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-20_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-24.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-24_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-24_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-24_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-24_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-24_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-256.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-256_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-256_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-256_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-256_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-256_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-30.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-30_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-30_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-30_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-30_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-30_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-32.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-32_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-32_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-32_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-32_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-32_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-36.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-36_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-36_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-36_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-36_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-36_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-40.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-40_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-40_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-40_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-40_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-40_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-48.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-48_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-48_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-48_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-48_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-48_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-60.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-60_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-60_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-60_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-60_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-60_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-64.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-64_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-64_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-64_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-64_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-64_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-72.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-72_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-72_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-72_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-72_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-72_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-80.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-80_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-80_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-80_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-80_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-80_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-96.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-96_altform-unplated.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-96_altform-unplated_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-96_altform-unplated_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-96_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPSquare44x44Logo.targetsize-96_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPStoreLogo.scale-100.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPStoreLogo.scale-100_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPStoreLogo.scale-100_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPStoreLogo.scale-125.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPStoreLogo.scale-125_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPStoreLogo.scale-125_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPStoreLogo.scale-150.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPStoreLogo.scale-150_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPStoreLogo.scale-150_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPStoreLogo.scale-200.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPStoreLogo.scale-200_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPStoreLogo.scale-200_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPStoreLogo.scale-400.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPStoreLogo.scale-400_contrast-black.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/assets/NarratorUWPStoreLogo.scale-400_contrast-white.png

.png

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/microsoft.system.package.metadata/Autogen/JSByteCodeCache_64

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/pris/resources.en-US.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/pris/resources.ru-RU.pri

Roblox Executor Aurora X BYFRON BYPASS PC 2024/SystemApps/microsoft.windows.narratorquickstart_8wekyb3d8bbwe/resources.pri

Sharing

General

Malware Config

Signatures

Files

Password: 1703

Password: 1703

Password: 1703

Password: 1703

Password: 1703

Password: 1703

Password: 1703

Password: 1703

56a78d55f3f7af51443e58e0ce2fb5f6

Code Sign

09:59:9d:a1:98:ab:73:b3:9c:e6:63:8bCertificate

Extended Key Usages

Key Usages

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1dCertificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fcCertificate

Key Usages

04:00:00:00:00:01:21:58:53:08:a2Certificate

Key Usages

07:3f:de:b6:ab:e3:97:42:11:6b:1a:30:63:2a:c8:38:28:d2:01:1b:f1:d8:54:08:61:80:8a:ec:d7:0d:b5:7cSigner

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

Sections

.text Size: 26KB - Virtual size: 26KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1KB - Virtual size: 172KB

.ndata Size: - Virtual size: 64KB

.rsrc Size: 20KB - Virtual size: 20KB

Password: 1703

Headers

DLL Characteristics

File Characteristics

Sections

.rdata Size: 2KB - Virtual size: 2KB

1c7722ebbdcee129017e54a6fbaf1a83

Code Sign

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8dCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

c9:b9:77:de:9e:5c:a7:b1:6c:3a:2c:35:0d:f1:6c:f3:69:8c:7e:5e:81:c8:6b:db:b6:9c:a0:53:2e:32:b5:e6Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

api-ms-win-eventing-classicprovider-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-winrt-error-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-util-l1-1-0

wincorlib

msvcrt

ntdll

api-ms-win-core-winrt-error-l1-1-1

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-memory-l1-1-0

09:59:9d:a1:98:ab:73:b3:9c:e6:63:8b
Certificate

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

04:00:00:00:00:01:21:58:53:08:a2
Certificate

07:3f:de:b6:ab:e3:97:42:11:6b:1a:30:63:2a:c8:38:28:d2:01:1b:f1:d8:54:08:61:80:8a:ec:d7:0d:b5:7c
Signer

.text
Size: 26KB - Virtual size: 26KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1KB - Virtual size: 172KB

.ndata
Size: - Virtual size: 64KB

.rsrc
Size: 20KB - Virtual size: 20KB

.rdata
Size: 2KB - Virtual size: 2KB

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

c9:b9:77:de:9e:5c:a7:b1:6c:3a:2c:35:0d:f1:6c:f3:69:8c:7e:5e:81:c8:6b:db:b6:9c:a0:53:2e:32:b5:e6
Signer

.text
Size: 122KB - Virtual size: 122KB

.rdata
Size: 76KB - Virtual size: 75KB

.data
Size: 11KB - Virtual size: 12KB

.pdata
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 1KB

.text
Size: 382KB - Virtual size: 382KB

.rdata
Size: 183KB - Virtual size: 183KB

.data
Size: 36KB - Virtual size: 39KB

.pdata
Size: 25KB - Virtual size: 25KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 9KB - Virtual size: 8KB

33:00:00:02:65:51:ae:1b:bd:00:5c:bf:bd:00:00:00:00:02:65
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

bf:7e:4e:65:b4:74:cb:b4:a1:f0:22:a2:ae:18:8b:9a:d7:e7:77:8b:2f:9b:f1:32:47:05:af:76:5f:e7:39:f0
Signer