WNF[.]NELauncher[.]v1[.]1[.]6[.]0855[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

WNF.NELauncher.v1.1.6.0855.zip
Size

49.5MB
MD5

a330b9aaec588c578b8a147dfbf8eb44
SHA1

d49102342aa23817762410913d72d388289a2980
SHA256

fd67a3dbac5dc791725e3f272ed32cfe328b674a7f96b813359ec35b281551d4
SHA512

9fac26025d91560eed59961f4bc32adf1919ef27c72af4ecb8c32877b3d570e1e9bb5a0e0027c24f864153625a275f3f391d51faa9a226208d46b09af7e42a50
SSDEEP

1572864:tDXOezGkx5py1EuQcVQiD9WclpShYEF+VuadDXSJaIitivR:ta6Gg5pyur0QiDIVF+pMJaIv

Score

3^/10

Malware Config

Signatures

Unsigned PE 185 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7-zip.dll
unpack001/7z.dll
unpack001/7z.exe
unpack001/Microsoft.Foundation.winmd
unpack001/Microsoft.Graphics.winmd
unpack001/Microsoft.UI.winmd
unpack001/Resources/api-ms-win-crt-utility-l1-1-1.dll
unpack001/Resources/pe/Memory.dll
unpack001/Resources/pe/ZenlessZoneBypass.exe
unpack001/WNF.Client.UI.dll
unpack001/WNF.Client.UI.exe
unpack001/WNF.Client.dll
unpack001/WNF.Proxy.exe
unpack001/af-ZA/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/af-ZA/Microsoft.ui.xaml.dll.mui
unpack001/am-ET/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/am-ET/Microsoft.ui.xaml.dll.mui
unpack001/ar-SA/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ar-SA/Microsoft.ui.xaml.dll.mui
unpack001/as-IN/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/as-IN/Microsoft.ui.xaml.dll.mui
unpack001/az-Latn-AZ/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/az-Latn-AZ/Microsoft.ui.xaml.dll.mui
unpack001/bg-BG/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/bg-BG/Microsoft.ui.xaml.dll.mui
unpack001/bn-IN/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/bn-IN/Microsoft.ui.xaml.dll.mui
unpack001/bs-Latn-BA/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/bs-Latn-BA/Microsoft.ui.xaml.dll.mui
unpack001/ca-ES/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ca-ES/Microsoft.ui.xaml.dll.mui
unpack001/ca-Es-VALENCIA/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ca-Es-VALENCIA/Microsoft.ui.xaml.dll.mui
unpack001/cs-CZ/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/cs-CZ/Microsoft.ui.xaml.dll.mui
unpack001/cy-GB/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/cy-GB/Microsoft.ui.xaml.dll.mui
unpack001/da-DK/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/da-DK/Microsoft.ui.xaml.dll.mui
unpack001/de-DE/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/de-DE/Microsoft.ui.xaml.dll.mui
unpack001/el-GR/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/el-GR/Microsoft.ui.xaml.dll.mui
unpack001/en-GB/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/en-GB/Microsoft.ui.xaml.dll.mui
unpack001/en-us/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/en-us/Microsoft.ui.xaml.dll.mui
unpack001/es-ES/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/es-ES/Microsoft.ui.xaml.dll.mui
unpack001/es-MX/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/es-MX/Microsoft.ui.xaml.dll.mui
unpack001/et-EE/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/et-EE/Microsoft.ui.xaml.dll.mui
unpack001/eu-ES/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/eu-ES/Microsoft.ui.xaml.dll.mui
unpack001/fa-IR/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/fa-IR/Microsoft.ui.xaml.dll.mui
unpack001/fi-FI/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/fi-FI/Microsoft.ui.xaml.dll.mui
unpack001/fil-PH/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/fil-PH/Microsoft.ui.xaml.dll.mui
unpack001/fr-CA/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/fr-CA/Microsoft.ui.xaml.dll.mui
unpack001/fr-FR/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/fr-FR/Microsoft.ui.xaml.dll.mui
unpack001/ga-IE/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ga-IE/Microsoft.ui.xaml.dll.mui
unpack001/gd-gb/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/gd-gb/Microsoft.ui.xaml.dll.mui
unpack001/gl-ES/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/gl-ES/Microsoft.ui.xaml.dll.mui
unpack001/gu-IN/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/gu-IN/Microsoft.ui.xaml.dll.mui
unpack001/he-IL/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/he-IL/Microsoft.ui.xaml.dll.mui
unpack001/hi-IN/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/hi-IN/Microsoft.ui.xaml.dll.mui
unpack001/hr-HR/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/hr-HR/Microsoft.ui.xaml.dll.mui
unpack001/hu-HU/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/hu-HU/Microsoft.ui.xaml.dll.mui
unpack001/hy-AM/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/hy-AM/Microsoft.ui.xaml.dll.mui
unpack001/id-ID/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/id-ID/Microsoft.ui.xaml.dll.mui
unpack001/is-IS/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/is-IS/Microsoft.ui.xaml.dll.mui
unpack001/it-IT/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/it-IT/Microsoft.ui.xaml.dll.mui
unpack001/ja-JP/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ja-JP/Microsoft.ui.xaml.dll.mui
unpack001/ka-GE/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ka-GE/Microsoft.ui.xaml.dll.mui
unpack001/kk-KZ/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/kk-KZ/Microsoft.ui.xaml.dll.mui
unpack001/km-KH/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/km-KH/Microsoft.ui.xaml.dll.mui
unpack001/kn-IN/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/kn-IN/Microsoft.ui.xaml.dll.mui
unpack001/ko-KR/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ko-KR/Microsoft.ui.xaml.dll.mui
unpack001/kok-IN/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/kok-IN/Microsoft.ui.xaml.dll.mui
unpack001/lb-LU/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/lb-LU/Microsoft.ui.xaml.dll.mui
unpack001/lo-LA/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/lo-LA/Microsoft.ui.xaml.dll.mui
unpack001/lt-LT/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/lt-LT/Microsoft.ui.xaml.dll.mui
unpack001/lv-LV/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/lv-LV/Microsoft.ui.xaml.dll.mui
unpack001/mi-NZ/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/mi-NZ/Microsoft.ui.xaml.dll.mui
unpack001/mk-MK/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/mk-MK/Microsoft.ui.xaml.dll.mui
unpack001/ml-IN/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ml-IN/Microsoft.ui.xaml.dll.mui
unpack001/mr-IN/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/mr-IN/Microsoft.ui.xaml.dll.mui
unpack001/ms-MY/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ms-MY/Microsoft.ui.xaml.dll.mui
unpack001/mt-MT/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/mt-MT/Microsoft.ui.xaml.dll.mui
unpack001/nb-NO/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/nb-NO/Microsoft.ui.xaml.dll.mui
unpack001/ne-NP/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ne-NP/Microsoft.ui.xaml.dll.mui
unpack001/nl-NL/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/nl-NL/Microsoft.ui.xaml.dll.mui
unpack001/nn-NO/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/nn-NO/Microsoft.ui.xaml.dll.mui
unpack001/or-IN/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/or-IN/Microsoft.ui.xaml.dll.mui
unpack001/pa-IN/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/pa-IN/Microsoft.ui.xaml.dll.mui
unpack001/pl-PL/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/pl-PL/Microsoft.ui.xaml.dll.mui
unpack001/pt-BR/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/pt-BR/Microsoft.ui.xaml.dll.mui
unpack001/pt-PT/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/pt-PT/Microsoft.ui.xaml.dll.mui
unpack001/quz-PE/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/quz-PE/Microsoft.ui.xaml.dll.mui
unpack001/ro-RO/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ro-RO/Microsoft.ui.xaml.dll.mui
unpack001/ru-RU/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ru-RU/Microsoft.ui.xaml.dll.mui
unpack001/sk-SK/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/sk-SK/Microsoft.ui.xaml.dll.mui
unpack001/sl-SI/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/sl-SI/Microsoft.ui.xaml.dll.mui
unpack001/sq-AL/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/sq-AL/Microsoft.ui.xaml.dll.mui
unpack001/sr-Cyrl-BA/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/sr-Cyrl-BA/Microsoft.ui.xaml.dll.mui
unpack001/sr-Cyrl-RS/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/sr-Cyrl-RS/Microsoft.ui.xaml.dll.mui
unpack001/sr-Latn-RS/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/sr-Latn-RS/Microsoft.ui.xaml.dll.mui
unpack001/sv-SE/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/sv-SE/Microsoft.ui.xaml.dll.mui
unpack001/ta-IN/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ta-IN/Microsoft.ui.xaml.dll.mui
unpack001/te-IN/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/te-IN/Microsoft.ui.xaml.dll.mui
unpack001/th-TH/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/th-TH/Microsoft.ui.xaml.dll.mui
unpack001/tr-TR/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/tr-TR/Microsoft.ui.xaml.dll.mui
unpack001/tt-RU/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/tt-RU/Microsoft.ui.xaml.dll.mui
unpack001/ug-CN/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ug-CN/Microsoft.ui.xaml.dll.mui
unpack001/uk-UA/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/uk-UA/Microsoft.ui.xaml.dll.mui
unpack001/ur-PK/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ur-PK/Microsoft.ui.xaml.dll.mui
unpack001/uz-Latn-UZ/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/uz-Latn-UZ/Microsoft.ui.xaml.dll.mui
unpack001/vi-VN/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/vi-VN/Microsoft.ui.xaml.dll.mui
unpack001/zh-CN/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/zh-CN/Microsoft.ui.xaml.dll.mui
unpack001/zh-TW/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/zh-TW/Microsoft.ui.xaml.dll.mui

Files

WNF.NELauncher.v1.1.6.0855.zip
.zip
7-zip.dll
.dll regsvr32 windows:4 windows x64 arch:x64

42332fcc3e2310cce4c14fb09676af3a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

gdi32

DeleteObject

ole32

ReleaseStgMedium

user32

LoadStringW
InsertMenuItemW
CharUpperW
LoadBitmapW
CreatePopupMenu
MessageBoxW
DestroyMenu

advapi32

RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegCloseKey

shell32

DragQueryFileW
SHGetPathFromIDListW
DragFinish

msvcrt

memcpy
__CxxFrameHandler
wcscmp
memmove
_CxxThrowException
wcsstr
malloc
free
srand
rand
memcmp
memset
__C_specific_handler
??1type_info@@UEAA@XZ
__dllonexit
_onexit
_initterm
?terminate@@YAXXZ

kernel32

InitializeCriticalSection
GetSystemDefaultLangID
GetUserDefaultLangID
GlobalUnlock
GlobalLock
LeaveCriticalSection
DeleteCriticalSection
WaitForMultipleObjects
CreateEventW
WaitForSingleObject
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
lstrlenW
CreateProcessW
ReadFile
Sleep
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
EnterCriticalSection
GetFileSize
GetFileAttributesW
GetModuleHandleA
FindFirstFileW
FindClose
GetCurrentThreadId
GetCurrentProcessId
SetLastError
GetCurrentDirectoryW
GetProcAddress
CreateFileW
CloseHandle
RtlCaptureContext
FormatMessageW
GetTickCount
GetLastError
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameW
LocalFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
7z.dll
.dll windows:4 windows x86 arch:x86

59a1630cccf0571037bfd10c233b016e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleaut32

SysAllocStringByteLen
SysAllocStringLen
SysAllocString
SysFreeString
SysStringLen
VariantCopy
VariantClear

user32

CharPrevExA
CharUpperW

msvcrt

_adjust_fdiv
_initterm
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_except_handler3
_beginthreadex
strchr
strcat
strcpy
memset
realloc
free
malloc
strlen
wcscmp
strcmp
strstr
_CxxThrowException
memmove
memcpy
memcmp
_purecall
__CxxFrameHandler

kernel32

GetProcAddress
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreW
ResetEvent
SetEvent
CreateEventW
WaitForSingleObject
VirtualFree
VirtualAlloc
QueryPerformanceCounter
FileTimeToLocalFileTime
DeleteCriticalSection
GetVersionExW
LocalFileTimeToFileTime
WaitForMultipleObjects
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
FileTimeToDosDateTime
DosDateTimeToFileTime
GetSystemInfo
GetCurrentProcess
GetProcessAffinityMask
CompareFileTime
WriteFile
ReadFile
GetFileAttributesW
GetModuleHandleA
FindFirstFileW
GetLastError
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
CreateFileW
SetFileAttributesW
GetModuleHandleW
CreateDirectoryW
DeleteFileW
SetLastError
GetTempPathW
GetCurrentProcessId
GetTickCount
GetCurrentThreadId
FindClose

Exports

Exports

CreateDecoder
CreateEncoder
CreateObject
GetHandlerProperty
GetHandlerProperty2
GetHashers
GetIsArc
GetMethodProperty
GetNumberOfFormats
GetNumberOfMethods
SetCaseSensitive
SetCodecs
SetLargePageMode

Sections

.text
Size: 825KB - Virtual size: 825KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
7z.exe
.exe windows:4 windows x86 arch:x86

6d26c857784eea32ac92dcb74e598644

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantCopy
SysAllocStringLen
SysFreeString
SysStringByteLen
SysStringLen
VariantClear
SysAllocString

user32

CharUpperW

advapi32

OpenProcessToken
GetFileSecurityW
SetFileSecurityW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
_beginthreadex
memcmp
_purecall
strlen
memset
wcscmp
wcsstr
strcmp
memmove
fputs
fputc
fflush
fgetc
fclose
_iob
free
_CxxThrowException
malloc
memcpy
__CxxFrameHandler
_isatty
_fileno

kernel32

WaitForSingleObject
SetEvent
InitializeCriticalSection
VirtualAlloc
SetConsoleMode
GetConsoleMode
GetVersionExW
SetFileApisToOEM
GetCommandLineW
GetConsoleScreenBufferInfo
SetConsoleCtrlHandler
DeleteCriticalSection
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
GetProcessTimes
OpenEventW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
SetProcessAffinityMask
GetStdHandle
GetSystemTimeAsFileTime
FileTimeToDosDateTime
GlobalMemoryStatus
GetSystemInfo
GetProcessAffinityMask
FileTimeToLocalFileTime
FileTimeToSystemTime
CompareFileTime
GetCurrentProcess
GetDiskFreeSpaceW
GetFileInformationByHandle
SetEndOfFile
WriteFile
ReadFile
DeviceIoControl
SetFilePointer
GetFileSize
GetLogicalDriveStringsW
GetLastError
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
LoadLibraryExW
LoadLibraryW
GetModuleFileNameW
LocalFree
FormatMessageW
GetFileAttributesW
CloseHandle
SetFileTime
CreateFileW
SetFileAttributesW
RemoveDirectoryW
MoveFileW
GetProcAddress
GetModuleHandleW
CreateDirectoryW
DeleteFileW
SetLastError
SetCurrentDirectoryW
GetCurrentDirectoryW
GetTempPathW
GetCurrentProcessId
GetTickCount
GetCurrentThreadId
FindClose
FindFirstFileW
FindNextFileW
GetModuleHandleA
VirtualFree

Sections

.text
Size: 215KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ColorCode.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

28/04/2021, 00:00

Not After

19/07/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9a:f0:90:02:ac:90:fd:c7:25:59:bc:70:97:5a:2f:d1:bd:26:b5:cc:cf:e6:2f:31:88:60:24:ac:28:2f:58:1d
Signer

Actual PE Digest

9a:f0:90:02:ac:90:fd:c7:25:59:bc:70:97:5a:2f:d1:bd:26:b5:cc:cf:e6:2f:31:88:60:24:ac:28:2f:58:1d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/ColorCode.Core/obj/Release/netstandard1.4/ColorCode.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ColorCode.WinUI.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

28/04/2021, 00:00

Not After

19/07/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ca:61:55:a5:ee:4e:e1:d9:c9:5b:f3:8f:b7:c5:01:d5:a6:76:95:74:2b:e2:a3:42:d9:b4:74:ee:43:c7:24:4b
Signer

Actual PE Digest

ca:61:55:a5:ee:4e:e1:d9:c9:5b:f3:8f:b7:c5:01:d5:a6:76:95:74:2b:e2:a3:42:d9:b4:74:ee:43:c7:24:4b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/ColorCode.WinUI/obj/Release/net5.0-windows10.0.18362.0/ColorCode.WinUI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CommunityToolkit.Common.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

28/04/2021, 00:00

Not After

19/07/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d2:9b:b1:e9:b1:58:a4:4e:d2:a0:1f:97:28:3f:64:98:72:59:6b:32:d2:73:9e:ce:50:c4:0a:7b:d6:ca:15:5b
Signer

Actual PE Digest

d2:9b:b1:e9:b1:58:a4:4e:d2:a0:1f:97:28:3f:64:98:72:59:6b:32:d2:73:9e:ce:50:c4:0a:7b:d6:ca:15:5b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/src/CommunityToolkit.Common/obj/Release/net6.0/CommunityToolkit.Common.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CommunityToolkit.WinUI.Controls.RadialGauge.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

28/04/2021, 00:00

Not After

19/07/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

93:4a:81:5b:2d:4e:dd:8a:2f:cc:da:10:09:0a:31:12:5c:74:8d:d4:a6:9c:8b:de:d1:cd:5b:30:10:ca:4b:62
Signer

Actual PE Digest

93:4a:81:5b:2d:4e:dd:8a:2f:cc:da:10:09:0a:31:12:5c:74:8d:d4:a6:9c:8b:de:d1:cd:5b:30:10:ca:4b:62

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/components/RadialGauge/src/obj/Release/net6.0-windows10.0.19041.0/CommunityToolkit.WinUI.Controls.RadialGauge.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CommunityToolkit.WinUI.Controls.SettingsControls.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

28/04/2021, 00:00

Not After

19/07/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c2:5a:f2:fe:de:3d:83:09:35:d7:18:d7:91:51:f3:9f:76:89:9e:d3:da:5a:e0:83:d3:2b:4a:40:0c:0d:fb:6e
Signer

Actual PE Digest

c2:5a:f2:fe:de:3d:83:09:35:d7:18:d7:91:51:f3:9f:76:89:9e:d3:da:5a:e0:83:d3:2b:4a:40:0c:0d:fb:6e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/components/SettingsControls/src/obj/Release/net6.0-windows10.0.19041.0/CommunityToolkit.WinUI.Controls.SettingsControls.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CommunityToolkit.WinUI.Extensions.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

28/04/2021, 00:00

Not After

19/07/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f4:ac:7d:76:b2:7a:3c:da:c0:f0:46:4d:44:a4:fe:f9:86:9d:79:7e:40:c7:1a:12:91:f1:e4:f9:6a:b5:53:92
Signer

Actual PE Digest

f4:ac:7d:76:b2:7a:3c:da:c0:f0:46:4d:44:a4:fe:f9:86:9d:79:7e:40:c7:1a:12:91:f1:e4:f9:6a:b5:53:92

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/components/Extensions/src/obj/Release/net6.0-windows10.0.19041.0/CommunityToolkit.WinUI.Extensions.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CommunityToolkit.WinUI.Helpers.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

28/04/2021, 00:00

Not After

19/07/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9e:02:c8:52:13:a4:e0:af:63:f2:01:26:78:b3:96:19:af:5c:f0:d2:d0:06:8f:5f:79:93:c9:1f:f3:d3:88:55
Signer

Actual PE Digest

9e:02:c8:52:13:a4:e0:af:63:f2:01:26:78:b3:96:19:af:5c:f0:d2:d0:06:8f:5f:79:93:c9:1f:f3:d3:88:55

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/components/Helpers/src/obj/Release/net6.0-windows10.0.19041.0/CommunityToolkit.WinUI.Helpers.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CommunityToolkit.WinUI.Triggers.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

28/04/2021, 00:00

Not After

19/07/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2a:d6:fc:fc:63:ae:e9:98:5f:9c:0a:ce:0b:43:5b:4e:55:8a:6f:fc:8d:d3:43:f2:79:54:9a:af:a6:e0:7f:06
Signer

Actual PE Digest

2a:d6:fc:fc:63:ae:e9:98:5f:9c:0a:ce:0b:43:5b:4e:55:8a:6f:fc:8d:d3:43:f2:79:54:9a:af:a6:e0:7f:06

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/components/Triggers/src/obj/Release/net6.0-windows10.0.19041.0/CommunityToolkit.WinUI.Triggers.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CommunityToolkit.WinUI.UI.Controls.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

28/04/2021, 00:00

Not After

19/07/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

aa:16:f5:2c:09:02:45:71:11:ab:b1:e4:12:20:34:e7:a1:d9:08:e3:d0:94:6f:c4:6e:c6:18:74:56:e9:54:65
Signer

Actual PE Digest

aa:16:f5:2c:09:02:45:71:11:ab:b1:e4:12:20:34:e7:a1:d9:08:e3:d0:94:6f:c4:6e:c6:18:74:56:e9:54:65

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/CommunityToolkit.WinUI.UI.Controls.Core/obj/Release/net5.0-windows10.0.18362.0/CommunityToolkit.WinUI.UI.Controls.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CommunityToolkit.WinUI.UI.Controls.DataGrid.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

28/04/2021, 00:00

Not After

19/07/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:5d:2a:6c:6f:19:6d:c5:c4:c7:e6:73:2d:2f:b4:34:90:64:6d:bf:69:04:c9:24:f4:21:ce:cd:d4:a6:6f:20
Signer

Actual PE Digest

01:5d:2a:6c:6f:19:6d:c5:c4:c7:e6:73:2d:2f:b4:34:90:64:6d:bf:69:04:c9:24:f4:21:ce:cd:d4:a6:6f:20

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/CommunityToolkit.WinUI.UI.Controls.DataGrid/obj/Release/net5.0-windows10.0.18362.0/CommunityToolkit.WinUI.UI.Controls.DataGrid.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 415KB - Virtual size: 414KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CommunityToolkit.WinUI.UI.Controls.Markdown.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

28/04/2021, 00:00

Not After

19/07/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:f3:d0:35:4e:e8:4d:ee:a9:76:a0:82:36:05:12:6c:b8:93:d7:4b:20:18:52:2b:23:04:60:94:6f:c6:7f:01
Signer

Actual PE Digest

49:f3:d0:35:4e:e8:4d:ee:a9:76:a0:82:36:05:12:6c:b8:93:d7:4b:20:18:52:2b:23:04:60:94:6f:c6:7f:01

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/CommunityToolkit.WinUI.UI.Controls.Markdown/obj/Release/net5.0-windows10.0.18362.0/CommunityToolkit.WinUI.UI.Controls.Markdown.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CommunityToolkit.WinUI.UI.Controls.Primitives.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

28/04/2021, 00:00

Not After

19/07/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:e9:c6:ac:fa:3f:86:92:ee:fa:50:f8:29:5a:6f:4e:a0:53:53:09:eb:24:5b:6c:db:bf:aa:53:09:e4:96:cc
Signer

Actual PE Digest

62:e9:c6:ac:fa:3f:86:92:ee:fa:50:f8:29:5a:6f:4e:a0:53:53:09:eb:24:5b:6c:db:bf:aa:53:09:e4:96:cc

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/CommunityToolkit.WinUI.UI.Controls.Primitives/obj/Release/net5.0-windows10.0.18362.0/CommunityToolkit.WinUI.UI.Controls.Primitives.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CommunityToolkit.WinUI.UI.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

28/04/2021, 00:00

Not After

19/07/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

21:3a:b3:87:0c:6f:5a:27:c0:bc:26:39:38:ba:e1:b6:7a:78:c4:0e:f0:6e:44:57:43:3f:68:6b:d1:19:7f:92
Signer

Actual PE Digest

21:3a:b3:87:0c:6f:5a:27:c0:bc:26:39:38:ba:e1:b6:7a:78:c4:0e:f0:6e:44:57:43:3f:68:6b:d1:19:7f:92

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/CommunityToolkit.WinUI.UI/obj/Release/net5.0-windows10.0.18362.0/CommunityToolkit.WinUI.UI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CommunityToolkit.WinUI.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

28/04/2021, 00:00

Not After

19/07/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3b:22:f0:69:44:2d:84:48:4a:b0:19:6e:b6:d7:f5:72:4d:f1:7c:ca:dd:9c:36:66:ad:f6:28:f0:cb:5c:38:18
Signer

Actual PE Digest

3b:22:f0:69:44:2d:84:48:4a:b0:19:6e:b6:d7:f5:72:4d:f1:7c:ca:dd:9c:36:66:ad:f6:28:f0:cb:5c:38:18

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/CommunityToolkit.WinUI/obj/Release/net5.0-windows10.0.18362.0/CommunityToolkit.WinUI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CoreMessagingXP.dll
.dll windows:10 windows x64 arch:x64

d2766fc399247c40c876c7d12e42a401

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

12:7c:56:93:ce:3f:74:64:cb:8e:f4:5c:3a:3b:da:e5:94:16:f0:24:46:00:7b:c5:57:1b:4d:c2:51:3c:55:4e
Signer

Actual PE Digest

12:7c:56:93:ce:3f:74:64:cb:8e:f4:5c:3a:3b:da:e5:94:16:f0:24:46:00:7b:c5:57:1b:4d:c2:51:3c:55:4e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

CoreMessagingXP.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

terminate
_invalid_parameter_noinfo_noreturn
abort
_cexit
_errno
_crt_atexit
_execute_onexit_table
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_invalid_parameter_noinfo
_register_onexit_function
_initialize_onexit_table

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vsnprintf_s

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW
GetModuleFileNameA
GetProcAddress
GetModuleHandleW

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionEx
ReleaseSemaphore
DeleteCriticalSection
CreateMutexExW
LeaveCriticalSection
OpenSemaphoreW
WaitForSingleObject
CreateSemaphoreExW
WaitForSingleObjectEx
TryAcquireSRWLockExclusive
ReleaseMutex
EnterCriticalSection

api-ms-win-core-heap-l1-1-0

HeapFree
GetProcessHeap
HeapAlloc

api-ms-win-core-errorhandling-l1-1-0

SetLastError
GetLastError
RaiseException

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList
InitializeSListHead
InterlockedFlushSList

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-rtlsupport-l1-1-0

RtlUnwindEx
RtlPcToFileHeader
RtlLookupFunctionEntry

api-ms-win-core-fibers-l1-1-0

FlsGetValue
FlsSetValue
FlsFree
FlsAlloc

api-ms-win-core-util-l1-1-0

EncodePointer

kernel32

DecodePointer
Sleep
GetHandleInformation
InitOnceExecuteOnce
SetWaitableTimer
CreateWaitableTimerExW
GetThreadPriority
WaitForMultipleObjectsEx
OpenThread
GetTickCount64
ResetEvent
LocalFree
OpenProcess
WaitForThreadpoolWaitCallbacks
RaiseFailFastException
SetThreadpoolWait
CreateThreadpoolWait
HeapSize
VirtualFree
VirtualAlloc
GetSystemInfo
QueryDepthSList
InterlockedPopEntrySList
InitializeSRWLock
SetThreadPriority
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
SetEvent
WaitForMultipleObjects
CreateThread
CreateEventW
CallbackMayRunLong
DuplicateHandle
GetCurrentProcess
AcquireSRWLockShared
ReleaseSRWLockShared
CloseThreadpoolWait
LoadLibraryW
GetCurrentThread
FreeLibrary
RtlCaptureStackBackTrace
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
InitializeCriticalSection
LoadLibraryExW
DisableThreadLibraryCalls

advapi32

OpenProcessToken
EventRegister
EventUnregister
EventWriteTransfer
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenThreadToken
RevertToSelf
GetTokenInformation

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
_calloc_base
malloc
realloc
free
_aligned_free
_aligned_offset_malloc
_free_base

api-ms-win-crt-string-l1-1-0

strcpy_s
wmemcpy_s

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo
RoOriginateError
GetRestrictedErrorInfo
RoOriginateErrorW
RoTransformError
RoFailFastWithErrorContext

api-ms-win-core-winrt-string-l1-1-0

WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsCreateString
WindowsStringHasEmbeddedNull

api-ms-win-core-winrt-error-l1-1-1

RoGetMatchingRestrictedErrorInfo
RoReportFailedDelegate
IsErrorPropagationEnabled

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

ntdll

NtAlpcAcceptConnectPort
NtAlpcCreatePort
RtlInitUnicodeString
NtAlpcDisconnectPort
NtAllocateReserveObject
NtSetIoCompletionEx
AlpcInitializeMessageAttribute
NtAlpcImpersonateClientOfPort
AlpcGetMessageAttribute
NtAlpcSendWaitReceivePort
NtClose
NtAlpcConnectPort
NtRemoveIoCompletionEx
NtAlpcQueryInformation
NtCancelWaitCompletionPacket
NtAssociateWaitCompletionPacket
NtCreateWaitCompletionPacket
NtCreateIoCompletion
RtlDeactivateActivationContextUnsafeFast
RtlActivateActivationContextUnsafeFast
RtlReleaseActivationContext
RtlQueryInformationActiveActivationContext
RtlFreeUnicodeString
NtQuerySystemInformation

api-ms-win-crt-math-l1-1-0

ceilf

api-ms-win-crt-utility-l1-1-0

rand_s

Exports

Exports

CoreMsgCreateSession
CoreMsgGetExistingSession
CoreUICallComputeMaximumMessageSize
CoreUICallCreateConversationHost
CoreUICallCreateEndpointHost
CoreUICallCreateEndpointHostWithSendPriority
CoreUICallGetAddressOfParameterInBuffer
CoreUICallReceive
CoreUICallSend
CoreUICallSendVaList
CoreUIConfigureTestHost
CoreUIConfigureUserIntegration
CoreUICreateAnonymousStream
CoreUIEnableCrossProcessPrototyping
CoreUIInitializeTestService
CoreUIRouteToTestRegistrar
CoreUIUninitializeTestService
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
MsgBlobCreateShared
MsgBlobCreateStack
MsgBufferShare
MsgRelease
MsgStringCreateShared
MsgStringCreateStack
WinUICreateDispatcherQueueController
WinUIGetDispatcherQueueForCurrentThread

Sections

.text
Size: 648KB - Virtual size: 647KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DWriteCore.dll
.dll windows:6 windows x64 arch:x64

831590ae3611c2897b5f62fb0ce7a088

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:2e:9c:2f:dc:46:01:c7:07:49:ad:94:a6:1c:f8:26:5e:04:da:4a:c7:c6:36:c0:87:f6:ec:95:e3:18:ae:22
Signer

Actual PE Digest

90:2e:9c:2f:dc:46:01:c7:07:49:ad:94:a6:1c:f8:26:5e:04:da:4a:c7:c6:36:c0:87:f6:ec:95:e3:18:ae:22

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

DWriteCore.pdb

Imports

bcrypt

BCryptGenRandom

kernel32

CreateMutexExW
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
FreeLibrary
DebugBreak
IsDebuggerPresent
CreateDirectoryW
ReadFile
GetFileSizeEx
WriteFile
CreateFileW
DeleteFileW
MoveFileW
FlushFileBuffers
FindNextFileW
GetFileInformationByHandle
CreateFileMappingW
MapViewOfFileEx
HeapReAlloc
AcquireSRWLockExclusive
GetProcAddress
GetModuleHandleA
GetStdHandle
UnmapViewOfFile
MultiByteToWideChar
WriteConsoleW
LoadLibraryA
CreateMutexA
GetCurrentProcess
RtlLookupFunctionEntry
GetCurrentDirectoryW
GetCurrentThread
RtlCaptureContext
AcquireSRWLockShared
ReleaseSRWLockShared
GetEnvironmentVariableW
WideCharToMultiByte
RaiseFailFastException
RtlUnwind
HeapAlloc
LoadLibraryW
OpenSemaphoreW
WaitForSingleObjectEx
InitOnceComplete
OutputDebugStringW
FormatMessageW
ReleaseMutex
GetCurrentThreadId
WaitForSingleObject
GetModuleHandleExW
ReleaseSemaphore
HeapFree
CreateSemaphoreExW
InitOnceBeginInitialize
GetModuleFileNameA
GetWindowsDirectoryW
GetLastError
GetFullPathNameW
FindCloseChangeNotification
FindFirstChangeNotificationW
ReleaseSRWLockExclusive
GetACP
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
FindClose
WaitForMultipleObjects
FindFirstFileW
SetLastError
CloseHandle
InitializeSRWLock
SetEvent
CreateEventW
WaitForMultipleObjectsEx
GetUserDefaultLocaleName
GetLocaleInfoEx
DecodePointer
GetConsoleMode
TlsAlloc
EncodePointer
InterlockedFlushSList
RtlUnwindEx
InitializeSListHead
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
ResetEvent
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TryAcquireSRWLockExclusive
QueryPerformanceCounter
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
GetExitCodeThread
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
IsProcessorFeaturePresent
RtlPcToFileHeader
RaiseException
InitializeCriticalSectionEx
GetSystemTimeAsFileTime

user32

GetMonitorInfoW
EnumDisplayDevicesW
SystemParametersInfoW
LoadStringA

gdi32

GetWorldTransform
FillPath
BeginPath
GetStockObject
PolyBezierTo
PathToRegion
SetPolyFillMode
EndPath
LineTo
SetDCBrushColor
MoveToEx
CloseFigure
FillRgn
GetRgnBox
SetWorldTransform
SelectObject
CreateDIBSection
CreateCompatibleDC
SetGraphicsMode
DeleteDC
DeleteObject
GetDeviceCaps

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree
CoGetApartmentType
CoGetObjectContext

advapi32

RegQueryInfoKeyW
SystemFunction036
RegNotifyChangeKeyValue
EventWriteTransfer
EventRegister
EventSetInformation
EventUnregister
RegEnumKeyExW
RegOpenKeyExW
RegEnumValueW
RegQueryValueExW
RegCloseKey

api-ms-win-crt-runtime-l1-1-0

_cexit
_invalid_parameter_noinfo_noreturn
abort
_crt_atexit
_execute_onexit_table
_register_onexit_function
_beginthreadex
_invalid_parameter_noinfo
_initialize_onexit_table
_initialize_narrow_environment
terminate
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_errno

api-ms-win-crt-heap-l1-1-0

realloc
_callnewh
calloc
free
malloc

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
__stdio_common_vswprintf_s
__stdio_common_vswprintf

api-ms-win-crt-math-l1-1-0

logf
expf
cosf
atan2f
pow
roundf
floorf
ceilf
sqrtf
floor
sqrt
sinf
tanf

api-ms-win-crt-string-l1-1-0

strcpy_s
wcsncmp

Exports

Exports

DWriteCoreCreateFactory
DWriteCoreRegisterEventSink
DWriteCoreUnregisterEventSink

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 987KB - Virtual size: 986KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DwmSceneI.dll
.dll windows:10 windows x64 arch:x64

f19447761f67ad8a5e43d6ac8cc20cef

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:68:64:89:5c:c1:c0:b6:22:14:16:06:da:8e:29:46:a0:29:b2:fe:01:62:e2:1b:7d:e8:b3:4d:e9:79:1f:b9
Signer

Actual PE Digest

49:68:64:89:5c:c1:c0:b6:22:14:16:06:da:8e:29:46:a0:29:b2:fe:01:62:e2:1b:7d:e8:b3:4d:e9:79:1f:b9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

DwmSceneI.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_set_errno
_invoke_watson
_invalid_parameter_noinfo_noreturn
_errno
abort
_beginthreadex
_initterm
_initterm_e
terminate
_seh_filter_dll
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vswprintf
__stdio_common_vsnprintf_s
__stdio_common_vsprintf_s
__stdio_common_vfprintf

api-ms-win-crt-math-l1-1-0

_fdclass
ceilf
powf
cosf
expf
floor
fmodf
floorf
acosf
sinf
frexp
tanf
copysignf
sqrtf
round
pow
log2f
atan2f
remainderf
cbrtf
_fdsign
log
fminf
ldexp
roundf
fmaxf

api-ms-win-crt-string-l1-1-0

isspace
strcspn
strncpy_s
_wcsdup
isupper
strnlen
islower
__strncnt
tolower
strncmp
wcsnlen
strcpy_s

api-ms-win-crt-heap-l1-1-0

_aligned_malloc
calloc
_calloc_base
_free_base
_aligned_free
malloc
_malloc_base
free

api-ms-win-crt-convert-l1-1-0

strtoul
atol
strtol
strtof
strtod

microsoft.ui.composition.ossupport

TerminateProcessOnMemoryExhaustion

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress
GetModuleHandleExW
GetModuleFileNameA
GetModuleHandleW

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection
ReleaseSemaphore
InitializeSRWLock
ReleaseMutex
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
OpenSemaphoreW
CreateMutexExW
TryAcquireSRWLockExclusive
WaitForSingleObjectEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
CreateSemaphoreExW

api-ms-win-core-heap-l1-1-0

HeapFree
HeapAlloc
GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

RaiseException
SetLastError
GetLastError

api-ms-win-core-processthreads-l1-1-0

SwitchToThread
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetExitCodeThread

api-ms-win-core-localization-l1-2-0

FormatMessageW
LCMapStringEx

api-ms-win-core-debug-l1-1-0

OutputDebugStringA
OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-rtlsupport-l1-1-0

RtlUnwindEx
RtlCaptureStackBackTrace
RtlLookupFunctionEntry
RtlPcToFileHeader

api-ms-win-core-sysinfo-l1-2-0

GetSystemTimePreciseAsFileTime

api-ms-win-core-sysinfo-l1-1-0

GetSystemInfo
GlobalMemoryStatusEx
GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList
InterlockedFlushSList
InitializeSListHead

api-ms-win-core-fibers-l1-1-0

FlsAlloc
FlsSetValue
FlsGetValue
FlsFree

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventUnregister
EventRegister
EventSetInformation

api-ms-win-core-com-l1-1-0

CoCreateGuid
StringFromGUID2

api-ms-win-core-psapi-l1-1-0

K32GetProcessMemoryInfo

d3d11

D3D11CreateDevice

d2d1

ord1

dxgi

CreateDXGIFactory1

api-ms-win-crt-locale-l1-1-0

___mb_cur_max_func
_lock_locales
_unlock_locales
___lc_locale_name_func
setlocale
___lc_codepage_func
localeconv
__pctype_func

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW
InitOnceComplete
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
InitOnceBeginInitialize

Exports

Exports

CreateDwmSceneRenderer

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 948KB - Virtual size: 947KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MRM.dll
.dll windows:6 windows x64 arch:x64

5a81c252e4c99dc4be02aeff8ec2678a

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d4:12:c6:c3:6e:3d:ed:cc:a6:cb:aa:81:a1:8b:b2:79:fb:c3:85:6f:d6:1a:75:95:2c:15:92:ee:be:d7:c2:e2
Signer

Actual PE Digest

d4:12:c6:c3:6e:3d:ed:cc:a6:cb:aa:81:a1:8b:b2:79:fb:c3:85:6f:d6:1a:75:95:2c:15:92:ee:be:d7:c2:e2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

MRM.pdb

Imports

kernel32

ReleaseSemaphore
GetModuleHandleExW
GetModuleFileNameW
SetLastError
K32GetModuleFileNameExW
CompareStringOrdinal
IsProcessorFeaturePresent
WaitForSingleObject
GetFileAttributesW
GetCurrentThreadId
ReleaseMutex
HeapFree
FormatMessageW
GetLastError
OutputDebugStringW
TerminateProcess
InitOnceComplete
WaitForSingleObjectEx
CreateSemaphoreExW
CloseHandle
LoadLibraryW
HeapAlloc
SetUnhandledExceptionFilter
InitOnceBeginInitialize
GetProcAddress
CreateMutexExW
UnhandledExceptionFilter
GetCurrentProcessId
GetProcessHeap
FindStringOrdinal
GetModuleHandleW
FreeLibrary
RtlVirtualUnwind
DebugBreak
IsDebuggerPresent
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
MultiByteToWideChar
GetThreadPreferredUILanguages
OpenSemaphoreW
GetSystemWindowsDirectoryW
ReadFile
GetFileSizeEx
GetCurrentProcess
CreateFileW
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
GetDriveTypeW
LoadLibraryExW
GetFinalPathNameByHandleW
GetFileAttributesExW
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleFileNameA
SleepConditionVariableSRW
WakeAllConditionVariable
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
RtlPcToFileHeader
RaiseException
EncodePointer
InterlockedFlushSList
QueryPerformanceCounter

ole32

CoTaskMemFree
CoTaskMemAlloc

advapi32

EventWriteTransfer
EventRegister
EventUnregister
EventSetInformation
RegGetValueW

api-ms-win-core-path-l1-1-0

PathCchRemoveFileSpec
PathCchCombineEx
PathCchRenameExtension

user32

LoadStringA

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
abort
terminate
_initterm_e
_initterm
_cexit
_invalid_parameter_noinfo
_register_onexit_function
_crt_atexit
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_errno

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
__stdio_common_vswprintf

api-ms-win-crt-utility-l1-1-0

qsort_s

api-ms-win-crt-string-l1-1-0

towlower
isalpha
iswdigit
wcsncmp
towupper
iswspace
iswalnum
strcpy_s
wcsncpy_s

api-ms-win-crt-convert-l1-1-0

_wtoi

api-ms-win-crt-heap-l1-1-0

free
calloc
_callnewh
malloc

Exports

Exports

MrmAllocateBuffer
MrmCreateResourceContext
MrmCreateResourceManager
MrmDestroyResourceContext
MrmDestroyResourceManager
MrmFreeQualifierNamesOrValues
MrmFreeResource
MrmGetAllQualifierNames
MrmGetChildResourceMap
MrmGetFilePathFromName
MrmGetQualifier
MrmGetResourceCount
MrmLoadEmbeddedResource
MrmLoadEmbeddedResourceFromResourceUri
MrmLoadStringOrEmbeddedFromResourceUri
MrmLoadStringOrEmbeddedResource
MrmLoadStringOrEmbeddedResourceByIndex
MrmLoadStringOrEmbeddedResourceByIndexWithQualifierValues
MrmLoadStringOrEmbeddedResourceWithQualifierValues
MrmLoadStringResource
MrmLoadStringResourceFromResourceUri
MrmSetQualifier

Sections

.text
Size: 218KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.DirectManipulation.dll
.dll windows:10 windows x64 arch:x64

4073902fc75e51f1eabb16d6df04b008

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:11:8b:6b:ff:2c:a8:56:8e:0d:eb:67:a4:97:36:e3:0c:f1:63:db:30:cc:c7:15:6d:5a:42:ab:58:7a:dd:c6
Signer

Actual PE Digest

2e:11:8b:6b:ff:2c:a8:56:8e:0d:eb:67:a4:97:36:e3:0c:f1:63:db:30:cc:c7:15:6d:5a:42:ab:58:7a:dd:c6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.DirectManipulation.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

abort
_invalid_parameter_noinfo
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_initterm_e
_initterm
_get_errno
_set_errno
_errno
_invoke_watson
_cexit
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
__stdio_common_vswprintf

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW
DisableThreadLibraryCalls
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetModuleFileNameA

api-ms-win-core-synch-l1-1-0

WaitForSingleObject
ReleaseSemaphore
AcquireSRWLockShared
ReleaseSRWLockShared
WaitForMultipleObjectsEx
ReleaseSRWLockExclusive
OpenEventW
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
SetEvent
CreateSemaphoreExW
AcquireSRWLockExclusive
ReleaseMutex
CreateEventW
CreateMutexExW
OpenSemaphoreW
WaitForSingleObjectEx
InitializeCriticalSection

api-ms-win-core-heap-l1-1-0

HeapDestroy
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
HeapCreate

api-ms-win-core-errorhandling-l1-1-0

GetLastError
SetLastError
RaiseException

api-ms-win-core-processthreads-l1-1-0

TlsSetValue
TlsFree
SetThreadPriority
TlsAlloc
CreateThread
GetCurrentThreadId
GetCurrentProcessId
ResumeThread
TlsGetValue

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

DebugBreak
IsDebuggerPresent
OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount64
GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList
InitializeSListHead

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader

api-ms-win-core-fibers-l1-1-0

FlsFree
FlsSetValue
FlsGetValue
FlsAlloc

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-crt-heap-l1-1-0

free
_calloc_base
_free_base
malloc

api-ms-win-crt-string-l1-1-0

strcpy_s

api-ms-win-crt-filesystem-l1-1-0

_wsplitpath_s

api-ms-win-crt-math-l1-1-0

sqrtf
sqrt
sinf
tanh
cosf
cosh
floor
powf
floorf
tanhf
_copysign
log
logf

ntdll

RtlReleaseSRWLockShared
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockShared
RtlAcquireSRWLockExclusive

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW
RoOriginateError

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventWriteTransfer
EventRegister
EventSetInformation

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW
InitOnceExecuteOnce
WakeAllConditionVariable

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringRawBuffer
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty

api-ms-win-eventing-classicprovider-l1-1-0

GetTraceLoggerHandle
TraceMessage
RegisterTraceGuidsW
UnregisterTraceGuids
GetTraceEnableFlags
GetTraceEnableLevel

api-ms-win-rtcore-ntuser-window-l1-1-0

PostThreadMessageW
DispatchMessageW
TranslateMessage
PostMessageW
GetAncestor
SetWindowLongPtrW
ClientToScreen
CallWindowProcW
GetQueueStatus
GetClientRect
PeekMessageW
IsGUIThread
GetWindowThreadProcessId
IsWindowEnabled
IsWindow
GetMessageTime
IsChild
DestroyWindow
KillTimer
SetTimer
CreateWindowExW
RegisterClassW
PostQuitMessage
DefWindowProcW

api-ms-win-core-com-l1-1-0

CoTaskMemFree
CoCreateFreeThreadedMarshaler
CoInitializeEx
CoCreateInstance
CoUninitialize

api-ms-win-rtcore-ntuser-synch-l1-1-0

MsgWaitForMultipleObjects

api-ms-win-core-processthreads-l1-1-3

SetThreadDescription

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CloseThreadpoolTimer
CreateThreadpoolTimer

api-ms-win-ntuser-sysparams-l1-1-0

GetMonitorInfoW
GetSystemMetrics
SystemParametersInfoW

api-ms-win-core-registry-l1-1-0

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

api-ms-win-ntuser-rectangle-l1-1-0

CopyRect
IsRectEmpty

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

dcompi

WinUIDCompositionCreateDevice3

api-ms-win-crt-utility-l1-1-0

qsort_s

api-ms-win-rtcore-ntuser-wmpointer-l1-1-0

GetPointerInfo
GetPointerInputTransform
GetPointerDeviceRects

api-ms-win-core-largeinteger-l1-1-0

MulDiv

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

microsoft.inputstatemanager

InitDManipHookInProc
UndelegateInputInProc
HandleDelegatedInputInProc
SendMessageCallbackInProc
DelegateCapturePointersInProc
DelegateInputInProc

Exports

Exports

?InitializeDManipHook@@YAHKPEAX@Z
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject

Sections

.text
Size: 488KB - Virtual size: 487KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Foundation.winmd
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Graphics.Display.dll
.dll windows:10 windows x64 arch:x64

419a0d17fedd48072a17413ec625c690

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

23:55:16:34:ff:04:d9:6d:b8:b9:a9:4d:a3:c5:01:fe:18:60:78:bb:99:0f:bd:24:7a:ee:2b:e7:65:e3:2d:22
Signer

Actual PE Digest

23:55:16:34:ff:04:d9:6d:b8:b9:a9:4d:a3:c5:01:fe:18:60:78:bb:99:0f:bd:24:7a:ee:2b:e7:65:e3:2d:22

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.Graphics.Display.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_initterm
_invalid_parameter_noinfo
terminate
_initterm_e
_cexit
_crt_atexit
_seh_filter_dll
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
abort
_configure_narrow_argv
_initialize_narrow_environment
_errno

api-ms-win-crt-string-l1-1-0

strcpy_s
iswspace

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
__stdio_common_vswprintf

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls
GetModuleHandleExW
FreeLibrary
LoadStringW
GetProcAddress
GetModuleHandleW
LoadStringA
GetModuleFileNameA
LoadLibraryExA

api-ms-win-core-synch-l1-1-0

WaitForSingleObject
ReleaseSemaphore
DeleteCriticalSection
AcquireSRWLockShared
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
ReleaseSRWLockShared
CreateSemaphoreExW
CreateMutexExW
AcquireSRWLockExclusive
ReleaseMutex
ReleaseSRWLockExclusive
OpenSemaphoreW
WaitForSingleObjectEx

api-ms-win-core-heap-l1-1-0

HeapFree
HeapAlloc
GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

GetLastError
RaiseException
SetLastError

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

DebugBreak
IsDebuggerPresent
OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetSystemInfo

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList
InitializeSListHead
InterlockedFlushSList

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx

api-ms-win-core-fibers-l1-1-0

FlsGetValue
FlsFree
FlsSetValue
FlsAlloc

api-ms-win-core-util-l1-1-0

EncodePointer

microsoft.internal.frameworkudk

DisplayPrivates_CreateDisplayEvents
DisplayPrivates_DisplayConfigGetAdvancedColorInfo
DisplayPrivates_GetCurrentColorProfilePath
DisplayPrivates_RegisterStereoChangedListener
DisplayPrivates_UnregisterStereoChangedListener

api-ms-win-crt-heap-l1-1-0

_calloc_base
free
malloc
_free_base
_callnewh

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolTimer
TrySubmitThreadpoolCallback
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CreateThreadpoolTimer

api-ms-win-core-file-l1-1-0

CreateFileW
ReadFile
SetFilePointer

api-ms-win-core-windowserrorreporting-l1-1-0

WerRegisterMemoryBlock

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize
InitOnceComplete

api-ms-win-core-memory-l1-1-0

VirtualQuery
VirtualProtect

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory

Sections

.text
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Graphics.winmd
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.InputStateManager.dll
.dll windows:10 windows x64 arch:x64

ab8934073ebade97e446f5c767c28199

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

86:a2:dc:bf:53:a8:c7:8f:60:4a:35:b0:99:d0:cc:01:96:d3:46:1c:63:85:93:9f:4a:14:25:7a:9d:11:25:ab
Signer

Actual PE Digest

86:a2:dc:bf:53:a8:c7:8f:60:4a:35:b0:99:d0:cc:01:96:d3:46:1c:63:85:93:9f:4a:14:25:7a:9d:11:25:ab

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.InputStateManager.pdb

Imports

ntdll

RtlUnwindEx
NtQuerySystemInformation
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlCaptureStackBackTrace

api-ms-win-rtcore-ntuser-private-l1-1-1

ord2516
ord2503
ord2505
ord2504

api-ms-win-rtcore-ntuser-wmpointer-l1-1-0

GetPointerDevice
GetPointerType
GetPointerInfo
GetPointerDeviceProperties
GetPointerPenInfo
GetPointerFramePenInfoHistory
GetPointerFrameInfo
GetPointerFrameInfoHistory
GetPointerTouchInfo
GetPointerFrameTouchInfoHistory
GetRawPointerDeviceData
GetPointerDeviceRects
GetPointerInputTransform

kernel32

GetExitCodeThread
InitializeCriticalSection
FreeLibrary
SleepConditionVariableSRW
WakeAllConditionVariable
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
InterlockedFlushSList
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LeaveCriticalSection
TryAcquireSRWLockExclusive
DeleteCriticalSection
EncodePointer
RaiseException
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
ReleaseSemaphore
GetModuleHandleExW
WaitForSingleObject
ReleaseMutex
FormatMessageW
OutputDebugStringW
WaitForSingleObjectEx
OpenSemaphoreW
CloseHandle
HeapAlloc
GetProcAddress
CreateMutexExW
GetProcessHeap
GetModuleHandleW
DebugBreak
IsDebuggerPresent
InitOnceBeginInitialize
CreateEventExW
InitializeSRWLock
EnterCriticalSection
ReleaseSRWLockExclusive
InitOnceComplete
AcquireSRWLockExclusive
LoadLibraryW
ReleaseSRWLockShared
AcquireSRWLockShared
InitializeCriticalSectionEx
GetTickCount64
QueryPerformanceFrequency
SetEvent

advapi32

EventUnregister
EventRegister
EventSetInformation
RegGetValueW
EventWriteTransfer
EventActivityIdControl

user32

GetKeyState
GetAsyncKeyState
ClientToScreen
TranslateMessage
IsGUIThread
DefWindowProcW
SendMessageW
PeekMessageW
GetMessageTime
LoadCursorW
SetCursor
PostThreadMessageW
MsgWaitForMultipleObjects
DestroyWindow
SetWindowLongPtrW
CreateWindowExW
GetWindowLongPtrW
GetWindowThreadProcessId
RegisterClassExW
GetRawInputDeviceList
DispatchMessageW

api-ms-win-core-winrt-l1-1-0

RoInitialize
RoUninitialize

api-ms-win-core-synch-l1-2-0

WakeByAddressAll
WakeByAddressSingle
WaitOnAddress

ext-ms-win-ntuser-private-l1-1-1

ord2546

ext-ms-win-rtcore-ntuser-dpi-l1-2-0

SetThreadDpiAwarenessContext
GetWindowDpiAwarenessContext

coremessagingxp

CoreUICallReceive
CoreUICallCreateConversationHost
CoreUICallSend
CoreMsgCreateSession

microsoft.ui.composition.ossupport

SubscribeFeatureStateChangeNotification
RecordFeatureUsage
UnsubscribeFeatureStateChangeNotification

microsoft.internal.frameworkudk

CoreDragOperationFunctions_StartAsync
InputPrivates_InputSite_GetForInputSink
InputPrivates_GetActivationConfiguration

api-ms-win-crt-runtime-l1-1-0

abort
terminate
_initterm
_initterm_e
_seh_filter_dll
_cexit
_crt_atexit
_invalid_parameter_noinfo
_configure_narrow_argv
_initialize_narrow_environment
_errno
_invalid_parameter_noinfo_noreturn
_beginthreadex
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table

api-ms-win-crt-heap-l1-1-0

_free_base
_callnewh
_calloc_base
free
malloc

api-ms-win-crt-string-l1-1-0

iswspace
strcpy_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vsnprintf_s

microsoft.ui.input

InitializeDirectManipulationHookInProc

marshal

LegacyMarshalerQueryCompositionInputSinkLuid
LegacyMarshalerQueryCompositionInputQueueAndTransform
LegacyMarshalerDuplicateCompositionInputSink
LegacyMarshalerCloseCompositionInputSink

oleaut32

SysStringLen
GetErrorInfo
SetErrorInfo
SysAllocString
SysFreeString

api-ms-win-crt-math-l1-1-0

ceilf

Exports

Exports

AttachSystemInputSink
CreateInProcInputHost
DelegateCapturePointersInProc
DelegateInputInProc
DestroyInProcInputHost
EnableInputForWindowWithInProcInputHost
HandleDelegatedInputInProc
InitDManipHookInProc
InjectLiftedMouseWheelInput
InjectLiftedPointerWheelInput
LiftedDragStartAsync
NotifyInputSinkParented
NotifyInputSinkRemoved
NotifyInputSinkTransformChanged
RegisterManipulationThread
RegisterWindowWithInProcInputHost
SendMessageCallbackInProc
SetManipulationInputTarget
StopAndEndInertia
SuppressPointerIdForDragAndDrop
UndelegateInputInProc
UnregisterWindowWithInProcInputHost

Sections

.text
Size: 328KB - Virtual size: 326KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.InteractiveExperiences.Projection.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

19:72:2f:66:45:83:93:1b:3e:fc:7a:d6:5b:10:4d:16:be:32:74:f0:a6:0d:47:be:b8:16:4a:52:b9:ec:b2:88
Signer

Actual PE Digest

19:72:2f:66:45:83:93:1b:3e:fc:7a:d6:5b:10:4d:16:be:32:74:f0:a6:0d:47:be:b8:16:4a:52:b9:ec:b2:88

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.InteractiveExperiences.Projection.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Internal.FrameworkUdk.dll
.dll windows:10 windows x64 arch:x64

8eb9f99479de588ce24ba1897a06420e

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

43:be:e6:00:03:91:5e:30:f3:b8:47:96:cf:3c:4c:9e:3e:6d:1f:23:7e:33:35:bd:f9:35:3b:d3:97:40:77:e3
Signer

Actual PE Digest

43:be:e6:00:03:91:5e:30:f3:b8:47:96:cf:3c:4c:9e:3e:6d:1f:23:7e:33:35:bd:f9:35:3b:d3:97:40:77:e3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.Internal.FrameworkUdk.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

abort
_seh_filter_dll
_invalid_parameter_noinfo
terminate
_initterm_e
_errno
_invalid_parameter_noinfo_noreturn
_initterm
_initialize_narrow_environment
_set_errno
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_configure_narrow_argv

api-ms-win-crt-string-l1-1-0

wcscpy_s
strcpy_s
wcsnlen
iswspace
wcsncpy
strncpy_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s
__stdio_common_vswprintf_s
__stdio_common_vswprintf
__stdio_common_vsnprintf_s

api-ms-win-crt-convert-l1-1-0

strtol
wcstod

api-ms-win-crt-heap-l1-1-0

_free_base
malloc
realloc
_callnewh
_calloc_base
free

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW
FreeLibrary
LoadLibraryExA
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
GetProcAddress
GetModuleFileNameA

api-ms-win-core-synch-l1-1-0

CreateMutexExW
CreateEventExW
CreateSemaphoreExW
InitializeSRWLock
AcquireSRWLockShared
OpenSemaphoreW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
DeleteCriticalSection
ReleaseSemaphore
SetEvent
InitializeCriticalSectionEx
WaitForSingleObject
ReleaseMutex
TryAcquireSRWLockExclusive
WaitForSingleObjectEx
ReleaseSRWLockShared

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapAlloc
HeapFree

api-ms-win-core-errorhandling-l1-1-0

SetLastError
RaiseException
GetLastError

api-ms-win-core-processthreads-l1-1-0

OpenProcessToken
GetCurrentProcessId
TlsAlloc
GetCurrentThreadId
TlsFree
GetCurrentProcess
TlsSetValue
TlsGetValue

api-ms-win-core-localization-l1-2-0

FormatMessageW
SetProcessPreferredUILanguages

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
DebugBreak
OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory
RoUninitialize
RoInitialize

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringRawBuffer
WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference

api-ms-win-core-winrt-error-l1-1-0

RoTransformError
RoFailFastWithErrorContext
SetRestrictedErrorInfo
RoOriginateError

api-ms-win-core-winrt-error-l1-1-1

RoGetMatchingRestrictedErrorInfo

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-com-l1-1-0

CoGetMalloc
CoRevertToSelf
CoImpersonateClient
CoTaskMemFree
CoGetApartmentType
CoCreateInstance
CoCreateFreeThreadedMarshaler
CoTaskMemAlloc

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer

api-ms-win-core-featurestaging-l1-1-0

SubscribeFeatureStateChangeNotification
RecordFeatureError
RecordFeatureUsage
GetFeatureEnabledState
UnsubscribeFeatureStateChangeNotification

api-ms-win-core-featurestaging-l1-1-1

GetFeatureVariant

api-ms-win-security-base-l1-1-0

AccessCheck
DuplicateToken
GetTokenInformation
GetSidSubAuthority
GetSidSubAuthorityCount

api-ms-win-core-heap-l2-1-0

LocalFree
LocalAlloc

api-ms-win-security-sddl-l1-1-0

ConvertStringSecurityDescriptorToSecurityDescriptorW

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-security-provider-l1-1-0

GetSecurityInfo

api-ms-win-core-file-l1-1-0

GetFileAttributesW

ntdll

NtQueryWnfStateData
RtlSubscribeWnfStateChangeNotification
NtQuerySystemInformation
RtlGetDeviceFamilyInfoEnum
NtPowerInformation
RtlUnsubscribeWnfNotificationWaitForCompletion

profapi

ord114

api-ms-win-core-registry-l1-1-0

RegCloseKey
RegOpenKeyExW
RegGetValueW

rpcrt4

UuidToStringW
RpcStringFreeW
UuidCreate

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-sysinfo-l1-1-0

GetSystemInfo
GetSystemTimeAsFileTime

api-ms-win-core-registry-l2-1-0

RegOpenKeyW
RegEnumKeyW

api-ms-win-core-psapi-l1-1-0

K32GetModuleFileNameExW

api-ms-win-core-path-l1-1-0

PathCchCombine
PathCchRemoveFileSpec

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce
WakeAllConditionVariable
SleepConditionVariableSRW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead
InterlockedPushEntrySList
InterlockedFlushSList

api-ms-win-core-rtlsupport-l1-1-0

RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx

api-ms-win-core-fibers-l1-1-0

FlsAlloc
FlsGetValue
FlsSetValue
FlsFree

api-ms-win-core-util-l1-1-0

EncodePointer

bcp47langs

GetApplicationLanguages
GetFontFallbackLanguageList
LanguageListAsMuiForm

coremessaging

CoreUICreate

api-ms-win-appmodel-runtime-l1-1-1

GetPackagePathByFullName

api-ms-win-appmodel-runtime-l1-1-0

GetCurrentPackageFullName
PackageFamilyNameFromFullName

api-ms-win-appmodel-runtime-internal-l1-1-1

GetSystemMetadataPathForPackage

api-ms-win-rtcore-ntuser-window-l1-1-0

RemovePropW
PostThreadMessageW
SetPropW

dcomp

ord1040

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-memory-l1-1-0

VirtualQuery
VirtualProtect

oleaut32

SysStringLen
SetErrorInfo
SysFreeString
GetErrorInfo
SysAllocString

api-ms-win-crt-math-l1-1-0

pow
ceilf

Exports

Exports

AudioGraphSettingsExtension_SetUseSpatialAudioApi
BackButtonIntegration_InjectBackButtonPress
BackButtonIntegration_RegisterListener
BackButtonIntegration_UnregisterListener
Containment_GetChangeEnabled
CoreDragOperationFunctions_StartAsync
DCompPrivates_CreateColorContent
DCompPrivates_CreateCompositionBatchQuery
DCompPrivates_CreateSharedVisual
DCompPrivates_CreateSharedVisualHandle
DCompPrivates_OpenAndAttachSharedTarget
DCompPrivates_OpenSharedDCompositionObject
DCompPrivates_OpenSharedResourceHandle
DCompPrivates_ResizeDCompositionSurface
DCompPrivates_SetVisualRelativeSize
DCompPrivates_SetVisualSize
DisplayPrivates_CreateDisplayEvents
DisplayPrivates_DisplayConfigGetAdvancedColorInfo
DisplayPrivates_GetCurrentColorProfilePath
DisplayPrivates_RegisterStereoChangedListener
DisplayPrivates_UnregisterStereoChangedListener
DxPrivates_PartnerDeviceFromDevice
DxPrivates_SwapChainPartnerFromDxgiSwapChain
DxPrivates_WarpPalCreateExtensionFactory
DxPrivates_WarpPalGetDeviceCaps
DxPrivates_WarpPrivateAPIFromDevice
FinalUnhandledErrorDetected_RegisterHandler
FinalUnhandledErrorDetected_UnregisterHandler
FrameworkInputView_RegisterListener
FrameworkInputView_UnregisterListener
FrameworkUdk_Diagnostic
InitializeXamlDiagnosticsEx
InputPaneFramework_Advise
InputPaneFramework_RegisterListener
InputPaneFramework_UnregisterListener
InputPrivates_GetActivationConfiguration
InputPrivates_InputSite_GetForInputSink
MFMediaEngineExtension_DisableVisibilityHandling
MFMediaEngineExtension_GetCurrentMediaPlaybackItem
MFMediaEngineExtension_SetSourceFromMediaSource
MediaCaptureExtension_GetPreviewSource
MediaPlaybackDataSourceExtension_SendMediaPlaybackCommand
MediaPlaybackDataSourceExtension_SendPlaybackPositionChangeRequest
MediaPlaybackDataSourceExtension_SendPlaybackRateChangeRequest
MediaPlaybackDataSourceExtension_SendRepeatModeChangeRequest
MediaPlaybackListExtension_AddAutoRepeatChanged
MediaPlaybackListExtension_AddCurrentItemChanged
MediaPlaybackListExtension_RemoveAutoRepeatChanged
MediaPlaybackListExtension_RemoveCurrentItemChanged
MediaPlaybackSessionExtension_IsPlaybackRateSupported
MediaPlayerExtension_AddCastingRenderLocationChanged
MediaPlayerExtension_AddIsLoopingEnabledChanged
MediaPlayerExtension_DisableVisibilityHandling
MediaPlayerExtension_GetCurrentMediaPlaybackItem
MediaPlayerExtension_GetCurrentMediaPlaybackItem_Deprecated
MediaPlayerExtension_GetMediaPlayerCastingRenderLocation
MediaPlayerExtension_GetVideoSwapchainHandle
MediaPlayerExtension_RemoveCastingRenderLocationChanged
MediaPlayerExtension_RemoveIsLoopingEnabledChanged
Mui_GetFontFallbackLanguageList
Mui_PropagateApplicationLanguages
PowerNotifications_GetCompositeBatteryStatus
PowerNotifications_GetDischargeTime
PowerNotifications_GetDisplayStatus
PowerNotifications_GetEnergySaverStatus
PowerNotifications_GetPowerCondition
PowerNotifications_GetUserPresenceStatus
PowerNotifications_RegisterCompositeBatteryStatusChangedListener
PowerNotifications_RegisterDischargeTimeChangedListener
PowerNotifications_RegisterDisplayStatusChangedListener
PowerNotifications_RegisterEnergySaverStatusChangedListener
PowerNotifications_RegisterPowerConditionChangedListener
PowerNotifications_RegisterSystemIdleStatusChangedListener
PowerNotifications_RegisterUserPresenceStatusChangedListener
PowerNotifications_UnregisterCompositeBatteryStatusChangedListener
PowerNotifications_UnregisterDischargeTimeChangedListener
PowerNotifications_UnregisterDisplayStatusChangedListener
PowerNotifications_UnregisterEnergySaverStatusChangedListener
PowerNotifications_UnregisterPowerConditionChangedListener
PowerNotifications_UnregisterSystemIdleStatusChangedListener
PowerNotifications_UnregisterUserPresenceStatusChangedListener
PushNotifications_CloseChannel
PushNotifications_CreateChannelWithRemoteIdentifier
PushNotifications_GetFullTrustApplicationsWithChannels
PushNotifications_RegisterFullTrustApplication
PushNotifications_RegisterNotificationSinkForFullTrustApplication
PushNotifications_UnregisterFullTrustApplication
PushNotifications_UnregisterNotificationSinkForFullTrustApplication
ResourceManager_GetDefaultResourcePathForPackageFullName
TextAnalysis_CreateDWritePrivateTextAnalysisSourceProxy
TextAnalysis_GetContentReadingDirection
TextAnalysis_SetLocaleNameList
TextInputProxy_putInputSettings
TextInput_SetKeyboardSkin
TextInput_SetTextPrediction
Theming_TryEnableHostBackdropBrush
Theming_TrySetDarkTheme
TimedMetadataTrackExtension_AddCueEntered
TimedMetadataTrackExtension_RemoveCueEntered
ToastNotifications_GetHistory
ToastNotifications_PostToast
ToastNotifications_QuerySettings
ToastNotifications_RemoveAllToastsForApp
ToastNotifications_RemoveToast
ToastNotifications_RemoveToastsWithTagAndGroup
ToastNotifications_RetrieveAssets
ToastNotifications_UpdateNotificationData
VisualDiagnosticsPort_Register
VisualDiagnosticsPort_Unregister
WindowPositionChanged_RegisterListener
WindowPositionChanged_UnregisterListener
Windowing_GetDisplayIdFromMonitor
Windowing_GetIconFromIconId
Windowing_GetIconIdFromIcon
Windowing_GetMonitorFromDisplayId
Windowing_GetWindowFromWindowId
Windowing_GetWindowIdFromWindow

Sections

.text
Size: 684KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 260KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.UI.Composition.OSSupport.dll
.dll windows:10 windows x64 arch:x64

d36e81de483eebffba11d19e5bac3586

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ed:85:15:d0:c5:7c:91:70:21:c8:79:ca:20:ed:fb:26:8f:36:55:b1:b6:27:84:ad:5b:3b:5f:6b:d1:b6:66:00
Signer

Actual PE Digest

ed:85:15:d0:c5:7c:91:70:21:c8:79:ca:20:ed:fb:26:8f:36:55:b1:b6:27:84:ad:5b:3b:5f:6b:d1:b6:66:00

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.UI.Composition.OSSupport.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

abort
terminate
_initialize_onexit_table
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_errno
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf

kernel32

FlsAlloc
DeleteCriticalSection
InitializeCriticalSectionEx
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
SetLastError
ReleaseSemaphore
GetModuleHandleExW
WaitForSingleObject
GetCurrentThreadId
ReleaseMutex
FormatMessageW
GetLastError
OutputDebugStringW
WaitForSingleObjectEx
OpenSemaphoreW
CloseHandle
HeapAlloc
GetProcAddress
CreateMutexExW
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
DebugBreak
IsDebuggerPresent
RaiseException
RaiseFailFastException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
WideCharToMultiByte
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
LoadLibraryW
FreeLibrary
WakeAllConditionVariable
SleepConditionVariableSRW
QueryPerformanceCounter
GetSystemTimeAsFileTime
RtlUnwindEx
FlsGetValue
FlsSetValue
FlsFree

ntdll

NtQuerySystemInformation
RtlDeleteElementGenericTable
RtlInsertElementGenericTable
NtQueryObject
NtQueryValueKey
DbgPrompt
NtOpenKey
RtlLookupElementGenericTable
RtlEnumerateGenericTableWithoutSplaying
RtlInitializeGenericTable

api-ms-win-core-com-l1-1-0

CoCreateGuid

api-ms-win-crt-heap-l1-1-0

_calloc_base
_free_base

Exports

Exports

DbgPrompt_Onecore
EnableMouseInPointerForWindow
ExUuidCreate
GetFeatureEnabledState
GetFeatureVariant
GetLastError_Winbase
InitializeSListHead_Winbase
InterlockedFlushSList_Winbase
InterlockedPopEntrySList_Winbase
InterlockedPushEntrySList_Winbase
KeGetCurrentIrql
MicrosoftTelemetryAssertTriggeredArgs
MicrosoftTelemetryAssertTriggeredNoArgs
NtQueryObject_Ntdll
NtQuerySystemInformation_Onecore
RaiseException_Winbase
RaiseFailFastException_Winbase
RecordFeatureError
RecordFeatureUsage
RtlDeleteElementGenericTable_Onecore
RtlEnumerateGenericTableWithoutSplaying_Onecore
RtlInitializeGenericTable_Onecore
RtlInsertElementGenericTable_Onecore
RtlLookupElementGenericTable_Onecore
RtlNotifyFeatureUsage
RtlQueryFeatureConfiguration
SetLastError_Winbase
SetUnhandledExceptionFilter_Winbase
SubscribeFeatureStateChangeNotification
TerminateProcessOnMemoryExhaustion
UnhandledExceptionFilter_Winbase
UnsubscribeFeatureStateChangeNotification
WideCharToMultiByte_Winbase
ZwOpenKey
ZwQueryValueKey

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.UI.Input.dll
.dll windows:10 windows x64 arch:x64

ae7b5763993ba83f206f1e626da7d805

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

26:14:9c:f8:e1:2d:d3:f1:de:a4:87:02:0a:08:04:8f:33:5b:10:39:1b:54:d1:10:c7:46:15:37:4f:67:fe:d9
Signer

Actual PE Digest

26:14:9c:f8:e1:2d:d3:f1:de:a4:87:02:0a:08:04:8f:33:5b:10:39:1b:54:d1:10:c7:46:15:37:4f:67:fe:d9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.UI.Input.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_errno
_initterm
_initterm_e
abort
_cexit
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit

api-ms-win-crt-string-l1-1-0

wcscmp
iswspace

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vsnprintf_s

ntdll

RtlPcToFileHeader
RtlUnwindEx
RtlLookupFunctionEntry
RtlGetDeviceFamilyInfoEnum
RtlIsMultiSessionSku
strcpy_s
_wcsicmp

microsoft.internal.frameworkudk

Windowing_GetMonitorFromDisplayId
Containment_GetChangeEnabled
DCompPrivates_CreateSharedVisual
DCompPrivates_OpenSharedResourceHandle
DCompPrivates_OpenAndAttachSharedTarget
Windowing_GetDisplayIdFromMonitor
Windowing_GetWindowIdFromWindow
Theming_TryEnableHostBackdropBrush
DCompPrivates_OpenSharedDCompositionObject
DCompPrivates_CreateSharedVisualHandle
Windowing_GetWindowFromWindowId
DCompPrivates_SetVisualRelativeSize

microsoft.ui.composition.ossupport

UnsubscribeFeatureStateChangeNotification
RecordFeatureUsage
GetFeatureEnabledState
SubscribeFeatureStateChangeNotification
TerminateProcessOnMemoryExhaustion

marshal

SetLastError
LegacyMarshalerQueryCompositionInputSinkLuid
LegacyMarshalerCreateImplicitCompositionInputSink
LegacyMarshalerCloseCompositionInputSink
RaiseFailFastException
RaiseException
GetLastError
LegacyMarshalerCreateCompositionInputSink

api-ms-win-core-winrt-error-l1-1-0

RoTransformError
RoOriginateError
RoOriginateErrorW
SetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

IsErrorPropagationEnabled
RoGetMatchingRestrictedErrorInfo
RoReportFailedDelegate

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-winrt-string-l1-1-0

WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference
WindowsDuplicateString

coremessagingxp

CoreUICallCreateEndpointHost
CoreUICallReceive
CoreMsgCreateSession
WinUIGetDispatcherQueueForCurrentThread
CoreUICallSend
CoreUICallCreateConversationHost

api-ms-win-rtcore-ntuser-wmpointer-l1-1-0

GetPointerInfo
GetPointerDeviceRects
GetPointerInputTransform
GetPointerTouchInfo

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleA
LoadResource
GetModuleFileNameA
LoadStringA
LoadLibraryExA
FreeLibrary
SizeofResource
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleExW
GetModuleHandleW
LockResource

api-ms-win-core-synch-l1-2-0

InitOnceComplete
SleepConditionVariableSRW
InitOnceExecuteOnce
InitOnceBeginInitialize
WakeAllConditionVariable

api-ms-win-core-synch-l1-1-0

LeaveCriticalSection
OpenSemaphoreW
CreateMutexExW
AcquireSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
ReleaseSRWLockExclusive
CreateEventW
EnterCriticalSection
InitializeCriticalSectionEx
WaitForSingleObject
SetEvent
DeleteCriticalSection
ReleaseSemaphore
InitializeSRWLock
CreateSemaphoreExW
TryAcquireSRWLockExclusive
WaitForSingleObjectEx
ReleaseMutex
InitializeCriticalSection

api-ms-win-core-heap-l1-1-0

HeapFree
GetProcessHeap
HeapAlloc

api-ms-win-core-com-l1-1-0

CoTaskMemFree
CoTaskMemAlloc
CoCreateGuid
CoCreateFreeThreadedMarshaler

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventSetInformation
EventRegister
EventWriteTransfer

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCurrentThread

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
OutputDebugStringW
DebugBreak

api-ms-win-core-handle-l1-1-0

DuplicateHandle
CloseHandle

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW
FindResourceW

api-ms-win-core-registry-l1-1-0

RegQueryValueExW
RegGetValueW
RegOpenKeyExW

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
WaitForThreadpoolWaitCallbacks
SetThreadpoolTimer

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
GetSystemInfo
GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList
InitializeSListHead
InterlockedFlushSList

api-ms-win-core-fibers-l1-1-0

FlsAlloc
FlsGetValue
FlsSetValue
FlsFree

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureStackBackTrace

api-ms-win-core-com-l1-1-1

RoGetAgileReference

api-ms-win-core-processthreads-l1-1-1

GetProcessMitigationPolicy

api-ms-win-security-base-l1-1-0

AllocateLocallyUniqueId

user32

GetRawInputDeviceList
EnumChildWindows
GetDesktopWindow
ShowCursor
GetSystemMetrics
GetAsyncKeyState
GetWindowRect
KillTimer
GetMessageTime
SendInput
ReleaseCapture
InvalidateRect
GetForegroundWindow
SetTimer
TrackMouseEvent
SetWindowRgn
SetCursor
MapWindowPoints
EvaluateProximityToRect
SetWindowPos
RegisterWindowMessageW
GetClientRect
UnionRect
GetMenu
IsZoomed
SetWindowLongW
PostMessageW
GetCursorPos
WindowFromPoint
GetKeyState
GetMessagePos
SetActiveWindow
EnumDisplaySettingsW
ScreenToClient
PtInRect
SendMessageW
SetLayeredWindowAttributes
GetWindowLongW
GetMessageExtraInfo
DestroyCursor
LoadCursorW
EvaluateProximityToPolygon
RemovePropW
ShowWindow
GetPropW
GetAncestor
GetWindowThreadProcessId
IsWindow
SetPropW
SetCapture
DestroyWindow
CreateWindowExW
GetWindowLongPtrW
AdjustWindowRectEx
IsIconic
DefWindowProcW
EnableWindow
IsWindowVisible
IsWindowEnabled
SetWindowLongPtrW
RegisterClassExW
PeekMessageW
GetFocus
SetFocus
GetKeyboardState
GetClassNameW
MonitorFromWindow
GetWindowTextW
GetMonitorInfoW

kernel32

MulDiv
AppPolicyGetWindowingModel

gdi32

CreateRectRgn
SetRectRgn
CombineRgn
DeleteObject

microsoft.inputstatemanager

EnableInputForWindowWithInProcInputHost
InjectLiftedPointerWheelInput
InjectLiftedMouseWheelInput
LiftedDragStartAsync
RegisterWindowWithInProcInputHost
UnregisterWindowWithInProcInputHost
SuppressPointerIdForDragAndDrop

dcomp

ord1038
DCompositionCreateDevice3

microsoft.ui.windowing.core

RegisterWindowFeature
CreateMessageFilter
GetFeatureInstanceData
SetFeatureInstanceData
AttachWindowFeature
AddMessageRangeToFilter
ContentNodeManagerCreate
ContentPreTranslateMessage
DefFeatureProc
DetachWindowFeature
UnregisterWindowFeature
DestroyMessageFilter
GetWindowFeature

api-ms-win-crt-heap-l1-1-0

realloc
_callnewh
malloc
_calloc_base
_free_base
free

api-ms-win-crt-math-l1-1-0

sqrt
_isnan
_finite
atan2
ceilf
cos
floorf
roundf
sin
sqrtf

api-ms-win-core-memory-l1-1-0

VirtualQuery
VirtualProtect

oleaut32

SysAllocString
SysFreeString
SysStringLen
GetErrorInfo
SetErrorInfo

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
InitializeDirectManipulationHookInProc
LiftedInputCapturePointerIdForDragAndDrop

Sections

.text
Size: 812KB - Virtual size: 810KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 348KB - Virtual size: 346KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.UI.Text.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:05:b5:d9:72:90:55:08:fd:ab:a9:8d:50:23:17:de:20:82:56:22:8d:af:1a:08:18:da:38:9f:2b:97:3e:c0
Signer

Actual PE Digest

45:05:b5:d9:72:90:55:08:fd:ab:a9:8d:50:23:17:de:20:82:56:22:8d:af:1a:08:18:da:38:9f:2b:97:3e:c0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.UI.Windowing.Core.dll
.dll windows:10 windows x64 arch:x64

54510a72d96cfb3ae0c0996a82ebd3e1

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

74:f2:ed:fc:dd:1c:b6:ff:5c:14:9f:60:9b:46:97:9f:26:13:2f:b5:e6:65:d4:cc:76:92:c0:0a:5b:0d:ba:cd
Signer

Actual PE Digest

74:f2:ed:fc:dd:1c:b6:ff:5c:14:9f:60:9b:46:97:9f:26:13:2f:b5:e6:65:d4:cc:76:92:c0:0a:5b:0d:ba:cd

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.UI.Windowing.Core.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

abort
_errno
_crt_atexit
_execute_onexit_table
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_cexit
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_initterm_e
_initterm
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
__stdio_common_vswprintf

api-ms-win-crt-convert-l1-1-0

wcstol

coremessagingxp

CoreMsgCreateSession

api-ms-win-core-apiquery-l2-1-0

IsApiSetImplemented

api-ms-win-core-libraryloader-l1-2-0

SizeofResource
FindResourceExW
LoadResource
LockResource
GetProcAddress
LoadStringW
GetModuleHandleW
GetModuleFileNameA
FreeLibrary
GetModuleHandleExW
DisableThreadLibraryCalls
LoadStringA
LoadLibraryExW

api-ms-win-core-synch-l1-1-0

OpenSemaphoreW
WaitForSingleObjectEx
CreateSemaphoreExW
CreateMutexExW
AcquireSRWLockExclusive
EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
ReleaseSRWLockExclusive
InitializeSRWLock
WaitForSingleObject
ReleaseMutex
ReleaseSemaphore
DeleteCriticalSection
TryAcquireSRWLockExclusive

api-ms-win-core-heap-l1-1-0

HeapAlloc
GetProcessHeap
HeapFree

api-ms-win-core-errorhandling-l1-1-0

SetLastError
GetLastError
RaiseException

api-ms-win-core-processthreads-l1-1-0

GetCurrentThread
TlsFree
GetCurrentProcessId
TlsAlloc
TlsSetValue
TlsGetValue
GetCurrentProcess
GetCurrentThreadId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-winrt-string-l1-1-0

WindowsPreallocateStringBuffer
WindowsIsStringEmpty
WindowsDeleteStringBuffer
WindowsCreateString
WindowsPromoteStringBuffer
WindowsGetStringRawBuffer
WindowsCreateStringReference

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize
WakeAllConditionVariable
SleepConditionVariableSRW
InitOnceComplete

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoCreateFreeThreadedMarshaler

api-ms-win-eventing-provider-l1-1-0

EventSetInformation
EventWriteTransfer
EventUnregister
EventRegister

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW
SetRestrictedErrorInfo
RoOriginateError

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait

api-ms-win-core-largeinteger-l1-1-0

MulDiv

api-ms-win-core-registry-l1-1-0

RegGetValueW

api-ms-win-core-winrt-error-l1-1-1

RoGetMatchingRestrictedErrorInfo

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

rpcrt4

RpcStringFreeW
UuidToStringW

api-ms-win-core-atoms-l1-1-0

GlobalAddAtomW
GlobalDeleteAtom
FindAtomW

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList
InitializeSListHead

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureStackBackTrace
RtlPcToFileHeader
RtlUnwindEx
RtlLookupFunctionEntry

api-ms-win-core-fibers-l1-1-0

FlsGetValue
FlsFree
FlsSetValue
FlsAlloc

api-ms-win-core-util-l1-1-0

EncodePointer

user32

CreateWindowExW
MonitorFromWindow
SetThreadDpiAwarenessContext
SetWindowLongW
GetWindowLongW
GetWindowTextLengthW
GetWindowTextW
TranslateAcceleratorW
SetLayeredWindowAttributes
GetWindowLongPtrW
CallWindowProcW
SetWindowLongPtrW
DefWindowProcW
GetPropW
DestroyWindow
SetPropW
RegisterClassExW
GetClassInfoExW
LoadCursorW
CopyRect
SetWindowPos
IsZoomed
GetKeyboardLayout
GetWindowRect
GetSystemMetricsForDpi
InflateRect
FindWindowExW
GetWindowThreadProcessId
CopyImage
ScreenToClient
ClientToScreen
VkKeyScanExW
IsRectEmpty
GetKeyState
CopyAcceleratorTableW
ord2557
GetSysColor
CreateAcceleratorTableW
EndDeferWindowPos
DestroyAcceleratorTable
GetForegroundWindow
SendMessageW
DeferWindowPos
BeginDeferWindowPos
MapWindowPoints
GetClassLongPtrW
LoadIconW
GetWindowDpiAwarenessContext
RegisterWindowMessageW
DrawIconEx
GetClientRect

api-ms-win-rtcore-ntuser-private-l1-1-0

IsWindowInDestroy

microsoft.internal.frameworkudk

Containment_GetChangeEnabled

api-ms-win-crt-heap-l1-1-0

_callnewh
free
_free_base
malloc
_calloc_base
calloc

api-ms-win-crt-string-l1-1-0

strcpy_s

api-ms-win-crt-math-l1-1-0

ceilf

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

AddMessageFilterToFilter
AddMessageListToFilter
AddMessageNameToFilter
AddMessageRangeToFilter
AddMessageToFilter
AttachWindowFeature
ContentNodeManagerCreate
ContentPreTranslateMessage
CreateFeatureWindow
CreateMessageFilter
DefFeatureProc
DestroyMessageFilter
DetachWindowFeature
DllGetActivationFactory
GetFeatureInstanceData
GetFeatureStyles
GetFeatureTypeData
GetWindowFeature
RegisterFeatureWindowClass
RegisterWindowFeature
SetFeatureInstanceData
SetFeatureStyles
UnregisterWindowFeature

Sections

.text
Size: 284KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.UI.Windowing.dll
.dll windows:10 windows x64 arch:x64

5805dd43839a67befd6ec9a301032438

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f5:3b:4c:d5:67:1c:62:40:a0:fe:38:ef:cd:23:9d:e6:5a:ba:63:23:0a:53:7c:31:a5:df:7f:6c:c0:19:b8:67
Signer

Actual PE Digest

f5:3b:4c:d5:67:1c:62:40:a0:fe:38:ef:cd:23:9d:e6:5a:ba:63:23:0a:53:7c:31:a5:df:7f:6c:c0:19:b8:67

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.UI.Windowing.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
abort
_errno
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_cexit
_configure_narrow_argv
_seh_filter_dll
terminate
_initterm_e
_initterm
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
__stdio_common_vswprintf

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameA
GetModuleHandleW
LoadStringA
DisableThreadLibraryCalls
LoadLibraryExW
FreeLibrary
GetProcAddress
GetModuleHandleExW

api-ms-win-core-synch-l1-1-0

InitializeSRWLock
CreateSemaphoreExW
TryAcquireSRWLockExclusive
ReleaseSRWLockExclusive
WaitForSingleObjectEx
InitializeCriticalSection
CreateMutexExW
AcquireSRWLockExclusive
ReleaseMutex
ReleaseSRWLockShared
WaitForSingleObject
ReleaseSemaphore
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
AcquireSRWLockShared
OpenSemaphoreW

api-ms-win-core-heap-l1-1-0

HeapFree
HeapAlloc
GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

RaiseException
SetLastError
GetLastError

api-ms-win-core-processthreads-l1-1-0

TlsGetValue
TlsFree
GetCurrentProcessId
TlsAlloc
GetCurrentThread
GetCurrentThreadId
TlsSetValue
GetStartupInfoW

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-winrt-string-l1-1-0

WindowsPromoteStringBuffer
WindowsCreateString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsPreallocateStringBuffer
WindowsDeleteStringBuffer

api-ms-win-core-sysinfo-l1-2-0

VerSetConditionMask

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW

api-ms-win-core-com-l1-1-0

CoCreateInstance
CoTaskMemAlloc
CoCreateFreeThreadedMarshaler

api-ms-win-ntuser-sysparams-l1-1-0

EnumDisplayMonitors
GetMonitorInfoW

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventSetInformation
EventRegister
EventWriteTransfer

api-ms-win-core-synch-l1-2-0

InitOnceComplete
InitOnceBeginInitialize
WakeAllConditionVariable
InitOnceExecuteOnce
SleepConditionVariableSRW
InitOnceInitialize

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList
InitializeSListHead

api-ms-win-core-rtlsupport-l1-1-0

RtlPcToFileHeader
RtlCaptureStackBackTrace
RtlUnwindEx
RtlLookupFunctionEntry

api-ms-win-core-fibers-l1-1-0

FlsGetValue
FlsAlloc
FlsSetValue
FlsFree

api-ms-win-core-util-l1-1-0

EncodePointer

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

user32

GetWindowPlacement
SetWindowPos
ShowWindow
SetWindowPlacement
IsWindowEnabled
SendNotifyMessageW
SetWindowTextW
EnableWindow
DestroyWindow
GetAncestor
GetDesktopWindow
GetClientRect
GetWindowRect
GetWindow
LoadImageW
IsIconic
RegisterWindowMessageW
MonitorFromRect
SendMessageW
IsZoomed
GetWindowLongW
GetWindowTextW
GetWindowTextLengthW
OffsetRect
GetWindowThreadProcessId
LoadCursorW
GetSystemMenu
IsWindow
EnableMenuItem
MonitorFromPoint
LoadIconW
MonitorFromWindow
GetDpiForWindow

api-ms-win-rtcore-ntuser-private-l1-1-0

IsWindowInDestroy

microsoft.ui.windowing.core

RegisterWindowFeature
DefFeatureProc
SetFeatureStyles
AttachWindowFeature
DetachWindowFeature
GetWindowFeature
SetFeatureInstanceData
UnregisterWindowFeature
RegisterFeatureWindowClass
GetFeatureInstanceData
CreateFeatureWindow

api-ms-win-crt-heap-l1-1-0

free
calloc
malloc
_free_base
_calloc_base
_callnewh

api-ms-win-crt-string-l1-1-0

strcpy_s

api-ms-win-crt-math-l1-1-0

pow
ceilf
sqrt
round

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

DllGetActivationFactory

Sections

.text
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.UI.Xaml.Controls.dll
.dll windows:6 windows x64 arch:x64

d36790f8d2a9faaee11063271c87b4a1

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

74:2d:99:af:bd:75:05:5c:e9:3c:73:7b:08:c2:95:30:aa:e6:57:4e:56:5a:00:30:11:da:be:27:34:87:5d:d9
Signer

Actual PE Digest

74:2d:99:af:bd:75:05:5c:e9:3c:73:7b:08:c2:95:30:aa:e6:57:4e:56:5a:00:30:11:da:be:27:34:87:5d:d9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\BuildOutput\obj\amd64fre\controls\dev\dll\Microsoft.UI.Xaml.Controls.pdb

Imports

user32

IsWindow
DestroyWindow
ClientToScreen
CreateWindowExW
GetSystemMetrics
DefWindowProcW
FindWindowExA
RegisterClassW
GetWindow

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetCurrentThreadId

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-synch-l1-1-0

ReleaseSemaphore
ReleaseMutex
CreateEventW
WaitForSingleObjectEx
WaitForSingleObject
AcquireSRWLockExclusive
CreateSemaphoreExW
CreateMutexExW
SetEvent
ReleaseSRWLockExclusive
OpenSemaphoreW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventWriteTransfer
EventSetInformation
EventRegister

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-localization-l1-2-0

GetUserDefaultLocaleName
FormatMessageW

api-ms-win-core-heap-l1-1-0

HeapAlloc
HeapFree
GetProcessHeap

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW
GetModuleHandleExW
GetProcAddress
DisableThreadLibraryCalls
GetModuleFileNameA

api-ms-win-core-errorhandling-l1-1-0

GetLastError
SetLastError

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolWait
CloseThreadpoolTimer
SetThreadpoolTimer
CreateThreadpoolTimer
TrySubmitThreadpoolCallback
CloseThreadpoolWait
SetThreadpoolWait

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-core-string-l1-1-0

CompareStringOrdinal
MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-com-l1-1-0

CoGetObjectContext
CoCreateInstance
CoGetApartmentType
CoTaskMemFree
CoCreateGuid
CoTaskMemAlloc
CoCreateFreeThreadedMarshaler

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringRawBuffer

api-ms-win-core-registry-l1-1-0

RegGetValueW

microsoft.internal.frameworkudk

Containment_GetChangeEnabled

api-ms-win-core-featurestaging-l1-1-0

RecordFeatureUsage
UnsubscribeFeatureStateChangeNotification
SubscribeFeatureStateChangeNotification

d2d1

ord1

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initialize_onexit_table
_wassert
abort
_invalid_parameter_noinfo
_errno
_invalid_parameter_noinfo_noreturn
terminate

api-ms-win-crt-string-l1-1-0

wcsnlen
wcsncmp
_wcsdup
iswspace
_wcsicmp
towupper
strcpy_s

api-ms-win-crt-convert-l1-1-0

wcstof
_wtoi
wcstoul

api-ms-win-crt-math-l1-1-0

sqrt
_fdclass
atan2
sin
ceil
roundf
powf
pow
log
floorf
round
_dclass
floor
nextafterf
ceilf
cos

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
__stdio_common_vswprintf

api-ms-win-crt-heap-l1-1-0

realloc
_callnewh
free
malloc
calloc

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func
___mb_cur_max_func
__pctype_func
___lc_locale_name_func
___lc_collate_cp_func
_unlock_locales
_lock_locales
setlocale

kernel32

CompareStringEx
LCMapStringEx
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
DecodePointer
EncodePointer
TryAcquireSRWLockExclusive
InitOnceComplete
InitOnceBeginInitialize
GetStringTypeW
SwitchToThread
RaiseException
RtlPcToFileHeader
InitializeSListHead
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
GetCurrentPackageInfo
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW

oleaut32

SysAllocString
SysStringLen
SetErrorInfo
GetErrorInfo
SysFreeString

Exports

Exports

DeinitializeMUXC
DllCanUnloadNow
DllGetActivationFactory
DllMain
SendTelemetryOnSuspend

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.UI.Xaml.Controls.pri
Microsoft.UI.Xaml.Internal.dll
.dll windows:6 windows x64 arch:x64

ae70ad5d841692ccda5faccf1441c47c

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a4:62:14:d6:58:1c:59:1e:74:e8:b3:77:c8:21:39:ff:b8:2d:ab:6f:88:13:02:9e:0a:05:2e:f7:5c:bf:14:41
Signer

Actual PE Digest

a4:62:14:d6:58:1c:59:1e:74:e8:b3:77:c8:21:39:ff:b8:2d:ab:6f:88:13:02:9e:0a:05:2e:f7:5c:bf:14:41

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\b\Obj\x64fre\Microsoft.UI.Xaml.Internal\Microsoft.UI.Xaml.Internal\Microsoft.UI.Xaml.Internal.pdb

Imports

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
RaiseException
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RtlPcToFileHeader
MultiByteToWideChar

api-ms-win-crt-runtime-l1-1-0

abort
_configure_narrow_argv
terminate
_initterm
_initterm_e
_execute_onexit_table
_initialize_narrow_environment
_cexit
_initialize_onexit_table
_seh_filter_dll

api-ms-win-crt-heap-l1-1-0

calloc
free
malloc

api-ms-win-crt-string-l1-1-0

strcpy_s
wcsncmp

oleaut32

SysFreeString

api-ms-win-core-winrt-string-l1-1-0

WindowsDeleteString
WindowsPreallocateStringBuffer
WindowsPromoteStringBuffer
WindowsDeleteStringBuffer

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo
GetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException

Exports

Exports

ColorHelper_ToDisplayNameId
IsOrientationSupportedLegacy
LsAllocMemory
LsAssert
LsCompressSubline
LsCreateContext
LsCreateLine
LsCreateLineGivenBreak
LsCreateParaBreakingSession
LsDebugViewLine
LsDebugViewSubline
LsDestroyBreakRecord
LsDestroyContext
LsDestroyLine
LsDestroyMemory
LsDestroyParaBreakingSession
LsDestroySublineIteratorBidi
LsDisplayLine
LsDisplaySubline
LsDuplicateBreakRecord
LsEnumLine
LsEnumSubline
LsExpandSubline
LsFindMasterSubline
LsFinishCurrentSubline
LsGetHihLsimethods
LsGetInlineBlockLsimethods
LsGetLineBreaks
LsGetMathLsimethods
LsGetMinMaxDurUntilHardBreak
LsGetNextDnodeInSublineBidi
LsGetNextSpanSubline
LsGetPenaltyModule
LsGetReverseLsimethods
LsGetRubyLsimethods
LsGetStretchabilityForLine
LsGetTatenakayokoLsimethods
LsGetVRubyLsimethods
LsGetWarichuLsimethods
LsLwMultDivR
LsMatchPresSubline
LsModifyLineHeight
LsNewSublineIteratorBidi
LsNotReached
LsPointUV2FromPointUV1
LsPointXYFromPointUV
LsQueryCpPpointSubline
LsQueryEnumAutonum
LsQueryEnumBorderDnode
LsQueryEnumCharRunArrays
LsQueryEnumDnode
LsQueryEnumFrontierDnode
LsQueryEnumGlyphRunArrays
LsQueryEnumHih
LsQueryEnumInlineBlock
LsQueryEnumLine
LsQueryEnumMathAccent
LsQueryEnumMathBox
LsQueryEnumMathBoxedFormula
LsQueryEnumMathDelimiters
LsQueryEnumMathDelimitersWithSeparators
LsQueryEnumMathDelimitersWithSeparatorsPart
LsQueryEnumMathEquation
LsQueryEnumMathEquationArray
LsQueryEnumMathFraction
LsQueryEnumMathFunctionApply
LsQueryEnumMathGeneral
LsQueryEnumMathLeftSubSuperScript
LsQueryEnumMathList
LsQueryEnumMathLowerLimit
LsQueryEnumMathMarshal
LsQueryEnumMathMatrix
LsQueryEnumMathMatrixCell
LsQueryEnumMathMatrixColumn
LsQueryEnumMathMatrixRow
LsQueryEnumMathNaryOperator
LsQueryEnumMathOperatorCharacter
LsQueryEnumMathOverBar
LsQueryEnumMathPhantom
LsQueryEnumMathRadical
LsQueryEnumMathSlashedFraction
LsQueryEnumMathStack
LsQueryEnumMathStretchStack
LsQueryEnumMathSubScript
LsQueryEnumMathSubSuperScript
LsQueryEnumMathSuperScript
LsQueryEnumMathUnderBar
LsQueryEnumMathUpperLimit
LsQueryEnumMathZone
LsQueryEnumPenDnode
LsQueryEnumRealDnode
LsQueryEnumReverse
LsQueryEnumRuby
LsQueryEnumSubline
LsQueryEnumTab
LsQueryEnumTatenakayoko
LsQueryEnumText
LsQueryEnumVRuby
LsQueryEnumWarichu
LsQueryLineCpPpoint
LsQueryLineDown
LsQueryLineDup
LsQueryLineMaxDepth
LsQueryLinePointPcp
LsQueryLinePointToSpan
LsQueryLineUp
LsQueryLineVisibilityWord
LsQueryLineVisibleRectangle
LsQueryNumberSpanBoxes
LsQueryPointPcpSubline
LsQuerySpanBoxes
LsQuerySpanInfo
LsQuerySpanTotalRelativeOffset
LsQuerySublineDown
LsQuerySublineUp
LsQueryTextCellDetails
LsReallocMemory
LsSetDebugFlags
LsSqueezeSubline
LsTransformRectangle
LsUpdateBreakRecord
LsdnDistribute
LsdnFinishByCurrentPosition
LsdnFinishSimple
LsdnFinishWordRegular
LsdnFinishWordRegularAddAdvancePen
LsdnGetDup
LsdnModifyParaEnding
LsdnQueryPenNode
LsdnResetObjDim
LsdnResetPenNode
LsdnSetAbsBaseLine
LsdnSetRigidDup
LsmsrvFIsOperator
LsmsrvGetBreakingQualityForOperatorCharacter
LsmsrvGetBuildupClass
LsmsrvGetSpacing
LsmsrvGetSpacingClassAsDifferential
LsmsrvGetSpacingClassAsMathOp
LsmsrvGetSpacingClassAsSubformula
LsmsrvGetSpacingClassAsText
LsmsrvGetSpacingClassForOperatorCharacter
LsmsrvGetSpacingClassForRegularFunction
LssbDistributeInSubline
LssbFDoneDisplay
LssbFDonePresSubline
LssbGetDupSubline
LssbGetDurTrailInSubline
LssbGetDurTrailWithPensInSubline
LssbGetNumberDnodesInSubline
LssbGetObjDimSubline
LssbGetPlsrunsFromSubline
LssbGetVisibleDcpInSubline
LsusrvCanBreakAfterChar
LsusrvCanBreakBeforeChar
LsusrvCompOnRun
LsusrvCompSpace
LsusrvExpOnRun
LsusrvExpSpace
LsusrvGetBreakingClass
LsusrvGetBreakingClassForDictionary
LsusrvGetBreakingInfo
LsusrvGetCharCompInfoFullMixed
LsusrvGetCharExpansionInfoFullMixed
LsusrvGetCompressionInfo
LsusrvGetExpanInfo
LsusrvGetGlyphCompInfoFullMixed
LsusrvGetGlyphExpansionInfoFullMixed
LsusrvGetModWidthClassWarichuCloseParen
LsusrvGetModWidthClassWarichuOpenParen
LsusrvGetModWidthClasses
LsusrvGetModWidthPairsInfo
LsusrvGetNumberBreakingUnitsClasses
LsusrvGetNumberCompUnits
LsusrvGetNumberExpanUnits
LsusrvGetNumberModPairUnits
LsusrvGetNumberModWidthClasses
LsusrvGetNumberOfPriorities
LsusrvModWidthOnRun
LsusrvModWidthSpace
dvl
dvs
dvsq

Sections

.text
Size: 714KB - Virtual size: 714KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.UI.Xaml.Phone.dll
.dll windows:10 windows x64 arch:x64

b331a2e33631fe425fd6035eb74b2830

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6d:d5:ff:da:4f:3d:71:f0:6f:d9:62:b2:d2:c9:c6:15:a1:1f:bd:f7:75:3b:8a:a3:e3:82:f1:b8:39:5a:79:01
Signer

Actual PE Digest

6d:d5:ff:da:4f:3d:71:f0:6f:d9:62:b2:d2:c9:c6:15:a1:1f:bd:f7:75:3b:8a:a3:e3:82:f1:b8:39:5a:79:01

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\BuildOutput\obj\amd64fre\dxaml\xcp\dxaml\dllsrv\exts\phone\Microsoft.UI.Xaml.Phone.pdb

Imports

kernel32

CloseHandle
HeapAlloc
GetProcAddress
CreateMutexExW
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
DebugBreak
IsDebuggerPresent
DisableThreadLibraryCalls
DecodePointer
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WaitForSingleObjectEx
ReleaseSRWLockShared
AcquireSRWLockShared
RtlCaptureContext
RaiseException
RaiseFailFastException
OutputDebugStringW
GetLastError
FormatMessageW
OpenSemaphoreW
ReleaseMutex
GetCurrentThreadId
WaitForSingleObject
GetModuleHandleExW
ReleaseSemaphore
SetLastError
HeapFree
CreateSemaphoreExW
EncodePointer
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
RtlPcToFileHeader
InterlockedFlushSList
RtlUnwindEx
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
RtlCaptureStackBackTrace
GetSystemTimeAsFileTime
LoadLibraryW
LoadLibraryExW
FreeLibrary
FindResourceExW
LoadResource
LockResource
InitOnceExecuteOnce
InitializeSRWLock
SetThreadpoolTimer
CloseThreadpoolTimer
CreateThreadpoolTimer
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
WakeAllConditionVariable
SleepConditionVariableSRW
QueryPerformanceCounter
InitializeSListHead
TryAcquireSRWLockExclusive
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
LCMapStringEx

advapi32

EventWriteTransfer
TraceEvent
RegGetValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
EventSetInformation
EventRegister
EventUnregister

ole32

CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoGetApartmentType
StringFromGUID2
CoTaskMemAlloc

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError
SetRestrictedErrorInfo
RoOriginateErrorW
RoTransformError

api-ms-win-core-winrt-string-l1-1-0

WindowsConcatString
WindowsIsStringEmpty
WindowsCompareStringOrdinal
WindowsDuplicateString
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference
WindowsStringHasEmbeddedNull

api-ms-win-core-winrt-l1-1-0

RoActivateInstance
RoGetActivationFactory

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_crt_atexit
_cexit
_initialize_narrow_environment
_register_onexit_function
_initialize_onexit_table
abort
_invoke_watson
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_invalid_parameter_noinfo_noreturn
_errno
terminate
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vsprintf_s

api-ms-win-crt-heap-l1-1-0

free
realloc
calloc
malloc

api-ms-win-crt-math-l1-1-0

frexp
ceilf
floor

api-ms-win-crt-string-l1-1-0

strcspn
wcsnlen
strcpy_s
_wcsdup
wcsncmp

api-ms-win-crt-locale-l1-1-0

_unlock_locales
localeconv
__pctype_func
setlocale
_lock_locales
___mb_cur_max_func
___lc_codepage_func
___lc_locale_name_func

api-ms-win-core-winrt-error-l1-1-1

RoClearError

microsoft.internal.frameworkudk

Mui_PropagateApplicationLanguages

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
GetDependencyLocatorStorage
SendTelemetryOnSuspend
XamlControlsGetDatePickerSelection
XamlControlsGetListPickerSelection
XamlControlsGetTimePickerSelection
XamlControlsTestHookCreateLoopingSelector
XamlTestHookFreePhoneResourceLibrary

Sections

.text
Size: 800KB - Virtual size: 800KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.UI.Xaml.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

41:99:0f:7c:46:5f:e5:41:31:a5:15:50:20:f6:dc:8e:1f:35:69:16:47:c6:dd:98:d8:0f:4d:4f:37:83:81:3c
Signer

Actual PE Digest

41:99:0f:7c:46:5f:e5:41:31:a5:15:50:20:f6:dc:8e:1f:35:69:16:47:c6:dd:98:d8:0f:4d:4f:37:83:81:3c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.UI.Xaml/Assets/NoiseAsset_256x256_PNG.png
.png
Microsoft.UI.dll
.dll windows:10 windows x64 arch:x64

7bbccc2e321bf06409cca6bdf2313816

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:07:6c:5a:cd:ed:10:61:f9:da:a8:62:30:8c:f6:dc:ef:d5:56:28:9d:93:25:f6:98:a4:5a:02:44:ef:fe:84
Signer

Actual PE Digest

61:07:6c:5a:cd:ed:10:61:f9:da:a8:62:30:8c:f6:dc:ef:d5:56:28:9d:93:25:f6:98:a4:5a:02:44:ef:fe:84

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.UI.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_errno
_crt_atexit
_configure_narrow_argv
_initialize_narrow_environment
terminate
_execute_onexit_table
_seh_filter_dll
_initterm_e
_invalid_parameter_noinfo
_register_onexit_function
_cexit
_initterm
abort

api-ms-win-crt-string-l1-1-0

iswspace
strcpy_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vsnprintf_s

api-ms-win-core-heap-l1-1-0

HeapAlloc
GetProcessHeap
HeapFree

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

DebugBreak
OutputDebugStringW
IsDebuggerPresent

api-ms-win-core-errorhandling-l1-1-0

SetLastError
RaiseException
GetLastError

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionEx
DeleteCriticalSection
WaitForSingleObject
WaitForSingleObjectEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
CreateSemaphoreExW
ReleaseMutex
CreateMutexExW
OpenSemaphoreW
ReleaseSemaphore

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary
GetProcAddress
GetModuleHandleExW
GetModuleFileNameA
LoadLibraryExA
GetModuleHandleW

api-ms-win-core-synch-l1-2-0

InitOnceComplete
SleepConditionVariableSRW
InitOnceBeginInitialize
WakeAllConditionVariable

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError
RoFailFastWithErrorContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemInfo
GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList
InitializeSListHead

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx

api-ms-win-core-fibers-l1-1-0

FlsGetValue
FlsSetValue
FlsAlloc
FlsFree

api-ms-win-core-util-l1-1-0

EncodePointer

ext-ms-win-rtcore-ntuser-sysparams-l1-1-0

SystemParametersInfoW

api-ms-win-crt-heap-l1-1-0

_calloc_base
_callnewh
malloc
free
_free_base

api-ms-win-core-memory-l1-1-0

VirtualQuery
VirtualProtect

oleaut32

SysStringLen
SysFreeString
GetErrorInfo
SysAllocString
SetErrorInfo

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

api-ms-win-core-com-l1-1-0

CoCreateInstance
CoTaskMemAlloc
CoCreateFreeThreadedMarshaler

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.UI.winmd
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Web.WebView2.Core.dll
.dll windows:6 windows x64 arch:x64

5bc1a8d8d071db8d34931dcaff94aed8

Code Sign

33:00:00:03:3c:2b:0a:49:d9:d2:91:7e:ac:00:00:00:00:03:3c
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/02/2023, 20:10

Not After

31/01/2024, 20:10

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d1:03:65:a9:d8:33:68:c8:fe:6e:c8:92:f7:42:7f:60:7f:b5:ec:ad:fd:a5:cb:23:ff:b3:69:1c:a4:ad:57:1d
Signer

Actual PE Digest

d1:03:65:a9:d8:33:68:c8:fe:6e:c8:92:f7:42:7f:60:7f:b5:ec:ad:fd:a5:cb:23:ff:b3:69:1c:a4:ad:57:1d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.Web.WebView2.Core.pdb

Imports

kernel32

OutputDebugStringW
GetCurrentThreadId
FormatMessageW
IsDebuggerPresent
SetLastError
GetLastError
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
ReleaseSemaphore
GetModuleHandleExW
WaitForSingleObject
ReleaseMutex
WaitForSingleObjectEx
OpenSemaphoreW
CloseHandle
HeapAlloc
GetProcAddress
CreateMutexExW
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
DebugBreak
DecodePointer
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitOnceExecuteOnce
EncodePointer
ReleaseSRWLockShared
AcquireSRWLockShared
GetFileAttributesW
CreateFileW
OutputDebugStringA
GetModuleFileNameW
LoadLibraryExW
LoadLibraryW
FreeLibrary
GetEnvironmentVariableW
InterlockedPushEntrySList
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
CreateEventW
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
IsProcessorFeaturePresent
InterlockedFlushSList
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RaiseException
RtlPcToFileHeader
TlsAlloc
TlsGetValue
TlsSetValue
WideCharToMultiByte
MultiByteToWideChar
TlsFree

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
CoCreateFreeThreadedMarshaler

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError
RoOriginateErrorW

api-ms-win-core-winrt-string-l1-1-0

WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsStringHasEmbeddedNull

api-ms-win-shcore-stream-winrt-l1-1-0

CreateRandomAccessStreamOverStream
CreateStreamOverRandomAccessStream

oleaut32

SysAllocString
GetErrorInfo
SysFreeString
SetErrorInfo
VariantClear
VariantInit
SysStringLen

api-ms-win-eventing-provider-l1-1-0

EventRegister
EventUnregister
EventWriteTransfer
EventSetInformation

api-ms-win-core-registry-l1-1-0

RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegGetValueW

api-ms-win-crt-runtime-l1-1-0

_initterm_e
terminate
_invalid_parameter_noinfo
_errno
_invalid_parameter_noinfo_noreturn
_initterm
abort
_cexit
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit

api-ms-win-crt-string-l1-1-0

_wcsicmp
iswspace
wcsncmp
wcslen
strcpy_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
__stdio_common_vswprintf

api-ms-win-crt-convert-l1-1-0

wcstol
_ultow_s

api-ms-win-crt-heap-l1-1-0

_callnewh
free
calloc
malloc

api-ms-win-crt-math-l1-1-0

floor

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory

Sections

.text
Size: 483KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Web.WebView2.Core.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:03:3c:2b:0a:49:d9:d2:91:7e:ac:00:00:00:00:03:3c
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/02/2023, 20:10

Not After

31/01/2024, 20:10

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cc:ba:8f:c3:d5:ab:1b:21:56:f6:f8:bd:ee:7e:f6:03:b3:b9:e7:a6:d0:21:46:02:69:2d:7b:30:70:e0:67:81
Signer

Actual PE Digest

cc:ba:8f:c3:d5:ab:1b:21:56:f6:f8:bd:ee:7e:f6:03:b3:b9:e7:a6:d0:21:46:02:69:2d:7b:30:70:e0:67:81

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.WinUI.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6b:e4:d7:88:87:ec:dc:03:f9:c5:59:f1:95:7d:56:3c:75:65:36:56:6f:2f:92:93:72:27:f9:00:1f:9e:18:9d
Signer

Actual PE Digest

6b:e4:d7:88:87:ec:dc:03:f9:c5:59:f1:95:7d:56:3c:75:65:36:56:6f:2f:92:93:72:27:f9:00:1f:9e:18:9d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\BuildOutput\obj\x86fre\src\projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.WinUI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6.8MB - Virtual size: 6.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.AppLifecycle.Projection.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ae:ef:93:5e:0a:56:c0:f9:b9:45:6d:76:9c:89:fd:0a:0a:d8:3f:cd:45:28:8f:04:18:44:c4:4b:9b:73:e6:27
Signer

Actual PE Digest

ae:ef:93:5e:0a:56:c0:f9:b9:45:6d:76:9c:89:fd:0a:0a:d8:3f:cd:45:28:8f:04:18:44:c4:4b:9b:73:e6:27

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\obj\Release\arm64\Microsoft.Windows.AppLifecycle.Projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.AppLifecycle.Projection.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.AppLifecycle.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9b:3d:80:65:b4:cc:d1:a3:85:db:ac:89:03:fa:71:1b:33:f1:af:2e:a0:95:a0:70:5f:f9:ce:bb:40:5b:02:1f
Signer

Actual PE Digest

9b:3d:80:65:b4:cc:d1:a3:85:db:ac:89:03:fa:71:1b:33:f1:af:2e:a0:95:a0:70:5f:f9:ce:bb:40:5b:02:1f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Windows.AppNotifications.Builder.Projection.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c4:e7:54:7c:6b:8f:e3:74:36:b2:dc:49:f4:3a:d0:81:4d:7d:16:0d:09:93:9a:97:4a:77:2d:07:1a:cf:a8:b8
Signer

Actual PE Digest

c4:e7:54:7c:6b:8f:e3:74:36:b2:dc:49:f4:3a:d0:81:4d:7d:16:0d:09:93:9a:97:4a:77:2d:07:1a:cf:a8:b8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\obj\Release\arm64\Microsoft.Windows.AppNotifications.Builder.Projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.AppNotifications.Builder.Projection.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.AppNotifications.Builder.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c6:bc:53:6d:31:29:45:11:3b:cd:35:ce:03:2d:60:21:5e:72:c5:d6:e5:0e:a3:85:9e:35:16:2b:c4:ff:20:17
Signer

Actual PE Digest

c6:bc:53:6d:31:29:45:11:3b:cd:35:ce:03:2d:60:21:5e:72:c5:d6:e5:0e:a3:85:9e:35:16:2b:c4:ff:20:17

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Windows.AppNotifications.Projection.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

71:8f:07:e1:a7:66:fd:b0:53:8e:3b:ea:af:3a:46:2a:34:7b:36:d8:df:84:5f:dd:c2:a4:eb:82:7c:58:31:c1
Signer

Actual PE Digest

71:8f:07:e1:a7:66:fd:b0:53:8e:3b:ea:af:3a:46:2a:34:7b:36:d8:df:84:5f:dd:c2:a4:eb:82:7c:58:31:c1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\obj\Release\arm64\Microsoft.Windows.AppNotifications.Projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.AppNotifications.Projection.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.AppNotifications.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fd:0f:2d:c3:34:98:f5:7c:6b:b1:dc:d1:4d:79:a5:c3:d0:a9:45:6e:8a:01:4e:8a:7a:35:5c:96:f5:02:00:11
Signer

Actual PE Digest

fd:0f:2d:c3:34:98:f5:7c:6b:b1:dc:d1:4d:79:a5:c3:d0:a9:45:6e:8a:01:4e:8a:7a:35:5c:96:f5:02:00:11

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Windows.ApplicationModel.DynamicDependency.Projection.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a4:f5:cb:8f:0d:83:97:3e:3c:7e:0c:61:a2:90:54:9c:cd:96:05:f9:0c:be:0e:6e:1e:b8:39:dd:04:4a:21:c8
Signer

Actual PE Digest

a4:f5:cb:8f:0d:83:97:3e:3c:7e:0c:61:a2:90:54:9c:cd:96:05:f9:0c:be:0e:6e:1e:b8:39:dd:04:4a:21:c8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\obj\Release\arm64\Microsoft.Windows.ApplicationModel.DynamicDependency.Projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.ApplicationModel.DynamicDependency.Projection.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.ApplicationModel.DynamicDependency.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

21:fc:96:40:31:35:77:b1:96:cb:30:cd:77:7d:f1:1d:d5:9c:87:22:7f:83:9e:9a:99:c7:15:b4:b4:b0:7b:16
Signer

Actual PE Digest

21:fc:96:40:31:35:77:b1:96:cb:30:cd:77:7d:f1:1d:d5:9c:87:22:7f:83:9e:9a:99:c7:15:b4:b4:b0:7b:16

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Windows.ApplicationModel.Resources.Projection.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

dc:3b:81:14:11:dc:b0:64:02:30:eb:ae:d5:73:f1:a9:4f:52:02:9f:40:ba:df:f5:38:36:cf:74:de:e6:f4:ad
Signer

Actual PE Digest

dc:3b:81:14:11:dc:b0:64:02:30:eb:ae:d5:73:f1:a9:4f:52:02:9f:40:ba:df:f5:38:36:cf:74:de:e6:f4:ad

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\obj\Release\x86\Microsoft.Windows.ApplicationModel.Resources.Projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.ApplicationModel.Resources.Projection.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.ApplicationModel.Resources.dll
.dll windows:6 windows x64 arch:x64

82607fce1b7ac83f9d18b9e548c9f4a6

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:75:81:ce:cb:4f:e7:fa:8f:8f:c9:a5:03:b8:06:b8:c5:1c:ad:75:c9:1e:c4:ac:0f:53:66:70:11:53:31:27
Signer

Actual PE Digest

02:75:81:ce:cb:4f:e7:fa:8f:8f:c9:a5:03:b8:06:b8:c5:1c:ad:75:c9:1e:c4:ac:0f:53:66:70:11:53:31:27

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.Windows.ApplicationModel.Resources.pdb

Imports

microsoft.internal.frameworkudk

ResourceManager_GetDefaultResourcePathForPackageFullName

mrm

MrmLoadStringOrEmbeddedResourceByIndex
MrmLoadStringOrEmbeddedResource
MrmGetResourceCount
MrmCreateResourceContext
MrmLoadStringResourceFromResourceUri
MrmLoadStringResource
MrmDestroyResourceManager
MrmGetChildResourceMap
MrmGetFilePathFromName
MrmFreeResource
MrmDestroyResourceContext
MrmSetQualifier
MrmGetQualifier
MrmGetAllQualifierNames
MrmFreeQualifierNamesOrValues
MrmLoadStringOrEmbeddedResourceByIndexWithQualifierValues
MrmLoadStringOrEmbeddedResourceWithQualifierValues
MrmCreateResourceManager

kernel32

EncodePointer
ReleaseSRWLockExclusive
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetLastError
InterlockedFlushSList
InterlockedPushEntrySList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
IsDebuggerPresent
GetFileAttributesW
GetLastError
LocalFree
InitializeSListHead
AcquireSRWLockExclusive
LoadLibraryW
FormatMessageW
MultiByteToWideChar
HeapAlloc
HeapFree
GetProcessHeap
InitOnceBeginInitialize
InitOnceComplete
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
LoadLibraryExW

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_seh_filter_dll
abort
_configure_narrow_argv
terminate
_initialize_narrow_environment
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_cexit
_errno
_execute_onexit_table
_invalid_parameter_noinfo

api-ms-win-crt-string-l1-1-0

strcpy_s
wcsncmp
iswspace

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc

oleaut32

SysStringLen
SysFreeString
SetErrorInfo
SysAllocString
GetErrorInfo

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoCreateFreeThreadedMarshaler

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.ApplicationModel.Resources.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c7:c2:3e:af:e5:e6:05:20:9e:2d:3e:bd:c1:34:a8:af:85:b9:1a:4a:78:65:16:1b:58:69:a4:f3:a6:86:16:d9
Signer

Actual PE Digest

c7:c2:3e:af:e5:e6:05:20:9e:2d:3e:bd:c1:34:a8:af:85:b9:1a:4a:78:65:16:1b:58:69:a4:f3:a6:86:16:d9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.Projection.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:8f:86:09:b1:7e:df:24:50:1b:c5:97:c3:a8:8e:ba:65:e7:bc:21:06:80:5a:6d:46:7c:4a:a5:da:46:92:06
Signer

Actual PE Digest

8c:8f:86:09:b1:7e:df:24:50:1b:c5:97:c3:a8:8e:ba:65:e7:bc:21:06:80:5a:6d:46:7c:4a:a5:da:46:92:06

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\obj\Release\arm64\Microsoft.Windows.ApplicationModel.WindowsAppRuntime.Projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.ApplicationModel.WindowsAppRuntime.Projection.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c3:e9:41:06:23:6b:c7:17:bd:b7:3a:91:f2:5c:f8:59:74:dc:e8:5d:3e:33:de:e1:d5:b5:74:93:ce:6e:5f:f5
Signer

Actual PE Digest

c3:e9:41:06:23:6b:c7:17:bd:b7:3a:91:f2:5c:f8:59:74:dc:e8:5d:3e:33:de:e1:d5:b5:74:93:ce:6e:5f:f5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Windows.PushNotifications.Projection.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fd:c4:df:6d:22:95:24:21:37:0a:66:be:44:2b:19:a4:b5:dd:36:40:cd:12:e5:31:6f:59:60:9e:ff:df:e8:af
Signer

Actual PE Digest

fd:c4:df:6d:22:95:24:21:37:0a:66:be:44:2b:19:a4:b5:dd:36:40:cd:12:e5:31:6f:59:60:9e:ff:df:e8:af

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\obj\Release\arm64\Microsoft.Windows.PushNotifications.Projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.PushNotifications.Projection.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.PushNotifications.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

32:17:82:08:b1:50:54:19:4b:a3:7f:c0:0d:98:59:e5:b6:1f:0b:21:08:d2:2a:4c:3b:92:28:51:02:fa:a0:64
Signer

Actual PE Digest

32:17:82:08:b1:50:54:19:4b:a3:7f:c0:0d:98:59:e5:b6:1f:0b:21:08:d2:2a:4c:3b:92:28:51:02:fa:a0:64

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Windows.SDK.NET.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ad:52:b5:44:d0:84:3c:ff:8a:14:a2:8f:e2:d3:ed:30:9d:04:a4:92:38:4d:8f:8a:5c:c4:a9:31:9c:b3:69:eb
Signer

Actual PE Digest

ad:52:b5:44:d0:84:3c:ff:8a:14:a2:8f:e2:d3:ed:30:9d:04:a4:92:38:4d:8f:8a:5c:c4:a9:31:9c:b3:69:eb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\a\1\s\NetSDKSln\obj\Release\net6.0\IIDOptimizer\Microsoft.Windows.SDK.NET.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 21.7MB - Virtual size: 21.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.Security.AccessControl.Projection.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a5:68:d6:b7:22:05:0b:69:ef:9a:3f:8f:f6:2b:8a:08:08:a8:19:a3:39:ba:03:73:f5:da:e5:fe:5d:77:cb:25
Signer

Actual PE Digest

a5:68:d6:b7:22:05:0b:69:ef:9a:3f:8f:f6:2b:8a:08:08:a8:19:a3:39:ba:03:73:f5:da:e5:fe:5d:77:cb:25

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\obj\Release\arm64\Microsoft.Windows.Security.AccessControl.Projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.Security.AccessControl.Projection.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.Security.AccessControl.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:13:71:85:60:ee:55:21:27:e9:90:db:94:22:fc:e0:d3:1a:41:a1:2d:a4:db:ce:21:65:e7:2e:9b:39:65:ff
Signer

Actual PE Digest

0e:13:71:85:60:ee:55:21:27:e9:90:db:94:22:fc:e0:d3:1a:41:a1:2d:a4:db:ce:21:65:e7:2e:9b:39:65:ff

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Windows.System.Power.Projection.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

69:c1:e8:73:94:b8:f8:42:e9:23:d9:a5:d0:3b:25:99:01:c9:95:c1:1f:e4:c8:51:bd:f2:31:0c:f6:40:6d:5e
Signer

Actual PE Digest

69:c1:e8:73:94:b8:f8:42:e9:23:d9:a5:d0:3b:25:99:01:c9:95:c1:1f:e4:c8:51:bd:f2:31:0c:f6:40:6d:5e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\obj\Release\arm64\Microsoft.Windows.System.Power.Projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.System.Power.Projection.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.System.Power.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1c:91:dd:50:38:ee:88:7c:7c:1a:b8:63:9d:6e:a9:75:d3:0d:2e:dc:37:ef:39:fa:86:7b:53:6a:80:9a:8b:11
Signer

Actual PE Digest

1c:91:dd:50:38:ee:88:7c:7c:1a:b8:63:9d:6e:a9:75:d3:0d:2e:dc:37:ef:39:fa:86:7b:53:6a:80:9a:8b:11

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Windows.System.Projection.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

db:f9:e4:73:0b:01:51:81:04:d7:90:12:dc:67:ee:b5:e6:c1:98:00:47:1a:cd:78:a0:19:65:d1:05:9c:bf:58
Signer

Actual PE Digest

db:f9:e4:73:0b:01:51:81:04:d7:90:12:dc:67:ee:b5:e6:c1:98:00:47:1a:cd:78:a0:19:65:d1:05:9c:bf:58

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\obj\Release\arm64\Microsoft.Windows.System.Projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.System.Projection.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.System.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c1:d2:9a:81:d8:61:0e:14:9b:23:83:5f:b1:36:dc:24:9b:1e:81:c8:a9:c6:67:16:36:92:81:83:ff:ca:cc:b0
Signer

Actual PE Digest

c1:d2:9a:81:d8:61:0e:14:9b:23:83:5f:b1:36:dc:24:9b:1e:81:c8:a9:c6:67:16:36:92:81:83:ff:ca:cc:b0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Windows.Widgets.Providers.Projection.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8f:5a:2c:f1:99:25:ef:0b:50:55:70:81:99:ea:5c:b4:5c:ed:d4:50:d9:d0:c4:34:5b:41:4c:e1:a8:fb:2e:d2
Signer

Actual PE Digest

8f:5a:2c:f1:99:25:ef:0b:50:55:70:81:99:ea:5c:b4:5c:ed:d4:50:d9:d0:c4:34:5b:41:4c:e1:a8:fb:2e:d2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\src\sdk\Microsoft.Windows.Widgets.Providers.Projection\obj\Release\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.Widgets.Providers.Projection.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.Widgets.dll
.dll windows:6 windows x64 arch:x64

bddbe818dd1bf840696f2cec701518c8

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5b:04:45:13:64:30:cc:d2:11:a0:91:ea:b7:55:5c:0c:d1:ea:25:3c:f3:c3:d5:9d:36:07:40:94:7b:03:76:c7
Signer

Actual PE Digest

5b:04:45:13:64:30:cc:d2:11:a0:91:ea:b7:55:5c:0c:d1:ea:25:3c:f3:c3:d5:9d:36:07:40:94:7b:03:76:c7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\src\x64\Release\Microsoft.Windows.Widgets\Microsoft.Windows.Widgets.pdb

Imports

ole32

CoCreateInstance
CoGetObjectContext
CoTaskMemAlloc
CoCreateFreeThreadedMarshaler
CoGetApartmentType
CoTaskMemFree
CoImpersonateClient
CoRevertToSelf

kernel32

TlsSetValue
TlsGetValue
OutputDebugStringW
GetCurrentThreadId
FormatMessageW
IsDebuggerPresent
GetLastError
InitOnceBeginInitialize
InitOnceComplete
InitializeCriticalSectionEx
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
SetLastError
CloseHandle
GetCurrentProcess
GetCurrentThread
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
ReleaseSemaphore
GetModuleHandleExW
WaitForSingleObject
ReleaseMutex
WaitForSingleObjectEx
OpenSemaphoreW
HeapAlloc
GetProcAddress
CreateMutexExW
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
FreeLibrary
DebugBreak
TlsAlloc
EncodePointer
InterlockedFlushSList
InterlockedPushEntrySList
GetSystemTimePreciseAsFileTime
RtlUnwindEx
InitializeSListHead
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetSystemTimeAsFileTime
QueryPerformanceCounter
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
TryAcquireSRWLockExclusive
InitializeSRWLock
IsProcessorFeaturePresent
RtlPcToFileHeader
TrySubmitThreadpoolCallback
SwitchToThread
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryW
AreFileApisANSI
RtlUnwind
LoadLibraryExW
FormatMessageA
LocalFree
GetLocaleInfoEx
TlsFree

api-ms-win-eventing-provider-l1-1-0

EventRegister
EventUnregister
EventWriteTransfer
EventSetInformation

api-ms-win-core-registry-l1-1-0

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

api-ms-win-core-processthreads-l1-1-0

OpenThreadToken
OpenProcessToken

api-ms-win-appmodel-runtime-l1-1-1

GetPackageFamilyNameFromToken

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo
RoFailFastWithErrorContext
GetRestrictedErrorInfo

oleaut32

SysAllocString
SetErrorInfo
GetErrorInfo
SysFreeString
SysStringLen

rpcrt4

NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer2_Release
CStdStubBuffer_Invoke
NdrStubForwardingFunction
IUnknown_AddRef_Proxy
CStdStubBuffer_DebugServerQueryInterface
NdrOleFree
CStdStubBuffer_AddRef
IUnknown_Release_Proxy
CStdStubBuffer_CountRefs
NdrCStdStubBuffer_Release
CStdStubBuffer_QueryInterface
NdrOleAllocate
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Disconnect
IUnknown_QueryInterface_Proxy
NdrStubCall3
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Connect

api-ms-win-core-winrt-string-l1-1-0

HSTRING_UserUnmarshal
HSTRING_UserUnmarshal64
HSTRING_UserFree64
HSTRING_UserMarshal
HSTRING_UserFree
HSTRING_UserSize64
HSTRING_UserSize
HSTRING_UserMarshal64

api-ms-win-core-errorhandling-l1-1-0

RaiseException

api-ms-win-core-sysinfo-l1-1-0

GetSystemInfo

api-ms-win-core-memory-l1-1-0

VirtualProtect
VirtualQuery

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExA

api-ms-win-crt-runtime-l1-1-0

_initterm_e
abort
_errno
_initterm
terminate
_cexit
_crt_atexit
_invalid_parameter_noinfo
_execute_onexit_table
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table

api-ms-win-crt-string-l1-1-0

wcsncmp
strcpy_s
_wcsnicmp
iswspace

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
__stdio_common_vswprintf_s
__stdio_common_vswprintf

api-ms-win-crt-convert-l1-1-0

wcstoll

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

api-ms-win-crt-heap-l1-1-0

calloc
free
malloc
_callnewh

api-ms-win-crt-math-l1-1-0

ceilf

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject

Sections

.text
Size: 476KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 303KB - Virtual size: 303KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 296KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.Widgets.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d5:31:ed:92:7a:46:ba:a8:ac:c6:53:1d:33:4d:28:4c:c5:a5:25:21:a1:33:af:ab:06:1d:d9:c4:4a:ad:7f:13
Signer

Actual PE Digest

d5:31:ed:92:7a:46:ba:a8:ac:c6:53:1d:33:4d:28:4c:c5:a5:25:21:a1:33:af:ab:06:1d:d9:c4:4a:ad:7f:13

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.WindowsAppRuntime.Bootstrap.Net.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5d:b8:49:f7:b8:f3:4d:52:b9:e5:82:e8:39:bb:c5:fc:d9:d7:1a:b1:11:2e:43:83:6c:7c:d4:24:49:5a:64:3a
Signer

Actual PE Digest

5d:b8:49:f7:b8:f3:4d:52:b9:e5:82:e8:39:bb:c5:fc:d9:d7:1a:b1:11:2e:43:83:6c:7c:d4:24:49:5a:64:3a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\obj\Release\AnyCPU\Microsoft.WindowsAppRuntime.Bootstrap.Net\net6.0-windows10.0.19041.0\Microsoft.WindowsAppRuntime.Bootstrap.Net.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.WindowsAppRuntime.Bootstrap.dll
.dll windows:6 windows x64 arch:x64

9fc59db387b6ac0caad2f1d8a043a4a3

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fe:f5:29:2c:2d:9b:34:01:05:eb:83:e0:7b:b9:24:bc:8d:b4:bc:e6:f4:37:07:24:5a:1e:07:89:1f:cf:b6:ba
Signer

Actual PE Digest

fe:f5:29:2c:2d:9b:34:01:05:eb:83:e0:7b:b9:24:bc:8d:b4:bc:e6:f4:37:07:24:5a:1e:07:89:1f:cf:b6:ba

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.WindowsAppRuntime.Bootstrap.pdb

Imports

advapi32

EventWriteTransfer
EventUnregister
EventActivityIdControl
DeregisterEventSource
EventSetInformation
EventRegister
ReportEventW
RegisterEventSourceW
GetSidSubAuthority
GetTokenInformation
GetSidSubAuthorityCount

kernel32

GetProcAddress
SetLastError
GetLastError
GetModuleHandleW
HeapAlloc
OutputDebugStringW
GetCurrentThreadId
FormatMessageW
IsDebuggerPresent
AcquireSRWLockExclusive
RtlPcToFileHeader
RtlUnwindEx
FreeLibrary
GetModuleHandleExW
InitializeSListHead
DisableThreadLibraryCalls
CloseHandle
GetCurrentPackageFullName
DebugBreak
IsProcessorFeaturePresent
LoadLibraryW
CompareStringOrdinal
ReleaseSRWLockExclusive
OpenPackageInfoByFullName
GetPackageInfo
AddDllDirectory
SetEnvironmentVariableW
GetEnvironmentVariableW
CreateEventW
GetCurrentProcessId
FormatApplicationUserModelId
TerminateProcess
GetPackagePathByFullName
FindFirstFileW
GetCurrentProcess
HeapFree
GetProcessHeap
InitOnceComplete
GetModuleFileNameW
K32GetModuleFileNameExW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetEvent
FindClose
ClosePackageInfo
RemoveDllDirectory
CreateEventExW
RtlVirtualUnwind
InitOnceBeginInitialize
GetModuleFileNameA
CreateSemaphoreExW
ReleaseSemaphore
WaitForSingleObject
ReleaseMutex
WaitForSingleObjectEx
OpenSemaphoreW
CreateMutexExW
LoadLibraryExW
RtlLookupFunctionEntry
RtlCaptureContext
InterlockedPushEntrySList
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EncodePointer
InterlockedFlushSList
TryAcquireSRWLockExclusive
QueryPerformanceCounter
WakeAllConditionVariable
SleepConditionVariableSRW
GetSystemTimeAsFileTime

ole32

CoCreateFreeThreadedMarshaler
CoCreateInstance
CoTaskMemAlloc
CoCreateGuid
CoTaskMemFree

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo
RoFailFastWithErrorContext
GetRestrictedErrorInfo

oleaut32

SysStringLen
SysAllocString
SysFreeString
SetErrorInfo
GetErrorInfo

user32

wsprintfW
LoadStringA
MessageBoxW

rpcrt4

UuidFromStringW

shell32

ShellExecuteExW

api-ms-win-core-errorhandling-l1-1-0

RaiseException

api-ms-win-core-sysinfo-l1-1-0

GetSystemInfo

api-ms-win-core-memory-l1-1-0

VirtualProtect
VirtualQuery

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExA

api-ms-win-crt-runtime-l1-1-0

abort
_initterm_e
_errno
_invalid_parameter_noinfo_noreturn
_cexit
_crt_atexit
terminate
_initterm
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vswprintf_s
__stdio_common_vswscanf
__stdio_common_vsnprintf_s

api-ms-win-crt-string-l1-1-0

wcsncmp
iswspace
strcpy_s

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc

Exports

Exports

MddBootstrapInitialize
MddBootstrapInitialize2
MddBootstrapShutdown
MddBootstrapTestInitialize

Sections

.text
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.WindowsAppRuntime.Insights.Resource.dll
.dll windows:6 windows x64 arch:x64

26970099aedb6ceafc0d01f79fd527c4

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

69:d6:c1:52:a0:15:99:d4:4f:cb:7b:ff:3f:82:77:82:4c:45:6e:01:7e:83:97:69:a8:c3:46:84:d4:55:25:68
Signer

Actual PE Digest

69:d6:c1:52:a0:15:99:d4:4f:cb:7b:ff:3f:82:77:82:4c:45:6e:01:7e:83:97:69:a8:c3:46:84:d4:55:25:68

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\BuildOutput\Release\x64\Microsoft.WindowsAppRuntime.Insights.Resource\Microsoft.WindowsAppRuntime.Insights.Resource.pdb

Imports

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_narrow_environment
terminate
_configure_narrow_argv
_initterm_e
_seh_filter_dll
abort
_initialize_onexit_table
_cexit
_initterm

api-ms-win-crt-heap-l1-1-0

free
calloc

api-ms-win-crt-string-l1-1-0

wcsncmp

Exports

Exports

WindowsAppRuntime_GetVersionInfo

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.WindowsAppRuntime.dll
.dll windows:6 windows x64 arch:x64

0208c01bba6c996182df08da3411352b

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

68:25:c2:96:37:84:ee:97:cd:99:27:b3:90:3b:e8:4e:38:2a:02:67:46:0c:c9:0f:7b:e9:af:22:4e:58:33:33
Signer

Actual PE Digest

68:25:c2:96:37:84:ee:97:cd:99:27:b3:90:3b:e8:4e:38:2a:02:67:46:0c:c9:0f:7b:e9:af:22:4e:58:33:33

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.WindowsAppRuntime.pdb

Imports

advapi32

GetTokenInformation
RegEnumValueW
DeregisterEventSource
ReportEventW
RegisterEventSourceW
EqualSid
RegDeleteKeyExW
GetSidSubAuthority
GetLengthSid
CopySid
GetSidSubAuthorityCount
SetEntriesInAclW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
MakeSelfRelativeSD
RegOpenKeyExW
RegGetValueW
FreeSid
RegEnumKeyExW
RegQueryInfoKeyW
ConvertStringSidToSidW
ConvertSecurityDescriptorToStringSecurityDescriptorW
EventActivityIdControl
RegDeleteTreeW
EventUnregister
EventRegister
EventSetInformation
EventWriteTransfer
RegQueryValueExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegSetValueExW

kernel32

K32GetModuleFileNameExW
GetCurrentProcess
VirtualAlloc
FlushInstructionCache
GetModuleFileNameW
GetCurrentPackageFullName
InitOnceBeginInitialize
InitOnceComplete
CreateEventW
FreeLibrary
ReleaseMutex
CloseThreadpoolWait
WaitForThreadpoolWaitCallbacks
SetThreadpoolWait
CloseHandle
UnregisterWait
CompareStringOrdinal
SetThreadContext
GetCurrentProcessId
ResetEvent
CreateThreadpoolWait
DuplicateHandle
OpenProcess
RegisterWaitForSingleObject
GetThreadContext
SuspendThread
VirtualQueryEx
TlsFree
GetModuleHandleExW
DeleteProcThreadAttributeList
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
CreateProcessW
ResumeThread
WaitForSingleObjectEx
GetCommandLineW
OpenEventW
SetEvent
CreateEventExW
CreateFileMappingW
MapViewOfFile
CreateMutexExW
UnmapViewOfFile
TrySubmitThreadpoolCallback
GetCurrentApplicationUserModelId
LoadLibraryW
TlsSetValue
TerminateProcess
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
InterlockedPushEntrySList
VirtualFree
GetModuleHandleW
GetProcAddress
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
RtlUnwindEx
InitializeSListHead
HeapFree
SetLastError
LocalFree
LocalAlloc
AcquireSRWLockShared
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
GetSystemTimePreciseAsFileTime
GetProcessHeap
MultiByteToWideChar
HeapAlloc
WideCharToMultiByte
RtlPcToFileHeader
DeleteFileW
LoadLibraryExW
GetFileSizeEx
ReadFile
CreateFileW
WriteFile
GetCurrentPackageInfo
GetCurrentThread
GetPackageInfo
FindPackagesByPackageFamily
IsDebuggerPresent
PackageIdFromFullName
SetEnvironmentVariableW
ClosePackageInfo
GetEnvironmentVariableW
RemoveDllDirectory
OpenPackageInfoByFullName
AddDllDirectory
RtlLookupFunctionEntry
FindResourceW
LoadResource
SizeofResource
LockResource
SwitchToThread
RtlCaptureContext
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CloseThreadpoolTimer
InitOnceExecuteOnce
FindFirstFileW
FindNextFileW
FindClose
RaiseException
SetThreadpoolTimer
CreateThreadpoolTimer
CreateThreadpool
SetThreadpoolThreadMaximum
SetThreadpoolThreadMinimum
CreateThreadpoolCleanupGroup
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolCleanupGroupMembers
GetSystemTimeAsFileTime
ReleaseActCtx
CreateActCtxW
QueryActCtxW
CompareStringEx
GetPackagePathByFullName
DebugBreak
GetExitCodeProcess
FormatMessageW
GetCurrentThreadId
OutputDebugStringW
GetStringTypeW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetLastError
LCMapStringEx
DeleteCriticalSection
InitializeCriticalSectionEx
DisableThreadLibraryCalls
GetModuleFileNameA
CreateSemaphoreExW
ReleaseSemaphore
WaitForSingleObject
OpenSemaphoreW
ReleaseSRWLockShared
DecodePointer
CreateDirectoryW
EncodePointer
SleepConditionVariableSRW
WakeAllConditionVariable
QueryPerformanceCounter
TryAcquireSRWLockExclusive
GetLocaleInfoEx
FormatMessageA
GetFileAttributesExW
GetFileInformationByHandleEx
AreFileApisANSI
SetFileInformationByHandle
VirtualProtectEx

userenv

DeriveAppContainerSidFromAppContainerName

user32

wsprintfW
MessageBoxW
DestroyIcon
SendMessageTimeoutW
AllowSetForegroundWindow
LoadStringA

ole32

CoCreateInstance
CoRevokeClassObject
CoUnmarshalInterface
CoMarshalInterface
CreateStreamOnHGlobal
CoGetMarshalSizeMax
CoReleaseMarshalData
StringFromGUID2
CoGetObjectContext
CoGetApartmentType
CoMarshalInterThreadInterfaceInStream
CoIncrementMTAUsage
CoGetDefaultContext
CoGetInterfaceAndReleaseStream
CoCreateGuid
CoInitializeEx
CoUninitialize
StringFromCLSID
CoCreateFreeThreadedMarshaler
CoTaskMemAlloc
CoTaskMemFree
CoRegisterClassObject

shlwapi

PathFindFileNameW
ord12
ord213
SHCreateStreamOnFileEx
PathIsFileSpecW

shell32

SHChangeNotify
CommandLineToArgvW
ShellExecuteExW
SHCreateItemFromParsingName
ExtractIconExW
SHGetKnownFolderPath
GetCurrentProcessExplicitAppUserModelID

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateString
WindowsCreateStringReference

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory
RoActivateInstance

xmllite

CreateXmlReader
CreateXmlReaderInputWithEncodingName

oleaut32

GetErrorInfo
SysAllocString
SetErrorInfo
SysStringLen
SysFreeString

api-ms-win-core-path-l1-1-0

PathCchRemoveFileSpec

api-ms-win-ro-typeresolution-l1-1-0

RoGetMetaDataFile
RoResolveNamespace

api-ms-win-power-setting-l1-1-1

PowerUnregisterFromEffectivePowerModeNotifications
PowerRegisterForEffectivePowerModeNotifications

api-ms-win-power-base-l1-1-0

PowerUnregisterSuspendResumeNotification
PowerRegisterSuspendResumeNotification

api-ms-win-core-synch-l1-2-0

WaitOnAddress
WakeByAddressSingle

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo
RoFailFastWithErrorContext
GetRestrictedErrorInfo

rometadata

MetaDataGetDispenser

api-ms-win-core-sysinfo-l1-1-0

GetSystemInfo

api-ms-win-core-memory-l1-1-0

VirtualProtect
VirtualQuery

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExA

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vswscanf
__stdio_common_vswprintf_s
__stdio_common_vsnprintf_s

api-ms-win-crt-runtime-l1-1-0

terminate
_invalid_parameter_noinfo_noreturn
_errno
_initterm_e
_initterm
_cexit
_crt_atexit
_invalid_parameter_noinfo
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
abort

api-ms-win-crt-string-l1-1-0

iswspace
towupper
wcstok_s
strcpy_s
_wcsicmp_l
_wcsdup
wcsncmp
wcsnlen
towlower

api-ms-win-crt-heap-l1-1-0

free
malloc
calloc
realloc
_callnewh

api-ms-win-crt-time-l1-1-0

_localtime64_s
_Wcsftime
_W_Gettnames

api-ms-win-crt-convert-l1-1-0

wcstoull
wcstoul

api-ms-win-crt-locale-l1-1-0

___lc_locale_name_func
__pctype_func
___lc_collate_cp_func
___mb_cur_max_func
___lc_codepage_func
_create_locale
_unlock_locales
_lock_locales
setlocale

api-ms-win-crt-math-l1-1-0

ceilf

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
GetSecurityDescriptorForAppContainerNames
MddAddPackageDependency
MddDeletePackageDependency
MddGetGenerationId
MddGetIdForPackageDependencyContext
MddGetPackageGraphRevisionId
MddGetResolvedPackageFullNameForPackageDependency
MddLifetimeManagementGC
MddLifetimeManagementTestInitialize
MddRemovePackageDependency
MddTryCreatePackageDependency
MsixInstallLicenses
WindowsAppRuntime_EnsureIsLoaded
WindowsAppRuntime_IsSelfContained
WindowsAppRuntime_VersionInfo_MSIX_Framework_PackageFamilyName_Get
WindowsAppRuntime_VersionInfo_MSIX_Main_PackageFamilyName_Get
WindowsAppRuntime_VersionInfo_TestInitialize

Sections

.text
Size: 650KB - Virtual size: 649KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.detourc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourd
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.ui.xaml.dll
.dll windows:10 windows x64 arch:x64

f4a5d19d348f216e77a3afa43ad428e6

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f3:62:74:0c:6c:7d:1e:a0:50:f9:cd:40:5c:fa:51:60:5f:60:26:eb:62:bb:f1:fe:98:16:97:f4:8f:4f:26:16
Signer

Actual PE Digest

f3:62:74:0c:6c:7d:1e:a0:50:f9:cd:40:5c:fa:51:60:5f:60:26:eb:62:bb:f1:fe:98:16:97:f4:8f:4f:26:16

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\BuildOutput\obj\amd64fre\dxaml\xcp\dxaml\dllsrv\winrt\native\Microsoft.ui.xaml.pdb

Imports

kernel32

GetCurrentProcessId
RtlCaptureContext
InitOnceBeginInitialize
GetProcessHeap
SetFilePointerEx
SystemTimeToFileTime
GetFileTime
SetEndOfFile
WriteFile
GetFileSizeEx
GetFileAttributesW
GetCurrentPackageInfo
ReclaimVirtualMemory
OfferVirtualMemory
VirtualAlloc
VirtualFree
CreateMutexExW
DuplicateHandle
SwitchToThread
GlobalUnlock
GlobalLock
GlobalAlloc
ResolveDelayLoadedAPI
DelayLoadFailureHook
SearchPathW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
TlsFree
InitOnceComplete
RtlPcToFileHeader
InterlockedFlushSList
RtlUnwindEx
LCMapStringEx
GetProcAddress
HeapAlloc
EncodePointer
GetStringTypeW
TryAcquireSRWLockExclusive
InitializeSListHead
SleepConditionVariableSRW
WakeAllConditionVariable
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
LCIDToLocaleName
RemoveDllDirectory
RaiseFailFastException
HeapReAlloc
LocalFree
AddDllDirectory
GetModuleFileNameW
CompareStringOrdinal
CreateEventExW
CloseHandle
OpenSemaphoreW
GetEnvironmentVariableW
TlsAlloc
GetFileSize
GetWindowsDirectoryW
GetModuleHandleA
GetTimeFormatW
AppPolicyGetWindowingModel
GetDynamicTimeZoneInformation
FindNLSStringEx
FindResourceExW
GetThreadTimes
InitializeSRWLock
Sleep
QueryFullProcessImageNameW
OpenProcess
GetCurrentApplicationUserModelId
GetCurrentPackageFullName
GetCurrentPackagePath
WaitForSingleObjectEx
OutputDebugStringW
GetCurrentPackageId
ExpandEnvironmentStringsW
InitializeCriticalSection
GetModuleFileNameA
GetLastError
FormatMessageW
TlsGetValue
TlsSetValue
RtlCaptureStackBackTrace
GetSystemTimeAsFileTime
ReleaseMutex
LoadLibraryW
GetVersionExW
lstrcmpiW
GetCurrentThreadId
RaiseException
WaitForSingleObject
GetModuleHandleExW
LoadLibraryExW
AcquireSRWLockExclusive
FreeLibrary
CompareStringEx
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ReleaseSemaphore
SetLastError
HeapFree
ReleaseSRWLockExclusive
GetModuleHandleW
OpenFileMappingW
IsProcessorFeaturePresent
SetPriorityClass
GetPriorityClass
WideCharToMultiByte
MultiByteToWideChar
SetThreadpoolTimer
CloseThreadpoolTimer
CreateThreadpoolTimer
K32GetProcessMemoryInfo
InitializeCriticalSectionEx
CloseThreadpoolWait
WaitForThreadpoolWaitCallbacks
SetThreadpoolWait
GetProcessAffinityMask
CreateEventW
CreateThreadpoolWait
CreateThreadpoolCleanupGroup
CloseThreadpoolCleanupGroupMembers
CloseThreadpoolCleanupGroup
CreateThreadpoolWork
GetTickCount64
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
SubmitThreadpoolWork
DecodePointer
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
SetThreadPriority
GetCurrentThread
GetThreadPriority
ResolveLocaleName
LocaleNameToLCID
WaitForMultipleObjectsEx
OpenEventW
SetEvent
PowerSetRequest
PowerClearRequest
PowerCreateRequest
ReleaseSRWLockShared
AcquireSRWLockShared
DebugBreak
IsDebuggerPresent
ReadFile
MulDiv
ResetEvent
CreateThread
HeapCreate
CreateSemaphoreExW
GetThreadUILanguage
CreateFileMappingW
GetLocaleInfoW
MapViewOfFile
CreateFileW
GetTempFileNameW
GetTempPathW
GetSystemInfo
UnmapViewOfFile
GetUserDefaultLCID
LockResource
SizeofResource
CreateMutexW
FindResourceW
Wow64RevertWow64FsRedirection
Wow64DisableWow64FsRedirection
GetCurrentProcess
IsWow64Process2
GetLocaleInfoEx
InitOnceExecuteOnce
LoadResource

advapi32

RegDeleteValueW
TraceMessage
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegisterTraceGuidsW
RegQueryInfoKeyW
GetTraceEnableLevel
RegEnumKeyExW
RegSetValueExW
RegGetValueW
GetTraceEnableFlags
GetTraceLoggerHandle
TraceEvent
RegCreateKeyExW
OpenProcessToken
GetTokenInformation
EventUnregister
RegNotifyChangeKeyValue
EventSetInformation
EventRegister
EventActivityIdControl
UnregisterTraceGuids
EventWriteTransfer

shlwapi

PathRemoveFileSpecW
ord12
ord280
PathCreateFromUrlW
UrlCreateFromPathW
PathFileExistsW
UrlCanonicalizeW
PathFindExtensionW
UrlCombineW
ord16

api-ms-win-crt-runtime-l1-1-0

_initterm
abort
_invalid_parameter_noinfo
_initterm_e
terminate
_errno
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_register_onexit_function
__doserrno
_execute_onexit_table
_crt_atexit
_invoke_watson
_cexit

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s
__stdio_common_vswscanf
__stdio_common_vswprintf
__stdio_common_vsnprintf_s

api-ms-win-crt-filesystem-l1-1-0

_wsplitpath_s

api-ms-win-crt-string-l1-1-0

wcsncpy_s
strcpy_s
iswspace
tolower
_wcsnicmp
_wcsicmp
_wcsdup
wcsncmp
isalpha
isspace
wcscpy_s
towlower
iswdigit
wcsnlen
wcscmp

api-ms-win-crt-convert-l1-1-0

wcstod
_ultow_s
_wcstoi64
_wtoi
wcstoll
_itow_s
wcstoul
wcstol

api-ms-win-crt-math-l1-1-0

floorf
lroundf
sin
exp
roundf
log
cosf
logf
pow
_isnan
tanf
_finite
sqrtf
ceil
sinf
ceilf
cos
round
atan2f
powf
floor

api-ms-win-crt-heap-l1-1-0

free
malloc
_recalloc
realloc
calloc

coremessagingxp

CoreMsgCreateSession

microsoft.internal.frameworkudk

FinalUnhandledErrorDetected_UnregisterHandler
BackButtonIntegration_UnregisterListener
BackButtonIntegration_RegisterListener
Mui_PropagateApplicationLanguages
TimedMetadataTrackExtension_RemoveCueEntered
TimedMetadataTrackExtension_AddCueEntered
InputPaneFramework_RegisterListener
InputPaneFramework_Advise
InputPaneFramework_UnregisterListener
FrameworkInputView_RegisterListener
TextInput_SetKeyboardSkin
TextAnalysis_CreateDWritePrivateTextAnalysisSourceProxy
Windowing_GetWindowIdFromWindow
TextInputProxy_putInputSettings
BackButtonIntegration_InjectBackButtonPress
VisualDiagnosticsPort_Unregister
VisualDiagnosticsPort_Register
MediaPlaybackDataSourceExtension_SendPlaybackPositionChangeRequest
FinalUnhandledErrorDetected_RegisterHandler
Theming_TryEnableHostBackdropBrush
MediaPlayerExtension_GetCurrentMediaPlaybackItem
WindowPositionChanged_UnregisterListener
WindowPositionChanged_RegisterListener
TextInput_SetTextPrediction
MediaPlaybackListExtension_AddAutoRepeatChanged
Containment_GetChangeEnabled
MediaPlaybackDataSourceExtension_SendPlaybackRateChangeRequest
MediaPlayerExtension_GetMediaPlayerCastingRenderLocation
MediaPlaybackDataSourceExtension_SendMediaPlaybackCommand
MediaPlaybackDataSourceExtension_SendRepeatModeChangeRequest
FrameworkInputView_UnregisterListener
AudioGraphSettingsExtension_SetUseSpatialAudioApi
MediaPlayerExtension_RemoveCastingRenderLocationChanged
MediaPlayerExtension_AddIsLoopingEnabledChanged
MediaPlayerExtension_AddCastingRenderLocationChanged
MediaPlayerExtension_GetVideoSwapchainHandle
Mui_GetFontFallbackLanguageList
MediaPlaybackSessionExtension_IsPlaybackRateSupported
MediaPlayerExtension_RemoveIsLoopingEnabledChanged
TextAnalysis_GetContentReadingDirection
TextAnalysis_SetLocaleNameList
Windowing_GetWindowFromWindowId
MediaPlaybackListExtension_RemoveAutoRepeatChanged

microsoft.ui.windowing.core

ContentPreTranslateMessage

urlmon

CreateIUriBuilder
RegisterBindStatusCallback
CreateURLMonikerEx
CreateUri

api-ms-win-core-winrt-string-l1-1-0

WindowsCompareStringOrdinal
WindowsPromoteStringBuffer
WindowsCreateString
WindowsGetStringLen
WindowsDeleteStringBuffer
WindowsStringHasEmbeddedNull
WindowsCreateStringReference
WindowsTrimStringEnd
WindowsDuplicateString
WindowsConcatString
WindowsTrimStringStart
WindowsGetStringRawBuffer
WindowsPreallocateStringBuffer
WindowsIsStringEmpty
WindowsDeleteString
WindowsSubstringWithSpecifiedLength

ole32

CoGetApartmentType
CoUninitialize
CoWaitForMultipleHandles
StringFromCLSID
CLSIDFromString
PropVariantClear
OleInitialize
OleUninitialize
CoTaskMemFree
CoCreateGuid
CreateBindCtx
CoTaskMemAlloc
CoCreateFreeThreadedMarshaler
CreateStreamOnHGlobal
CoCreateInstance
CoInitializeEx
CoTaskMemRealloc

api-ms-win-core-winrt-l1-1-0

RoInitialize
RoUninitialize
RoActivateInstance
RoGetActivationFactory

rpcrt4

UuidToStringW
UuidCreate
RpcStringFreeW

user32

PeekMessageW
GetKeyboardState
SetWindowPos
MsgWaitForMultipleObjects
GetCursorPos
OffsetRect
CharNextW
ToUnicodeEx
VkKeyScanExW
EnableMouseInPointer
PtInRect
GetAncestor
GetMessageTime
GetWindowRect
GetForegroundWindow
GetDpiForWindow
PostQuitMessage
GetMessageW
TranslateMessage
DispatchMessageW
SendMessageW
ShowWindow
RedrawWindow
RegisterWindowMessageW
CallWindowProcW
SetWindowLongW
IsChild
GetWindowLongW
GetClientRect
ClientToScreen
GetParent
FindWindowW
MonitorFromRect
PostMessageW
SetWindowTextW
GetWindow
InvalidateRect
InflateRect
MonitorFromWindow
BeginPaint
EndPaint
GetKeyboardLayout
GetWindowThreadProcessId
GetFocus
GetCaretBlinkTime
GetDC
GetWindowPlacement
IsIconic
IsWindowVisible
GetWindowTextLengthW
GetWindowTextW
IsZoomed
UpdateWindow
SetActiveWindow
ReleaseDC
ScreenToClient
SetFocus
SetMenuItemInfoW
GetSystemMenu
SetMenuDefaultItem
TrackPopupMenuEx
GetClassInfoExW
LoadCursorW
RegisterClassExW
DestroyWindow
SetTimer
KillTimer
GetSysColor
CreateWindowExW
SetWindowLongPtrW
RegisterClassW
EqualRect
GetWindowLongPtrW
DefWindowProcW
IsClipboardFormatAvailable
GetDesktopWindow
SetCapture
ReleaseCapture
FillRect

api-ms-win-core-winrt-error-l1-1-0

GetRestrictedErrorInfo
SetRestrictedErrorInfo
RoOriginateErrorW
RoTransformError
RoGetErrorReportingFlags
RoOriginateError

api-ms-win-ntuser-sysparams-l1-1-0

SystemParametersInfoW
GetSystemMetrics
EnumDisplaySettingsW
EnumDisplayDevicesW
GetMonitorInfoW

gdi32

SetMapMode
GetMapMode
StartPage
SetDIBitsToDevice
StretchDIBits
EndPage
DPtoLP
SetBkColor
CombineRgn
ExtTextOutW
GetStockObject
DeleteObject
CreateRectRgn
GetRegionData

oleaut32

VarUI4FromStr
SysAllocStringLen
SysFreeString
SafeArrayUnaccessData
SafeArrayUnlock
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayDestroy
SafeArrayGetUBound
VariantInit
SysStringLen
SysAllocString
SetErrorInfo
CreateErrorInfo
GetErrorInfo
VariantChangeType
SafeArrayGetLBound
SafeArrayGetVartype
SafeArrayLock
SafeArrayAccessData
SafeArrayGetDim
VariantClear

dwrite

DWriteCreateFactory

d3d11

D3D11CreateDevice

api-ms-win-power-setting-l1-1-0

PowerSettingRegisterNotification
PowerSettingUnregisterNotification

api-ms-win-core-path-l1-1-0

PathCchAppend
PathCchCombineEx

api-ms-win-ro-typeresolution-l1-1-0

RoParseTypeName

version

VerQueryValueA
GetFileVersionInfoW
GetFileVersionInfoSizeW

api-ms-win-dx-d3dkmt-l1-1-0

GdiEntry13

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError
RoOriginateLanguageException

uxtheme

GetThemeAnimationTransform
GetThemeTimingFunction
OpenThemeData
CloseThemeData
GetThemeAnimationProperty

ntdll

RtlConvertDeviceFamilyInfoToString
RtlGetDeviceFamilyInfoEnum

api-ms-win-crt-locale-l1-1-0

___lc_collate_cp_func
___lc_locale_name_func
setlocale
_unlock_locales
_lock_locales
__pctype_func
___mb_cur_max_func
___lc_codepage_func

api-ms-win-crt-utility-l1-1-0

bsearch

d2d1

ord1

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllMain
GetErrorContextIndex
GetHeapHandle
OverrideXamlMetadataProvider
OverrideXamlResourcePropertyBag
XamlCheckProcessRequirements

Sections

.text
Size: 9.7MB - Virtual size: 9.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 584KB - Virtual size: 584KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 494KB - Virtual size: 493KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.ui.xaml.resources.19h1.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f0:7b:39:4e:25:0a:a1:c4:b4:e5:e5:de:93:2f:28:7d:1b:cb:76:13:d1:58:ff:13:61:e5:41:23:4d:e6:d6:51
Signer

Actual PE Digest

f0:7b:39:4e:25:0a:a1:c4:b4:e5:e5:de:93:2f:28:7d:1b:cb:76:13:d1:58:ff:13:61:e5:41:23:4d:e6:d6:51

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 542KB - Virtual size: 542KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Microsoft.ui.xaml.resources.common.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

50:b7:11:15:95:5c:9b:28:8e:82:7b:af:a6:48:25:f5:13:28:bc:3f:1b:be:d7:41:5b:61:f0:ac:8e:5f:b5:a0
Signer

Actual PE Digest

50:b7:11:15:95:5c:9b:28:8e:82:7b:af:a6:48:25:f5:13:28:bc:3f:1b:be:d7:41:5b:61:f0:ac:8e:5f:b5:a0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Newtonsoft.Json.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Certificate

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Not Before

15/01/2021, 00:00

Not After

14/01/2046, 23:59

Subject

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Certificate

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Not Before

15/07/2021, 00:00

Not After

14/07/2031, 23:59

Subject

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Not Before

13/08/2021, 00:00

Not After

29/10/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

12:a2:f8:77:6a:5b:04:46:97:f9:ac:0c:85:0b:b9:3c:9d:a2:ac:a9:a3:72:91:5b:d9:ed:db:47:d0:c2:9e:3d
Signer

Actual PE Digest

12:a2:f8:77:6a:5b:04:46:97:f9:ac:0c:85:0b:b9:3c:9d:a2:ac:a9:a3:72:91:5b:d9:ed:db:47:d0:c2:9e:3d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/Src/Newtonsoft.Json/obj/Release/net6.0/Newtonsoft.Json.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 681KB - Virtual size: 681KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PushNotificationsLongRunningTask.ProxyStub.dll
.dll windows:6 windows x64 arch:x64

b60c9854292affa057799be601b76277

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

56:0a:0f:2f:bc:fe:ae:6e:3e:e6:35:65:52:12:9b:77:d1:57:de:48:c0:ea:c8:65:3d:9d:3e:1f:ec:13:c7:6b
Signer

Actual PE Digest

56:0a:0f:2f:bc:fe:ae:6e:3e:e6:35:65:52:12:9b:77:d1:57:de:48:c0:ea:c8:65:3d:9d:3e:1f:ec:13:c7:6b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

PushNotificationsLongRunningTask.ProxyStub.pdb

Imports

rpcrt4

CStdStubBuffer_IsIIDSupported
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
NdrDllGetClassObject
NdrOleAllocate
CStdStubBuffer_QueryInterface
CStdStubBuffer_Connect
IUnknown_Release_Proxy
CStdStubBuffer_AddRef
NdrOleFree
CStdStubBuffer_DebugServerQueryInterface
IUnknown_AddRef_Proxy
CStdStubBuffer_Invoke
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
CStdStubBuffer_CountRefs

kernel32

LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetLastError
GetLastError
InterlockedFlushSList
RtlUnwindEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_narrow_environment
terminate
_configure_narrow_argv
_initterm_e
_seh_filter_dll
abort
_initialize_onexit_table
_cexit
_initterm

api-ms-win-crt-heap-l1-1-0

free
calloc

api-ms-win-crt-string-l1-1-0

wcsncmp

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Resources/adj.json
Resources/api-ms-win-crt-utility-l1-1-1.dll
.dll windows:6 windows x64 arch:x64

ac287a8e203bb25d8817b787287a8d33

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msvcp140

??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z

msvcp140_codecvt_ids

?id@?$codecvt@_SDU_Mbstatet@@@std@@2V0locale@2@A

ws2_32

recv

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv

kernel32

RtlCaptureContext
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

Exports

Exports

Java_com_mojang_authlib_AuthenticationCpp_AuthenticationAccessToken
Java_com_netease_mc_mod_network_common_Library_AuthenticationAccessToken
Java_com_netease_mc_mod_network_common_Library_ChaChaProcess
Java_com_netease_mc_mod_network_common_Library_DecryptClassBytes
Java_com_netease_mc_mod_network_common_Library_DeleteChaCha
Java_com_netease_mc_mod_network_common_Library_GetToken
Java_com_netease_mc_mod_network_common_Library_NewChaCha
Java_com_netease_mc_mod_network_common_Library_Skip32
Java_com_netease_mc_mod_network_common_Library_close
Java_com_netease_mc_mod_network_common_Library_init
Java_com_netease_mc_mod_network_common_Library_log
Java_com_netease_mc_mod_network_common_Library_preInit
Java_com_netease_mc_mod_network_common_Library_reviewName
Java_com_netease_mc_mod_network_common_Library_reviewWord
Java_com_netease_mc_mod_network_common_Library_test

Sections

.text
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.3f6
Size: - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.&H2
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.w%9
Size: 14.8MB - Virtual size: 14.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 233B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Resources/authlib.jar
.jar
Resources/hyt/lobby1/-10_-1.mca
Resources/hyt/lobby1/-10_-10.mca
Resources/hyt/lobby1/-10_-11.mca
Resources/hyt/lobby1/-10_-2.mca
Resources/hyt/lobby1/-10_-3.mca
Resources/hyt/lobby1/-10_-4.mca
Resources/hyt/lobby1/-10_-5.mca
Resources/hyt/lobby1/-10_-6.mca
Resources/hyt/lobby1/-10_-7.mca
Resources/hyt/lobby1/-10_-8.mca
Resources/hyt/lobby1/-10_-9.mca
Resources/hyt/lobby1/-10_0.mca
Resources/hyt/lobby1/-10_1.mca
Resources/hyt/lobby1/-10_10.mca
Resources/hyt/lobby1/-10_2.mca
Resources/hyt/lobby1/-10_3.mca
Resources/hyt/lobby1/-10_4.mca
Resources/hyt/lobby1/-10_5.mca
Resources/hyt/lobby1/-10_6.mca
Resources/hyt/lobby1/-10_7.mca
Resources/hyt/lobby1/-10_8.mca
Resources/hyt/lobby1/-10_9.mca
Resources/hyt/lobby1/-11_-1.mca
Resources/hyt/lobby1/-11_-10.mca
Resources/hyt/lobby1/-11_-2.mca
Resources/hyt/lobby1/-11_-3.mca
Resources/hyt/lobby1/-11_-4.mca
Resources/hyt/lobby1/-11_-5.mca
Resources/hyt/lobby1/-11_-6.mca
Resources/hyt/lobby1/-11_-7.mca
Resources/hyt/lobby1/-11_-8.mca
Resources/hyt/lobby1/-11_-9.mca
Resources/hyt/lobby1/-11_0.mca
Resources/hyt/lobby1/-11_1.mca
Resources/hyt/lobby1/-11_10.mca
Resources/hyt/lobby1/-11_2.mca
Resources/hyt/lobby1/-11_3.mca
Resources/hyt/lobby1/-11_4.mca
Resources/hyt/lobby1/-11_5.mca
Resources/hyt/lobby1/-11_6.mca
Resources/hyt/lobby1/-11_7.mca
Resources/hyt/lobby1/-11_8.mca
Resources/hyt/lobby1/-11_9.mca
Resources/hyt/lobby1/-12_-1.mca
Resources/hyt/lobby1/-12_-10.mca
Resources/hyt/lobby1/-12_-2.mca
Resources/hyt/lobby1/-12_-3.mca
Resources/hyt/lobby1/-12_-4.mca
Resources/hyt/lobby1/-12_-5.mca
Resources/hyt/lobby1/-12_-6.mca
Resources/hyt/lobby1/-12_-7.mca
Resources/hyt/lobby1/-12_-8.mca
Resources/hyt/lobby1/-12_-9.mca
Resources/hyt/lobby1/-12_0.mca
Resources/hyt/lobby1/-12_1.mca
Resources/hyt/lobby1/-12_10.mca
Resources/hyt/lobby1/-12_2.mca
Resources/hyt/lobby1/-12_3.mca
Resources/hyt/lobby1/-12_4.mca
Resources/hyt/lobby1/-12_5.mca
Resources/hyt/lobby1/-12_6.mca
Resources/hyt/lobby1/-12_7.mca
Resources/hyt/lobby1/-12_8.mca
Resources/hyt/lobby1/-12_9.mca
Resources/hyt/lobby1/-13_-1.mca
Resources/hyt/lobby1/-13_-10.mca
Resources/hyt/lobby1/-13_-2.mca
Resources/hyt/lobby1/-13_-3.mca
Resources/hyt/lobby1/-13_-4.mca
Resources/hyt/lobby1/-13_-5.mca
Resources/hyt/lobby1/-13_-6.mca
Resources/hyt/lobby1/-13_-7.mca
Resources/hyt/lobby1/-13_-8.mca
Resources/hyt/lobby1/-13_-9.mca
Resources/hyt/lobby1/-13_0.mca
Resources/hyt/lobby1/-13_1.mca
Resources/hyt/lobby1/-13_10.mca
Resources/hyt/lobby1/-13_2.mca
Resources/hyt/lobby1/-13_3.mca
Resources/hyt/lobby1/-13_4.mca
Resources/hyt/lobby1/-13_5.mca
Resources/hyt/lobby1/-13_6.mca
Resources/hyt/lobby1/-13_7.mca
Resources/hyt/lobby1/-13_8.mca
Resources/hyt/lobby1/-13_9.mca
Resources/hyt/lobby1/-14_-1.mca
Resources/hyt/lobby1/-14_-10.mca
Resources/hyt/lobby1/-14_-2.mca
Resources/hyt/lobby1/-14_-3.mca
Resources/hyt/lobby1/-14_-4.mca
Resources/hyt/lobby1/-14_-5.mca
Resources/hyt/lobby1/-14_-6.mca
Resources/hyt/lobby1/-14_-7.mca
Resources/hyt/lobby1/-14_-8.mca
Resources/hyt/lobby1/-14_-9.mca
Resources/hyt/lobby1/-14_0.mca
Resources/hyt/lobby1/-14_1.mca
Resources/hyt/lobby1/-14_10.mca
Resources/hyt/lobby1/-14_2.mca
Resources/hyt/lobby1/-14_3.mca
Resources/hyt/lobby1/-14_4.mca
Resources/hyt/lobby1/-14_5.mca
Resources/hyt/lobby1/-14_6.mca
Resources/hyt/lobby1/-14_7.mca
Resources/hyt/lobby1/-14_8.mca
Resources/hyt/lobby1/-14_9.mca
Resources/hyt/lobby1/-15_-1.mca
Resources/hyt/lobby1/-15_-10.mca
Resources/hyt/lobby1/-15_-2.mca
Resources/hyt/lobby1/-15_-3.mca
Resources/hyt/lobby1/-15_-4.mca
Resources/hyt/lobby1/-15_-5.mca
Resources/hyt/lobby1/-15_-6.mca
Resources/hyt/lobby1/-15_-7.mca
Resources/hyt/lobby1/-15_-8.mca
Resources/hyt/lobby1/-15_-9.mca
Resources/hyt/lobby1/-15_0.mca
Resources/hyt/lobby1/-15_1.mca
Resources/hyt/lobby1/-15_10.mca
Resources/hyt/lobby1/-15_2.mca
Resources/hyt/lobby1/-15_3.mca
Resources/hyt/lobby1/-15_4.mca
Resources/hyt/lobby1/-15_5.mca
Resources/hyt/lobby1/-15_6.mca
Resources/hyt/lobby1/-15_7.mca
Resources/hyt/lobby1/-15_8.mca
Resources/hyt/lobby1/-15_9.mca
Resources/hyt/lobby1/-16_-1.mca
Resources/hyt/lobby1/-16_-10.mca
Resources/hyt/lobby1/-16_-2.mca
Resources/hyt/lobby1/-16_-3.mca
Resources/hyt/lobby1/-16_-4.mca
Resources/hyt/lobby1/-16_-5.mca
Resources/hyt/lobby1/-16_-6.mca
Resources/hyt/lobby1/-16_-7.mca
Resources/hyt/lobby1/-16_-8.mca
Resources/hyt/lobby1/-16_-9.mca
Resources/hyt/lobby1/-16_0.mca
Resources/hyt/lobby1/-16_1.mca
Resources/hyt/lobby1/-16_10.mca
Resources/hyt/lobby1/-16_2.mca
Resources/hyt/lobby1/-16_3.mca
Resources/hyt/lobby1/-16_4.mca
Resources/hyt/lobby1/-16_5.mca
Resources/hyt/lobby1/-16_6.mca
Resources/hyt/lobby1/-16_7.mca
Resources/hyt/lobby1/-16_8.mca
Resources/hyt/lobby1/-16_9.mca
Resources/hyt/lobby1/-1_-1.mca
Resources/hyt/lobby1/-1_-10.mca
Resources/hyt/lobby1/-1_-11.mca
Resources/hyt/lobby1/-1_-12.mca
Resources/hyt/lobby1/-1_-2.mca
Resources/hyt/lobby1/-1_-3.mca
Resources/hyt/lobby1/-1_-4.mca
Resources/hyt/lobby1/-1_-5.mca
Resources/hyt/lobby1/-1_-6.mca
Resources/hyt/lobby1/-1_-7.mca
Resources/hyt/lobby1/-1_-8.mca
Resources/hyt/lobby1/-1_-9.mca
Resources/hyt/lobby1/-1_0.mca
Resources/hyt/lobby1/-1_1.mca
Resources/hyt/lobby1/-1_10.mca
Resources/hyt/lobby1/-1_11.mca
Resources/hyt/lobby1/-1_2.mca
Resources/hyt/lobby1/-1_3.mca
Resources/hyt/lobby1/-1_4.mca
Resources/hyt/lobby1/-1_5.mca
Resources/hyt/lobby1/-1_6.mca
Resources/hyt/lobby1/-1_7.mca
Resources/hyt/lobby1/-1_8.mca
Resources/hyt/lobby1/-1_9.mca
Resources/hyt/lobby1/-2_-1.mca
Resources/hyt/lobby1/-2_-10.mca
Resources/hyt/lobby1/-2_-11.mca
Resources/hyt/lobby1/-2_-12.mca
Resources/hyt/lobby1/-2_-2.mca
Resources/hyt/lobby1/-2_-3.mca
Resources/hyt/lobby1/-2_-4.mca
Resources/hyt/lobby1/-2_-5.mca
Resources/hyt/lobby1/-2_-6.mca
Resources/hyt/lobby1/-2_-7.mca
Resources/hyt/lobby1/-2_-8.mca
Resources/hyt/lobby1/-2_-9.mca
Resources/hyt/lobby1/-2_0.mca
Resources/hyt/lobby1/-2_1.mca
Resources/hyt/lobby1/-2_10.mca
Resources/hyt/lobby1/-2_11.mca
Resources/hyt/lobby1/-2_2.mca
Resources/hyt/lobby1/-2_3.mca
Resources/hyt/lobby1/-2_4.mca
Resources/hyt/lobby1/-2_5.mca
Resources/hyt/lobby1/-2_6.mca
Resources/hyt/lobby1/-2_7.mca
Resources/hyt/lobby1/-2_8.mca
Resources/hyt/lobby1/-2_9.mca
Resources/hyt/lobby1/-3_-1.mca
Resources/hyt/lobby1/-3_-10.mca
Resources/hyt/lobby1/-3_-11.mca
Resources/hyt/lobby1/-3_-12.mca
Resources/hyt/lobby1/-3_-2.mca
Resources/hyt/lobby1/-3_-3.mca
Resources/hyt/lobby1/-3_-4.mca
Resources/hyt/lobby1/-3_-5.mca
Resources/hyt/lobby1/-3_-6.mca
Resources/hyt/lobby1/-3_-7.mca
Resources/hyt/lobby1/-3_-8.mca
Resources/hyt/lobby1/-3_-9.mca
Resources/hyt/lobby1/-3_0.mca
Resources/hyt/lobby1/-3_1.mca
Resources/hyt/lobby1/-3_10.mca
Resources/hyt/lobby1/-3_11.mca
Resources/hyt/lobby1/-3_2.mca
Resources/hyt/lobby1/-3_3.mca
Resources/hyt/lobby1/-3_4.mca
Resources/hyt/lobby1/-3_5.mca
Resources/hyt/lobby1/-3_6.mca
Resources/hyt/lobby1/-3_7.mca
Resources/hyt/lobby1/-3_8.mca
Resources/hyt/lobby1/-3_9.mca
Resources/hyt/lobby1/-4_-1.mca
Resources/hyt/lobby1/-4_-10.mca
Resources/hyt/lobby1/-4_-11.mca
Resources/hyt/lobby1/-4_-12.mca
Resources/hyt/lobby1/-4_-2.mca
Resources/hyt/lobby1/-4_-3.mca
Resources/hyt/lobby1/-4_-4.mca
Resources/hyt/lobby1/-4_-5.mca
Resources/hyt/lobby1/-4_-6.mca
Resources/hyt/lobby1/-4_-7.mca
Resources/hyt/lobby1/-4_-8.mca
Resources/hyt/lobby1/-4_-9.mca
Resources/hyt/lobby1/-4_0.mca
Resources/hyt/lobby1/-4_1.mca
Resources/hyt/lobby1/-4_10.mca
Resources/hyt/lobby1/-4_11.mca
Resources/hyt/lobby1/-4_2.mca
Resources/hyt/lobby1/-4_3.mca
Resources/hyt/lobby1/-4_4.mca
Resources/hyt/lobby1/-4_5.mca
Resources/hyt/lobby1/-4_6.mca
Resources/hyt/lobby1/-4_7.mca
Resources/hyt/lobby1/-4_8.mca
Resources/hyt/lobby1/-4_9.mca
Resources/hyt/lobby1/-5_-1.mca
Resources/hyt/lobby1/-5_-10.mca
Resources/hyt/lobby1/-5_-11.mca
Resources/hyt/lobby1/-5_-12.mca
Resources/hyt/lobby1/-5_-2.mca
Resources/hyt/lobby1/-5_-3.mca
Resources/hyt/lobby1/-5_-4.mca
Resources/hyt/lobby1/-5_-5.mca
Resources/hyt/lobby1/-5_-6.mca
Resources/hyt/lobby1/-5_-7.mca
Resources/hyt/lobby1/-5_-8.mca
Resources/hyt/lobby1/-5_-9.mca
Resources/hyt/lobby1/-5_0.mca
Resources/hyt/lobby1/-5_1.mca
Resources/hyt/lobby1/-5_10.mca
Resources/hyt/lobby1/-5_11.mca
Resources/hyt/lobby1/-5_2.mca
Resources/hyt/lobby1/-5_3.mca
Resources/hyt/lobby1/-5_4.mca
Resources/hyt/lobby1/-5_5.mca
Resources/hyt/lobby1/-5_6.mca
Resources/hyt/lobby1/-5_7.mca
Resources/hyt/lobby1/-5_8.mca
Resources/hyt/lobby1/-5_9.mca
Resources/hyt/lobby1/-6_-1.mca
Resources/hyt/lobby1/-6_-10.mca
Resources/hyt/lobby1/-6_-11.mca
Resources/hyt/lobby1/-6_-12.mca
Resources/hyt/lobby1/-6_-2.mca
Resources/hyt/lobby1/-6_-3.mca
Resources/hyt/lobby1/-6_-4.mca
Resources/hyt/lobby1/-6_-5.mca
Resources/hyt/lobby1/-6_-6.mca
Resources/hyt/lobby1/-6_-7.mca
Resources/hyt/lobby1/-6_-8.mca
Resources/hyt/lobby1/-6_-9.mca
Resources/hyt/lobby1/-6_0.mca
Resources/hyt/lobby1/-6_1.mca
Resources/hyt/lobby1/-6_10.mca
Resources/hyt/lobby1/-6_11.mca
Resources/hyt/lobby1/-6_2.mca
Resources/hyt/lobby1/-6_3.mca
Resources/hyt/lobby1/-6_4.mca
Resources/hyt/lobby1/-6_5.mca
Resources/hyt/lobby1/-6_6.mca
Resources/hyt/lobby1/-6_7.mca
Resources/hyt/lobby1/-6_8.mca
Resources/hyt/lobby1/-6_9.mca
Resources/hyt/lobby1/-7_-1.mca
Resources/hyt/lobby1/-7_-10.mca
Resources/hyt/lobby1/-7_-11.mca
Resources/hyt/lobby1/-7_-12.mca
Resources/hyt/lobby1/-7_-2.mca
Resources/hyt/lobby1/-7_-3.mca
Resources/hyt/lobby1/-7_-4.mca
Resources/hyt/lobby1/-7_-5.mca
Resources/hyt/lobby1/-7_-6.mca
Resources/hyt/lobby1/-7_-7.mca
Resources/hyt/lobby1/-7_-8.mca
Resources/hyt/lobby1/-7_-9.mca
Resources/hyt/lobby1/-7_0.mca
Resources/hyt/lobby1/-7_1.mca
Resources/hyt/lobby1/-7_10.mca
Resources/hyt/lobby1/-7_11.mca
Resources/hyt/lobby1/-7_2.mca
Resources/hyt/lobby1/-7_3.mca
Resources/hyt/lobby1/-7_4.mca
Resources/hyt/lobby1/-7_5.mca
Resources/hyt/lobby1/-7_6.mca
Resources/hyt/lobby1/-7_7.mca
Resources/hyt/lobby1/-7_8.mca
Resources/hyt/lobby1/-7_9.mca
Resources/hyt/lobby1/-8_-1.mca
Resources/hyt/lobby1/-8_-10.mca
Resources/hyt/lobby1/-8_-11.mca
Resources/hyt/lobby1/-8_-12.mca
Resources/hyt/lobby1/-8_-2.mca
Resources/hyt/lobby1/-8_-3.mca
Resources/hyt/lobby1/-8_-4.mca
Resources/hyt/lobby1/-8_-5.mca
Resources/hyt/lobby1/-8_-6.mca
Resources/hyt/lobby1/-8_-7.mca
Resources/hyt/lobby1/-8_-8.mca
Resources/hyt/lobby1/-8_-9.mca
Resources/hyt/lobby1/-8_0.mca
Resources/hyt/lobby1/-8_1.mca
Resources/hyt/lobby1/-8_10.mca
Resources/hyt/lobby1/-8_11.mca
Resources/hyt/lobby1/-8_2.mca
Resources/hyt/lobby1/-8_3.mca
Resources/hyt/lobby1/-8_4.mca
Resources/hyt/lobby1/-8_5.mca
Resources/hyt/lobby1/-8_6.mca
Resources/hyt/lobby1/-8_7.mca
Resources/hyt/lobby1/-8_8.mca
Resources/hyt/lobby1/-8_9.mca
Resources/hyt/lobby1/-9_-1.mca
Resources/hyt/lobby1/-9_-10.mca
Resources/hyt/lobby1/-9_-11.mca
Resources/hyt/lobby1/-9_-2.mca
Resources/hyt/lobby1/-9_-3.mca
Resources/hyt/lobby1/-9_-4.mca
Resources/hyt/lobby1/-9_-5.mca
Resources/hyt/lobby1/-9_-6.mca
Resources/hyt/lobby1/-9_-7.mca
Resources/hyt/lobby1/-9_-8.mca
Resources/hyt/lobby1/-9_-9.mca
Resources/hyt/lobby1/-9_0.mca
Resources/hyt/lobby1/-9_1.mca
Resources/hyt/lobby1/-9_10.mca
Resources/hyt/lobby1/-9_11.mca
Resources/hyt/lobby1/-9_2.mca
Resources/hyt/lobby1/-9_3.mca
Resources/hyt/lobby1/-9_4.mca
Resources/hyt/lobby1/-9_5.mca
Resources/hyt/lobby1/-9_6.mca
Resources/hyt/lobby1/-9_7.mca
Resources/hyt/lobby1/-9_8.mca
Resources/hyt/lobby1/-9_9.mca
Resources/hyt/lobby1/0_-1.mca
Resources/hyt/lobby1/0_-10.mca
Resources/hyt/lobby1/0_-11.mca
Resources/hyt/lobby1/0_-12.mca
Resources/hyt/lobby1/0_-2.mca
Resources/hyt/lobby1/0_-3.mca
Resources/hyt/lobby1/0_-4.mca
Resources/hyt/lobby1/0_-5.mca
Resources/hyt/lobby1/0_-6.mca
Resources/hyt/lobby1/0_-7.mca
Resources/hyt/lobby1/0_-8.mca
Resources/hyt/lobby1/0_-9.mca
Resources/hyt/lobby1/0_0.mca
Resources/hyt/lobby1/0_1.mca
Resources/hyt/lobby1/0_10.mca
Resources/hyt/lobby1/0_11.mca
Resources/hyt/lobby1/0_2.mca
Resources/hyt/lobby1/0_3.mca
Resources/hyt/lobby1/0_4.mca
Resources/hyt/lobby1/0_5.mca
Resources/hyt/lobby1/0_6.mca
Resources/hyt/lobby1/0_7.mca
Resources/hyt/lobby1/0_8.mca
Resources/hyt/lobby1/0_9.mca
Resources/hyt/lobby1/10_-1.mca
Resources/hyt/lobby1/10_-10.mca
Resources/hyt/lobby1/10_-11.mca
Resources/hyt/lobby1/10_-12.mca
Resources/hyt/lobby1/10_-2.mca
Resources/hyt/lobby1/10_-3.mca
Resources/hyt/lobby1/10_-4.mca
Resources/hyt/lobby1/10_-5.mca
Resources/hyt/lobby1/10_-6.mca
Resources/hyt/lobby1/10_-7.mca
Resources/hyt/lobby1/10_-8.mca
Resources/hyt/lobby1/10_-9.mca
Resources/hyt/lobby1/10_0.mca
Resources/hyt/lobby1/10_1.mca
Resources/hyt/lobby1/10_10.mca
Resources/hyt/lobby1/10_11.mca
Resources/hyt/lobby1/10_2.mca
Resources/hyt/lobby1/10_3.mca
Resources/hyt/lobby1/10_4.mca
Resources/hyt/lobby1/10_5.mca
Resources/hyt/lobby1/10_6.mca
Resources/hyt/lobby1/10_7.mca
Resources/hyt/lobby1/10_8.mca
Resources/hyt/lobby1/10_9.mca
Resources/hyt/lobby1/11_-1.mca
Resources/hyt/lobby1/11_-10.mca
Resources/hyt/lobby1/11_-11.mca
Resources/hyt/lobby1/11_-12.mca
Resources/hyt/lobby1/11_-2.mca
Resources/hyt/lobby1/11_-3.mca
Resources/hyt/lobby1/11_-4.mca
Resources/hyt/lobby1/11_-5.mca
Resources/hyt/lobby1/11_-6.mca
Resources/hyt/lobby1/11_-7.mca
Resources/hyt/lobby1/11_-8.mca
Resources/hyt/lobby1/11_-9.mca
Resources/hyt/lobby1/11_0.mca
Resources/hyt/lobby1/11_1.mca
Resources/hyt/lobby1/11_10.mca
Resources/hyt/lobby1/11_11.mca
Resources/hyt/lobby1/11_2.mca
Resources/hyt/lobby1/11_3.mca
Resources/hyt/lobby1/11_4.mca
Resources/hyt/lobby1/11_5.mca
Resources/hyt/lobby1/11_6.mca
Resources/hyt/lobby1/11_7.mca
Resources/hyt/lobby1/11_8.mca
Resources/hyt/lobby1/11_9.mca
Resources/hyt/lobby1/12_-1.mca
Resources/hyt/lobby1/12_-10.mca
Resources/hyt/lobby1/12_-11.mca
Resources/hyt/lobby1/12_-12.mca
Resources/hyt/lobby1/12_-2.mca
Resources/hyt/lobby1/12_-3.mca
Resources/hyt/lobby1/12_-4.mca
Resources/hyt/lobby1/12_-5.mca
Resources/hyt/lobby1/12_-6.mca
Resources/hyt/lobby1/12_-7.mca
Resources/hyt/lobby1/12_-8.mca
Resources/hyt/lobby1/12_-9.mca
Resources/hyt/lobby1/12_0.mca
Resources/hyt/lobby1/12_1.mca
Resources/hyt/lobby1/12_10.mca
Resources/hyt/lobby1/12_2.mca
Resources/hyt/lobby1/12_3.mca
Resources/hyt/lobby1/12_4.mca
Resources/hyt/lobby1/12_5.mca
Resources/hyt/lobby1/12_6.mca
Resources/hyt/lobby1/12_7.mca
Resources/hyt/lobby1/12_8.mca
Resources/hyt/lobby1/12_9.mca
Resources/hyt/lobby1/13_-1.mca
Resources/hyt/lobby1/13_-10.mca
Resources/hyt/lobby1/13_-2.mca
Resources/hyt/lobby1/13_-3.mca
Resources/hyt/lobby1/13_-4.mca
Resources/hyt/lobby1/13_-5.mca
Resources/hyt/lobby1/13_-6.mca
Resources/hyt/lobby1/13_-7.mca
Resources/hyt/lobby1/13_-8.mca
Resources/hyt/lobby1/13_-9.mca
Resources/hyt/lobby1/13_0.mca
Resources/hyt/lobby1/13_1.mca
Resources/hyt/lobby1/13_10.mca
Resources/hyt/lobby1/13_2.mca
Resources/hyt/lobby1/13_3.mca
Resources/hyt/lobby1/13_4.mca
Resources/hyt/lobby1/13_5.mca
Resources/hyt/lobby1/13_6.mca
Resources/hyt/lobby1/13_7.mca
Resources/hyt/lobby1/13_8.mca
Resources/hyt/lobby1/13_9.mca
Resources/hyt/lobby1/1_-1.mca
Resources/hyt/lobby1/1_-10.mca
Resources/hyt/lobby1/1_-11.mca
Resources/hyt/lobby1/1_-12.mca
Resources/hyt/lobby1/1_-2.mca
Resources/hyt/lobby1/1_-3.mca
Resources/hyt/lobby1/1_-4.mca
Resources/hyt/lobby1/1_-5.mca
Resources/hyt/lobby1/1_-6.mca
Resources/hyt/lobby1/1_-7.mca
Resources/hyt/lobby1/1_-8.mca
Resources/hyt/lobby1/1_-9.mca
Resources/hyt/lobby1/1_0.mca
Resources/hyt/lobby1/1_1.mca
Resources/hyt/lobby1/1_10.mca
Resources/hyt/lobby1/1_11.mca
Resources/hyt/lobby1/1_2.mca
Resources/hyt/lobby1/1_3.mca
Resources/hyt/lobby1/1_4.mca
Resources/hyt/lobby1/1_5.mca
Resources/hyt/lobby1/1_6.mca
Resources/hyt/lobby1/1_7.mca
Resources/hyt/lobby1/1_8.mca
Resources/hyt/lobby1/1_9.mca
Resources/hyt/lobby1/2_-1.mca
Resources/hyt/lobby1/2_-10.mca
Resources/hyt/lobby1/2_-11.mca
Resources/hyt/lobby1/2_-12.mca
Resources/hyt/lobby1/2_-2.mca
Resources/hyt/lobby1/2_-3.mca
Resources/hyt/lobby1/2_-4.mca
Resources/hyt/lobby1/2_-5.mca
Resources/hyt/lobby1/2_-6.mca
Resources/hyt/lobby1/2_-7.mca
Resources/hyt/lobby1/2_-8.mca
Resources/hyt/lobby1/2_-9.mca
Resources/hyt/lobby1/2_0.mca
Resources/hyt/lobby1/2_1.mca
Resources/hyt/lobby1/2_10.mca
Resources/hyt/lobby1/2_11.mca
Resources/hyt/lobby1/2_2.mca
Resources/hyt/lobby1/2_3.mca
Resources/hyt/lobby1/2_4.mca
Resources/hyt/lobby1/2_5.mca
Resources/hyt/lobby1/2_6.mca
Resources/hyt/lobby1/2_7.mca
Resources/hyt/lobby1/2_8.mca
Resources/hyt/lobby1/2_9.mca
Resources/hyt/lobby1/3_-1.mca
Resources/hyt/lobby1/3_-10.mca
Resources/hyt/lobby1/3_-11.mca
Resources/hyt/lobby1/3_-12.mca
Resources/hyt/lobby1/3_-2.mca
Resources/hyt/lobby1/3_-3.mca
Resources/hyt/lobby1/3_-4.mca
Resources/hyt/lobby1/3_-5.mca
Resources/hyt/lobby1/3_-6.mca
Resources/hyt/lobby1/3_-7.mca
Resources/hyt/lobby1/3_-8.mca
Resources/hyt/lobby1/3_-9.mca
Resources/hyt/lobby1/3_0.mca
Resources/hyt/lobby1/3_1.mca
Resources/hyt/lobby1/3_10.mca
Resources/hyt/lobby1/3_11.mca
Resources/hyt/lobby1/3_2.mca
Resources/hyt/lobby1/3_3.mca
Resources/hyt/lobby1/3_4.mca
Resources/hyt/lobby1/3_5.mca
Resources/hyt/lobby1/3_6.mca
Resources/hyt/lobby1/3_7.mca
Resources/hyt/lobby1/3_8.mca
Resources/hyt/lobby1/3_9.mca
Resources/hyt/lobby1/4_-1.mca
Resources/hyt/lobby1/4_-10.mca
Resources/hyt/lobby1/4_-11.mca
Resources/hyt/lobby1/4_-12.mca
Resources/hyt/lobby1/4_-2.mca
Resources/hyt/lobby1/4_-3.mca
Resources/hyt/lobby1/4_-4.mca
Resources/hyt/lobby1/4_-5.mca
Resources/hyt/lobby1/4_-6.mca
Resources/hyt/lobby1/4_-7.mca
Resources/hyt/lobby1/4_-8.mca
Resources/hyt/lobby1/4_-9.mca
Resources/hyt/lobby1/4_0.mca
Resources/hyt/lobby1/4_1.mca
Resources/hyt/lobby1/4_10.mca
Resources/hyt/lobby1/4_11.mca
Resources/hyt/lobby1/4_2.mca
Resources/hyt/lobby1/4_3.mca
Resources/hyt/lobby1/4_4.mca
Resources/hyt/lobby1/4_5.mca
Resources/hyt/lobby1/4_6.mca
Resources/hyt/lobby1/4_7.mca
Resources/hyt/lobby1/4_8.mca
Resources/hyt/lobby1/4_9.mca
Resources/hyt/lobby1/5_-1.mca
Resources/hyt/lobby1/5_-10.mca
Resources/hyt/lobby1/5_-11.mca
Resources/hyt/lobby1/5_-12.mca
Resources/hyt/lobby1/5_-2.mca
Resources/hyt/lobby1/5_-3.mca
Resources/hyt/lobby1/5_-4.mca
Resources/hyt/lobby1/5_-5.mca
Resources/hyt/lobby1/5_-6.mca
Resources/hyt/lobby1/5_-7.mca
Resources/hyt/lobby1/5_-8.mca
Resources/hyt/lobby1/5_-9.mca
Resources/hyt/lobby1/5_0.mca
Resources/hyt/lobby1/5_1.mca
Resources/hyt/lobby1/5_10.mca
Resources/hyt/lobby1/5_11.mca
Resources/hyt/lobby1/5_2.mca
Resources/hyt/lobby1/5_3.mca
Resources/hyt/lobby1/5_4.mca
Resources/hyt/lobby1/5_5.mca
Resources/hyt/lobby1/5_6.mca
Resources/hyt/lobby1/5_7.mca
Resources/hyt/lobby1/5_8.mca
Resources/hyt/lobby1/5_9.mca
Resources/hyt/lobby1/6_-1.mca
Resources/hyt/lobby1/6_-10.mca
Resources/hyt/lobby1/6_-11.mca
Resources/hyt/lobby1/6_-12.mca
Resources/hyt/lobby1/6_-2.mca
Resources/hyt/lobby1/6_-3.mca
Resources/hyt/lobby1/6_-4.mca
Resources/hyt/lobby1/6_-5.mca
Resources/hyt/lobby1/6_-6.mca
Resources/hyt/lobby1/6_-7.mca
Resources/hyt/lobby1/6_-8.mca
Resources/hyt/lobby1/6_-9.mca
Resources/hyt/lobby1/6_0.mca
Resources/hyt/lobby1/6_1.mca
Resources/hyt/lobby1/6_10.mca
Resources/hyt/lobby1/6_11.mca
Resources/hyt/lobby1/6_2.mca
Resources/hyt/lobby1/6_3.mca
Resources/hyt/lobby1/6_4.mca
Resources/hyt/lobby1/6_5.mca
Resources/hyt/lobby1/6_6.mca
Resources/hyt/lobby1/6_7.mca
Resources/hyt/lobby1/6_8.mca
Resources/hyt/lobby1/6_9.mca
Resources/hyt/lobby1/7_-1.mca
Resources/hyt/lobby1/7_-10.mca
Resources/hyt/lobby1/7_-11.mca
Resources/hyt/lobby1/7_-12.mca
Resources/hyt/lobby1/7_-2.mca
Resources/hyt/lobby1/7_-3.mca
Resources/hyt/lobby1/7_-4.mca
Resources/hyt/lobby1/7_-5.mca
Resources/hyt/lobby1/7_-6.mca
Resources/hyt/lobby1/7_-7.mca
Resources/hyt/lobby1/7_-8.mca
Resources/hyt/lobby1/7_-9.mca
Resources/hyt/lobby1/7_0.mca
Resources/hyt/lobby1/7_1.mca
Resources/hyt/lobby1/7_10.mca
Resources/hyt/lobby1/7_11.mca
Resources/hyt/lobby1/7_2.mca
Resources/hyt/lobby1/7_3.mca
Resources/hyt/lobby1/7_4.mca
Resources/hyt/lobby1/7_5.mca
Resources/hyt/lobby1/7_6.mca
Resources/hyt/lobby1/7_7.mca
Resources/hyt/lobby1/7_8.mca
Resources/hyt/lobby1/7_9.mca
Resources/hyt/lobby1/8_-1.mca
Resources/hyt/lobby1/8_-10.mca
Resources/hyt/lobby1/8_-11.mca
Resources/hyt/lobby1/8_-12.mca
Resources/hyt/lobby1/8_-2.mca
Resources/hyt/lobby1/8_-3.mca
Resources/hyt/lobby1/8_-4.mca
Resources/hyt/lobby1/8_-5.mca
Resources/hyt/lobby1/8_-6.mca
Resources/hyt/lobby1/8_-7.mca
Resources/hyt/lobby1/8_-8.mca
Resources/hyt/lobby1/8_-9.mca
Resources/hyt/lobby1/8_0.mca
Resources/hyt/lobby1/8_1.mca
Resources/hyt/lobby1/8_10.mca
Resources/hyt/lobby1/8_11.mca
Resources/hyt/lobby1/8_2.mca
Resources/hyt/lobby1/8_3.mca
Resources/hyt/lobby1/8_4.mca
Resources/hyt/lobby1/8_5.mca
Resources/hyt/lobby1/8_6.mca
Resources/hyt/lobby1/8_7.mca
Resources/hyt/lobby1/8_8.mca
Resources/hyt/lobby1/8_9.mca
Resources/hyt/lobby1/9_-1.mca
Resources/hyt/lobby1/9_-10.mca
Resources/hyt/lobby1/9_-11.mca
Resources/hyt/lobby1/9_-12.mca
Resources/hyt/lobby1/9_-2.mca
Resources/hyt/lobby1/9_-3.mca
Resources/hyt/lobby1/9_-4.mca
Resources/hyt/lobby1/9_-5.mca
Resources/hyt/lobby1/9_-6.mca
Resources/hyt/lobby1/9_-7.mca
Resources/hyt/lobby1/9_-8.mca
Resources/hyt/lobby1/9_-9.mca
Resources/hyt/lobby1/9_0.mca
Resources/hyt/lobby1/9_1.mca
Resources/hyt/lobby1/9_10.mca
Resources/hyt/lobby1/9_11.mca
Resources/hyt/lobby1/9_2.mca
Resources/hyt/lobby1/9_3.mca
Resources/hyt/lobby1/9_4.mca
Resources/hyt/lobby1/9_5.mca
Resources/hyt/lobby1/9_6.mca
Resources/hyt/lobby1/9_7.mca
Resources/hyt/lobby1/9_8.mca
Resources/hyt/lobby1/9_9.mca
Resources/item.json
Resources/name.json
Resources/pe/Memory.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\newgm\git\memory.dll\Memory\obj\x86\Debug\netstandard2.0\Memory.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Resources/pe/ZenlessZoneBypass.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\C#Code\ZenlessZoneBypass\obj\Release\ZenlessZoneBypass.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Resources/pre.json
Resources/sub.json
Resources/v.json
RestartAgent.exe
.exe windows:6 windows x64 arch:x64

4ac2e5042c612a88f108078bd7e662a1

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

16:c9:a2:90:d1:dc:9d:5f:ca:81:c3:23:a7:a0:47:ad:d4:1e:06:54:0a:10:e3:90:cb:bd:04:5c:cf:c5:72:8d
Signer

Actual PE Digest

16:c9:a2:90:d1:dc:9d:5f:ca:81:c3:23:a7:a0:47:ad:d4:1e:06:54:0a:10:e3:90:cb:bd:04:5c:cf:c5:72:8d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

RestartAgent.pdb

Imports

kernel32

DeleteProcThreadAttributeList
GetCommandLineW
LoadLibraryExW
FreeLibrary
OutputDebugStringW
GetCurrentThreadId
FormatMessageW
IsDebuggerPresent
GetLastError
TerminateProcess
WaitForSingleObjectEx
InitializeProcThreadAttributeList
HeapAlloc
GetProcessHeap
UpdateProcThreadAttribute
GetCurrentPackageFullName
CreateProcessW
TlsFree
ResumeThread
CloseHandle
SetLastError
HeapFree
LocalFree
QueryFullProcessImageNameW
TlsSetValue
GetModuleFileNameA
CreateSemaphoreExW
ReleaseSemaphore
GetModuleHandleExW
WaitForSingleObject
ReleaseMutex
OpenSemaphoreW
GetProcAddress
CreateMutexExW
GetCurrentProcessId
GetModuleHandleW
DebugBreak
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EncodePointer
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent

shell32

CommandLineToArgvW

ole32

CoTaskMemFree
CoTaskMemAlloc

user32

AllowSetForegroundWindow

api-ms-win-crt-runtime-l1-1-0

abort
_errno
_initialize_onexit_table
_invalid_parameter_noinfo
_crt_atexit
_invalid_parameter_noinfo_noreturn
_seh_filter_exe
_set_app_type
_register_onexit_function
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
exit
_exit
terminate
_c_exit
_register_thread_local_exe_atexit_callback
_cexit

api-ms-win-crt-convert-l1-1-0

_wtoi64

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
_set_fmode
__p__commode
__stdio_common_vswprintf

api-ms-win-crt-string-l1-1-0

strcpy_s
wcsncmp
iswspace

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode
malloc
_callnewh
calloc

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

oleaut32

SysFreeString
SysStringLen
SetErrorInfo

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WNF.Client.UI.deps.json
WNF.Client.UI.dll
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WNF.Client.UI.exe
.exe windows:6 windows x64 arch:x64

6dbf27f4c70fe2c8ed3e0122ba75d641

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb

Imports

kernel32

FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetEnvironmentVariableW
FindClose
MultiByteToWideChar
GetLastError
GetFileAttributesExW
GetFullPathNameW
GetProcAddress
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EnterCriticalSection
FindFirstFileExW
OutputDebugStringW
LoadLibraryA
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
GetStringTypeW

user32

MessageBoxW

shell32

ShellExecuteW

advapi32

RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey

api-ms-win-crt-runtime-l1-1-0

_exit
__p___argc
_initterm_e
_initterm
_get_initial_wide_environment
_invalid_parameter_noinfo_noreturn
_initialize_wide_environment
_configure_wide_argv
_initialize_onexit_table
_set_app_type
__p___wargv
_seh_filter_exe
_register_onexit_function
_cexit
terminate
_errno
exit
abort
_crt_atexit
_c_exit
_register_thread_local_exe_atexit_callback

api-ms-win-crt-stdio-l1-1-0

setvbuf
fflush
_wfopen
__stdio_common_vswprintf
__stdio_common_vfwprintf
_set_fmode
__stdio_common_vsprintf_s
__acrt_iob_func
fputwc
fputws
__p__commode

api-ms-win-crt-heap-l1-1-0

_set_new_mode
_callnewh
free
malloc
calloc

api-ms-win-crt-string-l1-1-0

wcsnlen
strcpy_s
_wcsdup
strcspn
wcsncmp
toupper

api-ms-win-crt-convert-l1-1-0

_wtoi
wcstoul

api-ms-win-crt-locale-l1-1-0

setlocale
___lc_locale_name_func
localeconv
_unlock_locales
_lock_locales
___mb_cur_max_func
_configthreadlocale
__pctype_func
___lc_codepage_func

api-ms-win-crt-math-l1-1-0

frexp
__setusermatherr

api-ms-win-crt-time-l1-1-0

_gmtime64_s
_time64
wcsftime

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
WNF.Client.UI.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-669F1E53-6D50.pma
WNF.Client.UI.exe.WebView2/EBWebView/Crashpad/settings.dat
WNF.Client.UI.exe.WebView2/EBWebView/Crashpad/throttle_store.dat
WNF.Client.UI.exe.WebView2/EBWebView/CrashpadMetrics-active.pma
WNF.Client.UI.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0
WNF.Client.UI.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1
WNF.Client.UI.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2
WNF.Client.UI.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3
WNF.Client.UI.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000001
WNF.Client.UI.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000002
WNF.Client.UI.exe.WebView2/EBWebView/Default/Cache/Cache_Data/index
WNF.Client.UI.exe.WebView2/EBWebView/Default/Code Cache/js/045db1cdf2236cce_0
WNF.Client.UI.exe.WebView2/EBWebView/Default/Code Cache/js/21ee303bf00c7a52_0
WNF.Client.UI.exe.WebView2/EBWebView/Default/Code Cache/js/6993022969e5ce3e_0
WNF.Client.UI.exe.WebView2/EBWebView/Default/Code Cache/js/a42deb6f9ccdf10a_0
WNF.Client.UI.exe.WebView2/EBWebView/Default/Code Cache/js/fb23e065544e5ee9_0
WNF.Client.UI.exe.WebView2/EBWebView/Default/Code Cache/js/index
WNF.Client.UI.exe.WebView2/EBWebView/Default/Code Cache/js/index-dir/the-real-index
WNF.Client.UI.exe.WebView2/EBWebView/Default/Code Cache/wasm/index
WNF.Client.UI.exe.WebView2/EBWebView/Default/Code Cache/wasm/index-dir/the-real-index
WNF.Client.UI.exe.WebView2/EBWebView/Default/DIPS
WNF.Client.UI.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_0
WNF.Client.UI.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_1
WNF.Client.UI.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_2
WNF.Client.UI.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_3
WNF.Client.UI.exe.WebView2/EBWebView/Default/DawnGraphiteCache/index
WNF.Client.UI.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_0
WNF.Client.UI.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_1
WNF.Client.UI.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_2
WNF.Client.UI.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_3
WNF.Client.UI.exe.WebView2/EBWebView/Default/DawnWebGPUCache/index
WNF.Client.UI.exe.WebView2/EBWebView/Default/EdgeEDrop/EdgeEDropSQLite.db
WNF.Client.UI.exe.WebView2/EBWebView/Default/EdgeHubAppUsage/EdgeHubAppUsageSQLite.db
WNF.Client.UI.exe.WebView2/EBWebView/Default/Extension Rules/000003.log
WNF.Client.UI.exe.WebView2/EBWebView/Default/Extension Rules/CURRENT
WNF.Client.UI.exe.WebView2/EBWebView/Default/Extension Rules/LOG
WNF.Client.UI.exe.WebView2/EBWebView/Default/Extension Rules/MANIFEST-000001
WNF.Client.UI.exe.WebView2/EBWebView/Default/Extension Scripts/000003.log
WNF.Client.UI.exe.WebView2/EBWebView/Default/Extension Scripts/CURRENT
WNF.Client.UI.exe.WebView2/EBWebView/Default/Extension Scripts/LOG
WNF.Client.UI.exe.WebView2/EBWebView/Default/Extension Scripts/MANIFEST-000001
WNF.Client.UI.exe.WebView2/EBWebView/Default/Extension State/000003.log
WNF.Client.UI.exe.WebView2/EBWebView/Default/Extension State/CURRENT
WNF.Client.UI.exe.WebView2/EBWebView/Default/Extension State/LOG
WNF.Client.UI.exe.WebView2/EBWebView/Default/Extension State/MANIFEST-000001
WNF.Client.UI.exe.WebView2/EBWebView/Default/ExtensionActivityComp
WNF.Client.UI.exe.WebView2/EBWebView/Default/ExtensionActivityEdge
WNF.Client.UI.exe.WebView2/EBWebView/Default/Favicons
WNF.Client.UI.exe.WebView2/EBWebView/Default/GPUCache/data_0
WNF.Client.UI.exe.WebView2/EBWebView/Default/GPUCache/data_1
WNF.Client.UI.exe.WebView2/EBWebView/Default/GPUCache/data_2
WNF.Client.UI.exe.WebView2/EBWebView/Default/GPUCache/data_3
WNF.Client.UI.exe.WebView2/EBWebView/Default/GPUCache/index
WNF.Client.UI.exe.WebView2/EBWebView/Default/History
WNF.Client.UI.exe.WebView2/EBWebView/Default/Local Storage/leveldb/CURRENT
WNF.Client.UI.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG
WNF.Client.UI.exe.WebView2/EBWebView/Default/Local Storage/leveldb/MANIFEST-000001
WNF.Client.UI.exe.WebView2/EBWebView/Default/Login Data
WNF.Client.UI.exe.WebView2/EBWebView/Default/Network Action Predictor
WNF.Client.UI.exe.WebView2/EBWebView/Default/Network/Network Persistent State
WNF.Client.UI.exe.WebView2/EBWebView/Default/Network/Reporting and NEL
WNF.Client.UI.exe.WebView2/EBWebView/Default/Network/SCT Auditing Pending Reports
WNF.Client.UI.exe.WebView2/EBWebView/Default/Network/Sdch Dictionaries
WNF.Client.UI.exe.WebView2/EBWebView/Default/Network/TransportSecurity
WNF.Client.UI.exe.WebView2/EBWebView/Default/Network/Trust Tokens
WNF.Client.UI.exe.WebView2/EBWebView/Default/Preferences
WNF.Client.UI.exe.WebView2/EBWebView/Default/PreferredApps
WNF.Client.UI.exe.WebView2/EBWebView/Default/README
WNF.Client.UI.exe.WebView2/EBWebView/Default/Safe Browsing Network/Safe Browsing Cookies
WNF.Client.UI.exe.WebView2/EBWebView/Default/Secure Preferences
WNF.Client.UI.exe.WebView2/EBWebView/Default/Session Storage/000003.log
WNF.Client.UI.exe.WebView2/EBWebView/Default/Session Storage/CURRENT
WNF.Client.UI.exe.WebView2/EBWebView/Default/Session Storage/LOG
WNF.Client.UI.exe.WebView2/EBWebView/Default/Session Storage/MANIFEST-000001
WNF.Client.UI.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index
WNF.Client.UI.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index-dir/the-real-index
WNF.Client.UI.exe.WebView2/EBWebView/Default/Shared Dictionary/db
WNF.Client.UI.exe.WebView2/EBWebView/Default/SharedStorage
WNF.Client.UI.exe.WebView2/EBWebView/Default/Site Characteristics Database/000003.log
WNF.Client.UI.exe.WebView2/EBWebView/Default/Site Characteristics Database/CURRENT
WNF.Client.UI.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG
WNF.Client.UI.exe.WebView2/EBWebView/Default/Site Characteristics Database/MANIFEST-000001
WNF.Client.UI.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/000003.log
WNF.Client.UI.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/CURRENT
WNF.Client.UI.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG
WNF.Client.UI.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/MANIFEST-000001
WNF.Client.UI.exe.WebView2/EBWebView/Default/Top Sites
WNF.Client.UI.exe.WebView2/EBWebView/Default/Visited Links
WNF.Client.UI.exe.WebView2/EBWebView/Default/Web Data
WNF.Client.UI.exe.WebView2/EBWebView/Default/heavy_ad_intervention_opt_out.db
WNF.Client.UI.exe.WebView2/EBWebView/Default/shared_proto_db/000003.log
WNF.Client.UI.exe.WebView2/EBWebView/Default/shared_proto_db/CURRENT
WNF.Client.UI.exe.WebView2/EBWebView/Default/shared_proto_db/LOG
WNF.Client.UI.exe.WebView2/EBWebView/Default/shared_proto_db/MANIFEST-000001
WNF.Client.UI.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/000003.log
WNF.Client.UI.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/CURRENT
WNF.Client.UI.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG
WNF.Client.UI.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/MANIFEST-000001
WNF.Client.UI.exe.WebView2/EBWebView/GrShaderCache/data_0
WNF.Client.UI.exe.WebView2/EBWebView/GrShaderCache/data_1
WNF.Client.UI.exe.WebView2/EBWebView/GrShaderCache/data_2
WNF.Client.UI.exe.WebView2/EBWebView/GrShaderCache/data_3
WNF.Client.UI.exe.WebView2/EBWebView/GrShaderCache/f_000001
WNF.Client.UI.exe.WebView2/EBWebView/GrShaderCache/index
WNF.Client.UI.exe.WebView2/EBWebView/GraphiteDawnCache/data_0
WNF.Client.UI.exe.WebView2/EBWebView/GraphiteDawnCache/data_1
WNF.Client.UI.exe.WebView2/EBWebView/GraphiteDawnCache/data_2
WNF.Client.UI.exe.WebView2/EBWebView/GraphiteDawnCache/data_3
WNF.Client.UI.exe.WebView2/EBWebView/GraphiteDawnCache/index
WNF.Client.UI.exe.WebView2/EBWebView/Last Version
WNF.Client.UI.exe.WebView2/EBWebView/Local State
WNF.Client.UI.exe.WebView2/EBWebView/ShaderCache/data_0
WNF.Client.UI.exe.WebView2/EBWebView/ShaderCache/data_1
WNF.Client.UI.exe.WebView2/EBWebView/ShaderCache/data_2
WNF.Client.UI.exe.WebView2/EBWebView/ShaderCache/data_3
WNF.Client.UI.exe.WebView2/EBWebView/ShaderCache/index
WNF.Client.UI.exe.WebView2/EBWebView/Variations
WNF.Client.UI.runtimeconfig.json
WNF.Client.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WNF.Proxy.exe
.exe windows:6 windows x64 arch:x64

4f2f006e2ecf7172ad368f8289dc96c1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateFileA
CreateEventA
CloseHandle
AddVectoredExceptionHandler

Sections

.text
Size: 2.0MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 530KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 297B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/32
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/46
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/65
Size: 751KB - Virtual size: 751KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/78
Size: 471KB - Virtual size: 470KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/90
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WinRT.Runtime.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:24:f3:6e:46:fe:b0:93:67:e4:8b:a5:bd:c6:75:4e:33:82:09:af:21:05:87:c7:0a:0f:c8:b8:4f:fa:42:82
Signer

Actual PE Digest

4e:24:f3:6e:46:fe:b0:93:67:e4:8b:a5:bd:c6:75:4e:33:82:09:af:21:05:87:c7:0a:0f:c8:b8:4f:fa:42:82

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\1\s\src\WinRT.Runtime\obj\Release\net6.0\WinRT.Runtime.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 377KB - Virtual size: 377KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WinUIEdit.dll
.dll windows:6 windows x64 arch:x64

0eaaab3f357c1ecac1dfa83ddd7c9f6b

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:86:f7:ba:eb:78:4b:db:b0:ce:4c:5f:5a:2e:42:5f:a4:61:96:6a:e8:66:1d:3c:71:90:7a:e4:cb:94:fb:84
Signer

Actual PE Digest

06:86:f7:ba:eb:78:4b:db:b0:ce:4c:5f:5a:2e:42:5f:a4:61:96:6a:e8:66:1d:3c:71:90:7a:e4:cb:94:fb:84

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\b\Obj\x64fre\WinUIEdit\richedit\src\dll\WinUIEdit\WinUIEdit.pdb

Imports

kernel32

WaitForSingleObject
ReleaseMutex
RaiseException
CreateEventExW
SetEvent
WaitForSingleObjectEx
CreateSemaphoreExW
ReleaseSemaphore
GetProcessHeap
HeapFree
HeapAlloc
OutputDebugStringW
DebugBreak
GetPackageFullName
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetLastError
InterlockedFlushSList
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
GetModuleFileNameA
QueryPerformanceCounter
InitializeSRWLock
LoadLibraryExW
DisableThreadLibraryCalls
LoadResource
FindResourceW
IsDebuggerPresent
GetModuleHandleExW
IsProcessorFeaturePresent
TerminateProcess
VerifyVersionInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeLibrary
VerSetConditionMask
RtlVirtualUnwind
FormatMessageW
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
LoadLibraryExA
VirtualQuery
VirtualProtect
GetSystemInfo
GetTickCount
GlobalHandle
GetProcAddress
GetSystemDefaultLCID
InitOnceBeginInitialize
GetModuleFileNameW
GetThreadLocale
InitOnceComplete
QueueUserWorkItem
SetFilePointer
CreateFileW
GetSystemDefaultLangID
CreateThreadpoolWork
WideCharToMultiByte
SubmitThreadpoolWork
GlobalSize
GetUserDefaultLCID
GlobalFlags
GlobalAlloc
GlobalFree
WaitForThreadpoolWorkCallbacks
GlobalLock
CloseThreadpoolWork
GetModuleHandleW
GetStringTypeExW
GetFileType
GlobalUnlock
GetSystemDirectoryW
GlobalReAlloc
GetCurrentProcess
LocalFree
LCMapStringEx
ResolveLocaleName
LocaleNameToLCID
AcquireSRWLockShared
GetLocaleInfoEx
DecodePointer
CreateMutexExW
ReleaseSRWLockShared
AcquireSRWLockExclusive
LoadLibraryW
ReleaseSRWLockExclusive
TlsGetValue
TlsAlloc
EncodePointer
InitOnceExecuteOnce
GetLastError
FindAtomA
CloseHandle
MultiByteToWideChar
WriteFile
ReadFile
IsValidCodePage
GetCurrentProcessId
TlsFree
GetModuleHandleA
CompareStringEx
LCIDToLocaleName
GetCurrentThreadId
GetLocaleInfoW
TlsSetValue
GetTickCount64
lstrcmpiA
CompareStringOrdinal
OpenSemaphoreW
__C_specific_handler

gdi32

OffsetViewportOrgEx
GetEnhMetaFileBits
GetMetaFileBitsEx
CreateCompatibleBitmap
CloseMetaFile
SetTextAlign
PatBlt
SetWindowOrgEx
SetWindowExtEx
GetViewportOrgEx
DeleteEnhMetaFile
CreatePatternBrush
SetTextColor
CreateMetaFileA
CreateFontIndirectW
GetPixel
GetEnhMetaFileHeader
SetEnhMetaFileBits
CreateICW
DeleteDC
GetTextMetricsW
GetDeviceCaps
GetTextCharsetInfo
GetWinMetaFileBits
StretchDIBits
TranslateCharsetInfo
SetMetaFileBitsEx
GetWorldTransform
EnumMetaFile
CreateBitmap
GetStockObject
DeleteMetaFile
BitBlt
ExtTextOutW
CreateCompatibleDC
GetBkColor
SetGraphicsMode
GdiAlphaBlend
GetFontData
GetCurrentObject
Rectangle
GetGlyphOutlineW
CreateDIBSection
GetCharWidthW
SaveDC
DeleteObject
StretchBlt
Polyline
GdiFlush
CreateSolidBrush
SelectObject
CreatePalette
GetTextFaceW
SelectPalette
GetObjectType
SetBkColor
GetKerningPairsA
RestoreDC
CreateDCW
IntersectClipRect
RealizePalette
EnumFontFamiliesExW
TextOutW
LineTo
CreatePen
MoveToEx
GetOutlineTextMetricsW
DPtoLP
GetCharABCWidthsW
GetGlyphIndicesW
GetCharWidth32A
ExtTextOutA
GetBkMode
SetBkMode
GetObjectW

user32

GetKeyboardLayoutList
SetWindowLongW
GetWindowLongPtrW
EnableScrollBar
InvertRect
RegisterWindowMessageW
SetWindowPos
UnregisterClassW
CreateWindowExW
RegisterClassExW
IsWindow
IsMenu
GetUpdateRect
EndMenu
GetSystemMetrics
GetPointerFrameInfoHistory
UpdateLayeredWindow
SendMessageW
SetWindowLongPtrW
SetScrollInfo
DestroyWindow
IsWindowVisible
HideCaret
ScreenToClient
SetCaretPos
CreateCaret
ValidateRect
ScrollWindowEx
SetCapture
SetScrollRange
GetDlgItem
ShowCaret
SetScrollPos
UpdateWindow
ReleaseCapture
MessageBeep
InvalidateRect
IsIconic
IsClipboardFormatAvailable
GetKeyState
GetAsyncKeyState
GetKeyboardLayoutNameW
GetKeyboardLayout
RegisterClipboardFormatW
GetWindowRect
SetTimer
FillRect
SetCaretBlinkTime
MapWindowPoints
LoadBitmapW
LoadCursorW
SetCursor
GetClientRect
KillTimer
RegisterWindowMessageA
PeekMessageW
GetDoubleClickTime
GetSysColor
GetClassLongW
PtInRect
GetCursorPos
BeginPaint
EndPaint
LoadStringW
TrackPopupMenuEx
InsertMenuItemW
GetMenuItemInfoW
SystemParametersInfoW
IsWindowUnicode
GetScrollInfo
IsChild
GetMessagePos
GetMessageTime
CreatePopupMenu
TrackPopupMenu
ClientToScreen
WindowFromDC
DestroyMenu
SetFocus
SetForegroundWindow
AppendMenuW
GetClipboardOwner
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
GetFocus
GetPointerInfo
ActivateKeyboardLayout
DestroyCaret
GetDC
GetWindowDC
SetRect
ReleaseDC
GetWindowLongW
DefWindowProcW
ShowScrollBar
SendMessageA
GetParent
PostMessageW
IsImmersiveProcess

ole32

CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoWaitForMultipleHandles
CoInitializeEx
CoUninitialize
CoTaskMemFree
CoReleaseMarshalData
PropVariantClear
CoCreateFreeThreadedMarshaler
CoCreateInstance

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW
RoOriginateError

oleaut32

SysAllocStringByteLen
VariantInit
VariantClear
SysFreeString

advapi32

EventSetInformation
RegOpenKeyExW
RegQueryValueExW
EventWriteTransfer
EventRegister
RegGetValueW
EventUnregister
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExW

usp10

ScriptTextOut
ScriptStringAnalyse
ScriptPlace
ScriptBreak
ScriptStringValidate
ScriptSubstituteSingleGlyph
ScriptStringFree
ScriptFreeCache
ScriptString_pLogAttr
ScriptShape
ScriptGetCMap
ScriptGetProperties
ScriptItemize
ScriptGetLogicalWidths

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s
__stdio_common_vsprintf_s
__stdio_common_vswprintf
__stdio_common_vsnprintf_s

api-ms-win-crt-string-l1-1-0

wcsncmp
strncmp
_wcsicmp
strncpy_s
wcsnlen
wcsncpy_s
strnlen
wmemcpy_s
wcscpy_s
iswspace
strcpy_s

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_invalid_parameter_noinfo_noreturn
abort
_initterm_e
_initterm
terminate
_cexit
_wassert
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_errno
_configure_narrow_argv
_invalid_parameter_noinfo
_seh_filter_dll

api-ms-win-crt-heap-l1-1-0

calloc
free
_callnewh
malloc
realloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-convert-l1-1-0

_itow_s
wcstod

api-ms-win-core-path-l1-1-0

PathCchAppend

elscore

MappingFreeServices
MappingRecognizeText
MappingFreePropertyBag
MappingGetServices

api-ms-win-crt-math-l1-1-0

pow
sqrt
ceilf

Exports

Exports

?LsAssert@Ptls6@@YAXH@Z
?LsCreateContext@Ptls6@@YAJPEBUlscontextinfo@1@PEAPEAUlscontext@1@@Z
?LsCreateLine@Ptls6@@YAJPEAUlscontext@1@PEAUlsparaclient@1@PEBUlspap@1@JPEBUlslinerestr@1@PEBUlsbreakrecline@1@PEAPEAU61@PEAUlslinfo@1@PEAPEAVCLsLine@1@@Z
?LsCreateLineGivenBreak@Ptls6@@YAJPEAUlscontext@1@PEAUlsparaclient@1@PEBUlspap@1@JPEBUlslinerestr@1@PEBUlsbreakrecline@1@JPEAPEAU61@PEAUlslinfo@1@PEAPEAVCLsLine@1@@Z
?LsCreateParaBreakingSession@Ptls6@@YAJPEAUlscontext@1@PEAUlsparaclient@1@PEBUlspap@1@JPEBUlsbreakrecline@1@PEAPEAUlsparabrksession@1@@Z
?LsDestroyBreakRecord@Ptls6@@YAJPEAUlscontext@1@PEAUlsbreakrecline@1@@Z
?LsDestroyContext@Ptls6@@YAJPEAUlscontext@1@@Z
?LsDestroyLine@Ptls6@@YAJPEAUlscontext@1@PEAVCLsLine@1@@Z
?LsDestroyParaBreakingSession@Ptls6@@YAJPEAUlsparabrksession@1@@Z
?LsDisplayLine@Ptls6@@YAJPEAVCLsLine@1@PEBUtagLSPOINT@1@IPEBUtagLSRECT@1@@Z
?LsDisplaySubline@Ptls6@@YAJPEAVILsSubline@1@HPEBUtagLSPOINT@1@IPEBUtagLSRECT@1@@Z
?LsDuplicateBreakRecord@Ptls6@@YAJPEAUlscontext@1@PEBUlsbreakrecline@1@PEAPEAU31@@Z
?LsEnumSubline@Ptls6@@YAJPEBVILsSubline@1@HHPEBUtagLSPOINT@1@@Z
?LsFindMasterSubline@Ptls6@@YAJPEAVCLsLine@1@Ulsspan_struct@1@PEAUtagLSPOINTUV@1@PEAPEAVILsSubline@1@@Z
?LsGetHihLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z
?LsGetLineBreaks@Ptls6@@YAJPEAUlsparabrksession@1@JPEBUlslinerestr@1@PEBUlsbreakrecline@1@PEAUtslinevariantrestriction@1@JPEAPEAU41@PEAUlslinfo@1@PEAPEAUtslinepenaltyinfo@1@PEAJ7@Z
?LsGetMathLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z
?LsGetMinMaxDurUntilHardBreak@Ptls6@@YAJPEAUlscontext@1@PEAUlsparaclient@1@PEBUlspap@1@JPEBUlslinerestr@1@PEBUlsbreakrecline@1@HPEAPEAU61@PEAUlslinfo@1@PEAPEAVCLsLine@1@PEAJ888@Z
?LsGetObjectName@Ptls6@@YA?AVLSNAMEEXP@1@PEBVCLsDnode@1@@Z
?LsGetPenaltyModule@Ptls6@@YAJPEAUlscontext@1@PEAPEAUtspenaltymodule@1@@Z
?LsGetReverseLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z
?LsGetRubyLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z
?LsGetStretchabilityForLine@Ptls6@@YAJPEAVCLsLine@1@PEAJ1@Z
?LsGetTatenakayokoLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z
?LsGetWarichuLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z
?LsLwMultDivR@Ptls6@@YAJJJJ@Z
?LsModifyLineHeight@Ptls6@@YAJPEAUlscontext@1@PEAVCLsLine@1@JJJJ@Z
?LsNotReached@Ptls6@@YAXXZ
?LsPointUV2FromPointUV1@Ptls6@@YAJKPEBUtagLSPOINTUV@1@0KPEAU21@@Z
?LsPointXYFromPointUV@Ptls6@@YAJPEBUtagLSPOINT@1@KPEBUtagLSPOINTUV@1@PEAU21@@Z
?LsQueryEnumAutonum@Ptls6@@YAJPEAVCLsObject@1@PEAPEAVILsSubline@1@@Z
?LsQueryEnumBorderDnode@Ptls6@@YAJPEAVCLsDnode@1@PEAUlsqednodeborderinfo@1@@Z
?LsQueryEnumDnode@Ptls6@@YAJPEAVCLsDnode@1@PEAUlsqednodeinfo@1@@Z
?LsQueryEnumFrontierDnode@Ptls6@@YAJPEAVCLsDnode@1@PEAUlsqednodefrontierinfo@1@@Z
?LsQueryEnumHih@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqeryhihinfo@1@@Z
?LsQueryEnumLine@Ptls6@@YAJPEAVCLsLine@1@PEAUlsqelineinfo@1@@Z
?LsQueryEnumMathAccent@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathaccentinfo@1@@Z
?LsQueryEnumMathBox@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathboxinfo@1@@Z
?LsQueryEnumMathBoxedFormula@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathboxedformulainfo@1@@Z
?LsQueryEnumMathDelimiters@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathdelimsinfo@1@@Z
?LsQueryEnumMathDelimitersWithSeparators@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathdelimsepinfo@1@@Z
?LsQueryEnumMathDelimitersWithSeparatorsPart@Ptls6@@YAJPEAUlsmathfunction@1@JPEAUlsqemathdelimseppartinfo@1@@Z
?LsQueryEnumMathEquation@Ptls6@@YAJPEAUlsmathfunction@1@JPEAUlsqemathequationinfo@1@@Z
?LsQueryEnumMathEquationArray@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqematheqarrayinfo@1@@Z
?LsQueryEnumMathFraction@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathfractioninfo@1@@Z
?LsQueryEnumMathFunctionApply@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathfunctionapplyinfo@1@@Z
?LsQueryEnumMathGeneral@Ptls6@@YAJPEAUlsmathgeneral@1@PEAUlsqemathgeneralinfo@1@@Z
?LsQueryEnumMathLeftSubSuperScript@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathleftsubsuperscriptinfo@1@@Z
?LsQueryEnumMathList@Ptls6@@YAJPEAUlsmathlist@1@PEAUlsqemathlistinfo@1@@Z
?LsQueryEnumMathLowerLimit@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathlowerliminfo@1@@Z
?LsQueryEnumMathMarshal@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqemathmarshalinfo@1@@Z
?LsQueryEnumMathMatrix@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathmatrixinfo@1@@Z
?LsQueryEnumMathMatrixCell@Ptls6@@YAJPEAUlsmathfunction@1@JJPEAUlsqemathmatrixcellinfo@1@@Z
?LsQueryEnumMathMatrixColumn@Ptls6@@YAJPEAUlsmathfunction@1@JPEAUlsqemathmatrixcolumninfo@1@@Z
?LsQueryEnumMathMatrixRow@Ptls6@@YAJPEAUlsmathfunction@1@JPEAUlsqemathmatrixrowinfo@1@@Z
?LsQueryEnumMathNaryOperator@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathnaryoperatorinfo@1@@Z
?LsQueryEnumMathOperatorCharacter@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathopcharinfo@1@@Z
?LsQueryEnumMathOverBar@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathoverbarinfo@1@@Z
?LsQueryEnumMathPhantom@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathphantominfo@1@@Z
?LsQueryEnumMathRadical@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathradicalinfo@1@@Z
?LsQueryEnumMathSlashedFraction@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathslashedfractioninfo@1@@Z
?LsQueryEnumMathStack@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathstackinfo@1@@Z
?LsQueryEnumMathStretchStack@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathstretchstackinfo@1@@Z
?LsQueryEnumMathSubScript@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathsubscriptinfo@1@@Z
?LsQueryEnumMathSubSuperScript@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathsubsuperscriptinfo@1@@Z
?LsQueryEnumMathSuperScript@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathsuperscriptinfo@1@@Z
?LsQueryEnumMathUnderBar@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathunderbarinfo@1@@Z
?LsQueryEnumMathUpperLimit@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathupperliminfo@1@@Z
?LsQueryEnumMathZone@Ptls6@@YAJPEAUlsmathzone@1@PEAUlsqemathzoneinfo@1@@Z
?LsQueryEnumPenDnode@Ptls6@@YAJPEAVCLsDnode@1@PEAUlsqednodepeninfo@1@@Z
?LsQueryEnumRealDnode@Ptls6@@YAJPEAVCLsDnode@1@PEAUlsqednoderealinfo@1@@Z
?LsQueryEnumReverse@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqeryreverseinfo@1@@Z
?LsQueryEnumRuby@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqerubyinfo@1@@Z
?LsQueryEnumTatenakayoko@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqetatenakinfo@1@@Z
?LsQueryEnumWarichu@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqerywarichuinfo@1@@Z
?LsQueryLineCpPpoint@Ptls6@@YAJPEAVCLsLine@1@JJPEAUlsqsubinfo@1@PEAJPEAUlstextcell@1@@Z
?LsQueryLineDown@Ptls6@@YAJPEAVCLsLine@1@JHJJPEAHPEAUlsqsubinfo@1@PEAJPEAUlstextcell@1@@Z
?LsQueryLineDup@Ptls6@@YAJPEAVCLsLine@1@PEAUlslinearea@1@@Z
?LsQueryLineMaxDepth@Ptls6@@YAJPEAVCLsLine@1@PEAJ@Z
?LsQueryLinePointPcp@Ptls6@@YAJPEAVCLsLine@1@PEBUtagLSPOINTUV@1@JPEAUlsqsubinfo@1@PEAJPEAUlstextcell@1@@Z
?LsQueryLineUp@Ptls6@@YAJPEAVCLsLine@1@JHJJPEAHPEAUlsqsubinfo@1@PEAJPEAUlstextcell@1@@Z
?LsQueryLineVisibleRectangle@Ptls6@@YAJPEAVCLsLine@1@PEAKPEAUtagLSRECT@1@@Z
?LsQuerySpanInfo@Ptls6@@YAJPEAVCLsLine@1@Ulsspan_struct@1@HJPEAUtagLSPOINTUV@1@PEAKPEAJ44444444444444444PEAUtagLSRECT@1@@Z
?LsQuerySpanTotalRelativeOffset@Ptls6@@YAJPEAVCLsLine@1@Ulsspan_struct@1@PEAUtagLSOFFSET@1@@Z
?LsQueryTextCellDetails@Ptls6@@YAJPEAVCLsLine@1@PEAUlscelldetails@1@JJJPEA_WPEAG3PEAJPEAUtagLSOFFSET@1@PEAK@Z
?LsSetDebugFlags@Ptls6@@YAJPEAUlscontext@1@K@Z
?LsTransformRectangle@Ptls6@@YAXKPEBUtagLSRECT@1@KPEBUtagLSPOINTUV@1@PEAU21@@Z
?LsUpdateBreakRecord@Ptls6@@YAJPEAUlscontext@1@PEAUlsbreakrecline@1@JJJJPEAH@Z
?LsdnDistribute@Ptls6@@YAJPEAVCLsDnode@1@0J@Z
?LsdnFinishByCurrentPosition@Ptls6@@YAJPEAVCLsDnode@1@PEAVILsObjectFormattingSession@1@PEAVCLsObject@1@AEBUOBJDIM@1@H@Z
?LsdnFinishSimple@Ptls6@@YAJPEAVCLsDnode@1@JPEAVCLsObject@1@PEBUOBJDIM@1@H@Z
?LsdnFinishWordRegular@Ptls6@@YAJPEAVCLsDnode@1@JPEAUlsrun@1@PEBUlschp@1@PEAVCLsObject@1@PEBUOBJDIM@1@HHH@Z
?LsdnFinishWordRegularAddAdvancePen@Ptls6@@YAJPEAVCLsDnode@1@JPEAUlsrun@1@PEBUlschp@1@PEAVCLsObject@1@PEBUOBJDIM@1@JJJHHH@Z
?LsdnGetDup@Ptls6@@YAJPEAVCLsDnode@1@PEAJ@Z
?LsdnModifyParaEnding@Ptls6@@YAJPEAVCLsDnode@1@W4_lskeop@1@@Z
?LsdnQueryPenNode@Ptls6@@YAJPEAVCLsDnode@1@PEAJ11@Z
?LsdnResetObjDim@Ptls6@@YAJPEAVCLsDnode@1@PEBUOBJDIM@1@@Z
?LsdnResetPenNode@Ptls6@@YAJPEAVCLsDnode@1@JJJ@Z
?LsdnSetAbsBaseLine@Ptls6@@YAJPEAVCLsDnode@1@J@Z
?LsdnSetRigidDup@Ptls6@@YAJPEAVCLsDnode@1@J@Z
?LsmsrvFIsOperator@Ptls6@@YAJ_WPEAHPEAW4_lsmathbehavior@1@@Z
?LsmsrvGetBreakingQualityForOperatorCharacter@Ptls6@@YAJ_WW4_lsmathbehavior@1@PEAHPEAW4_lsmathbreakquality@1@@Z
?LsmsrvGetBuildupClass@Ptls6@@YAJ_WPEAHPEAW4_lsmathservbuildupclass@1@@Z
?LsmsrvGetSpacing@Ptls6@@YAJJJPEBUlsmathstyle@1@PEAJ@Z
?LsmsrvGetSpacingClassAsDifferential@Ptls6@@YAJPEAJ@Z
?LsmsrvGetSpacingClassAsMathOp@Ptls6@@YAJPEAJ@Z
?LsmsrvGetSpacingClassAsSubformula@Ptls6@@YAJPEAJ@Z
?LsmsrvGetSpacingClassAsText@Ptls6@@YAJPEAJ@Z
?LsmsrvGetSpacingClassForOperatorCharacter@Ptls6@@YAJ_WW4_lsmathbehavior@1@PEAJ2@Z
?LsmsrvGetSpacingClassForRegularFunction@Ptls6@@YAJW4_lsmathfunctionname@1@W4_lsmathbehavior@1@PEAJ2@Z
?LssbDistributeInSubline@Ptls6@@YAJPEAVILsSubline@1@J@Z
?LssbFDoneDisplay@Ptls6@@YAJPEAVILsSubline@1@PEAH@Z
?LssbFDonePresSubline@Ptls6@@YAJPEAVILsSubline@1@PEAH@Z
?LssbGetDupSubline@Ptls6@@YAJPEBVILsSubline@1@PEAKPEAJ@Z
?LssbGetDurTrailInSubline@Ptls6@@YAJPEAVILsSubline@1@PEAJ@Z
?LssbGetDurTrailWithPensInSubline@Ptls6@@YAJPEAVILsSubline@1@PEAJ@Z
?LssbGetNumberDnodesInSubline@Ptls6@@YAJPEAVILsSubline@1@PEAJ@Z
?LssbGetObjDimSubline@Ptls6@@YAJPEBVILsSubline@1@PEAKPEAUOBJDIM@1@@Z
?LssbGetPlsrunsFromSubline@Ptls6@@YAJPEAVILsSubline@1@JPEAPEAUlsrun@1@@Z
?LssbGetVisibleDcpInSubline@Ptls6@@YAJPEAVILsSubline@1@PEAJ@Z
CreateTextServices
DisableOleinitCheck
DllGetActivationFactory
DllGetVersion
GetMathAlphanumeric
GetMathAlphanumericCode
IID_IRichEditOle
IID_IRichEditOleCallback
IID_IRicheditUiaNotificationOverrides
IID_IRicheditUiaOverrides
IID_IRicheditWindowlessAccessibility
IID_ITextDocument2
IID_ITextHost
IID_ITextHost2
IID_ITextServices
IID_ITextServices2
MathBuildDown
MathBuildUp
MathTranslate
RichEdit10ANSIWndProc
RichEditANSIWndProc
RichEditWndProc
SetCustomTextOutHandlerEx
SetTextServicesDpiCalculationOverride
ShutdownTextServices

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 447KB - Virtual size: 446KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WindowsAppRuntime.png
.png
WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dll
.dll windows:6 windows x64 arch:x64

26970099aedb6ceafc0d01f79fd527c4

Code Sign

33:00:00:04:13:31:bc:19:88:07:a9:07:74:00:00:00:00:04:13
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

03/02/2023, 00:05

Not After

01/02/2024, 00:05

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

26:59:14:ec:b0:c1:d4:74:54:a3:4a:43:73:fc:35:4c:b2:fb:2a:24:6c:a4:19:4e:a5:38:d7:be:78:9f:fb:fa
Signer

Actual PE Digest

26:59:14:ec:b0:c1:d4:74:54:a3:4a:43:73:fc:35:4c:b2:fb:2a:24:6c:a4:19:4e:a5:38:d7:be:78:9f:fb:fa

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.pdb

Imports

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_narrow_environment
terminate
_configure_narrow_argv
_initterm_e
_seh_filter_dll
abort
_initialize_onexit_table
_cexit
_initterm

api-ms-win-crt-heap-l1-1-0

free
calloc

api-ms-win-crt-string-l1-1-0

wcsncmp

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WindowsAppSdk.AppxDeploymentExtensions.Desktop.dll
.dll windows:6 windows x64 arch:x64

00fb97ced6d765fbad62cb7c63253c2c

Code Sign

33:00:00:04:13:31:bc:19:88:07:a9:07:74:00:00:00:00:04:13
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

03/02/2023, 00:05

Not After

01/02/2024, 00:05

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:34:87:0d:07:06:89:c7:0b:73:37:85:b2:0c:68:b8:04:3b:d4:79:9b:14:eb:47:e0:cc:35:49:c3:1f:7b:1c
Signer

Actual PE Digest

4c:34:87:0d:07:06:89:c7:0b:73:37:85:b2:0c:68:b8:04:3b:d4:79:9b:14:eb:47:e0:cc:35:49:c3:1f:7b:1c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

WindowsAppSdk.AppxDeploymentExtensions.Desktop.pdb

Imports

kernel32

IsDebuggerPresent
CloseHandle
ReleaseSemaphore
ReleaseMutex
WaitForSingleObjectEx
AcquireSRWLockExclusive
FormatMessageW
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryW
WaitForSingleObject
OpenSemaphoreW
GetCurrentThreadId
OutputDebugStringW
SetLastError
LoadLibraryExW
DecodePointer
ReleaseSRWLockExclusive
InitOnceBeginInitialize
GetCurrentProcessId
CreateMutexExW
InitOnceComplete
InitOnceExecuteOnce
CreateSemaphoreExW
FreeLibrary
TlsFree
TlsSetValue
EncodePointer
GetModuleFileNameA
GetModuleHandleExW
GetProcAddress
GetModuleHandleW
DebugBreak
TlsGetValue
TlsAlloc
GetLastError
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
InterlockedPushEntrySList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
SleepConditionVariableSRW
WakeAllConditionVariable
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LCMapStringEx
CompareStringEx
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetStringTypeW
WideCharToMultiByte
MultiByteToWideChar
GetFileInformationByHandleEx
AreFileApisANSI
SetFileInformationByHandle
SetFileAttributesW
GetFileAttributesExW
GetFileAttributesW
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
CreateFileW
CreateDirectoryW
GetLocaleInfoEx
FormatMessageA
LocalFree

advapi32

EventSetInformation
EventRegister
EventUnregister
EventWriteTransfer

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

api-ms-win-eventing-provider-l1-1-0

EventActivityIdControl

api-ms-win-core-string-l1-1-0

CompareStringOrdinal

api-ms-win-core-com-l1-1-0

CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance

api-ms-win-core-registry-l1-1-0

RegQueryValueExW
RegGetValueW
RegCreateKeyExW
RegCloseKey
RegEnumKeyExW
RegCopyTreeW
RegDeleteTreeW
RegQueryInfoKeyW
RegDeleteValueW
RegSetValueExW
RegOpenCurrentUser
RegDeleteKeyExW
RegOpenKeyExW

api-ms-win-core-registry-l1-1-1

RegSetKeyValueW

api-ms-win-core-sysinfo-l1-1-0

GetSystemDirectoryW

api-ms-win-core-processthreads-l1-1-0

GetCurrentThread
SetThreadToken
CreateProcessW
GetExitCodeProcess
OpenThreadToken

api-ms-win-core-psapi-l1-1-0

K32GetModuleFileNameExW

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameW

api-ms-win-appmodel-runtime-l1-1-0

PackageNameAndPublisherIdFromFamilyName

api-ms-win-crt-runtime-l1-1-0

_initterm_e
terminate
abort
_configure_narrow_argv
_invalid_parameter_noinfo
_initialize_narrow_environment
_initialize_onexit_table
_cexit
_register_onexit_function
_errno
_crt_atexit
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_initterm
_seh_filter_dll

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vsnprintf_s

api-ms-win-crt-string-l1-1-0

wcsncmp
wcstok_s
_wcsdup
strcpy_s
iswspace
wcsnlen

api-ms-win-crt-convert-l1-1-0

wcstol

api-ms-win-crt-heap-l1-1-0

calloc
malloc
realloc
_callnewh
free

shell32

SHSetLocalizedName
SHGetKnownFolderPath

propsys

InitPropVariantFromStringVector

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func
__pctype_func
___mb_cur_max_func
_lock_locales
_unlock_locales
setlocale
___lc_locale_name_func
___lc_collate_cp_func

oleaut32

SysFreeString
SysAllocString
GetErrorInfo
SysStringLen
SetErrorInfo

ole32

CoCreateFreeThreadedMarshaler

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
LoadExtensionRegistrationTable

Sections

.text
Size: 466KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
af-ZA/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
af-ZA/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
am-ET/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
am-ET/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ar-SA/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ar-SA/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
as-IN/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
as-IN/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
az-Latn-AZ/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
az-Latn-AZ/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bg-BG/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bg-BG/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bn-IN/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bn-IN/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bs-Latn-BA/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bs-Latn-BA/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ca-ES/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ca-ES/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ca-Es-VALENCIA/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ca-Es-VALENCIA/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cs-CZ/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cs-CZ/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cy-GB/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cy-GB/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
da-DK/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
da-DK/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dcompi.dll
.dll windows:10 windows x64 arch:x64

9669968eb5c10f5d497af96003b4aabe

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:f9:2b:9d:5d:87:47:ae:e4:78:3e:4d:8b:d9:c0:23:43:02:dc:cb:08:0d:9d:c0:71:d3:a6:c6:74:c7:0c:3f
Signer

Actual PE Digest

62:f9:2b:9d:5d:87:47:ae:e4:78:3e:4d:8b:d9:c0:23:43:02:dc:cb:08:0d:9d:c0:71:d3:a6:c6:74:c7:0c:3f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

dcompi.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

abort
_errno
_invalid_parameter_noinfo_noreturn
_invoke_watson
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
terminate
_execute_onexit_table
_crt_atexit
_cexit
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnwprintf_s
__stdio_common_vsprintf_s
__stdio_common_vswprintf
__stdio_common_vswprintf_s

api-ms-win-crt-math-l1-1-0

sqrt
ceilf
_finite
sin

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-string-l1-1-0

strncat_s
_wcsicmp_l
_wcsicmp
wcsnlen
wcscpy_s
towlower
_wcsdup
wcsncmp
wcsncpy_s
strcpy_s

api-ms-win-crt-heap-l1-1-0

malloc
realloc
_free_base
_calloc_base
_malloc_base
free

api-ms-win-crt-convert-l1-1-0

_wtof

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func
__pctype_func
___mb_cur_max_func
___lc_locale_name_func
_lock_locales
_unlock_locales
setlocale
___lc_collate_cp_func

marshal

LM_CreateTokenHandle
LM_CloseSurfaceHandle
LM_CloseTokenHandle
LegacyMarshalerCloseCompositionInputSink
LegacyMarshalerDuplicateCompositionInputSink
LM_PresentCompositionBuffers
RaiseFailFastException
RaiseException
SetLastError
LegacyMarshalerCloseSectionHandle
WideCharToMultiByte
LM_CreateCompositionBuffer
LegacyMarshalerSynchronize
LegacyMarshalerGetBatchId
LegacyMarshalerSetChannelCommitCompletionEvent
LegacyMarshalerWaitForChannel
LegacyMarshalerCommitChannel
LegacyMarshalerProcessChannelBatchBuffer
LegacyMarshalerCreateChannel
LegacyMarshalerGetFrameStatistics
LegacyMarshalerDestroyChannel
LegacyMarshalerInitialize
GetLastError
LegacyMarshalerSetChannelConnectionId
LegacyMarshalerCreateAndBindSharedSection
LegacyMarshalerGetDeletedResources
LegacyMarshalerReleaseAllResources
LegacyMarshalerMapViewOfSection

dwmcorei

LiftedCompositionEngine_Initialize
LiftedCompositionEngine_Uninitialize

kernel32

RtlLookupFunctionEntry
GetSystemInfo
LoadLibraryExA
VirtualProtect
RtlUnwindEx
VirtualQuery
InitializeSListHead
GetSystemTimeAsFileTime
SleepConditionVariableSRW
WakeAllConditionVariable
CompareStringEx
LCMapStringEx
InitializeCriticalSectionEx
GetStringTypeW
MultiByteToWideChar
GetCurrentThread
TerminateThread
TerminateProcess
QueryPerformanceCounter
HeapReAlloc
FreeLibrary
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
CompareStringOrdinal
InitializeSRWLock
CreateThreadpoolTimer
ResetEvent
SetEvent
CloseThreadpoolWait
WaitForThreadpoolWaitCallbacks
SetThreadpoolWait
FlsAlloc
DuplicateHandle
RtlCaptureStackBackTrace
EncodePointer
InitOnceExecuteOnce
DecodePointer
VirtualFree
VirtualAlloc
GetNativeSystemInfo
InitOnceComplete
InitOnceBeginInitialize
CreateFileMappingW
CreateEventW
GetTickCount64
QueryPerformanceFrequency
InitializeCriticalSection
DeleteCriticalSection
GetCurrentProcess
MapViewOfFile
GetTickCount
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
DebugBreak
GetModuleHandleW
GetProcessHeap
GetCurrentProcessId
AcquireSRWLockShared
CreateMutexExW
GetProcAddress
HeapAlloc
ReleaseSRWLockShared
SetThreadpoolTimer
CloseHandle
OpenSemaphoreW
WaitForSingleObjectEx
AcquireSRWLockExclusive
CloseThreadpoolTimer
OutputDebugStringW
ReleaseSRWLockExclusive
FormatMessageW
InterlockedFlushSList
FlsGetValue
FlsSetValue
FlsFree
RtlPcToFileHeader
CreateThreadpoolWait
CreateEventExW
ReleaseMutex
GetCurrentThreadId
WaitForSingleObject
HeapFree
WaitForThreadpoolTimerCallbacks
GetModuleHandleExW
GetModuleFileNameA
CreateSemaphoreExW
ReleaseSemaphore

user32

MonitorFromWindow
ReleaseDC
GetDC
GetMonitorInfoW
GetSystemMetrics

coremessagingxp

CoreMsgCreateSession
CoreUICallReceive
WinUIGetDispatcherQueueForCurrentThread
CoreUICallCreateConversationHost

microsoft.ui.composition.ossupport

TerminateProcessOnMemoryExhaustion
RecordFeatureUsage
UnsubscribeFeatureStateChangeNotification
SubscribeFeatureStateChangeNotification

api-ms-win-downlevel-advapi32-l1-1-0

EventWriteTransfer
EventUnregister
EventRegister
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
AllocateLocallyUniqueId

api-ms-win-downlevel-ole32-l1-1-0

CoTaskMemAlloc
CoCreateFreeThreadedMarshaler
CoGetApartmentType
CoCreateInstance

api-ms-win-core-com-l1-1-1

RoGetAgileReference

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext
RoOriginateError
SetRestrictedErrorInfo
GetRestrictedErrorInfo
RoOriginateErrorW
RoTransformError

api-ms-win-core-winrt-error-l1-1-1

IsErrorPropagationEnabled
RoReportFailedDelegate
RoGetMatchingRestrictedErrorInfo

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-winrt-string-l1-1-0

WindowsDuplicateString
WindowsTrimStringStart
WindowsSubstringWithSpecifiedLength
WindowsStringHasEmbeddedNull
WindowsGetStringLen
WindowsTrimStringEnd
WindowsCreateString
WindowsConcatString
WindowsIsStringEmpty
WindowsDeleteString
WindowsCompareStringOrdinal
WindowsGetStringRawBuffer
WindowsCreateStringReference

api-ms-win-eventing-provider-l1-1-0

EventSetInformation

ntdll

RtlCreateHeap
DbgPrompt
NtQuerySystemInformation
DbgPrintEx
RtlNumberGenericTableElements
RtlGetElementGenericTable
RtlLookupElementGenericTable
RtlInsertElementGenericTable
RtlEnumerateGenericTableWithoutSplaying
RtlDeleteElementGenericTable
RtlInitializeGenericTable
RtlFreeHeap
NtUnmapViewOfSection
RtlAllocateHeap
RtlDestroyHeap

d3d11

D3D11CreateDevice

dcomp

ord1040

microsoft.internal.frameworkudk

DxPrivates_WarpPalGetDeviceCaps
DxPrivates_WarpPalCreateExtensionFactory
DxPrivates_PartnerDeviceFromDevice
Containment_GetChangeEnabled
DCompPrivates_OpenAndAttachSharedTarget
DxPrivates_SwapChainPartnerFromDxgiSwapChain
DCompPrivates_CreateSharedVisualHandle
Windowing_GetMonitorFromDisplayId

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
WinUIDCompositionCreateDevice3

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 312KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
de-DE/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
de-DE/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dwmcorei.dll
.dll windows:10 windows x64 arch:x64

3b53c177473871f95716cf38dbe0f3cb

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3a:53:c1:42:5d:91:fc:9f:d5:8f:1e:9d:f1:e0:43:dd:00:52:4d:bb:05:e2:d7:67:19:82:53:2d:95:9e:30:09
Signer

Actual PE Digest

3a:53:c1:42:5d:91:fc:9f:d5:8f:1e:9d:f1:e0:43:dd:00:52:4d:bb:05:e2:d7:67:19:82:53:2d:95:9e:30:09

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

dwmcorei.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_errno
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
abort
terminate
_invoke_watson

api-ms-win-crt-stdio-l1-1-0

puts
__stdio_common_vsprintf_s
__stdio_common_vsprintf
__stdio_common_vswprintf

api-ms-win-crt-heap-l1-1-0

free
_free_base
_calloc_base
malloc

api-ms-win-crt-convert-l1-1-0

strtoul

microsoft.ui.composition.ossupport

RecordFeatureUsage
GetFeatureEnabledState
MicrosoftTelemetryAssertTriggeredNoArgs
SubscribeFeatureStateChangeNotification
TerminateProcessOnMemoryExhaustion
UnsubscribeFeatureStateChangeNotification

d2d1

ord1
ord4
ord5
ord3
ord2

d3d11

D3D11CreateDevice

d3dcompiler_47

D3DCreateLinker
D3DCreateFunctionLinkingGraph
D3DCreateBlob
D3DLoadModule

dxgi

CreateDXGIFactory1

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExA
GetModuleHandleExW
GetModuleFileNameA
GetProcAddress
GetModuleHandleW
FreeLibrary

api-ms-win-core-synch-l1-2-0

Sleep
InitOnceComplete
InitOnceBeginInitialize
WakeAllConditionVariable
SleepConditionVariableSRW

api-ms-win-core-synch-l1-1-0

CreateEventExW
CreateSemaphoreExW
ReleaseSemaphore
WaitForSingleObject
ReleaseMutex
ReleaseSRWLockExclusive
CreateEventW
AcquireSRWLockExclusive
InitializeCriticalSection
WaitForSingleObjectEx
OpenSemaphoreW
CancelWaitableTimer
ReleaseSRWLockShared
SetEvent
SetWaitableTimerEx
AcquireSRWLockShared
CreateMutexExW
ResetEvent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection

api-ms-win-core-heap-l1-1-0

HeapFree
HeapReAlloc
HeapAlloc
GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

GetLastError
RaiseException
SetLastError

api-ms-win-eventing-provider-l1-1-0

EventEnabled
EventUnregister
EventSetInformation
EventRegister
EventWriteTransfer
EventActivityIdControl

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolTimer
SubmitThreadpoolWork
CreateThreadpoolWork
WaitForThreadpoolWorkCallbacks
SetThreadpoolTimer
CloseThreadpoolWork
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer

api-ms-win-core-processthreads-l1-1-0

TlsAlloc
TlsGetValue
TerminateProcess
GetCurrentThreadId
ProcessIdToSessionId
GetCurrentProcessId
ResumeThread
GetCurrentThread
TlsSetValue
GetCurrentProcess
SetThreadPriority
CreateThread
TlsFree
TerminateThread
GetThreadId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

DebugBreak
OutputDebugStringA
IsDebuggerPresent
OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-registry-l1-1-0

RegCloseKey
RegGetValueW
RegQueryValueExW
RegOpenKeyExW

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
GetSystemTimeAsFileTime
GetTickCount64

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList
InterlockedPushEntrySList
InitializeSListHead
QueryDepthSList

api-ms-win-core-rtlsupport-l1-1-0

RtlPcToFileHeader
RtlUnwindEx
RtlCaptureStackBackTrace

api-ms-win-core-fibers-l1-1-0

FlsFree
FlsSetValue
FlsGetValue
FlsAlloc

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-synch-l1-2-1

CreateWaitableTimerW
WaitForMultipleObjects

api-ms-win-core-realtime-l1-1-0

QueryThreadCycleTime

api-ms-win-power-setting-l1-1-0

PowerSettingRegisterNotification
PowerSettingUnregisterNotification

api-ms-win-core-memory-l1-1-0

VirtualProtect
UnmapViewOfFile
VirtualQuery

api-ms-win-core-string-l1-1-0

CompareStringOrdinal

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-processthreads-l1-1-3

SetThreadDescription

api-ms-win-core-winrt-error-l1-1-0

GetRestrictedErrorInfo
SetRestrictedErrorInfo

microsoft.internal.frameworkudk

DCompPrivates_CreateColorContent
DxPrivates_WarpPalGetDeviceCaps
DxPrivates_WarpPalCreateExtensionFactory
DCompPrivates_SetVisualRelativeSize
Containment_GetChangeEnabled
DCompPrivates_SetVisualSize
DCompPrivates_OpenSharedDCompositionObject
DCompPrivates_ResizeDCompositionSurface
DCompPrivates_CreateCompositionBatchQuery

marshal

LegacyMarshalerQueryCompositionInputQueueAndTransform
LM_GetSurfaceInfo
LegacyMarshalerQueryCompositionInputSinkLuid
LegacyMarshalerGetFrameStatistics
LM_TokenManagerDeleteAllTokens
LM_TokenManagerOpenSectionAndEvents
LM_CloseSurfaceHandle
LegacyMarshalerQueryCompositionInputSink
LM_GetFrameSurfaceUpdates
LegacyMarshalerDestroyConnection
LegacyMarshalerCreateConnection
LegacyMarshalerBeginFrame
LegacyMarshalerConfirmFrame
LegacyMarshalerGetConnectionBatch
LegacyMarshalerMapViewOfSection
LegacyMarshalerCloseSectionHandle
LegacyMarshalerDuplicateCompositionInputSink
LegacyMarshalerQueryCompositionInputIsImplicit
LM_ValidateSurfaceHandle
LegacyMarshalerUpdateInputSinkTransforms
LegacyMarshalerCloseCompositionInputSink
LM_TokenManagerThread

kernel32

MapViewOfFile
GetSystemInfo
PulseEvent
GetVersionExW

user32

PeekMessageW
DispatchMessageW
GetSystemMetrics
SystemParametersInfoW
TranslateMessage
MsgWaitForMultipleObjects
GetPointerDeviceRects
IsGUIThread

gdi32

DeleteObject
GetRegionData

ntdll

RtlEnumerateGenericTableWithoutSplaying
DbgPrompt
DbgPrintEx
NtQuerySystemInformation
RtlInsertElementGenericTable
RtlGetDeviceFamilyInfoEnum
RtlLookupElementGenericTable
RtlDeleteElementGenericTable
RtlInitializeGenericTable

api-ms-win-dx-d3dkmt-l1-1-0

D3DKMTEscape
D3DKMTCloseAdapter
D3DKMTQueryAdapterInfo

api-ms-win-dx-d3dkmt-l1-1-1

D3DKMTOpenAdapterFromLuid

coremessagingxp

CoreUICallCreateEndpointHost
CoreMsgCreateSession
CoreUICallCreateConversationHost
CoreUICallSend
CoreUICallReceive

microsoft.inputstatemanager

AttachSystemInputSink
SetManipulationInputTarget
NotifyInputSinkParented
NotifyInputSinkRemoved
DestroyInProcInputHost
CreateInProcInputHost
StopAndEndInertia
NotifyInputSinkTransformChanged
RegisterManipulationThread

dcomp

DCompositionCreateDevice2

api-ms-win-crt-string-l1-1-0

strcpy_s

api-ms-win-crt-math-l1-1-0

floorf
fmod
fminf
fmaxf
modff
expf
_finite
exp
atan2f
_isnan
cosf
ceilf
acosf
fmodf
log
log10f
logf
pow
powf
sin
acos
floor
sinf
sqrt
tanf
asinf
atanf
sqrtf
tan
_hypot

api-ms-win-crt-utility-l1-1-0

qsort

Exports

Exports

LiftedCompositionEngine_Initialize
LiftedCompositionEngine_Uninitialize

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 776KB - Virtual size: 773KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
el-GR/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
el-GR/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
en-GB/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
en-GB/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
en-us/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
en-us/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
es-ES/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
es-ES/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
es-MX/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
es-MX/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
et-EE/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
et-EE/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
eu-ES/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
eu-ES/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fa-IR/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fa-IR/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fi-FI/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fi-FI/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fil-PH/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fil-PH/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fr-CA/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fr-CA/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fr-FR/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fr-FR/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ga-IE/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ga-IE/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
gd-gb/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
gd-gb/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
gl-ES/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
gl-ES/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
gu-IN/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
gu-IN/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
he-IL/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
he-IL/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
hi-IN/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
hi-IN/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
hr-HR/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
hr-HR/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
hu-HU/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
hu-HU/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
hy-AM/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
hy-AM/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
id-ID/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
id-ID/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
is-IS/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
is-IS/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
it-IT/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
it-IT/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ja-JP/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ja-JP/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ka-GE/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ka-GE/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
kk-KZ/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
kk-KZ/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
km-KH/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
km-KH/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
kn-IN/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
kn-IN/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ko-KR/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ko-KR/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
kok-IN/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
kok-IN/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lb-LU/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lb-LU/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lo-LA/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lo-LA/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lt-LT/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lt-LT/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lv-LV/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lv-LV/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
marshal.dll
.dll windows:10 windows x64 arch:x64

a0d28566665a759d75174049ce79601b

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ff:ad:89:40:91:e2:a6:cd:22:d6:28:20:d4:b1:66:6b:53:66:8c:b8:64:c9:9e:a2:74:e8:2f:44:c1:43:d0:53
Signer

Actual PE Digest

ff:ad:89:40:91:e2:a6:cd:22:d6:28:20:d4:b1:66:6b:53:66:8c:b8:64:c9:9e:a2:74:e8:2f:44:c1:43:d0:53

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

marshal.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_invoke_watson
_errno
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
terminate
abort
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf

api-ms-win-crt-heap-l1-1-0

_free_base
_calloc_base
free
calloc
malloc

api-ms-win-crt-convert-l1-1-0

_wcstoui64

microsoft.ui.composition.ossupport

RtlDeleteElementGenericTable_Onecore
RtlInsertElementGenericTable_Onecore
RtlLookupElementGenericTable_Onecore
ExUuidCreate
ZwQueryValueKey
ZwOpenKey
RtlEnumerateGenericTableWithoutSplaying_Onecore
RtlInitializeGenericTable_Onecore
NtQueryObject_Ntdll
WideCharToMultiByte_Winbase
GetLastError_Winbase
SetLastError_Winbase
RaiseException_Winbase
RaiseFailFastException_Winbase
UnhandledExceptionFilter_Winbase
SetUnhandledExceptionFilter_Winbase
InitializeSListHead_Winbase
InterlockedPopEntrySList_Winbase
InterlockedPushEntrySList_Winbase
InterlockedFlushSList_Winbase

api-ms-win-ntuser-rectangle-l1-1-0

OffsetRect
UnionRect

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW
GetProcAddress
GetModuleHandleExW
GetModuleFileNameA

api-ms-win-core-heap-l1-1-0

HeapAlloc
HeapFree
GetProcessHeap

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection
InitializeCriticalSectionEx
WaitForSingleObjectEx
OpenSemaphoreW
CreateMutexExW
ReleaseSRWLockShared
InitializeSRWLock
AcquireSRWLockShared
ReleaseMutex
WaitForSingleObject
ReleaseSemaphore
CreateEventExW
ResetEvent
SetEvent
CreateEventW
AcquireSRWLockExclusive
CreateSemaphoreExW
ReleaseSRWLockExclusive
TryAcquireSRWLockExclusive

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-synch-l1-2-0

WakeAllConditionVariable
SleepConditionVariableSRW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
OutputDebugStringW
DebugBreak

api-ms-win-core-handle-l1-1-0

DuplicateHandle
CloseHandle

api-ms-win-core-sysinfo-l1-2-0

GetSystemTimePreciseAsFileTime

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureStackBackTrace
RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader

api-ms-win-security-base-l1-1-0

AllocateLocallyUniqueId

api-ms-win-core-fibers-l1-1-0

FlsGetValue
FlsSetValue
FlsFree
FlsAlloc

api-ms-win-core-util-l1-1-0

EncodePointer

api-ms-win-core-memory-l1-1-0

UnmapViewOfFile
MapViewOfFile
VirtualAlloc
VirtualFree
CreateFileMappingW

gdi32

CreateRectRgnIndirect
ExtCreateRegion

microsoft.internal.frameworkudk

Containment_GetChangeEnabled

api-ms-win-crt-string-l1-1-0

strnlen
memcpy_s
strcpy_s

api-ms-win-crt-math-l1-1-0

_finite
ceilf

Exports

Exports

GetLastError
LM_CloseSurfaceHandle
LM_CloseTokenHandle
LM_CreateCompositionBuffer
LM_CreateTokenHandle
LM_GetFrameSurfaceUpdates
LM_GetSurfaceInfo
LM_OpenCompositionBuffer
LM_PresentCompositionBuffers
LM_TokenManagerDeleteAllTokens
LM_TokenManagerOpenSectionAndEvents
LM_TokenManagerThread
LM_ValidateSurfaceHandle
LegacyMarshalerBeginFrame
LegacyMarshalerCloseCompositionInputSink
LegacyMarshalerCloseSectionHandle
LegacyMarshalerCommitChannel
LegacyMarshalerConfirmFrame
LegacyMarshalerCreateAndBindSharedSection
LegacyMarshalerCreateChannel
LegacyMarshalerCreateCompositionInputSink
LegacyMarshalerCreateConnection
LegacyMarshalerCreateImplicitCompositionInputSink
LegacyMarshalerDestroyChannel
LegacyMarshalerDestroyConnection
LegacyMarshalerDuplicateCompositionInputSink
LegacyMarshalerGetBatchId
LegacyMarshalerGetConnectionBatch
LegacyMarshalerGetDeletedResources
LegacyMarshalerGetFrameStatistics
LegacyMarshalerInitialize
LegacyMarshalerMapViewOfSection
LegacyMarshalerProcessChannelBatchBuffer
LegacyMarshalerQueryCompositionInputIsImplicit
LegacyMarshalerQueryCompositionInputQueueAndTransform
LegacyMarshalerQueryCompositionInputSink
LegacyMarshalerQueryCompositionInputSinkLuid
LegacyMarshalerQueryCompositionInputSinkViewId
LegacyMarshalerReleaseAllResources
LegacyMarshalerSetChannelCommitCompletionEvent
LegacyMarshalerSetChannelConnectionId
LegacyMarshalerSynchronize
LegacyMarshalerUpdateInputSinkTransforms
LegacyMarshalerWaitForChannel
RaiseException
RaiseFailFastException
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WideCharToMultiByte

Sections

.text
Size: 384KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mi-NZ/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
mi-NZ/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
mk-MK/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
mk-MK/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ml-IN/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ml-IN/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
mr-IN/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
mr-IN/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ms-MY/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ms-MY/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
mt-MT/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
mt-MT/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
nb-NO/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
nb-NO/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ne-NP/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ne-NP/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
nl-NL/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
nl-NL/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
nn-NO/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
nn-NO/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
or-IN/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
or-IN/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pa-IN/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pa-IN/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pl-PL/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pl-PL/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pt-BR/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pt-BR/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pt-PT/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pt-PT/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
quz-PE/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
quz-PE/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
resources.pri
ro-RO/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ro-RO/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ru-RU/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ru-RU/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
runtimes/win-x64/native/Microsoft.WindowsAppRuntime.Bootstrap.dll
.dll windows:6 windows x64 arch:x64

9fc59db387b6ac0caad2f1d8a043a4a3

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fe:f5:29:2c:2d:9b:34:01:05:eb:83:e0:7b:b9:24:bc:8d:b4:bc:e6:f4:37:07:24:5a:1e:07:89:1f:cf:b6:ba
Signer

Actual PE Digest

fe:f5:29:2c:2d:9b:34:01:05:eb:83:e0:7b:b9:24:bc:8d:b4:bc:e6:f4:37:07:24:5a:1e:07:89:1f:cf:b6:ba

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.WindowsAppRuntime.Bootstrap.pdb

Imports

advapi32

EventWriteTransfer
EventUnregister
EventActivityIdControl
DeregisterEventSource
EventSetInformation
EventRegister
ReportEventW
RegisterEventSourceW
GetSidSubAuthority
GetTokenInformation
GetSidSubAuthorityCount

kernel32

GetProcAddress
SetLastError
GetLastError
GetModuleHandleW
HeapAlloc
OutputDebugStringW
GetCurrentThreadId
FormatMessageW
IsDebuggerPresent
AcquireSRWLockExclusive
RtlPcToFileHeader
RtlUnwindEx
FreeLibrary
GetModuleHandleExW
InitializeSListHead
DisableThreadLibraryCalls
CloseHandle
GetCurrentPackageFullName
DebugBreak
IsProcessorFeaturePresent
LoadLibraryW
CompareStringOrdinal
ReleaseSRWLockExclusive
OpenPackageInfoByFullName
GetPackageInfo
AddDllDirectory
SetEnvironmentVariableW
GetEnvironmentVariableW
CreateEventW
GetCurrentProcessId
FormatApplicationUserModelId
TerminateProcess
GetPackagePathByFullName
FindFirstFileW
GetCurrentProcess
HeapFree
GetProcessHeap
InitOnceComplete
GetModuleFileNameW
K32GetModuleFileNameExW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetEvent
FindClose
ClosePackageInfo
RemoveDllDirectory
CreateEventExW
RtlVirtualUnwind
InitOnceBeginInitialize
GetModuleFileNameA
CreateSemaphoreExW
ReleaseSemaphore
WaitForSingleObject
ReleaseMutex
WaitForSingleObjectEx
OpenSemaphoreW
CreateMutexExW
LoadLibraryExW
RtlLookupFunctionEntry
RtlCaptureContext
InterlockedPushEntrySList
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EncodePointer
InterlockedFlushSList
TryAcquireSRWLockExclusive
QueryPerformanceCounter
WakeAllConditionVariable
SleepConditionVariableSRW
GetSystemTimeAsFileTime

ole32

CoCreateFreeThreadedMarshaler
CoCreateInstance
CoTaskMemAlloc
CoCreateGuid
CoTaskMemFree

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo
RoFailFastWithErrorContext
GetRestrictedErrorInfo

oleaut32

SysStringLen
SysAllocString
SysFreeString
SetErrorInfo
GetErrorInfo

user32

wsprintfW
LoadStringA
MessageBoxW

rpcrt4

UuidFromStringW

shell32

ShellExecuteExW

api-ms-win-core-errorhandling-l1-1-0

RaiseException

api-ms-win-core-sysinfo-l1-1-0

GetSystemInfo

api-ms-win-core-memory-l1-1-0

VirtualProtect
VirtualQuery

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExA

api-ms-win-crt-runtime-l1-1-0

abort
_initterm_e
_errno
_invalid_parameter_noinfo_noreturn
_cexit
_crt_atexit
terminate
_initterm
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vswprintf_s
__stdio_common_vswscanf
__stdio_common_vsnprintf_s

api-ms-win-crt-string-l1-1-0

wcsncmp
iswspace
strcpy_s

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc

Exports

Exports

MddBootstrapInitialize
MddBootstrapInitialize2
MddBootstrapShutdown
MddBootstrapTestInitialize

Sections

.text
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
runtimes/win-x86/native/Microsoft.WindowsAppRuntime.Bootstrap.dll
.dll windows:6 windows x86 arch:x86

bcf400cf7df2a2e9fb012d1bcbce3aa7

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e2:63:44:d2:2f:03:28:cf:cb:5c:b9:ca:be:e8:e8:21:96:ed:15:c0:ff:3f:6f:ba:40:3e:7b:4c:3a:0c:6c:d7
Signer

Actual PE Digest

e2:63:44:d2:2f:03:28:cf:cb:5c:b9:ca:be:e8:e8:21:96:ed:15:c0:ff:3f:6f:ba:40:3e:7b:4c:3a:0c:6c:d7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.WindowsAppRuntime.Bootstrap.pdb

Imports

advapi32

EventWriteTransfer
EventUnregister
EventActivityIdControl
DeregisterEventSource
EventSetInformation
EventRegister
ReportEventW
RegisterEventSourceW
GetSidSubAuthority
GetTokenInformation
GetSidSubAuthorityCount

kernel32

GetProcAddress
SetLastError
GetLastError
GetModuleHandleW
HeapAlloc
OutputDebugStringW
GetCurrentThreadId
FormatMessageW
IsDebuggerPresent
AcquireSRWLockExclusive
InterlockedPushEntrySList
RtlUnwind
FreeLibrary
GetModuleHandleExW
InitializeSListHead
DisableThreadLibraryCalls
CloseHandle
GetCurrentPackageFullName
DebugBreak
IsProcessorFeaturePresent
LoadLibraryW
CompareStringOrdinal
ReleaseSRWLockExclusive
OpenPackageInfoByFullName
GetPackageInfo
AddDllDirectory
SetEnvironmentVariableW
GetEnvironmentVariableW
CreateEventW
GetCurrentProcessId
FormatApplicationUserModelId
TerminateProcess
GetPackagePathByFullName
FindFirstFileW
GetCurrentProcess
HeapFree
GetProcessHeap
InitOnceComplete
GetModuleFileNameW
K32GetModuleFileNameExW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetEvent
FindClose
ClosePackageInfo
RemoveDllDirectory
CreateEventExW
InitOnceBeginInitialize
GetModuleFileNameA
CreateSemaphoreExW
ReleaseSemaphore
WaitForSingleObject
ReleaseMutex
WaitForSingleObjectEx
OpenSemaphoreW
CreateMutexExW
LoadLibraryExW
InterlockedFlushSList
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EncodePointer
SleepConditionVariableSRW
TryAcquireSRWLockExclusive
QueryPerformanceCounter
WakeAllConditionVariable

ole32

CoCreateInstance
CoTaskMemAlloc
CoCreateGuid
CoTaskMemFree
CoCreateFreeThreadedMarshaler

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext
SetRestrictedErrorInfo
GetRestrictedErrorInfo

oleaut32

SetErrorInfo
SysStringLen
SysFreeString
GetErrorInfo
SysAllocString

user32

wsprintfW
MessageBoxW
LoadStringA

rpcrt4

UuidFromStringW

shell32

ShellExecuteExW

api-ms-win-core-errorhandling-l1-1-0

RaiseException

api-ms-win-core-sysinfo-l1-1-0

GetSystemInfo

api-ms-win-core-memory-l1-1-0

VirtualQuery
VirtualProtect

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExA

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_errno
_invalid_parameter_noinfo
terminate
_cexit
abort
_register_onexit_function
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_crt_atexit
_execute_onexit_table
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s
__stdio_common_vswscanf
__stdio_common_vsnprintf_s
__stdio_common_vswprintf

api-ms-win-crt-string-l1-1-0

wcsncmp
iswspace
strcpy_s

api-ms-win-crt-heap-l1-1-0

free
_callnewh
calloc
malloc

Exports

Exports

MddBootstrapInitialize
MddBootstrapInitialize2
MddBootstrapShutdown
MddBootstrapTestInitialize

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
runtimes/win10-x64/native/Microsoft.WindowsAppRuntime.Bootstrap.dll
.dll windows:6 windows x64 arch:x64

9fc59db387b6ac0caad2f1d8a043a4a3

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fe:f5:29:2c:2d:9b:34:01:05:eb:83:e0:7b:b9:24:bc:8d:b4:bc:e6:f4:37:07:24:5a:1e:07:89:1f:cf:b6:ba
Signer

Actual PE Digest

fe:f5:29:2c:2d:9b:34:01:05:eb:83:e0:7b:b9:24:bc:8d:b4:bc:e6:f4:37:07:24:5a:1e:07:89:1f:cf:b6:ba

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.WindowsAppRuntime.Bootstrap.pdb

Imports

advapi32

EventWriteTransfer
EventUnregister
EventActivityIdControl
DeregisterEventSource
EventSetInformation
EventRegister
ReportEventW
RegisterEventSourceW
GetSidSubAuthority
GetTokenInformation
GetSidSubAuthorityCount

kernel32

GetProcAddress
SetLastError
GetLastError
GetModuleHandleW
HeapAlloc
OutputDebugStringW
GetCurrentThreadId
FormatMessageW
IsDebuggerPresent
AcquireSRWLockExclusive
RtlPcToFileHeader
RtlUnwindEx
FreeLibrary
GetModuleHandleExW
InitializeSListHead
DisableThreadLibraryCalls
CloseHandle
GetCurrentPackageFullName
DebugBreak
IsProcessorFeaturePresent
LoadLibraryW
CompareStringOrdinal
ReleaseSRWLockExclusive
OpenPackageInfoByFullName
GetPackageInfo
AddDllDirectory
SetEnvironmentVariableW
GetEnvironmentVariableW
CreateEventW
GetCurrentProcessId
FormatApplicationUserModelId
TerminateProcess
GetPackagePathByFullName
FindFirstFileW
GetCurrentProcess
HeapFree
GetProcessHeap
InitOnceComplete
GetModuleFileNameW
K32GetModuleFileNameExW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetEvent
FindClose
ClosePackageInfo
RemoveDllDirectory
CreateEventExW
RtlVirtualUnwind
InitOnceBeginInitialize
GetModuleFileNameA
CreateSemaphoreExW
ReleaseSemaphore
WaitForSingleObject
ReleaseMutex
WaitForSingleObjectEx
OpenSemaphoreW
CreateMutexExW
LoadLibraryExW
RtlLookupFunctionEntry
RtlCaptureContext
InterlockedPushEntrySList
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EncodePointer
InterlockedFlushSList
TryAcquireSRWLockExclusive
QueryPerformanceCounter
WakeAllConditionVariable
SleepConditionVariableSRW
GetSystemTimeAsFileTime

ole32

CoCreateFreeThreadedMarshaler
CoCreateInstance
CoTaskMemAlloc
CoCreateGuid
CoTaskMemFree

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo
RoFailFastWithErrorContext
GetRestrictedErrorInfo

oleaut32

SysStringLen
SysAllocString
SysFreeString
SetErrorInfo
GetErrorInfo

user32

wsprintfW
LoadStringA
MessageBoxW

rpcrt4

UuidFromStringW

shell32

ShellExecuteExW

api-ms-win-core-errorhandling-l1-1-0

RaiseException

api-ms-win-core-sysinfo-l1-1-0

GetSystemInfo

api-ms-win-core-memory-l1-1-0

VirtualProtect
VirtualQuery

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExA

api-ms-win-crt-runtime-l1-1-0

abort
_initterm_e
_errno
_invalid_parameter_noinfo_noreturn
_cexit
_crt_atexit
terminate
_initterm
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vswprintf_s
__stdio_common_vswscanf
__stdio_common_vsnprintf_s

api-ms-win-crt-string-l1-1-0

wcsncmp
iswspace
strcpy_s

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc

Exports

Exports

MddBootstrapInitialize
MddBootstrapInitialize2
MddBootstrapShutdown
MddBootstrapTestInitialize

Sections

.text
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
runtimes/win10-x86/native/Microsoft.WindowsAppRuntime.Bootstrap.dll
.dll windows:6 windows x86 arch:x86

bcf400cf7df2a2e9fb012d1bcbce3aa7

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e2:63:44:d2:2f:03:28:cf:cb:5c:b9:ca:be:e8:e8:21:96:ed:15:c0:ff:3f:6f:ba:40:3e:7b:4c:3a:0c:6c:d7
Signer

Actual PE Digest

e2:63:44:d2:2f:03:28:cf:cb:5c:b9:ca:be:e8:e8:21:96:ed:15:c0:ff:3f:6f:ba:40:3e:7b:4c:3a:0c:6c:d7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.WindowsAppRuntime.Bootstrap.pdb

Imports

advapi32

EventWriteTransfer
EventUnregister
EventActivityIdControl
DeregisterEventSource
EventSetInformation
EventRegister
ReportEventW
RegisterEventSourceW
GetSidSubAuthority
GetTokenInformation
GetSidSubAuthorityCount

kernel32

GetProcAddress
SetLastError
GetLastError
GetModuleHandleW
HeapAlloc
OutputDebugStringW
GetCurrentThreadId
FormatMessageW
IsDebuggerPresent
AcquireSRWLockExclusive
InterlockedPushEntrySList
RtlUnwind
FreeLibrary
GetModuleHandleExW
InitializeSListHead
DisableThreadLibraryCalls
CloseHandle
GetCurrentPackageFullName
DebugBreak
IsProcessorFeaturePresent
LoadLibraryW
CompareStringOrdinal
ReleaseSRWLockExclusive
OpenPackageInfoByFullName
GetPackageInfo
AddDllDirectory
SetEnvironmentVariableW
GetEnvironmentVariableW
CreateEventW
GetCurrentProcessId
FormatApplicationUserModelId
TerminateProcess
GetPackagePathByFullName
FindFirstFileW
GetCurrentProcess
HeapFree
GetProcessHeap
InitOnceComplete
GetModuleFileNameW
K32GetModuleFileNameExW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetEvent
FindClose
ClosePackageInfo
RemoveDllDirectory
CreateEventExW
InitOnceBeginInitialize
GetModuleFileNameA
CreateSemaphoreExW
ReleaseSemaphore
WaitForSingleObject
ReleaseMutex
WaitForSingleObjectEx
OpenSemaphoreW
CreateMutexExW
LoadLibraryExW
InterlockedFlushSList
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EncodePointer
SleepConditionVariableSRW
TryAcquireSRWLockExclusive
QueryPerformanceCounter
WakeAllConditionVariable

ole32

CoCreateInstance
CoTaskMemAlloc
CoCreateGuid
CoTaskMemFree
CoCreateFreeThreadedMarshaler

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext
SetRestrictedErrorInfo
GetRestrictedErrorInfo

oleaut32

SetErrorInfo
SysStringLen
SysFreeString
GetErrorInfo
SysAllocString

user32

wsprintfW
MessageBoxW
LoadStringA

rpcrt4

UuidFromStringW

shell32

ShellExecuteExW

api-ms-win-core-errorhandling-l1-1-0

RaiseException

api-ms-win-core-sysinfo-l1-1-0

GetSystemInfo

api-ms-win-core-memory-l1-1-0

VirtualQuery
VirtualProtect

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExA

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_errno
_invalid_parameter_noinfo
terminate
_cexit
abort
_register_onexit_function
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_crt_atexit
_execute_onexit_table
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s
__stdio_common_vswscanf
__stdio_common_vsnprintf_s
__stdio_common_vswprintf

api-ms-win-crt-string-l1-1-0

wcsncmp
iswspace
strcpy_s

api-ms-win-crt-heap-l1-1-0

free
_callnewh
calloc
malloc

Exports

Exports

MddBootstrapInitialize
MddBootstrapInitialize2
MddBootstrapShutdown
MddBootstrapTestInitialize

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sk-SK/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sk-SK/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sl-SI/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sl-SI/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sq-AL/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sq-AL/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sr-Cyrl-BA/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sr-Cyrl-BA/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sr-Cyrl-RS/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sr-Cyrl-RS/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sr-Latn-RS/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sr-Latn-RS/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
steve.png
.png
sv-SE/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sv-SE/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ta-IN/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ta-IN/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
te-IN/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
te-IN/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
th-TH/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
th-TH/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
tr-TR/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
tr-TR/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
tt-RU/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
tt-RU/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ug-CN/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ug-CN/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
uk-UA/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
uk-UA/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ur-PK/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ur-PK/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
uz-Latn-UZ/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
uz-Latn-UZ/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vi-VN/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vi-VN/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
wuceffectsi.dll
.dll windows:10 windows x64 arch:x64

3db229e7f85e0e8798e892c9fa9e985d

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

92:75:85:f5:c0:5d:45:c2:b1:22:11:a4:3b:65:2a:dd:d4:bb:b3:a7:5a:4c:b8:30:e9:ac:0b:e8:41:00:c1:6f
Signer

Actual PE Digest

92:75:85:f5:c0:5d:45:c2:b1:22:11:a4:3b:65:2a:dd:d4:bb:b3:a7:5a:4c:b8:30:e9:ac:0b:e8:41:00:c1:6f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

wuceffectsi.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo
_errno
_invalid_parameter_noinfo_noreturn
terminate
_beginthreadex
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
abort

api-ms-win-crt-string-l1-1-0

strcpy_s
iswspace
_wcsicmp
strcmp
_wcsicmp_l

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s
__stdio_common_vsnprintf_s
__stdio_common_vswprintf

api-ms-win-crt-locale-l1-1-0

_create_locale

api-ms-win-crt-convert-l1-1-0

_ltoa_s
_itoa_s

api-ms-win-crt-heap-l1-1-0

free
malloc
_calloc_base
_free_base

microsoft.ui.composition.ossupport

TerminateProcessOnMemoryExhaustion

kernel32

RaiseFailFastException
InitOnceBeginInitialize
InitOnceComplete
InitializeSRWLock
TryAcquireSRWLockExclusive
GetExitCodeThread
Sleep
InitializeSListHead
GetSystemTimeAsFileTime
RtlPcToFileHeader
WakeConditionVariable
InitializeConditionVariable
InterlockedFlushSList
InterlockedPushEntrySList
InitializeCriticalSectionEx
QueryPerformanceFrequency
GetSystemTimePreciseAsFileTime
FlsFree
FlsSetValue
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
SetLastError
ReleaseSemaphore
GetModuleHandleExW
WaitForSingleObject
GetCurrentThreadId
ReleaseMutex
FormatMessageW
GetLastError
OutputDebugStringW
WaitForSingleObjectEx
OpenSemaphoreW
CloseHandle
HeapAlloc
GetProcAddress
CreateMutexExW
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
DebugBreak
IsDebuggerPresent
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryW
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
FindResourceA
LoadResource
LockResource
SizeofResource
RaiseException
DecodePointer
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitOnceExecuteOnce
EncodePointer
ReleaseSRWLockShared
AcquireSRWLockShared
QueryPerformanceCounter
RtlCaptureStackBackTrace
FlsGetValue
TerminateProcess
GetCurrentProcess
TerminateThread
GetCurrentThread
WakeAllConditionVariable
SleepConditionVariableSRW
RtlLookupFunctionEntry
RtlUnwindEx
FlsAlloc
MultiByteToWideChar

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW
RoOriginateError

api-ms-win-core-winrt-string-l1-1-0

WindowsStringHasEmbeddedNull
WindowsSubstringWithSpecifiedLength
WindowsIsStringEmpty
WindowsCreateString
WindowsDuplicateString
WindowsDeleteString
WindowsCreateStringReference
WindowsGetStringRawBuffer

api-ms-win-core-com-l1-1-0

CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoCreateFreeThreadedMarshaler

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

ntdll

DbgPrompt
NtQuerySystemInformation
DbgPrintEx

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventSetInformation
EventRegister
EventUnregister

oleaut32

SysStringLen
SysFreeString
SysAllocString
GetErrorInfo
SetErrorInfo

api-ms-win-crt-math-l1-1-0

cos
sinf
sqrtf
powf
ceilf
cosf

Exports

Exports

CompileEffectDescription
CreateEffectDescription
DeserializeEffectDescription
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
SerializeEffectDescription

Sections

.text
Size: 288KB - Virtual size: 286KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
zh-CN/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
zh-CN/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
zh-TW/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
zh-TW/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42332fcc3e2310cce4c14fb09676af3a

Headers

File Characteristics

Imports

gdi32

ole32

user32

advapi32

shell32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 43KB - Virtual size: 43KB

.rdata Size: 21KB - Virtual size: 21KB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 5KB - Virtual size: 5KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 494B

59a1630cccf0571037bfd10c233b016e

Headers

File Characteristics

Imports

oleaut32

user32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 825KB - Virtual size: 825KB

.rdata Size: 115KB - Virtual size: 115KB

.data Size: 1KB - Virtual size: 33KB

.sxdata Size: 512B - Virtual size: 4B

.rsrc Size: 95KB - Virtual size: 94KB

.reloc Size: 35KB - Virtual size: 34KB

6d26c857784eea32ac92dcb74e598644

Headers

File Characteristics

Imports

oleaut32

user32

advapi32

msvcrt

kernel32

Sections

.text Size: 215KB - Virtual size: 214KB

.rdata Size: 45KB - Virtual size: 44KB

.data Size: 1KB - Virtual size: 9KB

.sxdata Size: 512B - Virtual size: 4B

.rsrc Size: 1024B - Virtual size: 808B

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77Certificate

Key Usages

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23Certificate

Extended Key Usages

Key Usages

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

9a:f0:90:02:ac:90:fd:c7:25:59:bc:70:97:5a:2f:d1:bd:26:b5:cc:cf:e6:2f:31:88:60:24:ac:28:2f:58:1dSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

.text
Size: 43KB - Virtual size: 43KB

.rdata
Size: 21KB - Virtual size: 21KB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 494B

.text
Size: 825KB - Virtual size: 825KB

.rdata
Size: 115KB - Virtual size: 115KB

.data
Size: 1KB - Virtual size: 33KB

.sxdata
Size: 512B - Virtual size: 4B

.rsrc
Size: 95KB - Virtual size: 94KB

.reloc
Size: 35KB - Virtual size: 34KB

.text
Size: 215KB - Virtual size: 214KB

.rdata
Size: 45KB - Virtual size: 44KB

.data
Size: 1KB - Virtual size: 9KB

.sxdata
Size: 512B - Virtual size: 4B

.rsrc
Size: 1024B - Virtual size: 808B

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

9a:f0:90:02:ac:90:fd:c7:25:59:bc:70:97:5a:2f:d1:bd:26:b5:cc:cf:e6:2f:31:88:60:24:ac:28:2f:58:1d
Signer

.text
Size: 100KB - Virtual size: 99KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

ca:61:55:a5:ee:4e:e1:d9:c9:5b:f3:8f:b7:c5:01:d5:a6:76:95:74:2b:e2:a3:42:d9:b4:74:ee:43:c7:24:4b
Signer

.text
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

d2:9b:b1:e9:b1:58:a4:4e:d2:a0:1f:97:28:3f:64:98:72:59:6b:32:d2:73:9e:ce:50:c4:0a:7b:d6:ca:15:5b
Signer

.text
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate