api-ms-win-appmodel-state-l1-1-0[.]dll

General

Target

api-ms-win-appmodel-state-l1-1-0.dll
Size

4KB
MD5

5a8999eb131d1f888961e2b6775699b1
SHA1

61484011c19733a473ce0ef53abd12d45fc72ac5
SHA256

e6e4d3588d3d64461d7edeafe72016ce8d8e5d6e27114cb96407eef12a1260d6
SHA512

f15239adbb6a8ce5f76b756a49f4ed773b2e1f4001406b2e4fe6a5983e8a3abb1be158bba4bdc0b75229741ee37e69984f8a2bca58279b1654e38f3df500a91d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
api-ms-win-appmodel-state-l1-1-0.dll

Files

api-ms-win-appmodel-state-l1-1-0.dll
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-appmodel-state-l1-1-0.pdb

Exports

Exports

AcquireStateLock
CloseState
CloseStateAtom
CloseStateChangeNotification
CloseStateContainer
CloseStateLock
CommitStateAtom
CreateStateAtom
CreateStateChangeNotification
CreateStateContainer
CreateStateLock
CreateStateSubcontainer
DeleteStateAtomValue
DeleteStateContainer
DeleteStateContainerValue
DuplicateStateContainerHandle
EnumerateStateAtomValues
EnumerateStateContainerItems
GetHivePath
GetRoamingLastObservedChangeTime
GetSerializedAtomBytes
GetStateContainerDepth
GetStateFolder
GetStateRootFolder
GetStateSettingsFolder
GetStateVersion
GetSystemAppDataFolder
GetSystemAppDataKey
OpenState
OpenStateAtom
OpenStateExplicit
OverrideRoamingDataModificationTimesInRange
PublishStateChangeNotification
QueryStateAtomValueInfo
QueryStateContainerItemInfo
ReadStateAtomValue
ReadStateContainerValue
RegisterStateChangeNotification
RegisterStateLock
ReleaseStateLock
ResetState
SetRoamingLastObservedChangeTime
SetStateVersion
SubscribeStateChangeNotification
UnregisterStateChangeNotification
UnregisterStateLock
UnsubscribeStateChangeNotification
WriteStateAtomValue
WriteStateContainerValue

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

PDB Paths

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 1008B

.text
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 1008B