JiayiLauncher[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

JiayiLauncher.zip
Size

39.2MB
MD5

10bc52a41c4a56be7a0e7b2c8ddd6547
SHA1

257dccc4db8055cb91c5963ee3f4a4160d5fed91
SHA256

39b580efe5c595ade13d3f0fe9008b3c204fe51e47f663c084210272f0d6d6f5
SHA512

acded1804a6e705bf06126a63b2b255baf3f2a5ed2dabb84bdaee795cb3deceb17875a1f516c9a8963e3207795dc2aaac25dcce8a3302b9b29b535661ffeb74a
SSDEEP

786432:9wBX338NQaKGyh/5r4Elk/pC7CDH3H3qjtJnF16GmsZb8EpJvD2YOZ/1A265:AXz3x4AkhUGGVQG3lvD2Y4A265

Score

3^/10

Malware Config

Signatures

Unsigned PE 175 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Blazored.Modal.dll
unpack001/Blazored.Toast.dll
unpack001/DiscordRPC.dll
unpack001/JiayiLauncher.dll
unpack001/JiayiLauncher.exe
unpack001/Microsoft.AspNetCore.Authorization.dll
unpack001/Microsoft.AspNetCore.Components.Forms.dll
unpack001/Microsoft.AspNetCore.Components.Web.dll
unpack001/Microsoft.AspNetCore.Components.WebView.Maui.dll
unpack001/Microsoft.AspNetCore.Components.WebView.dll
unpack001/Microsoft.AspNetCore.Components.dll
unpack001/Microsoft.Extensions.Configuration.Abstractions.dll
unpack001/Microsoft.Extensions.Configuration.Binder.dll
unpack001/Microsoft.Extensions.Configuration.FileExtensions.dll
unpack001/Microsoft.Extensions.Configuration.Json.dll
unpack001/Microsoft.Extensions.Configuration.dll
unpack001/Microsoft.Extensions.DependencyInjection.Abstractions.dll
unpack001/Microsoft.Extensions.DependencyInjection.dll
unpack001/Microsoft.Extensions.FileProviders.Abstractions.dll
unpack001/Microsoft.Extensions.FileProviders.Composite.dll
unpack001/Microsoft.Extensions.FileProviders.Embedded.dll
unpack001/Microsoft.Extensions.FileProviders.Physical.dll
unpack001/Microsoft.Extensions.FileSystemGlobbing.dll
unpack001/Microsoft.Extensions.Logging.Abstractions.dll
unpack001/Microsoft.Extensions.Logging.Debug.dll
unpack001/Microsoft.Extensions.Logging.dll
unpack001/Microsoft.Extensions.Options.dll
unpack001/Microsoft.Extensions.Primitives.dll
unpack001/Microsoft.Graphics.Canvas.Interop.dll
unpack001/Microsoft.InteractiveExperiences.Projection.dll
unpack001/Microsoft.JSInterop.WebAssembly.dll
unpack001/Microsoft.JSInterop.dll
unpack001/Microsoft.Maui.Controls.Compatibility.dll
unpack001/Microsoft.Maui.Controls.Xaml.dll
unpack001/Microsoft.Maui.Controls.dll
unpack001/Microsoft.Maui.Essentials.dll
unpack001/Microsoft.Maui.Graphics.Win2D.WinUI.Desktop.dll
unpack001/Microsoft.Maui.Graphics.dll
unpack001/Microsoft.Maui.dll
unpack001/Microsoft.WinUI.dll
unpack001/Microsoft.Windows.AppLifecycle.Projection.dll
unpack001/Microsoft.Windows.AppNotifications.Builder.Projection.dll
unpack001/Microsoft.Windows.AppNotifications.Projection.dll
unpack001/Microsoft.Windows.ApplicationModel.DynamicDependency.Projection.dll
unpack001/Microsoft.Windows.ApplicationModel.Resources.Projection.dll
unpack001/Microsoft.Windows.ApplicationModel.WindowsAppRuntime.Projection.dll
unpack001/Microsoft.Windows.PushNotifications.Projection.dll
unpack001/Microsoft.Windows.Security.AccessControl.Projection.dll
unpack001/Microsoft.Windows.System.Power.Projection.dll
unpack001/Microsoft.Windows.System.Projection.dll
unpack001/Microsoft.Windows.Widgets.Projection.dll
unpack001/Microsoft.WindowsAppRuntime.Bootstrap.Net.dll
unpack001/Newtonsoft.Json.dll
unpack001/Octokit.dll
unpack001/StoreLib.dll
unpack001/System.IO.Pipelines.dll
unpack001/WindowsAPICodePack.Shell.CommonFileDialogs.dll
unpack001/af-ZA/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/af-ZA/Microsoft.ui.xaml.dll.mui
unpack001/ar-SA/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ar-SA/Microsoft.ui.xaml.dll.mui
unpack001/az-Latn-AZ/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/az-Latn-AZ/Microsoft.ui.xaml.dll.mui
unpack001/bg-BG/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/bg-BG/Microsoft.ui.xaml.dll.mui
unpack001/bs-Latn-BA/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/bs-Latn-BA/Microsoft.ui.xaml.dll.mui
unpack001/ca-ES/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ca-ES/Microsoft.ui.xaml.dll.mui
unpack001/cs-CZ/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/cs-CZ/Microsoft.ui.xaml.dll.mui
unpack001/cy-GB/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/cy-GB/Microsoft.ui.xaml.dll.mui
unpack001/da-DK/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/da-DK/Microsoft.ui.xaml.dll.mui
unpack001/de-DE/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/de-DE/Microsoft.ui.xaml.dll.mui
unpack001/el-GR/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/el-GR/Microsoft.ui.xaml.dll.mui
unpack001/en-GB/JiayiLauncher.resources.dll
unpack001/en-GB/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/en-GB/Microsoft.ui.xaml.dll.mui
unpack001/en-us/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/en-us/Microsoft.ui.xaml.dll.mui
unpack001/es-ES/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/es-ES/Microsoft.ui.xaml.dll.mui
unpack001/es-MX/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/es-MX/Microsoft.ui.xaml.dll.mui
unpack001/es/JiayiLauncher.resources.dll
unpack001/et-EE/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/et-EE/Microsoft.ui.xaml.dll.mui
unpack001/eu-ES/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/eu-ES/Microsoft.ui.xaml.dll.mui
unpack001/fa-IR/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/fa-IR/Microsoft.ui.xaml.dll.mui
unpack001/fi-FI/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/fi-FI/Microsoft.ui.xaml.dll.mui
unpack001/fr-CA/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/fr-CA/Microsoft.ui.xaml.dll.mui
unpack001/fr-FR/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/fr-FR/Microsoft.ui.xaml.dll.mui
unpack001/gl-ES/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/gl-ES/Microsoft.ui.xaml.dll.mui
unpack001/he-IL/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/he-IL/Microsoft.ui.xaml.dll.mui
unpack001/hi-IN/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/hi-IN/Microsoft.ui.xaml.dll.mui
unpack001/hr-HR/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/hr-HR/Microsoft.ui.xaml.dll.mui
unpack001/hu-HU/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/hu-HU/Microsoft.ui.xaml.dll.mui
unpack001/id-ID/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/id-ID/Microsoft.ui.xaml.dll.mui
unpack001/is-IS/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/is-IS/Microsoft.ui.xaml.dll.mui
unpack001/it-IT/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/it-IT/Microsoft.ui.xaml.dll.mui
unpack001/ja-JP/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ja-JP/Microsoft.ui.xaml.dll.mui
unpack001/ka-GE/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ka-GE/Microsoft.ui.xaml.dll.mui
unpack001/kk-KZ/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/kk-KZ/Microsoft.ui.xaml.dll.mui
unpack001/ko-KR/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ko-KR/Microsoft.ui.xaml.dll.mui
unpack001/lt-LT/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/lt-LT/Microsoft.ui.xaml.dll.mui
unpack001/lv-LV/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/lv-LV/Microsoft.ui.xaml.dll.mui
unpack001/ms-MY/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ms-MY/Microsoft.ui.xaml.dll.mui
unpack001/nb-NO/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/nb-NO/Microsoft.ui.xaml.dll.mui
unpack001/nl-NL/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/nl-NL/Microsoft.ui.xaml.dll.mui
unpack001/nn-NO/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/nn-NO/Microsoft.ui.xaml.dll.mui
unpack001/pl-PL/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/pl-PL/Microsoft.ui.xaml.dll.mui
unpack001/pt-BR/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/pt-BR/Microsoft.ui.xaml.dll.mui
unpack001/pt-PT/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/pt-PT/Microsoft.ui.xaml.dll.mui
unpack001/ro-RO/JiayiLauncher.resources.dll
unpack001/ro-RO/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ro-RO/Microsoft.ui.xaml.dll.mui
unpack001/ru-RU/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/ru-RU/Microsoft.ui.xaml.dll.mui
unpack001/sk-SK/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/sk-SK/Microsoft.ui.xaml.dll.mui
unpack001/sl-SI/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/sl-SI/Microsoft.ui.xaml.dll.mui
unpack001/sq-AL/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/sq-AL/Microsoft.ui.xaml.dll.mui
unpack001/sr-Cyrl-RS/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/sr-Cyrl-RS/Microsoft.ui.xaml.dll.mui
unpack001/sr-Latn-RS/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/sr-Latn-RS/Microsoft.ui.xaml.dll.mui
unpack001/sv-SE/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/sv-SE/Microsoft.ui.xaml.dll.mui
unpack001/th-TH/JiayiLauncher.resources.dll
unpack001/th-TH/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/th-TH/Microsoft.ui.xaml.dll.mui
unpack001/tr-TR/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/tr-TR/Microsoft.ui.xaml.dll.mui
unpack001/uk-UA/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/uk-UA/Microsoft.ui.xaml.dll.mui
unpack001/vi-VN/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/vi-VN/Microsoft.ui.xaml.dll.mui
unpack001/zh-CN/JiayiLauncher.resources.dll
unpack001/zh-CN/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/zh-CN/Microsoft.ui.xaml.dll.mui
unpack001/zh-TW/JiayiLauncher.resources.dll
unpack001/zh-TW/Microsoft.UI.Xaml.Phone.dll.mui
unpack001/zh-TW/Microsoft.ui.xaml.dll.mui

Files

JiayiLauncher.zip
.zip

Password: JiayiLauncherVirusTest
Blazored.Modal.dll
.dll windows:4 windows x64 arch:x64

Password: JiayiLauncherVirusTest

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/home/runner/work/Modal/Modal/src/Blazored.Modal/obj/Release/net8.0/Blazored.Modal.pdb

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Blazored.Toast.dll
.dll windows:4 windows x64 arch:x64

Password: JiayiLauncherVirusTest

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/home/runner/work/Toast/Toast/src/Blazored.Toast/obj/Release/net8.0/Blazored.Toast.pdb

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CREDITS.txt
CoreMessagingXP.dll
.dll windows:10 windows x64 arch:x64

Password: JiayiLauncherVirusTest

6305853c9e0ba4de7f0aa7cc83fd57cb

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

72:e7:7d:77:d6:fe:1e:b9:ac:dc:26:de:de:31:7e:f5:6c:97:85:ef:44:eb:1a:75:57:13:c7:f9:ac:ee:56:b4
Signer

Actual PE Digest

72:e7:7d:77:d6:fe:1e:b9:ac:dc:26:de:de:31:7e:f5:6c:97:85:ef:44:eb:1a:75:57:13:c7:f9:ac:ee:56:b4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

CoreMessagingXP.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

abort
_invalid_parameter_noinfo_noreturn
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_errno
_initialize_onexit_table
_initialize_narrow_environment
_initterm
_initterm_e
_seh_filter_dll
_invalid_parameter_noinfo
terminate
_configure_narrow_argv

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vsnprintf_s

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW
GetProcAddress
GetModuleHandleExW
GetModuleFileNameA

api-ms-win-core-synch-l1-1-0

ReleaseSemaphore
CreateSemaphoreExW
WaitForSingleObject
CreateMutexExW
DeleteCriticalSection
ReleaseMutex
EnterCriticalSection
InitializeCriticalSectionEx
OpenSemaphoreW
LeaveCriticalSection
TryAcquireSRWLockExclusive
WaitForSingleObjectEx

api-ms-win-core-heap-l1-1-0

HeapFree
GetProcessHeap
HeapAlloc

api-ms-win-core-errorhandling-l1-1-0

SetLastError
GetLastError
RaiseException

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead
InterlockedPushEntrySList
InterlockedFlushSList

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx

api-ms-win-core-fibers-l1-1-0

FlsGetValue
FlsSetValue
FlsFree
FlsAlloc

api-ms-win-core-util-l1-1-0

EncodePointer

kernel32

DecodePointer
Sleep
GetHandleInformation
InitOnceExecuteOnce
SetWaitableTimer
CreateWaitableTimerExW
GetThreadPriority
WaitForMultipleObjectsEx
OpenThread
GetTickCount64
ResetEvent
LocalFree
OpenProcess
WaitForThreadpoolWaitCallbacks
RaiseFailFastException
SetThreadpoolWait
CreateThreadpoolWait
HeapSize
VirtualFree
VirtualAlloc
GetSystemInfo
QueryDepthSList
InterlockedPopEntrySList
InitializeSRWLock
SetThreadPriority
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
SetEvent
WaitForMultipleObjects
CreateThread
CreateEventW
CallbackMayRunLong
DuplicateHandle
GetCurrentProcess
AcquireSRWLockShared
ReleaseSRWLockShared
CloseThreadpoolWait
LoadLibraryW
GetCurrentThread
FreeLibrary
RtlCaptureStackBackTrace
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
InitializeCriticalSection
LoadLibraryExW
DisableThreadLibraryCalls

advapi32

OpenProcessToken
EventRegister
EventUnregister
EventWriteTransfer
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenThreadToken
RevertToSelf
GetTokenInformation

api-ms-win-crt-heap-l1-1-0

_aligned_free
_aligned_offset_malloc
_calloc_base
_free_base
malloc
_callnewh
free
calloc
realloc

api-ms-win-crt-string-l1-1-0

strcpy_s
wmemcpy_s

api-ms-win-core-winrt-error-l1-1-0

GetRestrictedErrorInfo
SetRestrictedErrorInfo
RoFailFastWithErrorContext
RoTransformError
RoOriginateError
RoOriginateErrorW

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringRawBuffer
WindowsCreateString
WindowsCreateStringReference
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty

api-ms-win-core-winrt-error-l1-1-1

IsErrorPropagationEnabled
RoReportFailedDelegate
RoGetMatchingRestrictedErrorInfo

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

ntdll

NtAlpcAcceptConnectPort
NtAlpcCreatePort
RtlInitUnicodeString
NtAlpcDisconnectPort
NtAllocateReserveObject
NtSetIoCompletionEx
NtAlpcQueryInformation
NtAlpcImpersonateClientOfPort
AlpcGetMessageAttribute
NtAlpcSendWaitReceivePort
NtClose
NtAlpcConnectPort
NtCancelWaitCompletionPacket
AlpcInitializeMessageAttribute
NtAssociateWaitCompletionPacket
NtRemoveIoCompletionEx
NtCreateWaitCompletionPacket
NtCreateIoCompletion
RtlDeactivateActivationContextUnsafeFast
RtlActivateActivationContextUnsafeFast
RtlReleaseActivationContext
RtlQueryInformationActiveActivationContext
RtlFreeUnicodeString
NtQuerySystemInformation

api-ms-win-crt-math-l1-1-0

ceilf

api-ms-win-crt-utility-l1-1-0

rand_s

Exports

Exports

CoreMsgCreateSession
CoreMsgGetExistingSession
CoreUICallComputeMaximumMessageSize
CoreUICallCreateConversationHost
CoreUICallCreateEndpointHost
CoreUICallCreateEndpointHostWithSendPriority
CoreUICallGetAddressOfParameterInBuffer
CoreUICallReceive
CoreUICallSend
CoreUICallSendVaList
CoreUIConfigureTestHost
CoreUIConfigureUserIntegration
CoreUICreateAnonymousStream
CoreUIEnableCrossProcessPrototyping
CoreUIInitializeTestService
CoreUIRouteToTestRegistrar
CoreUIUninitializeTestService
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
MsgBlobCreateShared
MsgBlobCreateStack
MsgBufferShare
MsgRelease
MsgStringCreateShared
MsgStringCreateStack
WinUICreateDispatcherQueueController
WinUIGetDispatcherQueueForCurrentThread

Sections

.text
Size: 672KB - Virtual size: 669KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 252KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DWriteCore.dll
.dll windows:6 windows x64 arch:x64

Password: JiayiLauncherVirusTest

dc9892f71cc7676fad6e14df5cfd5544

Code Sign

33:00:00:02:cd:f3:64:bf:f8:d4:4c:5d:51:00:00:00:00:02:cd
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8b:82:0b:38:0b:8a:0a:30:42:68:ed:c8:b7:6a:1f:94:68:bd:53:e7:81:af:88:df:31:e1:7f:dc:17:df:c8:0b
Signer

Actual PE Digest

8b:82:0b:38:0b:8a:0a:30:42:68:ed:c8:b7:6a:1f:94:68:bd:53:e7:81:af:88:df:31:e1:7f:dc:17:df:c8:0b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

DWriteCore.pdb

Imports

bcrypt

BCryptGenRandom
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider

kernel32

LoadLibraryW
HeapAlloc
GetProcAddress
CreateMutexExW
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
FreeLibrary
DebugBreak
IsDebuggerPresent
CreateDirectoryW
ReadFile
GetFileSizeEx
WriteFile
CreateFileW
DeleteFileW
MoveFileW
FlushFileBuffers
FindNextFileW
GetFileInformationByHandle
CreateFileMappingW
MapViewOfFileEx
HeapReAlloc
OpenSemaphoreW
ReleaseSRWLockExclusive
FindFirstFileW
GetStdHandle
GetConsoleMode
WriteConsoleW
LoadLibraryA
CreateMutexA
GetCurrentProcess
RtlLookupFunctionEntry
GetCurrentDirectoryW
GetCurrentThread
RtlCaptureContext
AcquireSRWLockShared
ReleaseSRWLockShared
GetEnvironmentVariableW
WideCharToMultiByte
MultiByteToWideChar
RaiseFailFastException
RtlUnwind
LoadLibraryExW
TlsFree
WaitForSingleObjectEx
InitOnceComplete
OutputDebugStringW
FormatMessageW
ReleaseMutex
GetCurrentThreadId
WaitForSingleObject
GetModuleHandleExW
ReleaseSemaphore
HeapFree
CreateSemaphoreExW
InitOnceBeginInitialize
GetModuleFileNameA
GetWindowsDirectoryW
GetLastError
GetFullPathNameW
FindCloseChangeNotification
FindFirstChangeNotificationW
GetACP
UnmapViewOfFile
FindClose
AcquireSRWLockExclusive
WaitForMultipleObjects
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
SetLastError
CloseHandle
InitializeSRWLock
SetEvent
CreateEventW
WaitForMultipleObjectsEx
GetUserDefaultLocaleName
GetLocaleInfoEx
DecodePointer
GetModuleHandleA
InterlockedFlushSList
RtlUnwindEx
InitializeSListHead
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
ResetEvent
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TryAcquireSRWLockExclusive
QueryPerformanceCounter
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
GetExitCodeThread
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
IsProcessorFeaturePresent
RtlPcToFileHeader
RaiseException
InitializeCriticalSectionEx
GetSystemTimeAsFileTime

user32

LoadStringA
EnumDisplayDevicesW
SystemParametersInfoW
GetMonitorInfoW

gdi32

GetWorldTransform
FillPath
BeginPath
GetStockObject
PolyBezierTo
PathToRegion
SetPolyFillMode
EndPath
LineTo
SetDCBrushColor
MoveToEx
CloseFigure
FillRgn
GetRgnBox
SetWorldTransform
SelectObject
CreateDIBSection
CreateCompatibleDC
SetGraphicsMode
DeleteDC
DeleteObject
GetDeviceCaps

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree
CoGetApartmentType
CoGetObjectContext

advapi32

RegEnumValueW
RegNotifyChangeKeyValue
EventWriteTransfer
EventRegister
EventSetInformation
EventUnregister
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_errno
terminate
_beginthreadex
_initialize_narrow_environment
abort
_initialize_onexit_table
_configure_narrow_argv
_invalid_parameter_noinfo
_seh_filter_dll
_initterm_e
_invalid_parameter_noinfo_noreturn
_initterm

api-ms-win-crt-heap-l1-1-0

calloc
free
realloc
_callnewh
malloc

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s
__stdio_common_vswprintf
__stdio_common_vsnprintf_s

api-ms-win-crt-math-l1-1-0

cosf
atan2f
sinf
sqrt
pow
sqrtf
roundf
floorf
logf
ceilf
expf
tanf

api-ms-win-crt-string-l1-1-0

wcsncmp
strcpy_s

Exports

Exports

DWriteCoreCreateFactory

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DiscordRPC.dll
.dll windows:4 windows x64 arch:x64

Password: JiayiLauncherVirusTest

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/home/runner/work/discord-rpc-csharp/discord-rpc-csharp/DiscordRPC/obj/Release/netstandard2.0/DiscordRPC.pdb

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DwmSceneI.dll
.dll windows:10 windows x64 arch:x64

Password: JiayiLauncherVirusTest

f19447761f67ad8a5e43d6ac8cc20cef

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

53:45:51:3f:e5:fe:ca:8e:10:a9:ea:28:ab:7f:9b:22:dc:e5:48:10:00:d4:44:34:18:72:8a:1d:6c:e1:cd:9a
Signer

Actual PE Digest

53:45:51:3f:e5:fe:ca:8e:10:a9:ea:28:ab:7f:9b:22:dc:e5:48:10:00:d4:44:34:18:72:8a:1d:6c:e1:cd:9a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

DwmSceneI.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_set_errno
_invoke_watson
_invalid_parameter_noinfo_noreturn
_errno
abort
_beginthreadex
_initterm
_initterm_e
terminate
_seh_filter_dll
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vswprintf
__stdio_common_vsnprintf_s
__stdio_common_vsprintf_s
__stdio_common_vfprintf

api-ms-win-crt-math-l1-1-0

_fdclass
ceilf
powf
cosf
expf
floor
fmodf
floorf
acosf
sinf
frexp
tanf
copysignf
sqrtf
round
pow
log2f
atan2f
remainderf
cbrtf
_fdsign
log
fminf
ldexp
roundf
fmaxf

api-ms-win-crt-string-l1-1-0

isspace
strcspn
strncpy_s
_wcsdup
isupper
strnlen
islower
__strncnt
tolower
strncmp
wcsnlen
strcpy_s

api-ms-win-crt-heap-l1-1-0

_aligned_malloc
calloc
_calloc_base
_free_base
_aligned_free
malloc
_malloc_base
free

api-ms-win-crt-convert-l1-1-0

strtoul
atol
strtol
strtof
strtod

microsoft.ui.composition.ossupport

TerminateProcessOnMemoryExhaustion

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress
GetModuleHandleExW
GetModuleFileNameA
GetModuleHandleW

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection
ReleaseSemaphore
InitializeSRWLock
ReleaseMutex
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
OpenSemaphoreW
CreateMutexExW
TryAcquireSRWLockExclusive
WaitForSingleObjectEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
CreateSemaphoreExW

api-ms-win-core-heap-l1-1-0

HeapFree
HeapAlloc
GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

RaiseException
SetLastError
GetLastError

api-ms-win-core-processthreads-l1-1-0

SwitchToThread
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetExitCodeThread

api-ms-win-core-localization-l1-2-0

FormatMessageW
LCMapStringEx

api-ms-win-core-debug-l1-1-0

OutputDebugStringA
OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-rtlsupport-l1-1-0

RtlUnwindEx
RtlCaptureStackBackTrace
RtlLookupFunctionEntry
RtlPcToFileHeader

api-ms-win-core-sysinfo-l1-2-0

GetSystemTimePreciseAsFileTime

api-ms-win-core-sysinfo-l1-1-0

GetSystemInfo
GlobalMemoryStatusEx
GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList
InterlockedFlushSList
InitializeSListHead

api-ms-win-core-fibers-l1-1-0

FlsAlloc
FlsSetValue
FlsGetValue
FlsFree

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventUnregister
EventRegister
EventSetInformation

api-ms-win-core-com-l1-1-0

CoCreateGuid
StringFromGUID2

api-ms-win-core-psapi-l1-1-0

K32GetProcessMemoryInfo

d3d11

D3D11CreateDevice

d2d1

ord1

dxgi

CreateDXGIFactory1

api-ms-win-crt-locale-l1-1-0

___mb_cur_max_func
_lock_locales
_unlock_locales
___lc_locale_name_func
setlocale
___lc_codepage_func
localeconv
__pctype_func

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW
InitOnceComplete
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
InitOnceBeginInitialize

Exports

Exports

CreateDwmSceneRenderer

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 948KB - Virtual size: 947KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
JiayiLauncher.deps.json
JiayiLauncher.dll
.dll windows:4 windows x64 arch:x64

Password: JiayiLauncherVirusTest

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\projects\JiayiLauncher\JiayiLauncher\obj\Release\net8.0-windows10.0.22621.0\win10-x64\JiayiLauncher.pdb

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
JiayiLauncher.exe
.exe windows:6 windows x64 arch:x64

Password: JiayiLauncherVirusTest

6a91eb82bfd19d2706c7d43c46f7064e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb

Imports

kernel32

FreeLibrary
LoadLibraryExW
OutputDebugStringW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
GetModuleHandleW
MultiByteToWideChar
GetFileAttributesExW
LoadLibraryA
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetProcAddress
GetWindowsDirectoryW
FindResourceW
GetLastError
ActivateActCtx
FindClose
CreateActCtxW
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime

user32

MessageBoxW

shell32

ShellExecuteW

advapi32

RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_exit
exit
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_errno
abort
__p___wargv
_c_exit
_register_thread_local_exe_atexit_callback
terminate
__p___argc

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
fputwc
__p__commode
_set_fmode
fputws
_wfsopen
fflush
__stdio_common_vfwprintf
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf
setvbuf

api-ms-win-crt-heap-l1-1-0

calloc
_set_new_mode
free
_callnewh
malloc

api-ms-win-crt-string-l1-1-0

toupper
_wcsdup
wcsncmp
wcsnlen
strcpy_s

api-ms-win-crt-convert-l1-1-0

wcstoul
_wtoi

api-ms-win-crt-time-l1-1-0

_gmtime64_s
_time64
wcsftime

api-ms-win-crt-locale-l1-1-0

setlocale
___mb_cur_max_func
_configthreadlocale
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_lock_locales
_unlock_locales

api-ms-win-crt-math-l1-1-0

__setusermatherr

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
JiayiLauncher.pdb
JiayiLauncher.runtimeconfig.json
MRM.dll
.dll windows:6 windows x64 arch:x64

809ac32303477297d32179871af867bb

Code Sign

33:00:00:02:cb:b7:75:39:fb:02:71:42:36:00:00:00:00:02:cb
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:45

Not After

11/05/2023, 20:45

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a4:17:5a:a2:f6:f5:eb:fe:62:e8:96:b5:58:01:d2:cf:09:cd:48:91:80:bf:45:0e:b9:01:24:69:52:2f:47:3b
Signer

Actual PE Digest

a4:17:5a:a2:f6:f5:eb:fe:62:e8:96:b5:58:01:d2:cf:09:cd:48:91:80:bf:45:0e:b9:01:24:69:52:2f:47:3b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

MRM.pdb

Imports

kernel32

SetUnhandledExceptionFilter
ReleaseSemaphore
GetModuleHandleExW
GetModuleFileNameW
SetLastError
K32GetModuleFileNameExW
CompareStringOrdinal
UnhandledExceptionFilter
WaitForSingleObject
GetFileAttributesW
GetCurrentThreadId
ReleaseMutex
HeapFree
FormatMessageW
GetLastError
OutputDebugStringW
RtlVirtualUnwind
InitOnceComplete
WaitForSingleObjectEx
CreateSemaphoreExW
CloseHandle
LoadLibraryW
HeapAlloc
RtlLookupFunctionEntry
InitOnceBeginInitialize
GetProcAddress
CreateMutexExW
RtlCaptureContext
GetCurrentProcessId
GetProcessHeap
FindStringOrdinal
GetModuleHandleW
FreeLibrary
CreateEventW
DebugBreak
IsDebuggerPresent
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
MultiByteToWideChar
GetThreadPreferredUILanguages
OpenSemaphoreW
GetSystemWindowsDirectoryW
ReadFile
GetFileSizeEx
GetCurrentProcess
CreateFileW
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
GetDriveTypeW
LoadLibraryExW
GetFinalPathNameByHandleW
GetFileAttributesExW
ResetEvent
SetEvent
GetModuleFileNameA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
IsProcessorFeaturePresent
RtlUnwind
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
InterlockedFlushSList
QueryPerformanceCounter
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
TerminateProcess

ole32

CoTaskMemFree
CoTaskMemAlloc

advapi32

EventWriteTransfer
EventRegister
EventUnregister
EventSetInformation
RegGetValueW

api-ms-win-core-path-l1-1-0

PathCchRemoveFileSpec
PathCchCombineEx
PathCchRenameExtension

user32

LoadStringA

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
abort
terminate
_initterm_e
_initterm
_cexit
_invalid_parameter_noinfo
_register_onexit_function
_crt_atexit
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_errno

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vsnprintf_s

api-ms-win-crt-utility-l1-1-0

qsort_s

api-ms-win-crt-string-l1-1-0

towlower
isalpha
iswdigit
wcsncmp
towupper
iswspace
iswalnum
strcpy_s
wcsncpy_s

api-ms-win-crt-convert-l1-1-0

_wtoi

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc

Exports

Exports

MrmAllocateBuffer
MrmCreateResourceContext
MrmCreateResourceManager
MrmDestroyResourceContext
MrmDestroyResourceManager
MrmFreeQualifierNamesOrValues
MrmFreeResource
MrmGetAllQualifierNames
MrmGetChildResourceMap
MrmGetFilePathFromName
MrmGetQualifier
MrmGetResourceCount
MrmLoadEmbeddedResource
MrmLoadEmbeddedResourceFromResourceUri
MrmLoadStringOrEmbeddedFromResourceUri
MrmLoadStringOrEmbeddedResource
MrmLoadStringOrEmbeddedResourceByIndex
MrmLoadStringOrEmbeddedResourceByIndexWithQualifierValues
MrmLoadStringOrEmbeddedResourceWithQualifierValues
MrmLoadStringResource
MrmLoadStringResourceFromResourceUri
MrmSetQualifier

Sections

.text
Size: 219KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.AspNetCore.Authorization.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.AspNetCore.Authorization/Release/net8.0/Microsoft.AspNetCore.Authorization.pdb

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.AspNetCore.Components.Forms.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.AspNetCore.Components.Forms/Release/net8.0/Microsoft.AspNetCore.Components.Forms.pdb

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.AspNetCore.Components.Web.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.AspNetCore.Components.Web/Release/net8.0/Microsoft.AspNetCore.Components.Web.pdb

Sections

.text
Size: 324KB - Virtual size: 322KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.AspNetCore.Components.WebView.Maui.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\src\BlazorWebView\src\Maui\obj\Release\net8.0-windows10.0.20348\Microsoft.AspNetCore.Components.WebView.Maui.pdb

Sections

.text
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.AspNetCore.Components.WebView.dll
.dll .js windows:4 windows x64 arch:x64 polyglot

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.AspNetCore.Components.WebView/Release/net8.0/Microsoft.AspNetCore.Components.WebView.pdb

Sections

.text
Size: 244KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.AspNetCore.Components.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.AspNetCore.Components/Release/net8.0/Microsoft.AspNetCore.Components.pdb

Sections

.text
Size: 696KB - Virtual size: 695KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.AspNetCore.Metadata.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/05/2023, 19:03

Not After

08/05/2024, 19:03

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:6d:70:9a:0f:a4:50:34:bf:13:6a:1b:76:d9:90:2a:26:af:af:39:26:03:91:33:79:50:2b:d9:27:1c:fd:e3
Signer

Actual PE Digest

05:6d:70:9a:0f:a4:50:34:bf:13:6a:1b:76:d9:90:2a:26:af:af:39:26:03:91:33:79:50:2b:d9:27:1c:fd:e3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.AspNetCore.Metadata/Release/net8.0/Microsoft.AspNetCore.Metadata.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.DirectManipulation.dll
.dll windows:10 windows x64 arch:x64

add7a7f1cdcb32bf42d1d63398408df4

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

56:98:29:4b:45:1e:77:9b:7d:8f:e2:bf:ed:f2:64:6c:b1:39:cd:c9:54:b8:99:67:e4:31:07:29:5a:ad:60:a1
Signer

Actual PE Digest

56:98:29:4b:45:1e:77:9b:7d:8f:e2:bf:ed:f2:64:6c:b1:39:cd:c9:54:b8:99:67:e4:31:07:29:5a:ad:60:a1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.DirectManipulation.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

abort
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_initterm_e
_initterm
_cexit
_invalid_parameter_noinfo
_errno
_get_errno
_set_errno

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vsnprintf_s

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
DisableThreadLibraryCalls
GetModuleFileNameW

api-ms-win-core-synch-l1-1-0

CreateSemaphoreExW
ReleaseSemaphore
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
CreateMutexExW
SetEvent
ReleaseMutex
EnterCriticalSection
OpenSemaphoreW
LeaveCriticalSection
CreateEventW
OpenEventW
WaitForMultipleObjectsEx
DeleteCriticalSection
AcquireSRWLockShared
WaitForSingleObjectEx
InitializeCriticalSectionEx
WaitForSingleObject
InitializeCriticalSection

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapCreate
HeapReAlloc
HeapDestroy
HeapFree
HeapAlloc

api-ms-win-core-errorhandling-l1-1-0

GetLastError
SetLastError
RaiseException

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
TlsSetValue
TlsFree
SetThreadPriority
CreateThread
TlsGetValue
TlsAlloc
ResumeThread
GetCurrentThreadId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
OutputDebugStringW
DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount64

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList
InitializeSListHead

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx

api-ms-win-core-fibers-l1-1-0

FlsSetValue
FlsGetValue
FlsFree
FlsAlloc

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-crt-heap-l1-1-0

_calloc_base
malloc
free
_free_base

api-ms-win-crt-string-l1-1-0

strcpy_s

api-ms-win-crt-filesystem-l1-1-0

_wsplitpath_s

api-ms-win-crt-math-l1-1-0

sqrtf
sqrt
cosf
cosh
floor
sinf
floorf
tanhf
_copysign
log
logf
powf
tanh

ntdll

RtlReleaseSRWLockShared
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockShared
RtlAcquireSRWLockExclusive

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW
RoOriginateError

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventWriteTransfer
EventRegister
EventSetInformation

api-ms-win-core-synch-l1-2-0

WakeAllConditionVariable
InitOnceExecuteOnce
SleepConditionVariableSRW

api-ms-win-core-winrt-string-l1-1-0

WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer

api-ms-win-eventing-classicprovider-l1-1-0

UnregisterTraceGuids
GetTraceEnableLevel
RegisterTraceGuidsW
TraceMessage
GetTraceLoggerHandle
GetTraceEnableFlags

api-ms-win-rtcore-ntuser-window-l1-1-0

DefWindowProcW
RegisterClassW
CreateWindowExW
SetTimer
PeekMessageW
PostMessageW
KillTimer
DispatchMessageW
GetQueueStatus
GetAncestor
PostThreadMessageW
IsGUIThread
GetWindowThreadProcessId
GetClientRect
IsWindow
GetMessageTime
PostQuitMessage
SetWindowLongPtrW
IsChild
CallWindowProcW
IsWindowEnabled
DestroyWindow
ClientToScreen
TranslateMessage

api-ms-win-core-com-l1-1-0

CoTaskMemFree
CoCreateFreeThreadedMarshaler
CoCreateInstance
CoInitializeEx
CoUninitialize

api-ms-win-rtcore-ntuser-synch-l1-1-0

MsgWaitForMultipleObjects

api-ms-win-core-processthreads-l1-1-3

SetThreadDescription

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CreateThreadpoolTimer
CloseThreadpoolTimer

api-ms-win-ntuser-sysparams-l1-1-0

GetSystemMetrics
GetMonitorInfoW
SystemParametersInfoW

api-ms-win-core-registry-l1-1-0

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

api-ms-win-ntuser-rectangle-l1-1-0

CopyRect
IsRectEmpty

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

dcompi

WinUIDCompositionCreateDevice3

api-ms-win-crt-utility-l1-1-0

qsort_s

api-ms-win-rtcore-ntuser-wmpointer-l1-1-0

GetPointerInfo
GetPointerInputTransform
GetPointerDeviceRects

api-ms-win-core-largeinteger-l1-1-0

MulDiv

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

microsoft.inputstatemanager

InitDManipHookInProc
UndelegateInputInProc
HandleDelegatedInputInProc
SendMessageCallbackInProc
DelegateCapturePointersInProc
DelegateInputInProc

Exports

Exports

?InitializeDManipHook@@YAHKPEAX@Z
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject

Sections

.text
Size: 488KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Extensions.Configuration.Abstractions.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.Extensions.Configuration.Abstractions/Release/net8.0/Microsoft.Extensions.Configuration.Abstractions.pdb

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Extensions.Configuration.Binder.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.Extensions.Configuration.Binder/Release/net8.0/Microsoft.Extensions.Configuration.Binder.pdb

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Extensions.Configuration.FileExtensions.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.Extensions.Configuration.FileExtensions/Release/net8.0/Microsoft.Extensions.Configuration.FileExtensions.pdb

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Extensions.Configuration.Json.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.Extensions.Configuration.Json/Release/net8.0/Microsoft.Extensions.Configuration.Json.pdb

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Extensions.Configuration.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.Extensions.Configuration/Release/net8.0/Microsoft.Extensions.Configuration.pdb

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Extensions.DependencyInjection.Abstractions.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.Extensions.DependencyInjection.Abstractions/Release/net8.0/Microsoft.Extensions.DependencyInjection.Abstractions.pdb

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Extensions.DependencyInjection.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.Extensions.DependencyInjection/Release/net8.0/Microsoft.Extensions.DependencyInjection.pdb

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Extensions.FileProviders.Abstractions.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.Extensions.FileProviders.Abstractions/Release/net8.0/Microsoft.Extensions.FileProviders.Abstractions.pdb

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 549B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Extensions.FileProviders.Composite.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.Extensions.FileProviders.Composite/Release/net8.0/Microsoft.Extensions.FileProviders.Composite.pdb

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Extensions.FileProviders.Embedded.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.Extensions.FileProviders.Embedded/Release/net8.0/Microsoft.Extensions.FileProviders.Embedded.pdb

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Extensions.FileProviders.Physical.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.Extensions.FileProviders.Physical/Release/net8.0/Microsoft.Extensions.FileProviders.Physical.pdb

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Extensions.FileSystemGlobbing.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.Extensions.FileSystemGlobbing/Release/net8.0/Microsoft.Extensions.FileSystemGlobbing.pdb

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Extensions.Logging.Abstractions.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.Extensions.Logging.Abstractions/Release/net8.0/Microsoft.Extensions.Logging.Abstractions.pdb

Sections

.text
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Extensions.Logging.Debug.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.Extensions.Logging.Debug/Release/net8.0/Microsoft.Extensions.Logging.Debug.pdb

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 746B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Extensions.Logging.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.Extensions.Logging/Release/net8.0/Microsoft.Extensions.Logging.pdb

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Extensions.Options.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.Extensions.Options/Release/net8.0/Microsoft.Extensions.Options.pdb

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Extensions.Primitives.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.Extensions.Primitives/Release/net8.0/Microsoft.Extensions.Primitives.pdb

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Foundation.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bf:95:2b:04:6e:b2:f8:ff:18:23:39:e6:a7:8a:67:61:ae:32:86:51:4c:4f:d9:7a:37:c7:23:c3:68:4d:bd:94
Signer

Actual PE Digest

bf:95:2b:04:6e:b2:f8:ff:18:23:39:e6:a7:8a:67:61:ae:32:86:51:4c:4f:d9:7a:37:c7:23:c3:68:4d:bd:94

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Graphics.Canvas.Interop.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\a\1\s\obj\winrt.projection.net5\anycpu\release\net5.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Graphics.Canvas.Interop.pdb

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 212KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Graphics.Canvas.dll
.dll windows:6 windows x64 arch:x64

64b5b1f9b048fc47a2895a5ff7fb5f35

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d8:44:28:2e:9a:a3:57:2e:bf:31:af:31:e8:2f:48:33:b4:6d:e9:88:7b:64:4d:1e:82:d1:68:be:be:90:f4:42
Signer

Actual PE Digest

d8:44:28:2e:9a:a3:57:2e:bf:31:af:31:e8:2f:48:33:b4:6d:e9:88:7b:64:4d:1e:82:d1:68:be:be:90:f4:42

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\a\1\s\bin\uapx64\release\winrt.dll.uap\Microsoft.Graphics.Canvas.pdb

Imports

d2d1

ord13
ord5
ord1

d3d11

CreateDirect3D11DeviceFromDXGIDevice
D3D11CreateDevice
CreateDirect3D11SurfaceFromDXGISurface

dwrite

DWriteCreateFactory

api-ms-win-core-winrt-error-l1-1-0

RoTransformError
RoOriginateErrorW
SetRestrictedErrorInfo
GetRestrictedErrorInfo
RoOriginateError

api-ms-win-core-winrt-string-l1-1-0

WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsCreateString
WindowsCreateStringReference
WindowsGetStringRawBuffer
WindowsPromoteStringBuffer
WindowsCompareStringOrdinal
WindowsDeleteString
WindowsGetStringLen
WindowsDeleteStringBuffer
WindowsPreallocateStringBuffer
WindowsDuplicateString

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-shcore-stream-winrt-l1-1-0

CreateStreamOverRandomAccessStream

kernel32

GetNativeSystemInfo
SleepConditionVariableSRW
SleepConditionVariableCS
ReleaseSRWLockShared
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
AcquireSRWLockShared
DecodePointer
EncodePointer
RaiseException
InitializeSRWLock
Sleep
CompareStringOrdinal
InitOnceExecuteOnce
GlobalUnlock
GlobalLock
GlobalSize
MultiByteToWideChar
SetEvent
CloseHandle
GetLastError
CreateEventExW
WaitForSingleObjectEx
WakeAllConditionVariable
GetCurrentProcess
WakeConditionVariable
InitializeConditionVariable
RtlPcToFileHeader
TryEnterCriticalSection
InitializeCriticalSectionEx
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
QueryPerformanceCounter
SetLastError
InterlockedFlushSList
RtlUnwindEx
GetSystemInfo
VirtualProtect
VirtualQuery
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryExA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
ResetEvent
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent

advapi32

EventWriteTransfer
EventUnregister
EventRegister
EventSetInformation

ole32

CreateStreamOnHGlobal
CoCreateFreeThreadedMarshaler
CoTaskMemAlloc
CoCreateGuid
CoTaskMemFree
GetHGlobalFromStream
CoCreateInstanceFromApp

api-ms-win-crt-math-l1-1-0

_fdclass
roundf
_fdsign
ceilf
cosf
floorf
fmodf
sinf
sqrtf

api-ms-win-crt-runtime-l1-1-0

_initterm
_crt_atexit
terminate
_errno
_invalid_parameter_noinfo
abort
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_cexit
_initterm_e

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf

api-ms-win-crt-string-l1-1-0

wcsncmp
_wcsicmp
strcpy_s

api-ms-win-crt-heap-l1-1-0

free
calloc
malloc
_callnewh

Exports

Exports

CreateDirect3D11DeviceFromDXGIDevice
CreateDirect3D11SurfaceFromDXGISurface
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 378KB - Virtual size: 377KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Graphics.Display.dll
.dll windows:10 windows x64 arch:x64

419a0d17fedd48072a17413ec625c690

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f7:84:91:51:0b:90:4c:0b:c9:41:43:eb:57:8e:14:fd:15:45:31:84:c8:2b:23:62:2f:5f:20:17:86:2b:b3:bd
Signer

Actual PE Digest

f7:84:91:51:0b:90:4c:0b:c9:41:43:eb:57:8e:14:fd:15:45:31:84:c8:2b:23:62:2f:5f:20:17:86:2b:b3:bd

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.Graphics.Display.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_initterm
_invalid_parameter_noinfo
terminate
_initterm_e
_cexit
_crt_atexit
_seh_filter_dll
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
abort
_configure_narrow_argv
_initialize_narrow_environment
_errno

api-ms-win-crt-string-l1-1-0

strcpy_s
iswspace

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
__stdio_common_vswprintf

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls
GetModuleHandleExW
FreeLibrary
LoadStringW
GetProcAddress
GetModuleHandleW
LoadStringA
GetModuleFileNameA
LoadLibraryExA

api-ms-win-core-synch-l1-1-0

WaitForSingleObject
ReleaseSemaphore
DeleteCriticalSection
AcquireSRWLockShared
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
ReleaseSRWLockShared
CreateSemaphoreExW
CreateMutexExW
AcquireSRWLockExclusive
ReleaseMutex
ReleaseSRWLockExclusive
OpenSemaphoreW
WaitForSingleObjectEx

api-ms-win-core-heap-l1-1-0

HeapFree
HeapAlloc
GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

GetLastError
RaiseException
SetLastError

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

DebugBreak
IsDebuggerPresent
OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetSystemInfo

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList
InitializeSListHead
InterlockedFlushSList

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx

api-ms-win-core-fibers-l1-1-0

FlsGetValue
FlsFree
FlsSetValue
FlsAlloc

api-ms-win-core-util-l1-1-0

EncodePointer

microsoft.internal.frameworkudk

DisplayPrivates_CreateDisplayEvents
DisplayPrivates_DisplayConfigGetAdvancedColorInfo
DisplayPrivates_GetCurrentColorProfilePath
DisplayPrivates_RegisterStereoChangedListener
DisplayPrivates_UnregisterStereoChangedListener

api-ms-win-crt-heap-l1-1-0

_calloc_base
free
malloc
_free_base
_callnewh

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolTimer
TrySubmitThreadpoolCallback
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CreateThreadpoolTimer

api-ms-win-core-file-l1-1-0

CreateFileW
ReadFile
SetFilePointer

api-ms-win-core-windowserrorreporting-l1-1-0

WerRegisterMemoryBlock

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize
InitOnceComplete

api-ms-win-core-memory-l1-1-0

VirtualQuery
VirtualProtect

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory

Sections

.text
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Graphics.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e0:9e:b0:fa:ba:f8:9a:6e:72:02:ad:95:e2:d4:b4:b3:af:bc:a7:5d:30:f7:84:7c:a0:cd:f3:51:8e:f8:24
Signer

Actual PE Digest

45:e0:9e:b0:fa:ba:f8:9a:6e:72:02:ad:95:e2:d4:b4:b3:af:bc:a7:5d:30:f7:84:7c:a0:cd:f3:51:8e:f8:24

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.InputStateManager.dll
.dll windows:10 windows x64 arch:x64

6bb7bef843837ab969737d7a8a09cad4

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

00:03:e1:86:3f:f7:06:7b:d9:8d:f3:19:01:08:75:aa:7a:4c:6f:bf:a3:b2:e4:95:06:02:84:28:f5:3f:61:56
Signer

Actual PE Digest

00:03:e1:86:3f:f7:06:7b:d9:8d:f3:19:01:08:75:aa:7a:4c:6f:bf:a3:b2:e4:95:06:02:84:28:f5:3f:61:56

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.InputStateManager.pdb

Imports

ntdll

RtlUnwindEx
NtQuerySystemInformation
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlCaptureStackBackTrace

api-ms-win-rtcore-ntuser-private-l1-1-1

ord2503
ord2516
ord2505
ord2504

api-ms-win-rtcore-ntuser-wmpointer-l1-1-0

GetPointerType
GetPointerFrameTouchInfoHistory
GetPointerDevice
GetPointerDeviceProperties
GetPointerDeviceRects
GetPointerPenInfo
GetPointerInputTransform
GetPointerFramePenInfoHistory
GetPointerFrameInfo
GetPointerInfo
GetPointerFrameInfoHistory
GetRawPointerDeviceData
GetPointerTouchInfo

kernel32

InitializeCriticalSection
InitializeSRWLock
FreeLibrary
SleepConditionVariableSRW
WakeAllConditionVariable
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
InterlockedFlushSList
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
RaiseException
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
ReleaseSemaphore
GetModuleHandleExW
WaitForSingleObject
ReleaseMutex
FormatMessageW
OutputDebugStringW
WaitForSingleObjectEx
OpenSemaphoreW
CloseHandle
HeapAlloc
GetProcAddress
CreateMutexExW
GetProcessHeap
GetModuleHandleW
DebugBreak
IsDebuggerPresent
InitOnceBeginInitialize
CreateEventExW
AcquireSRWLockExclusive
LoadLibraryW
EnterCriticalSection
ReleaseSRWLockExclusive
InitOnceComplete
ReleaseSRWLockShared
GetExitCodeThread
AcquireSRWLockShared
InitializeCriticalSectionEx
GetTickCount64
SetEvent
TryAcquireSRWLockExclusive

advapi32

EventUnregister
EventRegister
EventActivityIdControl
EventSetInformation
RegGetValueW
EventWriteTransfer

user32

GetMessageTime
LoadCursorW
ClientToScreen
PeekMessageW
RegisterClassExW
MsgWaitForMultipleObjects
GetRawInputDeviceList
DispatchMessageW
TranslateMessage
DefWindowProcW
DestroyWindow
SetWindowLongPtrW
CreateWindowExW
SetCursor
GetWindowLongPtrW
IsGUIThread
PostThreadMessageW
SendMessageW
GetKeyState

api-ms-win-core-winrt-l1-1-0

RoInitialize
RoUninitialize

api-ms-win-core-synch-l1-2-0

WakeByAddressAll
WakeByAddressSingle
WaitOnAddress

ext-ms-win-ntuser-private-l1-1-1

ord2546

ext-ms-win-rtcore-ntuser-dpi-l1-2-0

SetThreadDpiAwarenessContext
GetWindowDpiAwarenessContext

coremessagingxp

CoreUICallCreateConversationHost
CoreUICallSend
CoreUICallReceive
CoreMsgCreateSession

microsoft.ui.composition.ossupport

RecordFeatureUsage
SubscribeFeatureStateChangeNotification
UnsubscribeFeatureStateChangeNotification

microsoft.internal.frameworkudk

InputPrivates_InputSite_GetForInputSink
InputPrivates_GetActivationConfiguration
CoreDragOperationFunctions_StartAsync

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initterm
terminate
abort
_initterm_e
_invalid_parameter_noinfo
_register_onexit_function
_initialize_narrow_environment
_errno
_invalid_parameter_noinfo_noreturn
_beginthreadex
_seh_filter_dll
_initialize_onexit_table
_execute_onexit_table
_crt_atexit
_cexit

api-ms-win-crt-heap-l1-1-0

free
_calloc_base
_callnewh
malloc
_free_base

api-ms-win-crt-string-l1-1-0

strcpy_s
iswspace

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vsnprintf_s

microsoft.ui.input

InitializeDirectManipulationHookInProc

marshal

LegacyMarshalerQueryCompositionInputSinkLuid
LegacyMarshalerQueryCompositionInputQueueAndTransform
LegacyMarshalerDuplicateCompositionInputSink
LegacyMarshalerCloseCompositionInputSink

oleaut32

SetErrorInfo
GetErrorInfo
SysStringLen
SysAllocString
SysFreeString

api-ms-win-crt-math-l1-1-0

ceilf

Exports

Exports

AttachSystemInputSink
CreateInProcInputHost
DelegateCapturePointersInProc
DelegateInputInProc
DestroyInProcInputHost
EnableInputForWindowWithInProcInputHost
HandleDelegatedInputInProc
InitDManipHookInProc
LiftedDragStartAsync
NotifyInputSinkParented
NotifyInputSinkRemoved
NotifyInputSinkTransformChanged
RegisterManipulationThread
RegisterWindowWithInProcInputHost
SendMessageCallbackInProc
SetManipulationInputTarget
StopAndEndInertia
SuppressPointerIdForDragAndDrop
UndelegateInputInProc
UnregisterWindowWithInProcInputHost

Sections

.text
Size: 324KB - Virtual size: 321KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.InteractiveExperiences.Projection.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.InteractiveExperiences.Projection.pdb

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 204KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Internal.FrameworkUdk.dll
.dll windows:10 windows x64 arch:x64

7ed38126121083e3d38287be1f4c7a17

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

88:34:ff:5c:34:cf:f4:69:3d:cf:0a:5f:fe:ab:25:56:97:85:09:be:0d:1f:3c:07:82:2e:3b:78:56:5b:2f:00
Signer

Actual PE Digest

88:34:ff:5c:34:cf:f4:69:3d:cf:0a:5f:fe:ab:25:56:97:85:09:be:0d:1f:3c:07:82:2e:3b:78:56:5b:2f:00

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.Internal.FrameworkUdk.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

abort
_initterm
_initterm_e
terminate
_invalid_parameter_noinfo
_set_errno
_seh_filter_dll
_configure_narrow_argv
_errno
_cexit
_crt_atexit
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment

api-ms-win-crt-string-l1-1-0

strncpy_s
wcscpy_s
wcsnlen
wcsncpy
iswspace
strcpy_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s
__stdio_common_vsnprintf_s
__stdio_common_vswprintf
__stdio_common_vsprintf_s

api-ms-win-crt-convert-l1-1-0

wcstod
strtol

api-ms-win-crt-heap-l1-1-0

malloc
free
_calloc_base
_callnewh
_free_base
realloc

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary
GetModuleFileNameA
GetModuleFileNameW
GetProcAddress
GetModuleHandleExW
LoadLibraryExW
LoadLibraryExA
GetModuleHandleW

api-ms-win-core-synch-l1-1-0

CreateEventExW
ReleaseSemaphore
SetEvent
TryAcquireSRWLockExclusive
CreateSemaphoreExW
AcquireSRWLockShared
DeleteCriticalSection
ReleaseSRWLockShared
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
CreateMutexExW
OpenSemaphoreW
WaitForSingleObjectEx
ReleaseMutex
InitializeSRWLock
WaitForSingleObject

api-ms-win-core-heap-l1-1-0

HeapAlloc
GetProcessHeap
HeapFree

api-ms-win-core-errorhandling-l1-1-0

GetLastError
RaiseException
SetLastError

api-ms-win-core-processthreads-l1-1-0

TlsFree
GetCurrentProcess
GetCurrentProcessId
TlsGetValue
GetCurrentThreadId
TlsAlloc
TlsSetValue

api-ms-win-core-localization-l1-2-0

SetProcessPreferredUILanguages
FormatMessageW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
OutputDebugStringW
DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-winrt-l1-1-0

RoInitialize
RoGetActivationFactory
RoUninitialize

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateString

api-ms-win-core-winrt-error-l1-1-0

RoTransformError
SetRestrictedErrorInfo
RoFailFastWithErrorContext
RoOriginateError

api-ms-win-core-winrt-error-l1-1-1

RoGetMatchingRestrictedErrorInfo

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-com-l1-1-0

CoGetMalloc
CoCreateInstance
CoGetApartmentType
CoImpersonateClient
CoRevertToSelf
CoTaskMemFree
CoCreateFreeThreadedMarshaler
CoTaskMemAlloc

api-ms-win-core-file-l1-1-0

GetFileAttributesW

ntdll

RtlSubscribeWnfStateChangeNotification
NtQuerySystemInformation
NtPowerInformation
RtlGetDeviceFamilyInfoEnum
RtlUnsubscribeWnfNotificationWaitForCompletion
NtQueryWnfStateData

profapi

ord114

api-ms-win-core-registry-l1-1-0

RegCloseKey
RegOpenKeyExW
RegGetValueW

api-ms-win-core-heap-l2-1-0

LocalFree
LocalAlloc

rpcrt4

UuidCreate
RpcStringFreeW
UuidToStringW

api-ms-win-security-base-l1-1-0

GetSidSubAuthorityCount
GetTokenInformation
GetSidSubAuthority

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-sysinfo-l1-1-0

GetSystemInfo
GetSystemTimeAsFileTime

api-ms-win-core-registry-l2-1-0

RegEnumKeyW
RegOpenKeyW

api-ms-win-core-psapi-l1-1-0

K32GetModuleFileNameExW

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW
WakeAllConditionVariable
InitOnceExecuteOnce

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead
InterlockedPushEntrySList
InterlockedFlushSList

api-ms-win-core-rtlsupport-l1-1-0

RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx

api-ms-win-core-fibers-l1-1-0

FlsSetValue
FlsGetValue
FlsAlloc
FlsFree

api-ms-win-core-util-l1-1-0

EncodePointer

bcp47langs

GetApplicationLanguages
LanguageListAsMuiForm
GetFontFallbackLanguageList

coremessaging

CoreUICreate

api-ms-win-appmodel-runtime-l1-1-1

GetPackagePathByFullName

api-ms-win-appmodel-runtime-l1-1-0

GetCurrentPackageFullName
PackageFamilyNameFromFullName

api-ms-win-appmodel-runtime-internal-l1-1-1

GetSystemMetadataPathForPackage

api-ms-win-rtcore-ntuser-window-l1-1-0

RemovePropW
PostThreadMessageW
SetPropW

dcomp

ord1040

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-memory-l1-1-0

VirtualQuery
VirtualProtect

oleaut32

GetErrorInfo
SysFreeString
SysAllocString
SetErrorInfo
SysStringLen

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-crt-math-l1-1-0

pow
ceilf

Exports

Exports

AudioGraphSettingsExtension_SetUseSpatialAudioApi
BackButtonIntegration_InjectBackButtonPress
BackButtonIntegration_RegisterListener
BackButtonIntegration_UnregisterListener
CoreDragOperationFunctions_StartAsync
DCompPrivates_CreateColorContent
DCompPrivates_CreateCompositionBatchQuery
DCompPrivates_CreateSharedVisual
DCompPrivates_CreateSharedVisualHandle
DCompPrivates_OpenAndAttachSharedTarget
DCompPrivates_OpenSharedDCompositionObject
DCompPrivates_OpenSharedResourceHandle
DCompPrivates_ResizeDCompositionSurface
DCompPrivates_SetVisualRelativeSize
DisplayPrivates_CreateDisplayEvents
DisplayPrivates_DisplayConfigGetAdvancedColorInfo
DisplayPrivates_GetCurrentColorProfilePath
DisplayPrivates_RegisterStereoChangedListener
DisplayPrivates_UnregisterStereoChangedListener
DxPrivates_PartnerDeviceFromDevice
DxPrivates_SwapChainPartnerFromDxgiSwapChain
DxPrivates_WarpPrivateAPIFromDevice
FinalUnhandledErrorDetected_RegisterHandler
FinalUnhandledErrorDetected_UnregisterHandler
FrameworkInputView_RegisterListener
FrameworkInputView_UnregisterListener
FrameworkUdk_Diagnostic
InitializeXamlDiagnosticsEx
InputPaneFramework_Advise
InputPaneFramework_RegisterListener
InputPaneFramework_UnregisterListener
InputPrivates_GetActivationConfiguration
InputPrivates_InputSite_GetForInputSink
MFMediaEngineExtension_DisableVisibilityHandling
MFMediaEngineExtension_GetCurrentMediaPlaybackItem
MFMediaEngineExtension_SetSourceFromMediaSource
MediaCaptureExtension_GetPreviewSource
MediaPlaybackDataSourceExtension_SendMediaPlaybackCommand
MediaPlaybackDataSourceExtension_SendPlaybackPositionChangeRequest
MediaPlaybackDataSourceExtension_SendPlaybackRateChangeRequest
MediaPlaybackDataSourceExtension_SendRepeatModeChangeRequest
MediaPlaybackListExtension_AddAutoRepeatChanged
MediaPlaybackListExtension_AddCurrentItemChanged
MediaPlaybackListExtension_RemoveAutoRepeatChanged
MediaPlaybackListExtension_RemoveCurrentItemChanged
MediaPlaybackSessionExtension_IsPlaybackRateSupported
MediaPlayerExtension_AddCastingRenderLocationChanged
MediaPlayerExtension_AddIsLoopingEnabledChanged
MediaPlayerExtension_DisableVisibilityHandling
MediaPlayerExtension_GetCurrentMediaPlaybackItem
MediaPlayerExtension_GetCurrentMediaPlaybackItem_Deprecated
MediaPlayerExtension_GetMediaPlayerCastingRenderLocation
MediaPlayerExtension_GetVideoSwapchainHandle
MediaPlayerExtension_RemoveCastingRenderLocationChanged
MediaPlayerExtension_RemoveIsLoopingEnabledChanged
Mui_GetFontFallbackLanguageList
Mui_PropagateApplicationLanguages
PowerNotifications_GetCompositeBatteryStatus
PowerNotifications_GetDischargeTime
PowerNotifications_GetDisplayStatus
PowerNotifications_GetEnergySaverStatus
PowerNotifications_GetPowerCondition
PowerNotifications_GetUserPresenceStatus
PowerNotifications_RegisterCompositeBatteryStatusChangedListener
PowerNotifications_RegisterDischargeTimeChangedListener
PowerNotifications_RegisterDisplayStatusChangedListener
PowerNotifications_RegisterEnergySaverStatusChangedListener
PowerNotifications_RegisterPowerConditionChangedListener
PowerNotifications_RegisterSystemIdleStatusChangedListener
PowerNotifications_RegisterUserPresenceStatusChangedListener
PowerNotifications_UnregisterCompositeBatteryStatusChangedListener
PowerNotifications_UnregisterDischargeTimeChangedListener
PowerNotifications_UnregisterDisplayStatusChangedListener
PowerNotifications_UnregisterEnergySaverStatusChangedListener
PowerNotifications_UnregisterPowerConditionChangedListener
PowerNotifications_UnregisterSystemIdleStatusChangedListener
PowerNotifications_UnregisterUserPresenceStatusChangedListener
PushNotifications_CloseChannel
PushNotifications_CreateChannelWithRemoteIdentifier
PushNotifications_GetFullTrustApplicationsWithChannels
PushNotifications_RegisterFullTrustApplication
PushNotifications_RegisterNotificationSinkForFullTrustApplication
PushNotifications_UnregisterFullTrustApplication
PushNotifications_UnregisterNotificationSinkForFullTrustApplication
ResourceManager_GetDefaultResourcePathForPackageFullName
TextAnalysis_CreateDWritePrivateTextAnalysisSourceProxy
TextAnalysis_GetContentReadingDirection
TextAnalysis_SetLocaleNameList
TextInputProxy_putInputSettings
TextInput_SetKeyboardSkin
TextInput_SetTextPrediction
Theming_TryEnableHostBackdropBrush
Theming_TrySetDarkTheme
TimedMetadataTrackExtension_AddCueEntered
TimedMetadataTrackExtension_RemoveCueEntered
ToastNotifications_GetHistory
ToastNotifications_PostToast
ToastNotifications_QuerySettings
ToastNotifications_RemoveAllToastsForApp
ToastNotifications_RemoveToast
ToastNotifications_RemoveToastsWithTagAndGroup
ToastNotifications_RetrieveAssets
ToastNotifications_UpdateNotificationData
VisualDiagnosticsPort_Register
VisualDiagnosticsPort_Unregister
WindowPositionChanged_RegisterListener
WindowPositionChanged_UnregisterListener
Windowing_GetDisplayIdFromMonitor
Windowing_GetIconFromIconId
Windowing_GetIconIdFromIcon
Windowing_GetMonitorFromDisplayId
Windowing_GetWindowFromWindowId
Windowing_GetWindowIdFromWindow

Sections

.text
Size: 648KB - Virtual size: 645KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.JSInterop.WebAssembly.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.JSInterop.WebAssembly/Release/net8.0/Microsoft.JSInterop.WebAssembly.pdb

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.JSInterop.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.JSInterop/Release/net8.0/Microsoft.JSInterop.pdb

Sections

.text
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Maui.Controls.Compatibility.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\src\Compatibility\Core\src\obj\Release\net8.0-windows10.0.20348\Microsoft.Maui.Controls.Compatibility.pdb

Sections

.text
Size: 980KB - Virtual size: 977KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Maui.Controls.Xaml.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\src\Controls\src\Xaml\obj\Release\net8.0-windows10.0.20348\Microsoft.Maui.Controls.Xaml.pdb

Sections

.text
Size: 264KB - Virtual size: 262KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Maui.Controls.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\src\Controls\src\Core\obj\Release\net8.0-windows10.0.20348\Microsoft.Maui.Controls.pdb

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 320KB - Virtual size: 319KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Maui.Essentials.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\src\Essentials\src\obj\Release\net8.0-windows10.0.20348\Microsoft.Maui.Essentials.pdb

Sections

.text
Size: 460KB - Virtual size: 457KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Maui.Graphics.Win2D.WinUI.Desktop.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\src\Graphics\src\Graphics.Win2D\obj\Release\net8.0-windows10.0.20348\Microsoft.Maui.Graphics.Win2D.WinUI.Desktop.pdb

Sections

.text
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Maui.Graphics.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\src\Graphics\src\Graphics\obj\Release\net8.0-windows10.0.20348\Microsoft.Maui.Graphics.pdb

Sections

.text
Size: 476KB - Virtual size: 473KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Maui.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\src\Core\src\obj\Release\net8.0-windows10.0.20348\Microsoft.Maui.pdb

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.UI.Composition.OSSupport.dll
.dll windows:10 windows x64 arch:x64

c4016b586a8d72e440738246bc983f9e

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

43:21:e3:92:f2:e3:7b:39:72:05:ab:45:e2:25:0f:c2:b9:ad:38:eb:99:e3:e5:03:e1:33:b2:ce:51:c8:58:54
Signer

Actual PE Digest

43:21:e3:92:f2:e3:7b:39:72:05:ab:45:e2:25:0f:c2:b9:ad:38:eb:99:e3:e5:03:e1:33:b2:ce:51:c8:58:54

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.UI.Composition.OSSupport.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

abort
terminate
_initialize_onexit_table
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_errno
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf

kernel32

FlsSetValue
DeleteCriticalSection
InitializeCriticalSectionEx
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
SetLastError
ReleaseSemaphore
GetModuleHandleExW
WaitForSingleObject
GetCurrentThreadId
ReleaseMutex
FormatMessageW
GetLastError
OutputDebugStringW
WaitForSingleObjectEx
OpenSemaphoreW
CloseHandle
HeapAlloc
GetProcAddress
CreateMutexExW
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
DebugBreak
IsDebuggerPresent
RaiseException
RaiseFailFastException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
WideCharToMultiByte
QueryPerformanceCounter
GetSystemTimeAsFileTime
RtlUnwindEx
FlsAlloc
FlsGetValue
FlsFree

ntdll

NtQuerySystemInformation
RtlDeleteElementGenericTable
RtlInsertElementGenericTable
NtQueryObject
NtQueryValueKey
DbgPrompt
NtOpenKey
RtlLookupElementGenericTable
RtlEnumerateGenericTableWithoutSplaying
RtlInitializeGenericTable

api-ms-win-core-com-l1-1-0

CoCreateGuid

api-ms-win-crt-heap-l1-1-0

_calloc_base
_free_base

Exports

Exports

DbgPrompt_Onecore
EnableMouseInPointerForWindow
ExUuidCreate
GetFeatureEnabledState
GetFeatureVariant
GetLastError_Winbase
InitializeSListHead_Winbase
InterlockedFlushSList_Winbase
InterlockedPopEntrySList_Winbase
InterlockedPushEntrySList_Winbase
KeGetCurrentIrql
MicrosoftTelemetryAssertTriggeredArgs
MicrosoftTelemetryAssertTriggeredNoArgs
NtQueryObject_Ntdll
NtQuerySystemInformation_Onecore
RaiseException_Winbase
RaiseFailFastException_Winbase
RecordFeatureError
RecordFeatureUsage
RtlDeleteElementGenericTable_Onecore
RtlEnumerateGenericTableWithoutSplaying_Onecore
RtlInitializeGenericTable_Onecore
RtlInsertElementGenericTable_Onecore
RtlLookupElementGenericTable_Onecore
RtlNotifyFeatureUsage
RtlQueryFeatureConfiguration
SetLastError_Winbase
SetUnhandledExceptionFilter_Winbase
SubscribeFeatureStateChangeNotification
TerminateProcessOnMemoryExhaustion
UnhandledExceptionFilter_Winbase
UnsubscribeFeatureStateChangeNotification
WideCharToMultiByte_Winbase
ZwOpenKey
ZwQueryValueKey

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.UI.Input.dll
.dll windows:10 windows x64 arch:x64

055210b42056c771a4d5cbaa66dce7cc

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c2:29:54:1b:be:14:a1:bb:6d:99:e2:19:6e:b6:07:36:ed:a0:c7:9d:c2:78:56:85:69:02:28:19:98:06:e9:a2
Signer

Actual PE Digest

c2:29:54:1b:be:14:a1:bb:6d:99:e2:19:6e:b6:07:36:ed:a0:c7:9d:c2:78:56:85:69:02:28:19:98:06:e9:a2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.UI.Input.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo
_cexit
_initterm
_initterm_e
abort
_invalid_parameter_noinfo_noreturn
_errno
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit

api-ms-win-crt-string-l1-1-0

wcscmp
iswspace

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vsnprintf_s

ntdll

RtlPcToFileHeader
RtlUnwindEx
RtlLookupFunctionEntry
RtlGetDeviceFamilyInfoEnum
RtlIsMultiSessionSku
strcpy_s
_wcsicmp

microsoft.internal.frameworkudk

DCompPrivates_OpenSharedResourceHandle
DCompPrivates_CreateSharedVisual
Windowing_GetWindowFromWindowId
DCompPrivates_SetVisualRelativeSize
Windowing_GetDisplayIdFromMonitor
Theming_TryEnableHostBackdropBrush
Windowing_GetWindowIdFromWindow
DCompPrivates_CreateSharedVisualHandle
DCompPrivates_OpenSharedDCompositionObject

microsoft.ui.composition.ossupport

TerminateProcessOnMemoryExhaustion
UnsubscribeFeatureStateChangeNotification
RecordFeatureUsage
SubscribeFeatureStateChangeNotification

marshal

SetLastError
LegacyMarshalerQueryCompositionInputSinkLuid
LegacyMarshalerCreateImplicitCompositionInputSink
LegacyMarshalerCloseCompositionInputSink
RaiseFailFastException
RaiseException
GetLastError
LegacyMarshalerCreateCompositionInputSink

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError
RoTransformError
SetRestrictedErrorInfo
RoOriginateErrorW

api-ms-win-core-winrt-error-l1-1-1

RoReportFailedDelegate
RoGetMatchingRestrictedErrorInfo
IsErrorPropagationEnabled

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-winrt-string-l1-1-0

WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateString
WindowsCreateStringReference
WindowsIsStringEmpty
WindowsDuplicateString
WindowsDeleteString

coremessagingxp

CoreUICallCreateConversationHost
CoreUICallSend
WinUIGetDispatcherQueueForCurrentThread
CoreMsgCreateSession
CoreUICallReceive
CoreUICallCreateEndpointHost

api-ms-win-rtcore-ntuser-wmpointer-l1-1-0

GetPointerInfo
GetPointerDeviceRects
GetPointerInputTransform
GetPointerTouchInfo

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW
DisableThreadLibraryCalls
LoadStringA
FreeLibrary
SizeofResource
LockResource
LoadResource
LoadLibraryExA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetModuleHandleW

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW
InitOnceBeginInitialize
InitOnceExecuteOnce
WakeAllConditionVariable
InitOnceComplete

api-ms-win-core-synch-l1-1-0

WaitForSingleObject
InitializeCriticalSection
ReleaseSemaphore
InitializeSRWLock
CreateSemaphoreExW
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
TryAcquireSRWLockExclusive
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WaitForSingleObjectEx
OpenSemaphoreW
ReleaseSRWLockShared
SetEvent
CreateEventW
AcquireSRWLockShared
CreateMutexExW
ReleaseMutex

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapAlloc
HeapReAlloc
HeapFree

api-ms-win-core-com-l1-1-0

CoTaskMemFree
CoCreateGuid
CoTaskMemAlloc
CoCreateFreeThreadedMarshaler

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventSetInformation
EventRegister
EventWriteTransfer

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

DebugBreak
IsDebuggerPresent
OutputDebugStringW

api-ms-win-core-handle-l1-1-0

DuplicateHandle
CloseHandle

api-ms-win-core-libraryloader-l1-2-1

FindResourceW
LoadLibraryW

api-ms-win-core-registry-l1-1-0

RegGetValueW
RegOpenKeyExW
RegQueryValueExW

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolWaitCallbacks
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetSystemInfo
GetTickCount

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList
InterlockedPushEntrySList
InitializeSListHead

api-ms-win-core-fibers-l1-1-0

FlsGetValue
FlsAlloc
FlsSetValue
FlsFree

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureStackBackTrace

api-ms-win-core-com-l1-1-1

RoGetAgileReference

api-ms-win-core-processthreads-l1-1-1

GetProcessMitigationPolicy

api-ms-win-security-base-l1-1-0

AllocateLocallyUniqueId

user32

GetRawInputDeviceList
IsWindowVisible
IsWindowEnabled
EnableWindow
ShowWindow
SendInput
GetMonitorInfoW
MonitorFromPoint
GetWindowRect
GetMenu
GetWindowLongW
AdjustWindowRectEx
GetWindowLongPtrW
ShowCursor
GetSystemMetrics
DestroyWindow
GetDesktopWindow
GetClassNameW
SetLayeredWindowAttributes
EnumChildWindows
MonitorFromWindow
GetKeyboardState
KillTimer
SetTimer
DefWindowProcW
EvaluateProximityToPolygon
EvaluateProximityToRect
MapWindowPoints
SetPropW
PtInRect
ScreenToClient
IsWindow
SendMessageW
PeekMessageW
GetMessageTime
SetCursor
SetCapture
ReleaseCapture
GetWindowThreadProcessId
GetForegroundWindow
InvalidateRect
GetAncestor
GetPropW
SetWindowRgn
IsIconic
SendNotifyMessageW
EnumDisplaySettingsW
RemovePropW
SetWindowPos
CallWindowProcW
SetWindowLongPtrW
GetClientRect
UnionRect
SetWindowLongW
IsZoomed
PostMessageW
GetKeyState
LoadCursorW
GetAsyncKeyState
DestroyCursor
SetFocus
GetFocus
GetMessageExtraInfo
RegisterClassExW
TrackMouseEvent
GetMessagePos
CreateWindowExW

kernel32

MulDiv
GlobalAddAtomW
AppPolicyGetWindowingModel

gdi32

DeleteObject
CombineRgn
SetRectRgn
CreateRectRgn

microsoft.inputstatemanager

SuppressPointerIdForDragAndDrop
UnregisterWindowWithInProcInputHost
RegisterWindowWithInProcInputHost
LiftedDragStartAsync
EnableInputForWindowWithInProcInputHost

dcomp

ord1038
DCompositionCreateDevice3

microsoft.ui.windowing.core

AddMessageRangeToFilter
DestroyMessageFilter
ContentPreTranslateMessage
CreateMessageFilter
ContentNodeManagerCreate

api-ms-win-crt-heap-l1-1-0

malloc
_free_base
free
_callnewh
_calloc_base
realloc

api-ms-win-crt-math-l1-1-0

roundf
cos
_isnan
ceilf
atan2
_finite
sqrtf
sqrt
floorf
sin

api-ms-win-core-memory-l1-1-0

VirtualQuery
VirtualProtect

oleaut32

SysStringLen
SysAllocString
SysFreeString
GetErrorInfo
SetErrorInfo

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
InitializeDirectManipulationHookInProc
LiftedInputCapturePointerIdForDragAndDrop

Sections

.text
Size: 704KB - Virtual size: 701KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.UI.Text.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b1:dd:51:77:04:67:bf:d2:16:be:a9:24:30:9d:f3:b8:d2:90:40:22:c8:d2:24:36:84:a9:8b:35:6b:1c:8d:91
Signer

Actual PE Digest

b1:dd:51:77:04:67:bf:d2:16:be:a9:24:30:9d:f3:b8:d2:90:40:22:c8:d2:24:36:84:a9:8b:35:6b:1c:8d:91

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.UI.Windowing.Core.dll
.dll windows:10 windows x64 arch:x64

f3790583a2c8e11341205f15fad2ace7

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f9:5d:f8:a8:37:6f:60:5e:98:20:64:89:5c:32:f3:03:89:ae:e5:bf:6d:a1:a3:f9:3b:50:ad:54:f6:e5:2a:e8
Signer

Actual PE Digest

f9:5d:f8:a8:37:6f:60:5e:98:20:64:89:5c:32:f3:03:89:ae:e5:bf:6d:a1:a3:f9:3b:50:ad:54:f6:e5:2a:e8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.UI.Windowing.Core.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

abort
_errno
_crt_atexit
_execute_onexit_table
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_cexit
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_initterm_e
_initterm
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
__stdio_common_vswprintf

api-ms-win-crt-convert-l1-1-0

wcstol

coremessagingxp

CoreMsgCreateSession

api-ms-win-core-apiquery-l2-1-0

IsApiSetImplemented

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress
FreeLibrary
GetModuleHandleExW
FindResourceExW
SizeofResource
LoadStringA
GetModuleFileNameA
LoadStringW
GetModuleHandleW
LoadLibraryExW
DisableThreadLibraryCalls
LoadResource
LockResource

api-ms-win-core-synch-l1-1-0

CreateMutexExW
EnterCriticalSection
TryAcquireSRWLockExclusive
InitializeSRWLock
WaitForSingleObjectEx
CreateSemaphoreExW
ReleaseSRWLockExclusive
ReleaseSemaphore
LeaveCriticalSection
InitializeCriticalSection
AcquireSRWLockExclusive
InitializeCriticalSectionEx
WaitForSingleObject
ReleaseMutex
DeleteCriticalSection
OpenSemaphoreW

api-ms-win-core-heap-l1-1-0

HeapFree
HeapAlloc
GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

RaiseException
GetLastError
SetLastError

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess
GetCurrentThread
TlsGetValue
TlsAlloc
TlsFree
TlsSetValue
GetCurrentThreadId
GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

FormatMessageW
GetLocaleInfoW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
OutputDebugStringW
DebugBreak

api-ms-win-core-handle-l1-1-0

DuplicateHandle
CloseHandle

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringRawBuffer
WindowsPromoteStringBuffer
WindowsDeleteStringBuffer
WindowsPreallocateStringBuffer
WindowsCreateString
WindowsCreateStringReference
WindowsIsStringEmpty

api-ms-win-core-synch-l1-2-0

InitOnceComplete
InitOnceInitialize
SleepConditionVariableSRW
WakeAllConditionVariable
InitOnceExecuteOnce
InitOnceBeginInitialize

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc
CoCreateInstance
CoCreateFreeThreadedMarshaler

api-ms-win-eventing-provider-l1-1-0

EventSetInformation
EventWriteTransfer
EventUnregister
EventRegister

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError
RoOriginateErrorW

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolWait
CloseThreadpoolWait
CreateThreadpoolWait

api-ms-win-core-largeinteger-l1-1-0

MulDiv

api-ms-win-core-registry-l1-1-0

RegGetValueW

api-ms-win-core-localization-obsolete-l1-2-0

GetUserDefaultUILanguage

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
GetTickCount64
GetSystemTimeAsFileTime

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-atoms-l1-1-0

GlobalAddAtomW

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList
InitializeSListHead

api-ms-win-core-rtlsupport-l1-1-0

RtlUnwindEx
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlCaptureStackBackTrace

api-ms-win-core-fibers-l1-1-0

FlsGetValue
FlsAlloc
FlsFree
FlsSetValue

api-ms-win-core-util-l1-1-0

EncodePointer

rpcrt4

UuidCreate

user32

SetWindowPos
GetWindowTextW
DestroyWindow
GetWindowTextLengthW
GetPropW
MonitorFromWindow
IsZoomed
GetWindowRect
InflateRect
DefWindowProcW
CallWindowProcW
VkKeyScanExW
TranslateAcceleratorW
GetWindowThreadProcessId
GetKeyState
CopyImage
IsRectEmpty
CopyAcceleratorTableW
CreateAcceleratorTableW
GetDoubleClickTime
SetActiveWindow
DestroyAcceleratorTable
GetForegroundWindow
ScreenToClient
SendMessageW
GetClassLongPtrW
LoadIconW
RegisterWindowMessageW
GetWindowLongPtrW
SetWindowLongPtrW
ord2557
GetWindowDpiAwarenessContext
SetCursor
PtInRect
SetWindowLongW
GetSysColor
CopyRect
GetCursorInfo
LoadCursorW
GetKeyboardLayout
RegisterClassExW
PostMessageW
TrackPopupMenuEx
EnableMenuItem
GetClientRect
CreateWindowExW
SetLayeredWindowAttributes
GetSystemMenu
SetPropW
EndDeferWindowPos
DeferWindowPos
TrackMouseEvent
ClientToScreen
IsIconic
GetSystemMetricsForDpi
BeginDeferWindowPos
DrawIconEx
GetWindowLongW
SetThreadDpiAwarenessContext

api-ms-win-rtcore-ntuser-private-l1-1-0

IsWindowInDestroy

api-ms-win-crt-heap-l1-1-0

calloc
_free_base
malloc
_calloc_base
free
_callnewh

api-ms-win-crt-string-l1-1-0

strcpy_s

api-ms-win-crt-math-l1-1-0

ceilf

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

AddMessageFilterToFilter
AddMessageListToFilter
AddMessageNameToFilter
AddMessageRangeToFilter
AddMessageToFilter
AttachWindowFeature
ContentNodeManagerCreate
ContentPreTranslateMessage
CreateFeatureWindow
CreateMessageFilter
DefFeatureProc
DestroyMessageFilter
DetachWindowFeature
DllGetActivationFactory
GetFeatureInstanceData
GetFeatureStyles
GetFeatureTypeData
GetWindowFeature
RegisterFeatureWindowClass
RegisterWindowFeature
SetFeatureInstanceData
SetFeatureStyles
UnregisterWindowFeature

Sections

.text
Size: 276KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.UI.Windowing.dll
.dll windows:10 windows x64 arch:x64

fc73913d27568c217d050c2c49c20d05

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

81:a4:b1:d4:ee:d4:d4:1e:3e:cd:9b:68:48:4b:3c:91:6c:ba:d9:2a:2c:34:b7:8c:cb:11:75:4f:2c:98:35:ec
Signer

Actual PE Digest

81:a4:b1:d4:ee:d4:d4:1e:3e:cd:9b:68:48:4b:3c:91:6c:ba:d9:2a:2c:34:b7:8c:cb:11:75:4f:2c:98:35:ec

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.UI.Windowing.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
abort
_errno
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_cexit
_configure_narrow_argv
_seh_filter_dll
terminate
_initterm_e
_initterm
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
__stdio_common_vswprintf

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW
FreeLibrary
LoadStringA
GetModuleHandleW
DisableThreadLibraryCalls
GetProcAddress
LoadLibraryExW
GetModuleFileNameA

api-ms-win-core-synch-l1-1-0

OpenSemaphoreW
CreateSemaphoreExW
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockExclusive
InitializeSRWLock
WaitForSingleObjectEx
CreateMutexExW
WaitForSingleObject
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
InitializeCriticalSectionEx
LeaveCriticalSection
TryAcquireSRWLockExclusive
ReleaseSemaphore
EnterCriticalSection

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapFree
HeapAlloc

api-ms-win-core-errorhandling-l1-1-0

GetLastError
RaiseException
SetLastError

api-ms-win-core-processthreads-l1-1-0

TlsFree
TlsGetValue
GetStartupInfoW
GetCurrentThreadId
TlsAlloc
TlsSetValue
GetCurrentProcessId
GetCurrentThread

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
DebugBreak
IsDebuggerPresent

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringRawBuffer
WindowsPreallocateStringBuffer
WindowsCreateStringReference
WindowsCreateString
WindowsDeleteStringBuffer
WindowsPromoteStringBuffer

api-ms-win-core-sysinfo-l1-2-0

VerSetConditionMask

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc
CoCreateFreeThreadedMarshaler
CoCreateInstance

api-ms-win-ntuser-sysparams-l1-1-0

EnumDisplayMonitors
GetMonitorInfoW

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventSetInformation
EventRegister
EventWriteTransfer

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW
InitOnceExecuteOnce
WakeAllConditionVariable
InitOnceComplete
InitOnceBeginInitialize
InitOnceInitialize

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead
InterlockedFlushSList

api-ms-win-core-rtlsupport-l1-1-0

RtlUnwindEx
RtlLookupFunctionEntry
RtlCaptureStackBackTrace
RtlPcToFileHeader

api-ms-win-core-fibers-l1-1-0

FlsFree
FlsGetValue
FlsSetValue
FlsAlloc

api-ms-win-core-util-l1-1-0

EncodePointer

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

user32

GetSystemMenu
GetWindowTextW
LoadImageW
SendMessageW
LoadIconW
MonitorFromRect
MonitorFromPoint
IsWindow
GetWindowTextLengthW
IsZoomed
OffsetRect
EnableMenuItem
IsIconic
GetWindow
MonitorFromWindow
GetDpiForWindow
GetWindowRect
GetClientRect
GetDesktopWindow
IsWindowEnabled
GetWindowLongW
GetAncestor
LoadCursorW
DestroyWindow
EnableWindow
SetWindowTextW
ShowWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement

api-ms-win-rtcore-ntuser-private-l1-1-0

IsWindowInDestroy

microsoft.ui.windowing.core

RegisterFeatureWindowClass
GetFeatureInstanceData
DefFeatureProc
SetFeatureStyles
SetFeatureInstanceData
UnregisterWindowFeature
GetWindowFeature
DetachWindowFeature
RegisterWindowFeature
CreateFeatureWindow
AttachWindowFeature

api-ms-win-crt-heap-l1-1-0

free
_calloc_base
_free_base
calloc
malloc
_callnewh

api-ms-win-crt-string-l1-1-0

strcpy_s

api-ms-win-crt-math-l1-1-0

pow
ceilf
round
sqrt

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

DllGetActivationFactory

Sections

.text
Size: 284KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.UI.Xaml.Controls.dll
.dll windows:6 windows x64 arch:x64

3a4016a37da061abf011404b35b0cb18

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c5:19:20:b2:98:6b:8c:10:98:7c:44:9c:f3:2b:0f:53:2a:fa:c9:2f:d0:15:53:72:c1:d7:e1:37:ff:e9:9f:81
Signer

Actual PE Digest

c5:19:20:b2:98:6b:8c:10:98:7c:44:9c:f3:2b:0f:53:2a:fa:c9:2f:d0:15:53:72:c1:d7:e1:37:ff:e9:9f:81

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\BuildOutput\obj\amd64fre\controls\dev\dll\Microsoft.UI.Xaml.Controls.pdb

Imports

user32

GetWindow
ClientToScreen
IsWindow
CreateWindowExW
RegisterClassW
DefWindowProcW
DestroyWindow
GetSystemMetrics
FindWindowExA

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcessId

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-eventing-provider-l1-1-0

EventRegister
EventWriteTransfer
EventSetInformation
EventUnregister

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-localization-l1-2-0

GetUserDefaultLocaleName
FormatMessageW

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-core-string-l1-1-0

CompareStringOrdinal
WideCharToMultiByte
MultiByteToWideChar

api-ms-win-core-com-l1-1-0

CoCreateInstance
CoCreateGuid
CoCreateFreeThreadedMarshaler
CoGetObjectContext
CoGetApartmentType
CoTaskMemFree
CoTaskMemAlloc

api-ms-win-core-threadpool-l1-2-0

TrySubmitThreadpoolCallback
SetThreadpoolTimer
CloseThreadpoolTimer
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolTimer
CreateThreadpoolWait

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-synch-l1-1-0

CreateSemaphoreExW
ReleaseSemaphore
OpenSemaphoreW
WaitForSingleObject
CreateMutexExW
CreateEventW
ReleaseSRWLockExclusive
ReleaseMutex
SetEvent
AcquireSRWLockExclusive
WaitForSingleObjectEx

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapAlloc
HeapFree

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW
GetModuleHandleW
DisableThreadLibraryCalls
GetProcAddress
GetModuleFileNameA

api-ms-win-core-errorhandling-l1-1-0

GetLastError
SetLastError

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringRawBuffer

api-ms-win-core-registry-l1-1-0

RegGetValueW

api-ms-win-core-featurestaging-l1-1-0

SubscribeFeatureStateChangeNotification
RecordFeatureUsage
UnsubscribeFeatureStateChangeNotification

d2d1

ord1

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_cexit
_initterm
_initterm_e
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_execute_onexit_table
abort
_invalid_parameter_noinfo
_errno
_invalid_parameter_noinfo_noreturn
terminate
_wassert

api-ms-win-crt-string-l1-1-0

wcsnlen
wcsncmp
towupper
_wcsicmp
strcpy_s
iswspace
_wcsdup

api-ms-win-crt-convert-l1-1-0

_wtoi
wcstof
wcstoul

api-ms-win-crt-math-l1-1-0

cos
ceilf
ceil
floorf
sqrt
atan2
_fdclass
log
roundf
pow
sin
powf
_dclass
round
floor
nextafterf

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vsnprintf_s

api-ms-win-crt-heap-l1-1-0

_callnewh
realloc
malloc
free
calloc

api-ms-win-crt-locale-l1-1-0

_unlock_locales
___lc_locale_name_func
___lc_codepage_func
___mb_cur_max_func
__pctype_func
___lc_collate_cp_func
setlocale
_lock_locales

kernel32

EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwindEx
CompareStringEx
LCMapStringEx
InitializeCriticalSectionEx
DecodePointer
EncodePointer
TryAcquireSRWLockExclusive
InitializeSRWLock
SwitchToThread
InitOnceComplete
InitOnceBeginInitialize
RaiseException
RtlPcToFileHeader
GetStringTypeW
GetCurrentPackageInfo

oleaut32

SetErrorInfo
SysAllocString
SysStringLen
SysFreeString
GetErrorInfo

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

Exports

Exports

DeinitializeMUXC
DllCanUnloadNow
DllGetActivationFactory
DllMain
SendTelemetryOnSuspend

Sections

.text
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 327KB - Virtual size: 327KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.UI.Xaml.Controls.pri
Microsoft.UI.Xaml.Internal.dll
.dll windows:6 windows x64 arch:x64

64a9a5d66a024c7f065af704b9d9f329

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d2:93:d1:b5:a8:68:69:f4:51:6e:5f:59:25:12:3e:55:55:f1:99:80:71:b9:42:1c:e7:13:d2:24:49:25:db:83
Signer

Actual PE Digest

d2:93:d1:b5:a8:68:69:f4:51:6e:5f:59:25:12:3e:55:55:f1:99:80:71:b9:42:1c:e7:13:d2:24:49:25:db:83

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\1\b\Obj\x64fre\Microsoft.UI.Xaml.Internal\Microsoft.UI.Xaml.Internal\Microsoft.UI.Xaml.Internal.pdb

Imports

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
RaiseException
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RtlPcToFileHeader
MultiByteToWideChar

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
abort
_initterm
_initterm_e
terminate
_cexit
_initialize_onexit_table
_execute_onexit_table
_initialize_narrow_environment

api-ms-win-crt-heap-l1-1-0

calloc
free
malloc

api-ms-win-crt-string-l1-1-0

strcpy_s
wcsncmp

oleaut32

SysFreeString

api-ms-win-core-winrt-string-l1-1-0

WindowsDeleteString
WindowsPreallocateStringBuffer
WindowsPromoteStringBuffer
WindowsDeleteStringBuffer

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo
GetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException

Exports

Exports

ColorHelper_ToDisplayNameId
IsOrientationSupportedLegacy
LsAllocMemory
LsAssert
LsCompressSubline
LsCreateContext
LsCreateLine
LsCreateLineGivenBreak
LsCreateParaBreakingSession
LsDebugViewLine
LsDebugViewSubline
LsDestroyBreakRecord
LsDestroyContext
LsDestroyLine
LsDestroyMemory
LsDestroyParaBreakingSession
LsDestroySublineIteratorBidi
LsDisplayLine
LsDisplaySubline
LsDuplicateBreakRecord
LsEnumLine
LsEnumSubline
LsExpandSubline
LsFindMasterSubline
LsFinishCurrentSubline
LsGetHihLsimethods
LsGetInlineBlockLsimethods
LsGetLineBreaks
LsGetMathLsimethods
LsGetMinMaxDurUntilHardBreak
LsGetNextDnodeInSublineBidi
LsGetNextSpanSubline
LsGetPenaltyModule
LsGetReverseLsimethods
LsGetRubyLsimethods
LsGetStretchabilityForLine
LsGetTatenakayokoLsimethods
LsGetVRubyLsimethods
LsGetWarichuLsimethods
LsLwMultDivR
LsMatchPresSubline
LsModifyLineHeight
LsNewSublineIteratorBidi
LsNotReached
LsPointUV2FromPointUV1
LsPointXYFromPointUV
LsQueryCpPpointSubline
LsQueryEnumAutonum
LsQueryEnumBorderDnode
LsQueryEnumCharRunArrays
LsQueryEnumDnode
LsQueryEnumFrontierDnode
LsQueryEnumGlyphRunArrays
LsQueryEnumHih
LsQueryEnumInlineBlock
LsQueryEnumLine
LsQueryEnumMathAccent
LsQueryEnumMathBox
LsQueryEnumMathBoxedFormula
LsQueryEnumMathDelimiters
LsQueryEnumMathDelimitersWithSeparators
LsQueryEnumMathDelimitersWithSeparatorsPart
LsQueryEnumMathEquation
LsQueryEnumMathEquationArray
LsQueryEnumMathFraction
LsQueryEnumMathFunctionApply
LsQueryEnumMathGeneral
LsQueryEnumMathLeftSubSuperScript
LsQueryEnumMathList
LsQueryEnumMathLowerLimit
LsQueryEnumMathMarshal
LsQueryEnumMathMatrix
LsQueryEnumMathMatrixCell
LsQueryEnumMathMatrixColumn
LsQueryEnumMathMatrixRow
LsQueryEnumMathNaryOperator
LsQueryEnumMathOperatorCharacter
LsQueryEnumMathOverBar
LsQueryEnumMathPhantom
LsQueryEnumMathRadical
LsQueryEnumMathSlashedFraction
LsQueryEnumMathStack
LsQueryEnumMathStretchStack
LsQueryEnumMathSubScript
LsQueryEnumMathSubSuperScript
LsQueryEnumMathSuperScript
LsQueryEnumMathUnderBar
LsQueryEnumMathUpperLimit
LsQueryEnumMathZone
LsQueryEnumPenDnode
LsQueryEnumRealDnode
LsQueryEnumReverse
LsQueryEnumRuby
LsQueryEnumSubline
LsQueryEnumTab
LsQueryEnumTatenakayoko
LsQueryEnumText
LsQueryEnumVRuby
LsQueryEnumWarichu
LsQueryLineCpPpoint
LsQueryLineDown
LsQueryLineDup
LsQueryLineMaxDepth
LsQueryLinePointPcp
LsQueryLinePointToSpan
LsQueryLineUp
LsQueryLineVisibilityWord
LsQueryLineVisibleRectangle
LsQueryNumberSpanBoxes
LsQueryPointPcpSubline
LsQuerySpanBoxes
LsQuerySpanInfo
LsQuerySpanTotalRelativeOffset
LsQuerySublineDown
LsQuerySublineUp
LsQueryTextCellDetails
LsReallocMemory
LsSetDebugFlags
LsSqueezeSubline
LsTransformRectangle
LsUpdateBreakRecord
LsdnDistribute
LsdnFinishByCurrentPosition
LsdnFinishSimple
LsdnFinishWordRegular
LsdnFinishWordRegularAddAdvancePen
LsdnGetDup
LsdnModifyParaEnding
LsdnQueryPenNode
LsdnResetObjDim
LsdnResetPenNode
LsdnSetAbsBaseLine
LsdnSetRigidDup
LsmsrvFIsOperator
LsmsrvGetBreakingQualityForOperatorCharacter
LsmsrvGetBuildupClass
LsmsrvGetSpacing
LsmsrvGetSpacingClassAsDifferential
LsmsrvGetSpacingClassAsMathOp
LsmsrvGetSpacingClassAsSubformula
LsmsrvGetSpacingClassAsText
LsmsrvGetSpacingClassForOperatorCharacter
LsmsrvGetSpacingClassForRegularFunction
LssbDistributeInSubline
LssbFDoneDisplay
LssbFDonePresSubline
LssbGetDupSubline
LssbGetDurTrailInSubline
LssbGetDurTrailWithPensInSubline
LssbGetNumberDnodesInSubline
LssbGetObjDimSubline
LssbGetPlsrunsFromSubline
LssbGetVisibleDcpInSubline
LsusrvCanBreakAfterChar
LsusrvCanBreakBeforeChar
LsusrvCompOnRun
LsusrvCompSpace
LsusrvExpOnRun
LsusrvExpSpace
LsusrvGetBreakingClass
LsusrvGetBreakingClassForDictionary
LsusrvGetBreakingInfo
LsusrvGetCharCompInfoFullMixed
LsusrvGetCharExpansionInfoFullMixed
LsusrvGetCompressionInfo
LsusrvGetExpanInfo
LsusrvGetGlyphCompInfoFullMixed
LsusrvGetGlyphExpansionInfoFullMixed
LsusrvGetModWidthClassWarichuCloseParen
LsusrvGetModWidthClassWarichuOpenParen
LsusrvGetModWidthClasses
LsusrvGetModWidthPairsInfo
LsusrvGetNumberBreakingUnitsClasses
LsusrvGetNumberCompUnits
LsusrvGetNumberExpanUnits
LsusrvGetNumberModPairUnits
LsusrvGetNumberModWidthClasses
LsusrvGetNumberOfPriorities
LsusrvModWidthOnRun
LsusrvModWidthSpace
dvl
dvs
dvsq

Sections

.text
Size: 713KB - Virtual size: 713KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.UI.Xaml.Phone.dll
.dll windows:10 windows x64 arch:x64

8931595388f767c6662892f1ff10f22c

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:59:dd:de:e3:39:90:72:bc:8e:92:24:67:84:a3:94:e8:04:37:ad:71:89:0f:b3:46:4a:c6:d1:d7:c9:5c:71
Signer

Actual PE Digest

52:59:dd:de:e3:39:90:72:bc:8e:92:24:67:84:a3:94:e8:04:37:ad:71:89:0f:b3:46:4a:c6:d1:d7:c9:5c:71

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\BuildOutput\obj\amd64fre\dxaml\xcp\dxaml\dllsrv\exts\phone\Microsoft.UI.Xaml.Phone.pdb

Imports

kernel32

CloseHandle
HeapAlloc
GetProcAddress
CreateMutexExW
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
DebugBreak
IsDebuggerPresent
DisableThreadLibraryCalls
DecodePointer
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WaitForSingleObjectEx
ReleaseSRWLockShared
AcquireSRWLockShared
RtlCaptureContext
RaiseException
RaiseFailFastException
OutputDebugStringW
GetLastError
FormatMessageW
OpenSemaphoreW
ReleaseMutex
GetCurrentThreadId
WaitForSingleObject
GetModuleHandleExW
ReleaseSemaphore
SetLastError
HeapFree
CreateSemaphoreExW
EncodePointer
GetModuleFileNameA
RtlUnwind
RtlPcToFileHeader
InterlockedFlushSList
RtlUnwindEx
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
RtlCaptureStackBackTrace
GetSystemTimeAsFileTime
LoadLibraryW
LoadLibraryExW
FreeLibrary
FindResourceExW
LoadResource
LockResource
InitOnceExecuteOnce
InitializeSRWLock
SetThreadpoolTimer
CloseThreadpoolTimer
CreateThreadpoolTimer
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
CreateEventW
QueryPerformanceCounter
InitializeSListHead
TryAcquireSRWLockExclusive
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
InitializeCriticalSectionEx
LCMapStringEx

advapi32

EventWriteTransfer
TraceEvent
RegGetValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
EventSetInformation
EventRegister
EventUnregister

ole32

CoCreateFreeThreadedMarshaler
CoTaskMemFree
StringFromGUID2
CoGetApartmentType
CoTaskMemAlloc

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW
RoOriginateError
RoTransformError
SetRestrictedErrorInfo

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringRawBuffer
WindowsConcatString
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsCompareStringOrdinal
WindowsDuplicateString
WindowsCreateStringReference
WindowsCreateString
WindowsDeleteString

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory
RoActivateInstance

api-ms-win-crt-runtime-l1-1-0

_cexit
terminate
_execute_onexit_table
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_crt_atexit
_invoke_watson
abort
_errno

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s
__stdio_common_vswprintf

api-ms-win-crt-heap-l1-1-0

calloc
malloc
realloc
free

api-ms-win-crt-math-l1-1-0

frexp
ceilf
floor

api-ms-win-crt-string-l1-1-0

_wcsdup
wcsnlen
wcsncmp
strcpy_s
strcspn

api-ms-win-crt-locale-l1-1-0

localeconv
___lc_locale_name_func
__pctype_func
___lc_codepage_func
setlocale
_unlock_locales
_lock_locales
___mb_cur_max_func

api-ms-win-core-winrt-error-l1-1-1

RoClearError

microsoft.internal.frameworkudk

Mui_PropagateApplicationLanguages

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
GetDependencyLocatorStorage
SendTelemetryOnSuspend
XamlControlsGetDatePickerSelection
XamlControlsGetListPickerSelection
XamlControlsGetTimePickerSelection
XamlControlsTestHookCreateLoopingSelector
XamlTestHookFreePhoneResourceLibrary

Sections

.text
Size: 813KB - Virtual size: 812KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.UI.Xaml.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a0:ea:35:6c:fb:29:bd:22:87:e6:e2:a5:e8:69:4e:9e:3e:80:2d:1e:16:46:64:c5:60:d5:fd:17:52:49:59:ac
Signer

Actual PE Digest

a0:ea:35:6c:fb:29:bd:22:87:e6:e2:a5:e8:69:4e:9e:3e:80:2d:1e:16:46:64:c5:60:d5:fd:17:52:49:59:ac

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.UI.Xaml/Assets/NoiseAsset_256x256_PNG.png
.png
Microsoft.UI.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

dc:b4:b2:77:1b:36:05:96:00:5e:c8:da:f2:de:d8:76:da:86:02:7d:22:83:18:05:4a:ca:f5:35:67:56:65:12
Signer

Actual PE Digest

dc:b4:b2:77:1b:36:05:96:00:5e:c8:da:f2:de:d8:76:da:86:02:7d:22:83:18:05:4a:ca:f5:35:67:56:65:12

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 267KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Web.WebView2.Core.dll
.dll windows:6 windows x64 arch:x64

89f9e6cdd8a470132a1a417affabed6a

Code Sign

33:00:00:02:d0:e7:eb:7c:2e:f6:ce:23:e1:00:00:00:00:02:d0
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c7:d2:82:31:be:f8:91:c9:3e:57:a3:60:ba:14:b0:b3:ba:fc:a6:ae:b3:d8:94:39:78:51:be:36:fd:d9:59:46
Signer

Actual PE Digest

c7:d2:82:31:be:f8:91:c9:3e:57:a3:60:ba:14:b0:b3:ba:fc:a6:ae:b3:d8:94:39:78:51:be:36:fd:d9:59:46

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.Web.WebView2.Core.pdb

Imports

shlwapi

ord219

kernel32

InterlockedFlushSList
InterlockedPushEntrySList
OutputDebugStringW
GetCurrentThreadId
FormatMessageW
IsDebuggerPresent
SetLastError
GetLastError
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
ReleaseSemaphore
GetModuleHandleExW
WaitForSingleObject
ReleaseMutex
WaitForSingleObjectEx
OpenSemaphoreW
CloseHandle
HeapAlloc
GetProcAddress
CreateMutexExW
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
DebugBreak
DecodePointer
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitOnceExecuteOnce
EncodePointer
ReleaseSRWLockShared
AcquireSRWLockShared
GetFileAttributesW
CreateFileW
OutputDebugStringA
GetModuleFileNameW
LoadLibraryExW
LoadLibraryW
FreeLibrary
GetEnvironmentVariableW
TlsSetValue
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
CreateEventW
ResetEvent
SetEvent
DeleteCriticalSection
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RtlPcToFileHeader
RaiseException
RtlCaptureContext
LeaveCriticalSection
EnterCriticalSection
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
MultiByteToWideChar
RtlVirtualUnwind
WideCharToMultiByte
RtlLookupFunctionEntry
TlsFree

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc
CoCreateInstance
CoCreateFreeThreadedMarshaler
CoTaskMemFree

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW
RoOriginateError

api-ms-win-core-winrt-string-l1-1-0

WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsIsStringEmpty

api-ms-win-shcore-stream-winrt-l1-1-0

CreateRandomAccessStreamOverStream
CreateStreamOverRandomAccessStream

oleaut32

SysAllocString
SysStringLen
VariantInit
VariantClear
SetErrorInfo
GetErrorInfo
SysFreeString

api-ms-win-eventing-provider-l1-1-0

EventRegister
EventUnregister
EventWriteTransfer
EventSetInformation

api-ms-win-core-registry-l1-1-0

RegGetValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW

api-ms-win-crt-runtime-l1-1-0

_initterm_e
terminate
_cexit
_invalid_parameter_noinfo
_errno
abort
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_initterm

api-ms-win-crt-string-l1-1-0

wcslen
iswspace
wcsncmp
_wcsicmp
strcpy_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
__stdio_common_vswprintf

api-ms-win-crt-convert-l1-1-0

_ultow_s
wcstol

api-ms-win-crt-heap-l1-1-0

free
calloc
malloc
_callnewh

api-ms-win-crt-math-l1-1-0

floor

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory

Sections

.text
Size: 473KB - Virtual size: 472KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Web.WebView2.Core.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:02:d0:e7:eb:7c:2e:f6:ce:23:e1:00:00:00:00:02:d0
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

79:37:ae:57:42:db:08:1b:00:61:9a:0e:7d:d1:cc:13:f3:0e:7f:93:ce:6d:5e:9f:fb:01:fa:8d:b9:df:22:f4
Signer

Actual PE Digest

79:37:ae:57:42:db:08:1b:00:61:9a:0e:7d:d1:cc:13:f3:0e:7f:93:ce:6d:5e:9f:fb:01:fa:8d:b9:df:22:f4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.WinUI.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\BuildOutput\obj\amd64fre\src\projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.WinUI.pdb

Sections

.text
Size: 11.4MB - Virtual size: 11.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.AppLifecycle.Projection.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\obj\Release\arm64\Microsoft.Windows.AppLifecycle.Projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.AppLifecycle.Projection.pdb

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.AppLifecycle.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:02:cd:f3:64:bf:f8:d4:4c:5d:51:00:00:00:00:02:cd
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b4:19:84:e6:bc:16:91:28:4a:e9:0d:b3:e1:83:17:f5:4c:bd:aa:90:09:7a:8e:2a:75:7c:3e:25:24:18:10:83
Signer

Actual PE Digest

b4:19:84:e6:bc:16:91:28:4a:e9:0d:b3:e1:83:17:f5:4c:bd:aa:90:09:7a:8e:2a:75:7c:3e:25:24:18:10:83

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Windows.AppNotifications.Builder.Projection.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\obj\Release\arm64\Microsoft.Windows.AppNotifications.Builder.Projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.AppNotifications.Builder.Projection.pdb

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.AppNotifications.Builder.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:02:cd:f3:64:bf:f8:d4:4c:5d:51:00:00:00:00:02:cd
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fd:6b:90:28:d8:4e:b0:6a:cf:a8:f1:a0:ec:82:2a:fd:ee:0c:e4:ec:b9:a1:bb:61:18:69:76:19:2c:c9:51:87
Signer

Actual PE Digest

fd:6b:90:28:d8:4e:b0:6a:cf:a8:f1:a0:ec:82:2a:fd:ee:0c:e4:ec:b9:a1:bb:61:18:69:76:19:2c:c9:51:87

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Windows.AppNotifications.Projection.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\obj\Release\arm64\Microsoft.Windows.AppNotifications.Projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.AppNotifications.Projection.pdb

Sections

.text
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.AppNotifications.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:02:cd:f3:64:bf:f8:d4:4c:5d:51:00:00:00:00:02:cd
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

43:76:e6:6d:d7:3c:97:7b:82:d3:20:93:34:96:50:79:8c:fe:00:4f:2b:13:fa:91:c7:f7:ec:ba:cd:2d:62:e0
Signer

Actual PE Digest

43:76:e6:6d:d7:3c:97:7b:82:d3:20:93:34:96:50:79:8c:fe:00:4f:2b:13:fa:91:c7:f7:ec:ba:cd:2d:62:e0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Windows.ApplicationModel.DynamicDependency.Projection.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\obj\Release\arm64\Microsoft.Windows.ApplicationModel.DynamicDependency.Projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.ApplicationModel.DynamicDependency.Projection.pdb

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.ApplicationModel.DynamicDependency.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:02:cd:f3:64:bf:f8:d4:4c:5d:51:00:00:00:00:02:cd
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8d:56:79:f6:97:89:63:7e:af:33:a9:86:63:74:3c:82:a6:71:b5:24:0d:8d:9e:90:51:cd:61:47:d1:f1:eb:7a
Signer

Actual PE Digest

8d:56:79:f6:97:89:63:7e:af:33:a9:86:63:74:3c:82:a6:71:b5:24:0d:8d:9e:90:51:cd:61:47:d1:f1:eb:7a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Windows.ApplicationModel.Resources.Projection.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\obj\Release\x86\Microsoft.Windows.ApplicationModel.Resources.Projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.ApplicationModel.Resources.Projection.pdb

Sections

.text
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.ApplicationModel.Resources.dll
.dll windows:6 windows x64 arch:x64

7b00ee1a7a7da6b46cc9f5e8a547b71d

Code Sign

33:00:00:02:cd:f3:64:bf:f8:d4:4c:5d:51:00:00:00:00:02:cd
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b2:28:f8:32:04:95:8f:8d:69:a4:e0:2a:4e:28:4d:8f:27:f6:f8:3b:06:9c:0b:29:2a:ee:f7:f1:54:19:2f:7e
Signer

Actual PE Digest

b2:28:f8:32:04:95:8f:8d:69:a4:e0:2a:4e:28:4d:8f:27:f6:f8:3b:06:9c:0b:29:2a:ee:f7:f1:54:19:2f:7e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.Windows.ApplicationModel.Resources.pdb

Imports

microsoft.internal.frameworkudk

ResourceManager_GetDefaultResourcePathForPackageFullName

mrm

MrmLoadStringOrEmbeddedResourceByIndex
MrmLoadStringOrEmbeddedResource
MrmGetResourceCount
MrmCreateResourceContext
MrmLoadStringResourceFromResourceUri
MrmLoadStringResource
MrmDestroyResourceManager
MrmGetChildResourceMap
MrmGetFilePathFromName
MrmFreeResource
MrmDestroyResourceContext
MrmSetQualifier
MrmGetQualifier
MrmGetAllQualifierNames
MrmFreeQualifierNamesOrValues
MrmLoadStringOrEmbeddedResourceByIndexWithQualifierValues
MrmLoadStringOrEmbeddedResourceWithQualifierValues
MrmCreateResourceManager

kernel32

ReleaseSRWLockExclusive
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EncodePointer
SetLastError
InterlockedFlushSList
InterlockedPushEntrySList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
GetFileAttributesW
GetLastError
LocalFree
IsDebuggerPresent
AcquireSRWLockExclusive
LoadLibraryW
FormatMessageW
MultiByteToWideChar
HeapAlloc
HeapFree
GetProcessHeap
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_seh_filter_dll
abort
_configure_narrow_argv
terminate
_initialize_narrow_environment
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_cexit
_errno
_execute_onexit_table
_invalid_parameter_noinfo

api-ms-win-crt-string-l1-1-0

strcpy_s
wcsncmp
iswspace

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc

oleaut32

SysStringLen
SysFreeString
SetErrorInfo
SysAllocString
GetErrorInfo

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoCreateFreeThreadedMarshaler

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.ApplicationModel.Resources.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:02:cb:b7:75:39:fb:02:71:42:36:00:00:00:00:02:cb
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:45

Not After

11/05/2023, 20:45

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

87:29:3d:6a:ed:33:54:dc:c3:35:b2:ea:f3:a7:4b:8b:f0:ad:5e:62:a4:f3:41:43:d2:e9:76:d0:c5:65:de:bd
Signer

Actual PE Digest

87:29:3d:6a:ed:33:54:dc:c3:35:b2:ea:f3:a7:4b:8b:f0:ad:5e:62:a4:f3:41:43:d2:e9:76:d0:c5:65:de:bd

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.Projection.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\obj\Release\arm64\Microsoft.Windows.ApplicationModel.WindowsAppRuntime.Projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.ApplicationModel.WindowsAppRuntime.Projection.pdb

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.ApplicationModel.WindowsAppRuntime.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:02:cb:b7:75:39:fb:02:71:42:36:00:00:00:00:02:cb
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:45

Not After

11/05/2023, 20:45

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

27:f6:8c:2a:47:9f:15:da:31:a1:14:04:4b:70:9c:32:58:df:3c:ef:27:8f:54:75:1b:7b:a9:62:b0:05:a7:25
Signer

Actual PE Digest

27:f6:8c:2a:47:9f:15:da:31:a1:14:04:4b:70:9c:32:58:df:3c:ef:27:8f:54:75:1b:7b:a9:62:b0:05:a7:25

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Windows.PushNotifications.Projection.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\obj\Release\arm64\Microsoft.Windows.PushNotifications.Projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.PushNotifications.Projection.pdb

Sections

.text
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.PushNotifications.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:02:cd:f3:64:bf:f8:d4:4c:5d:51:00:00:00:00:02:cd
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1c:a4:4d:4a:dd:ac:63:94:fa:ed:e8:58:bb:33:eb:18:93:63:17:db:9b:52:fe:42:2e:c6:06:8f:12:8d:62:cf
Signer

Actual PE Digest

1c:a4:4d:4a:dd:ac:63:94:fa:ed:e8:58:bb:33:eb:18:93:63:17:db:9b:52:fe:42:2e:c6:06:8f:12:8d:62:cf

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Windows.SDK.NET.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ad:52:b5:44:d0:84:3c:ff:8a:14:a2:8f:e2:d3:ed:30:9d:04:a4:92:38:4d:8f:8a:5c:c4:a9:31:9c:b3:69:eb
Signer

Actual PE Digest

ad:52:b5:44:d0:84:3c:ff:8a:14:a2:8f:e2:d3:ed:30:9d:04:a4:92:38:4d:8f:8a:5c:c4:a9:31:9c:b3:69:eb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\a\1\s\NetSDKSln\obj\Release\net6.0\IIDOptimizer\Microsoft.Windows.SDK.NET.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 21.7MB - Virtual size: 21.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.Security.AccessControl.Projection.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\obj\Release\arm64\Microsoft.Windows.Security.AccessControl.Projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.Security.AccessControl.Projection.pdb

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.Security.AccessControl.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:02:cb:b7:75:39:fb:02:71:42:36:00:00:00:00:02:cb
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:45

Not After

11/05/2023, 20:45

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f6:7a:88:b1:ed:c0:e7:d5:5c:bd:a3:fa:af:a3:58:ca:07:f8:c3:d0:5d:7d:49:eb:c3:2e:0d:e1:72:af:9c:c6
Signer

Actual PE Digest

f6:7a:88:b1:ed:c0:e7:d5:5c:bd:a3:fa:af:a3:58:ca:07:f8:c3:d0:5d:7d:49:eb:c3:2e:0d:e1:72:af:9c:c6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Windows.System.Power.Projection.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\obj\Release\arm64\Microsoft.Windows.System.Power.Projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.System.Power.Projection.pdb

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.System.Power.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:02:cd:f3:64:bf:f8:d4:4c:5d:51:00:00:00:00:02:cd
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b7:fa:de:77:2d:3f:c5:02:30:20:77:bb:e0:c0:af:34:ba:5d:89:cf:2f:82:02:8f:66:7f:59:70:f1:1e:bc:f9
Signer

Actual PE Digest

b7:fa:de:77:2d:3f:c5:02:30:20:77:bb:e0:c0:af:34:ba:5d:89:cf:2f:82:02:8f:66:7f:59:70:f1:1e:bc:f9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Windows.System.Projection.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\obj\Release\arm64\Microsoft.Windows.System.Projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.System.Projection.pdb

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.System.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:02:cd:f3:64:bf:f8:d4:4c:5d:51:00:00:00:00:02:cd
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:d6:41:b0:f1:98:47:25:a8:85:b9:96:48:af:c4:a8:9f:11:99:64:bd:e1:72:41:d3:49:42:19:dd:6b:00:b3
Signer

Actual PE Digest

90:d6:41:b0:f1:98:47:25:a8:85:b9:96:48:af:c4:a8:9f:11:99:64:bd:e1:72:41:d3:49:42:19:dd:6b:00:b3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.Windows.Widgets.Projection.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\src\sdk\Microsoft.Windows.Widgets.Projection\obj\Release\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.Widgets.Projection.pdb

Sections

.text
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.Widgets.dll
.dll windows:6 windows x64 arch:x64

bbfd02ed68b2a712c27ab199888d7ae1

Code Sign

33:00:00:02:cd:f3:64:bf:f8:d4:4c:5d:51:00:00:00:00:02:cd
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

16:af:1a:c3:38:9e:16:78:93:6f:b0:4c:54:5e:0e:f5:3a:bc:0c:5e:35:a9:e7:0d:ba:9f:f4:48:65:b7:fc:e5
Signer

Actual PE Digest

16:af:1a:c3:38:9e:16:78:93:6f:b0:4c:54:5e:0e:f5:3a:bc:0c:5e:35:a9:e7:0d:ba:9f:f4:48:65:b7:fc:e5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\src\x64\Release\Microsoft.Windows.Widgets\Microsoft.Windows.Widgets.pdb

Imports

ole32

CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
CoCreateFreeThreadedMarshaler
CoGetApartmentType
CoGetObjectContext
CoImpersonateClient
CoRevertToSelf

kernel32

InitializeSRWLock
RtlUnwind
LoadLibraryExW
OutputDebugStringW
GetCurrentThreadId
FormatMessageW
IsDebuggerPresent
GetLastError
InitOnceBeginInitialize
InitOnceComplete
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
SetLastError
CloseHandle
GetCurrentProcess
GetCurrentThread
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
ReleaseSemaphore
GetModuleHandleExW
WaitForSingleObject
ReleaseMutex
WaitForSingleObjectEx
OpenSemaphoreW
HeapAlloc
GetProcAddress
CreateMutexExW
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
DebugBreak
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwindEx
InitializeSListHead
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimePreciseAsFileTime
TrySubmitThreadpoolCallback
LoadLibraryW
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
FormatMessageA
LocalFree
GetLocaleInfoEx
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
SwitchToThread
RtlPcToFileHeader
RaiseException
IsProcessorFeaturePresent
TryAcquireSRWLockExclusive
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
QueryPerformanceCounter
InitializeCriticalSectionEx
GetSystemTimeAsFileTime

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

api-ms-win-core-processthreads-l1-1-0

OpenProcessToken
OpenThreadToken

api-ms-win-appmodel-runtime-l1-1-1

GetPackageFamilyNameFromToken

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm
_cexit
_invalid_parameter_noinfo_noreturn
_errno
abort
_invalid_parameter_noinfo
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
terminate

api-ms-win-crt-string-l1-1-0

wcsncmp
iswspace
strcpy_s
_wcsnicmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vswprintf_s
__stdio_common_vsnprintf_s

api-ms-win-crt-convert-l1-1-0

wcstoll

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free
calloc

oleaut32

SetErrorInfo
SysFreeString
SysAllocString
SysStringLen
GetErrorInfo

api-ms-win-crt-math-l1-1-0

ceilf

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory

Sections

.text
Size: 405KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 242KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 251KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Windows.Widgets.winmd
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:02:cd:f3:64:bf:f8:d4:4c:5d:51:00:00:00:00:02:cd
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2b:2e:eb:4b:79:d0:ad:c0:e7:70:91:c6:91:1f:2c:29:bd:81:17:f9:58:04:f6:1e:b4:62:8a:a5:28:88:78:a8
Signer

Actual PE Digest

2b:2e:eb:4b:79:d0:ad:c0:e7:70:91:c6:91:1f:2c:29:bd:81:17:f9:58:04:f6:1e:b4:62:8a:a5:28:88:78:a8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Microsoft.WindowsAppRuntime.Bootstrap.Net.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\obj\Release\AnyCPU\Microsoft.WindowsAppRuntime.Bootstrap.Net\net6.0-windows10.0.19041.0\Microsoft.WindowsAppRuntime.Bootstrap.Net.pdb

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 431B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.WindowsAppRuntime.Bootstrap.dll
.dll windows:6 windows x64 arch:x64

831d2bd65f7c350261e56085bf57e725

Code Sign

33:00:00:02:cd:f3:64:bf:f8:d4:4c:5d:51:00:00:00:00:02:cd
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:1f:19:6a:46:9d:d0:62:04:b4:92:4d:15:33:37:cf:26:d9:04:d0:ed:b6:91:82:a2:62:ca:41:bb:c9:c5:d9
Signer

Actual PE Digest

0b:1f:19:6a:46:9d:d0:62:04:b4:92:4d:15:33:37:cf:26:d9:04:d0:ed:b6:91:82:a2:62:ca:41:bb:c9:c5:d9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.WindowsAppRuntime.Bootstrap.pdb

Imports

advapi32

EventWriteTransfer
EventUnregister
GetSidSubAuthority
EventActivityIdControl
EventSetInformation
EventRegister
DeregisterEventSource
ReportEventW
RegisterEventSourceW
GetTokenInformation
GetSidSubAuthorityCount

kernel32

GetProcAddress
SetLastError
GetLastError
GetModuleHandleW
HeapAlloc
OutputDebugStringW
GetCurrentThreadId
FormatMessageW
IsDebuggerPresent
AcquireSRWLockExclusive
RtlUnwind
UnhandledExceptionFilter
FreeLibrary
GetModuleHandleExW
TlsFree
TlsSetValue
DisableThreadLibraryCalls
CloseHandle
GetCurrentPackageFullName
DebugBreak
RtlVirtualUnwind
LoadLibraryW
CompareStringOrdinal
LoadLibraryExW
OpenPackageInfoByFullName
GetPackageInfo
AddDllDirectory
SetEnvironmentVariableW
GetEnvironmentVariableW
RtlLookupFunctionEntry
GetCurrentProcessId
FormatApplicationUserModelId
RtlCaptureContext
GetPackagePathByFullName
FindFirstFileW
ReleaseSRWLockExclusive
HeapFree
GetProcessHeap
GetModuleFileNameW
K32GetModuleFileNameExW
SetEvent
FindClose
ClosePackageInfo
RemoveDllDirectory
CreateEventExW
InitOnceComplete
GetModuleFileNameA
CreateSemaphoreExW
ReleaseSemaphore
WaitForSingleObject
ReleaseMutex
WaitForSingleObjectEx
OpenSemaphoreW
CreateMutexExW
InitOnceBeginInitialize
TlsGetValue
SetUnhandledExceptionFilter
TlsAlloc
EncodePointer
InterlockedFlushSList
InterlockedPushEntrySList
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
CreateEventW
ResetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
InitializeSRWLock
TryAcquireSRWLockExclusive
QueryPerformanceCounter
GetSystemTimeAsFileTime

ole32

CoCreateInstance
CoTaskMemAlloc
CoCreateGuid
CoTaskMemFree
CoCreateFreeThreadedMarshaler

api-ms-win-core-winrt-error-l1-1-0

GetRestrictedErrorInfo
SetRestrictedErrorInfo
RoFailFastWithErrorContext

oleaut32

SysFreeString
SysStringLen
SysAllocString
GetErrorInfo
SetErrorInfo

user32

MessageBoxW
wsprintfW
LoadStringA

rpcrt4

UuidFromStringW

shell32

ShellExecuteExW

api-ms-win-core-errorhandling-l1-1-0

RaiseException

api-ms-win-core-sysinfo-l1-1-0

GetSystemInfo

api-ms-win-core-memory-l1-1-0

VirtualProtect
VirtualQuery

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExA

api-ms-win-crt-runtime-l1-1-0

_errno
abort
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
terminate
_initterm_e
_cexit
_crt_atexit
_initterm
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vsnprintf_s
__stdio_common_vswscanf
__stdio_common_vswprintf_s

api-ms-win-crt-string-l1-1-0

wcsncmp
strcpy_s
iswspace

api-ms-win-crt-heap-l1-1-0

free
calloc
malloc
_callnewh

Exports

Exports

MddBootstrapInitialize
MddBootstrapInitialize2
MddBootstrapShutdown
MddBootstrapTestInitialize

Sections

.text
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.WindowsAppRuntime.Insights.Resource.dll
.dll windows:6 windows x64 arch:x64

26970099aedb6ceafc0d01f79fd527c4

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d3:5f:29:59:29:84:22:6a:9b:17:81:32:58:6b:ad:5a:7d:08:03:2e:e0:09:cb:90:52:05:24:9c:b3:61:80:33
Signer

Actual PE Digest

d3:5f:29:59:29:84:22:6a:9b:17:81:32:58:6b:ad:5a:7d:08:03:2e:e0:09:cb:90:52:05:24:9c:b3:61:80:33

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\BuildOutput\Release\x64\Microsoft.WindowsAppRuntime.Insights.Resource\Microsoft.WindowsAppRuntime.Insights.Resource.pdb

Imports

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_narrow_environment
terminate
_configure_narrow_argv
_initterm_e
_seh_filter_dll
abort
_initialize_onexit_table
_cexit
_initterm

api-ms-win-crt-heap-l1-1-0

free
calloc

api-ms-win-crt-string-l1-1-0

wcsncmp

Exports

Exports

WindowsAppRuntime_GetVersionInfo

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.WindowsAppRuntime.Release.Net.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5b:e2:e7:f1:1e:ea:7b:d9:2b:51:8d:9c:e2:4f:c6:07:2d:13:bc:b0:5d:39:b6:15:1e:b1:3f:3c:89:bd:29:40
Signer

Actual PE Digest

5b:e2:e7:f1:1e:ea:7b:d9:2b:51:8d:9c:e2:4f:c6:07:2d:13:bc:b0:5d:39:b6:15:1e:b1:3f:3c:89:bd:29:40

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\dev\Microsoft.WindowsAppRuntime.Release.Net\obj\Release\net6.0-windows10.0.19041.0\Microsoft.WindowsAppRuntime.Release.Net.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.WindowsAppRuntime.dll
.dll windows:6 windows x64 arch:x64

7b22c7ff638e5fca2ac3075a2041fc9d

Code Sign

33:00:00:02:cb:b7:75:39:fb:02:71:42:36:00:00:00:00:02:cb
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:45

Not After

11/05/2023, 20:45

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ff:4e:44:82:a7:6b:91:6c:73:fc:f1:97:43:c5:77:41:bf:ca:cb:13:2f:96:0b:b3:6c:3f:3d:b2:e7:5f:17:8e
Signer

Actual PE Digest

ff:4e:44:82:a7:6b:91:6c:73:fc:f1:97:43:c5:77:41:bf:ca:cb:13:2f:96:0b:b3:6c:3f:3d:b2:e7:5f:17:8e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.WindowsAppRuntime.pdb

Imports

advapi32

GetTokenInformation
RegEnumValueW
DeregisterEventSource
ReportEventW
RegisterEventSourceW
EqualSid
RegDeleteKeyExW
GetSidSubAuthority
GetLengthSid
CopySid
GetSidSubAuthorityCount
SetEntriesInAclW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
MakeSelfRelativeSD
RegOpenKeyExW
RegGetValueW
FreeSid
RegEnumKeyExW
RegQueryInfoKeyW
ConvertStringSidToSidW
ConvertSecurityDescriptorToStringSecurityDescriptorW
EventActivityIdControl
RegDeleteTreeW
EventUnregister
EventRegister
EventSetInformation
EventWriteTransfer
RegQueryValueExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegSetValueExW

kernel32

K32GetModuleFileNameExW
GetCurrentProcess
FlushInstructionCache
VirtualAlloc
GetModuleFileNameW
GetCurrentPackageFullName
InitOnceBeginInitialize
InitOnceComplete
SetThreadContext
FreeLibrary
ReleaseMutex
CloseThreadpoolWait
WaitForThreadpoolWaitCallbacks
SetThreadpoolWait
CloseHandle
UnregisterWait
CompareStringOrdinal
VirtualFree
GetCurrentProcessId
ResetEvent
CreateThreadpoolWait
DuplicateHandle
OpenProcess
RegisterWaitForSingleObject
VirtualProtectEx
RtlUnwind
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleExW
DeleteProcThreadAttributeList
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
CreateProcessW
ResumeThread
WaitForSingleObjectEx
GetCommandLineW
OpenEventW
SetEvent
CreateEventExW
CreateFileMappingW
MapViewOfFile
CreateMutexExW
UnmapViewOfFile
GetThreadContext
GetCurrentApplicationUserModelId
LoadLibraryW
TlsAlloc
VirtualQueryEx
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwindEx
InitializeSListHead
TrySubmitThreadpoolCallback
GetModuleHandleW
GetProcAddress
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
CreateEventW
InitializeCriticalSectionAndSpinCount
HeapFree
SetLastError
LocalFree
IsProcessorFeaturePresent
LocalAlloc
AcquireSRWLockShared
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
GetSystemTimePreciseAsFileTime
GetProcessHeap
MultiByteToWideChar
TerminateProcess
HeapAlloc
WideCharToMultiByte
DeleteFileW
RtlCaptureContext
LoadLibraryExW
GetFileSizeEx
ReadFile
CreateFileW
WriteFile
GetCurrentPackageInfo
GetCurrentThread
GetPackageInfo
FindPackagesByPackageFamily
IsDebuggerPresent
PackageIdFromFullName
SetEnvironmentVariableW
ClosePackageInfo
GetEnvironmentVariableW
RemoveDllDirectory
OpenPackageInfoByFullName
AddDllDirectory
CloseThreadpoolTimer
FindResourceW
LoadResource
SizeofResource
LockResource
RtlPcToFileHeader
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetThreadpoolTimer
InitOnceExecuteOnce
FindFirstFileW
FindNextFileW
FindClose
RaiseException
CreateThreadpoolTimer
GetSystemTimeAsFileTime
CreateThreadpool
SetThreadpoolThreadMaximum
SetThreadpoolThreadMinimum
CreateThreadpoolCleanupGroup
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolCleanupGroupMembers
ReleaseActCtx
CreateActCtxW
QueryActCtxW
CompareStringEx
LCMapStringEx
DeleteCriticalSection
InitializeCriticalSectionEx
GetPackagePathByFullName
DebugBreak
GetExitCodeProcess
FormatMessageW
GetCurrentThreadId
OutputDebugStringW
DecodePointer
EncodePointer
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetLastError
DisableThreadLibraryCalls
GetModuleFileNameA
CreateSemaphoreExW
ReleaseSemaphore
WaitForSingleObject
OpenSemaphoreW
ReleaseSRWLockShared
SwitchToThread
QueryPerformanceCounter
TryAcquireSRWLockExclusive
InitializeSRWLock
GetLocaleInfoEx
GetStringTypeW
FormatMessageA
GetFileInformationByHandleEx
AreFileApisANSI
SetFileInformationByHandle
GetFileAttributesExW
CreateDirectoryW
SuspendThread

userenv

DeriveAppContainerSidFromAppContainerName

user32

AllowSetForegroundWindow
SendMessageTimeoutW
MessageBoxW
LoadStringA
wsprintfW
DestroyIcon

ole32

StringFromGUID2
CoReleaseMarshalData
CoGetMarshalSizeMax
CoRevokeClassObject
CreateStreamOnHGlobal
CoMarshalInterface
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoGetDefaultContext
CoIncrementMTAUsage
CoUnmarshalInterface
CoCreateInstance
CoCreateGuid
CoGetObjectContext
CoInitializeEx
CoGetApartmentType
StringFromCLSID
CoTaskMemAlloc
CoTaskMemFree
CoCreateFreeThreadedMarshaler
CoUninitialize
CoRegisterClassObject

shlwapi

PathFindFileNameW
PathIsFileSpecW
ord213
ord12
SHCreateStreamOnFileEx

shell32

SHGetKnownFolderPath
CommandLineToArgvW
ExtractIconExW
GetCurrentProcessExplicitAppUserModelID
SHCreateItemFromParsingName
ShellExecuteExW
SHChangeNotify

api-ms-win-core-winrt-string-l1-1-0

WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateString
WindowsCreateStringReference

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory
RoActivateInstance

xmllite

CreateXmlReaderInputWithEncodingName
CreateXmlReader

oleaut32

SysStringLen
SetErrorInfo
SysAllocString
SysFreeString
GetErrorInfo

api-ms-win-core-path-l1-1-0

PathCchRemoveFileSpec

api-ms-win-ro-typeresolution-l1-1-0

RoResolveNamespace
RoGetMetaDataFile

api-ms-win-power-setting-l1-1-1

PowerRegisterForEffectivePowerModeNotifications
PowerUnregisterFromEffectivePowerModeNotifications

api-ms-win-power-base-l1-1-0

PowerRegisterSuspendResumeNotification
PowerUnregisterSuspendResumeNotification

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle
WaitOnAddress

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext
SetRestrictedErrorInfo
GetRestrictedErrorInfo

rometadata

MetaDataGetDispenser

api-ms-win-core-sysinfo-l1-1-0

GetSystemInfo

api-ms-win-core-memory-l1-1-0

VirtualQuery
VirtualProtect

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExA

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s
__stdio_common_vswscanf
__stdio_common_vswprintf
__stdio_common_vsnprintf_s

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
abort
_invalid_parameter_noinfo
_errno
terminate

api-ms-win-crt-string-l1-1-0

strcpy_s
iswspace
towlower
towupper
wcsnlen
_wcsdup
wcsncmp
wcstok_s
_wcsicmp_l

api-ms-win-crt-heap-l1-1-0

calloc
malloc
realloc
free
_callnewh

api-ms-win-crt-time-l1-1-0

_W_Gettnames
_Wcsftime
_localtime64_s

api-ms-win-crt-convert-l1-1-0

wcstoull
wcstoul

api-ms-win-crt-locale-l1-1-0

__pctype_func
___mb_cur_max_func
___lc_codepage_func
setlocale
___lc_locale_name_func
_unlock_locales
_lock_locales
_create_locale
___lc_collate_cp_func

api-ms-win-crt-math-l1-1-0

ceilf

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
GetSecurityDescriptorForAppContainerNames
MddAddPackageDependency
MddDeletePackageDependency
MddGetGenerationId
MddGetIdForPackageDependencyContext
MddGetPackageGraphRevisionId
MddGetResolvedPackageFullNameForPackageDependency
MddLifetimeManagementGC
MddLifetimeManagementTestInitialize
MddRemovePackageDependency
MddTryCreatePackageDependency
MsixInstallLicenses
WindowsAppRuntime_EnsureIsLoaded
WindowsAppRuntime_IsSelfContained
WindowsAppRuntime_VersionInfo_MSIX_Framework_PackageFamilyName_Get
WindowsAppRuntime_VersionInfo_MSIX_Main_PackageFamilyName_Get
WindowsAppRuntime_VersionInfo_TestInitialize

Sections

.text
Size: 642KB - Virtual size: 642KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.detourc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourd
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.ui.xaml.dll
.dll windows:10 windows x64 arch:x64

042271dc038275322264333525247cdb

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fb:1d:54:ec:13:d4:66:28:c2:3e:43:1e:38:60:c5:e1:c2:ef:c8:a8:f1:0b:da:49:da:f6:ee:6b:da:1e:98:0a
Signer

Actual PE Digest

fb:1d:54:ec:13:d4:66:28:c2:3e:43:1e:38:60:c5:e1:c2:ef:c8:a8:f1:0b:da:49:da:f6:ee:6b:da:1e:98:0a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\BuildOutput\obj\amd64fre\dxaml\xcp\dxaml\dllsrv\winrt\native\Microsoft.ui.xaml.pdb

Imports

kernel32

InitOnceComplete
RtlCaptureContext
InitOnceBeginInitialize
HeapAlloc
TlsFree
SetFilePointerEx
SystemTimeToFileTime
GetFileTime
SetEndOfFile
WriteFile
GetFileSizeEx
GetFileAttributesW
GetCurrentPackageInfo
ReclaimVirtualMemory
OfferVirtualMemory
VirtualAlloc
VirtualFree
DuplicateHandle
SwitchToThread
OpenSemaphoreW
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcmpiW
ResolveDelayLoadedAPI
DelayLoadFailureHook
WaitForSingleObjectEx
OutputDebugStringW
GetLastError
SearchPathW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
RemoveDllDirectory
CloseHandle
RtlUnwind
RtlPcToFileHeader
InterlockedFlushSList
RtlUnwindEx
AddDllDirectory
GetModuleFileNameW
TlsAlloc
LoadLibraryExW
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
OpenFileMappingW
IsProcessorFeaturePresent
SetPriorityClass
GetPriorityClass
K32GetProcessMemoryInfo
GetProcessAffinityMask
CreateThreadpoolCleanupGroup
CloseThreadpoolCleanupGroupMembers
CloseThreadpoolCleanupGroup
CreateThreadpoolWork
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
SubmitThreadpoolWork
InitializeCriticalSection
DecodePointer
GetTickCount
ExpandEnvironmentStringsW
GetCurrentPackageId
QueryPerformanceCounter
GetProcAddress
SetThreadPriority
GetCurrentThread
GetThreadPriority
WaitForMultipleObjectsEx
OpenEventW
SetEvent
ResetEvent
CreateThread
HeapCreate
ReleaseMutex
CreateFileMappingW
MapViewOfFile
CreateFileW
GetTempFileNameW
GetTempPathW
GetSystemInfo
UnmapViewOfFile
GetVersionExW
GetUserDefaultLCID
GetCurrentThreadId
TlsGetValue
TlsSetValue
RtlCaptureStackBackTrace
GetSystemTimeAsFileTime
WaitForSingleObject
LoadLibraryW
RaiseException
LCMapStringEx
EncodePointer
FreeLibrary
GetStringTypeW
CompareStringEx
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleExW
ReleaseSemaphore
SetLastError
TryAcquireSRWLockExclusive
InitializeSListHead
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WideCharToMultiByte
MultiByteToWideChar
SetThreadpoolTimer
CloseThreadpoolTimer
CreateThreadpoolTimer
RtlVirtualUnwind
LockResource
InitializeCriticalSectionEx
CloseThreadpoolWait
WaitForThreadpoolWaitCallbacks
SetThreadpoolWait
SizeofResource
CreateEventW
CreateThreadpoolWait
FindResourceW
RtlLookupFunctionEntry
LCIDToLocaleName
CreateMutexExW
GetTickCount64
RaiseFailFastException
HeapReAlloc
LocalFree
GetCurrentProcessId
GetProcessHeap
Wow64RevertWow64FsRedirection
Wow64DisableWow64FsRedirection
GetCurrentProcess
HeapFree
IsWow64Process2
CompareStringOrdinal
CreateEventExW
ResolveLocaleName
LocaleNameToLCID
CreateSemaphoreExW
InitOnceExecuteOnce
GetLocaleInfoEx
PowerSetRequest
PowerClearRequest
PowerCreateRequest
ReleaseSRWLockShared
AcquireSRWLockShared
IsDebuggerPresent
DebugBreak
FormatMessageW
MulDiv
GetEnvironmentVariableW
ReadFile
GetFileSize
GetWindowsDirectoryW
GetThreadUILanguage
GetModuleHandleA
GetLocaleInfoW
AppPolicyGetWindowingModel
GetTimeFormatW
GetModuleHandleW
GetDynamicTimeZoneInformation
FindNLSStringEx
FindResourceExW
LoadResource
GetThreadTimes
InitializeSRWLock
CreateMutexW
Sleep
QueryFullProcessImageNameW
OpenProcess
GetCurrentApplicationUserModelId
GetCurrentPackageFullName
GetCurrentPackagePath
QueryPerformanceFrequency
GetModuleFileNameA

advapi32

RegDeleteValueW
RegNotifyChangeKeyValue
EventActivityIdControl
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegisterTraceGuidsW
RegGetValueW
GetTraceEnableLevel
TraceEvent
OpenProcessToken
TraceMessage
GetTraceEnableFlags
GetTraceLoggerHandle
GetTokenInformation
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegSetValueExW
RegCreateKeyExW
UnregisterTraceGuids
EventRegister
EventSetInformation
EventUnregister
EventWriteTransfer

shlwapi

PathFileExistsW
ord16
UrlCreateFromPathW
PathFindExtensionW
UrlCanonicalizeW
PathCreateFromUrlW
ord12
UrlCombineW
PathRemoveFileSpecW
ord280

api-ms-win-crt-runtime-l1-1-0

_errno
_invalid_parameter_noinfo
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
__doserrno
_initterm_e
_initterm
_invoke_watson
_invalid_parameter_noinfo_noreturn
abort

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s
__stdio_common_vswscanf
__stdio_common_vswprintf
__stdio_common_vsnprintf_s

api-ms-win-crt-filesystem-l1-1-0

_wsplitpath_s

api-ms-win-crt-string-l1-1-0

towlower
iswdigit
_wcsdup
wcsncpy_s
isspace
strcpy_s
wcscpy_s
iswspace
tolower
_wcsicmp
wcsncmp
_wcsnicmp
wcsnlen
isalpha
wcscmp

api-ms-win-crt-convert-l1-1-0

wcstol
_ultow_s
_itow_s
wcstod
wcstoul
_wtoi
_wcstoi64
wcstoll

api-ms-win-crt-math-l1-1-0

atan2f
exp
floor
sinf
cosf
round
logf
lroundf
_isnan
ceilf
_finite
log
powf
sqrtf
cos
roundf
tanf
sin
ceil
floorf
pow

api-ms-win-crt-heap-l1-1-0

realloc
free
calloc
malloc
_recalloc

coremessagingxp

CoreMsgCreateSession

microsoft.internal.frameworkudk

MediaPlayerExtension_RemoveIsLoopingEnabledChanged
FrameworkInputView_RegisterListener
FrameworkInputView_UnregisterListener
Windowing_GetWindowFromWindowId
Theming_TryEnableHostBackdropBrush
TextAnalysis_SetLocaleNameList
TextAnalysis_GetContentReadingDirection
Mui_GetFontFallbackLanguageList
MediaPlayerExtension_GetVideoSwapchainHandle
MediaPlayerExtension_AddCastingRenderLocationChanged
MediaPlayerExtension_RemoveCastingRenderLocationChanged
MediaPlayerExtension_GetMediaPlayerCastingRenderLocation
Theming_TrySetDarkTheme
InputPaneFramework_UnregisterListener
InputPaneFramework_RegisterListener
TimedMetadataTrackExtension_AddCueEntered
TimedMetadataTrackExtension_RemoveCueEntered
FinalUnhandledErrorDetected_UnregisterHandler
FinalUnhandledErrorDetected_RegisterHandler
BackButtonIntegration_InjectBackButtonPress
VisualDiagnosticsPort_Unregister
VisualDiagnosticsPort_Register
WindowPositionChanged_UnregisterListener
WindowPositionChanged_RegisterListener
AudioGraphSettingsExtension_SetUseSpatialAudioApi
Windowing_GetWindowIdFromWindow
MediaPlaybackSessionExtension_IsPlaybackRateSupported
MediaPlaybackListExtension_RemoveAutoRepeatChanged
MediaPlaybackListExtension_AddAutoRepeatChanged
TextInput_SetKeyboardSkin
TextInput_SetTextPrediction
TextInputProxy_putInputSettings
MediaPlayerExtension_AddIsLoopingEnabledChanged
MediaPlaybackDataSourceExtension_SendRepeatModeChangeRequest
MediaPlaybackDataSourceExtension_SendMediaPlaybackCommand
MediaPlaybackDataSourceExtension_SendPlaybackRateChangeRequest
MediaPlayerExtension_GetCurrentMediaPlaybackItem
MediaPlaybackDataSourceExtension_SendPlaybackPositionChangeRequest
BackButtonIntegration_RegisterListener
BackButtonIntegration_UnregisterListener
Mui_PropagateApplicationLanguages
InputPaneFramework_Advise
TextAnalysis_CreateDWritePrivateTextAnalysisSourceProxy

microsoft.ui.windowing.core

ContentPreTranslateMessage

urlmon

CreateUri
CreateIUriBuilder
CreateURLMonikerEx
RegisterBindStatusCallback

api-ms-win-core-winrt-string-l1-1-0

WindowsTrimStringEnd
WindowsCreateString
WindowsIsStringEmpty
WindowsDeleteString
WindowsGetStringLen
WindowsDeleteStringBuffer
WindowsPreallocateStringBuffer
WindowsCreateStringReference
WindowsPromoteStringBuffer
WindowsCompareStringOrdinal
WindowsGetStringRawBuffer
WindowsConcatString
WindowsTrimStringStart
WindowsSubstringWithSpecifiedLength
WindowsDuplicateString
WindowsStringHasEmbeddedNull

api-ms-win-core-winrt-l1-1-0

RoActivateInstance
RoInitialize
RoGetActivationFactory
RoUninitialize

ole32

CreateBindCtx
CoTaskMemFree
CoUninitialize
CoCreateFreeThreadedMarshaler
OleUninitialize
OleInitialize
CoTaskMemAlloc
CLSIDFromString
CoCreateInstance
StringFromCLSID
CoWaitForMultipleHandles
CoGetApartmentType
CoCreateGuid
CreateStreamOnHGlobal
CoTaskMemRealloc
CoInitializeEx
PropVariantClear

rpcrt4

RpcStringFreeW
UuidCreate
UuidToStringW

user32

DefWindowProcW
PeekMessageW
MsgWaitForMultipleObjects
ToUnicodeEx
VkKeyScanExW
IsClipboardFormatAvailable
ScreenToClient
InflateRect
SetWindowPos
EnableMouseInPointer
GetDesktopWindow
GetAncestor
SetCapture
ReleaseDC
GetDpiForWindow
GetKeyboardState
PostQuitMessage
GetMessageW
TranslateMessage
DispatchMessageW
ReleaseCapture
ShowWindow
RedrawWindow
RegisterWindowMessageW
CallWindowProcW
SetWindowLongW
IsChild
GetCaretBlinkTime
OffsetRect
DestroyWindow
SetTimer
GetParent
PostMessageW
MonitorFromRect
KillTimer
GetSysColor
GetWindowThreadProcessId
InvalidateRect
CreateWindowExW
MonitorFromWindow
BeginPaint
EndPaint
GetKeyboardLayout
SetWindowLongPtrW
GetWindowLongPtrW
GetWindow
SetWindowTextW
GetWindowPlacement
IsIconic
IsWindowVisible
GetWindowTextLengthW
GetWindowTextW
IsZoomed
UpdateWindow
SetActiveWindow
ClientToScreen
GetClientRect
SetFocus
SetMenuItemInfoW
GetSystemMenu
SetMenuDefaultItem
TrackPopupMenuEx
GetClassInfoExW
LoadCursorW
RegisterClassExW
RegisterClassW
GetWindowLongW
SetLayeredWindowAttributes
FindWindowW
TrackMouseEvent
GetCursorPos
GetMessageTime
GetWindowRect
SendMessageW
GetFocus
CharNextW
GetDC
PtInRect
GetSystemMetricsForDpi
GetForegroundWindow
FillRect
EqualRect

api-ms-win-core-winrt-error-l1-1-0

RoGetErrorReportingFlags
GetRestrictedErrorInfo
SetRestrictedErrorInfo
RoOriginateError
RoOriginateErrorW
RoTransformError

api-ms-win-ntuser-sysparams-l1-1-0

SystemParametersInfoW
GetMonitorInfoW
GetSystemMetrics
EnumDisplaySettingsW
EnumDisplayDevicesW

gdi32

ExtTextOutW
GetStockObject
DPtoLP
StartPage
SetDIBitsToDevice
EndPage
GetMapMode
CombineRgn
SetMapMode
SetBkColor
DeleteObject
CreateRectRgn
GetRegionData
StretchDIBits

oleaut32

SafeArrayLock
VariantChangeType
GetErrorInfo
CreateErrorInfo
SetErrorInfo
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayDestroy
VarUI4FromStr
SysAllocString
SafeArrayUnlock
SysAllocStringLen
SysFreeString
VariantInit
SysStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetVartype
SafeArrayGetDim
VariantClear

dwrite

DWriteCreateFactory

d3d11

D3D11CreateDevice

api-ms-win-power-setting-l1-1-0

PowerSettingUnregisterNotification
PowerSettingRegisterNotification

api-ms-win-core-path-l1-1-0

PathCchCombineEx
PathCchAppend

api-ms-win-ro-typeresolution-l1-1-0

RoParseTypeName

version

GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoSizeW

api-ms-win-dx-d3dkmt-l1-1-0

GdiEntry13

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

uxtheme

GetThemeAnimationTransform
GetThemeTimingFunction
GetThemeAnimationProperty
CloseThemeData
OpenThemeData

ntdll

RtlGetDeviceFamilyInfoEnum
RtlConvertDeviceFamilyInfoToString

api-ms-win-crt-locale-l1-1-0

___mb_cur_max_func
___lc_codepage_func
__pctype_func
___lc_collate_cp_func
___lc_locale_name_func
setlocale
_unlock_locales
_lock_locales

api-ms-win-crt-utility-l1-1-0

bsearch

d2d1

ord1

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllMain
GetErrorContextIndex
OverrideXamlMetadataProvider
OverrideXamlResourcePropertyBag
XamlCheckProcessRequirements

Sections

.text
Size: 9.8MB - Virtual size: 9.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 593KB - Virtual size: 593KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 493KB - Virtual size: 493KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.ui.xaml.resources.19h1.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:ad:90:de:03:82:9e:09:71:d5:3a:55:ff:33:7b:fc:dc:9a:a1:a1:9a:c4:42:f2:19:6c:05:d3:42:7a:b6:e6
Signer

Actual PE Digest

49:ad:90:de:03:82:9e:09:71:d5:3a:55:ff:33:7b:fc:dc:9a:a1:a1:9a:c4:42:f2:19:6c:05:d3:42:7a:b6:e6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 544KB - Virtual size: 544KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Microsoft.ui.xaml.resources.common.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cf:1d:d6:87:76:d8:a0:24:cd:e2:e9:5c:e9:75:0c:39:a1:ad:61:2a:1c:22:ff:f2:47:f6:7e:19:93:ac:31:3b
Signer

Actual PE Digest

cf:1d:d6:87:76:d8:a0:24:cd:e2:e9:5c:e9:75:0c:39:a1:ad:61:2a:1c:22:ff:f2:47:f6:7e:19:93:ac:31:3b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Newtonsoft.Json.dll
.dll .ps1 windows:4 windows x64 arch:x64 polyglot

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/Src/Newtonsoft.Json/obj/Release/net6.0/Newtonsoft.Json.pdb

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Octokit.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Octokit.pdb

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 188KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PushNotificationsLongRunningTask.ProxyStub.dll
.dll windows:6 windows x64 arch:x64

58de37759f83da37be4f6a67bd17dc2b

Code Sign

33:00:00:02:cd:f3:64:bf:f8:d4:4c:5d:51:00:00:00:00:02:cd
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

97:cb:c8:81:17:8f:61:c6:6b:ba:e9:73:9b:bf:5e:9f:c7:ae:00:ce:64:aa:27:d9:e6:92:c9:b5:b5:ae:ba:f3
Signer

Actual PE Digest

97:cb:c8:81:17:8f:61:c6:6b:ba:e9:73:9b:bf:5e:9f:c7:ae:00:ce:64:aa:27:d9:e6:92:c9:b5:b5:ae:ba:f3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

PushNotificationsLongRunningTask.ProxyStub.pdb

Imports

rpcrt4

CStdStubBuffer_IsIIDSupported
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
NdrDllGetClassObject
NdrOleAllocate
CStdStubBuffer_QueryInterface
CStdStubBuffer_Connect
IUnknown_Release_Proxy
CStdStubBuffer_AddRef
NdrOleFree
CStdStubBuffer_DebugServerQueryInterface
IUnknown_AddRef_Proxy
CStdStubBuffer_Invoke
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
CStdStubBuffer_CountRefs

kernel32

DeleteCriticalSection
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
GetLastError
InterlockedFlushSList
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_narrow_environment
terminate
_configure_narrow_argv
_initterm_e
_seh_filter_dll
abort
_initialize_onexit_table
_cexit
_initterm

api-ms-win-crt-heap-l1-1-0

free
calloc

api-ms-win-crt-string-l1-1-0

wcsncmp

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
StoreLib.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\projects\JiayiLauncher\external\StoreLib\StoreLib\obj\Release\net8.0\StoreLib.pdb

Sections

.text
Size: 196KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
StoreLib.pdb
System.Drawing.Common.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:7b:a1:0a:3e:cb:66:e9:01:c0:00:00:00:00:03:7b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/05/2023, 19:03

Not After

08/05/2024, 19:03

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7c:2b:76:54:93:e9:e3:19:9d:fc:8c:68:2a:86:66:ac:ed:7b:da:a8:c7:ef:04:a5:89:05:ec:82:3b:73:bb:c7
Signer

Actual PE Digest

7c:2b:76:54:93:e9:e3:19:9d:fc:8c:68:2a:86:66:ac:ed:7b:da:a8:c7:ef:04:a5:89:05:ec:82:3b:73:bb:c7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/System.Drawing.Common/Release/net8.0/System.Drawing.Common.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 584KB - Virtual size: 583KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
System.IO.Pipelines.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/System.IO.Pipelines/Release/net8.0/System.IO.Pipelines.pdb

Sections

.text
Size: 152KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WinRT.Runtime.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:24:f3:6e:46:fe:b0:93:67:e4:8b:a5:bd:c6:75:4e:33:82:09:af:21:05:87:c7:0a:0f:c8:b8:4f:fa:42:82
Signer

Actual PE Digest

4e:24:f3:6e:46:fe:b0:93:67:e4:8b:a5:bd:c6:75:4e:33:82:09:af:21:05:87:c7:0a:0f:c8:b8:4f:fa:42:82

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\1\s\src\WinRT.Runtime\obj\Release\net6.0\WinRT.Runtime.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 377KB - Virtual size: 377KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WinUIEdit.dll
.dll windows:6 windows x64 arch:x64

d07f9ad8b3a23e9c7fdffdc23c3d507b

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c2:bb:d9:4c:27:b0:2f:c8:ff:6b:ae:c6:8f:37:a6:d4:1a:72:1a:1e:16:d6:ef:a9:e6:bb:e8:16:e8:89:21:28
Signer

Actual PE Digest

c2:bb:d9:4c:27:b0:2f:c8:ff:6b:ae:c6:8f:37:a6:d4:1a:72:1a:1e:16:d6:ef:a9:e6:bb:e8:16:e8:89:21:28

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\1\b\Obj\x64fre\WinUIEdit\richedit\src\dll\WinUIEdit\WinUIEdit.pdb

Imports

kernel32

RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
RaiseException
CreateEventExW
SetEvent
WaitForSingleObjectEx
LoadLibraryExW
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
ResetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
LoadLibraryExA
VirtualQuery
SetLastError
VirtualProtect
InitializeSRWLock
VerifyVersionInfoW
LoadLibraryW
DisableThreadLibraryCalls
LoadResource
FindResourceW
VerSetConditionMask
GetPackageFullName
GetSystemInfo
TlsAlloc
DebugBreak
OutputDebugStringW
HeapAlloc
HeapFree
GetProcessHeap
GetLastError
InterlockedFlushSList
GetProcAddress
WaitForSingleObject
OpenSemaphoreW
CreateMutexExW
CreateSemaphoreExW
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleExW
LCMapStringEx
GlobalHandle
ResolveLocaleName
GetSystemDefaultLCID
LocaleNameToLCID
GetModuleFileNameW
GetThreadLocale
AcquireSRWLockShared
DecodePointer
SetFilePointer
CreateFileW
GetSystemDefaultLangID
IsValidCodePage
ReleaseSRWLockShared
AcquireSRWLockExclusive
GlobalSize
GetUserDefaultLCID
GlobalFlags
GlobalAlloc
GlobalFree
ReleaseSRWLockExclusive
GlobalLock
EncodePointer
GetModuleHandleW
InitOnceExecuteOnce
GetFileType
GlobalUnlock
FindAtomA
GlobalReAlloc
FormatMessageW
GetTickCount
CloseHandle
WriteFile
ReadFile
GetCurrentProcessId
InitOnceBeginInitialize
InitOnceComplete
ReleaseSemaphore
QueueUserWorkItem
CreateThreadpoolWork
GetModuleHandleA
SubmitThreadpoolWork
WaitForThreadpoolWorkCallbacks
GetCurrentThreadId
GetLocaleInfoW
CloseThreadpoolWork
FreeLibrary
CompareStringOrdinal
GetLocaleInfoEx
GetSystemDirectoryW
WideCharToMultiByte
GetStringTypeExW
LocalFree
GetCurrentProcess
TlsGetValue
TlsSetValue
CompareStringEx
LCIDToLocaleName
GetTickCount64
TlsFree
lstrcmpiA
RtlPcToFileHeader
ReleaseMutex
__C_specific_handler

gdi32

GetPixel
OffsetViewportOrgEx
GetViewportOrgEx
CreateICW
CreateFontIndirectW
DeleteObject
SetBkColor
GetEnhMetaFileHeader
EnumFontFamiliesExW
GetObjectW
SetMetaFileBitsEx
GetEnhMetaFileBits
SetTextAlign
CreateSolidBrush
EnumMetaFile
Polyline
DeleteDC
ExtTextOutW
GetObjectType
CreateBitmap
TranslateCharsetInfo
SetGraphicsMode
GetFontData
Rectangle
GetGlyphOutlineW
StretchDIBits
GetCharWidthW
SaveDC
GetWorldTransform
GetMetaFileBitsEx
CreateCompatibleBitmap
DeleteMetaFile
GdiFlush
CloseMetaFile
PatBlt
GetTextMetricsW
SetWindowOrgEx
RestoreDC
GdiAlphaBlend
GetDeviceCaps
GetCurrentObject
IntersectClipRect
SetWindowExtEx
CreateDIBSection
GetWinMetaFileBits
GetTextCharsetInfo
DeleteEnhMetaFile
CreatePatternBrush
GetBkColor
SetTextColor
TextOutW
BitBlt
CreatePalette
LineTo
SelectPalette
CreatePen
SetEnhMetaFileBits
GetKerningPairsA
CreateMetaFileA
CreateDCW
MoveToEx
RealizePalette
GetTextFaceW
GetOutlineTextMetricsW
GetStockObject
StretchBlt
DPtoLP
GetBkMode
SetBkMode
GetCharABCWidthsW
GetGlyphIndicesW
GetCharWidth32A
ExtTextOutA
CreateCompatibleDC
SelectObject

user32

RegisterClassExW
IsWindow
IsMenu
GetUpdateRect
EndMenu
GetPointerFrameInfoHistory
UpdateLayeredWindow
SetScrollInfo
DestroyWindow
IsWindowVisible
HideCaret
ScreenToClient
SetCaretPos
CreateCaret
ValidateRect
ScrollWindowEx
SetCapture
SetScrollRange
GetDlgItem
ShowCaret
SetScrollPos
UpdateWindow
ReleaseCapture
SetForegroundWindow
InvalidateRect
IsIconic
IsClipboardFormatAvailable
GetKeyState
GetAsyncKeyState
GetKeyboardLayoutNameW
GetKeyboardLayout
RegisterClipboardFormatW
GetWindowRect
SetTimer
SetCaretBlinkTime
MapWindowPoints
LoadBitmapW
LoadCursorW
SetCursor
GetClientRect
KillTimer
PtInRect
GetCursorPos
BeginPaint
EndPaint
CreateWindowExW
SetWindowPos
IsChild
RegisterWindowMessageW
GetMessagePos
GetMessageTime
CreatePopupMenu
TrackPopupMenu
ClientToScreen
WindowFromDC
DestroyMenu
EnableScrollBar
GetKeyboardLayoutList
FillRect
InvertRect
SetFocus
MessageBeep
AppendMenuW
GetClipboardOwner
OpenClipboard
LoadStringW
CloseClipboard
TrackPopupMenuEx
InsertMenuItemW
GetMenuItemInfoW
GetParent
EmptyClipboard
GetClipboardData
SetClipboardData
GetFocus
GetPointerInfo
ActivateKeyboardLayout
DestroyCaret
GetDC
GetWindowDC
SetRect
ReleaseDC
GetWindowLongW
DefWindowProcW
ShowScrollBar
PostMessageW
SetWindowLongPtrW
SendMessageW
GetSystemMetrics
UnregisterClassW
GetWindowLongPtrW
RegisterWindowMessageA
PeekMessageW
GetDoubleClickTime
GetSysColor
SendMessageA
SetWindowLongW
GetClassLongW
SystemParametersInfoW
IsWindowUnicode
GetScrollInfo
IsImmersiveProcess

ole32

CoWaitForMultipleHandles
CoCreateFreeThreadedMarshaler
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoReleaseMarshalData
CoInitializeEx
CoUninitialize
CoCreateInstance
CoTaskMemFree
PropVariantClear

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW
RoOriginateError

oleaut32

SysAllocStringByteLen
VariantClear
SysFreeString
VariantInit

advapi32

EventUnregister
RegQueryValueExW
RegGetValueW
RegCloseKey
EventSetInformation
RegEnumKeyExW
RegOpenKeyExW
EventRegister
RegOpenKeyExA
EventWriteTransfer
RegQueryValueExA

usp10

ScriptStringFree
ScriptTextOut
ScriptShape
ScriptString_pLogAttr
ScriptFreeCache
ScriptStringAnalyse
ScriptPlace
ScriptBreak
ScriptStringValidate
ScriptSubstituteSingleGlyph
ScriptGetLogicalWidths
ScriptItemize
ScriptGetProperties
ScriptGetCMap

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
__stdio_common_vsprintf_s
__stdio_common_vswprintf_s
__stdio_common_vswprintf

api-ms-win-crt-string-l1-1-0

strncmp
_wcsicmp
strnlen
wcsncmp
wcsncpy_s
wmemcpy_s
strncpy_s
strcpy_s
iswspace
wcsnlen
wcscpy_s

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_execute_onexit_table
_wassert
_register_onexit_function
_initialize_onexit_table
_errno
_invalid_parameter_noinfo
abort
_invalid_parameter_noinfo_noreturn
_initterm_e
_initialize_narrow_environment
_initterm
terminate
_configure_narrow_argv
_cexit
_seh_filter_dll

api-ms-win-crt-heap-l1-1-0

malloc
free
calloc
realloc
_callnewh

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-convert-l1-1-0

wcstod
_itow_s

api-ms-win-core-path-l1-1-0

PathCchAppend

elscore

MappingFreePropertyBag
MappingGetServices
MappingFreeServices
MappingRecognizeText

api-ms-win-crt-math-l1-1-0

pow
sqrt
ceilf

Exports

Exports

?LsAssert@Ptls6@@YAXH@Z
?LsCreateContext@Ptls6@@YAJPEBUlscontextinfo@1@PEAPEAUlscontext@1@@Z
?LsCreateLine@Ptls6@@YAJPEAUlscontext@1@PEAUlsparaclient@1@PEBUlspap@1@JPEBUlslinerestr@1@PEBUlsbreakrecline@1@PEAPEAU61@PEAUlslinfo@1@PEAPEAVCLsLine@1@@Z
?LsCreateLineGivenBreak@Ptls6@@YAJPEAUlscontext@1@PEAUlsparaclient@1@PEBUlspap@1@JPEBUlslinerestr@1@PEBUlsbreakrecline@1@JPEAPEAU61@PEAUlslinfo@1@PEAPEAVCLsLine@1@@Z
?LsCreateParaBreakingSession@Ptls6@@YAJPEAUlscontext@1@PEAUlsparaclient@1@PEBUlspap@1@JPEBUlsbreakrecline@1@PEAPEAUlsparabrksession@1@@Z
?LsDestroyBreakRecord@Ptls6@@YAJPEAUlscontext@1@PEAUlsbreakrecline@1@@Z
?LsDestroyContext@Ptls6@@YAJPEAUlscontext@1@@Z
?LsDestroyLine@Ptls6@@YAJPEAUlscontext@1@PEAVCLsLine@1@@Z
?LsDestroyParaBreakingSession@Ptls6@@YAJPEAUlsparabrksession@1@@Z
?LsDisplayLine@Ptls6@@YAJPEAVCLsLine@1@PEBUtagLSPOINT@1@IPEBUtagLSRECT@1@@Z
?LsDisplaySubline@Ptls6@@YAJPEAVILsSubline@1@HPEBUtagLSPOINT@1@IPEBUtagLSRECT@1@@Z
?LsDuplicateBreakRecord@Ptls6@@YAJPEAUlscontext@1@PEBUlsbreakrecline@1@PEAPEAU31@@Z
?LsEnumSubline@Ptls6@@YAJPEBVILsSubline@1@HHPEBUtagLSPOINT@1@@Z
?LsFindMasterSubline@Ptls6@@YAJPEAVCLsLine@1@Ulsspan_struct@1@PEAUtagLSPOINTUV@1@PEAPEAVILsSubline@1@@Z
?LsGetHihLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z
?LsGetLineBreaks@Ptls6@@YAJPEAUlsparabrksession@1@JPEBUlslinerestr@1@PEBUlsbreakrecline@1@PEAUtslinevariantrestriction@1@JPEAPEAU41@PEAUlslinfo@1@PEAPEAUtslinepenaltyinfo@1@PEAJ7@Z
?LsGetMathLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z
?LsGetMinMaxDurUntilHardBreak@Ptls6@@YAJPEAUlscontext@1@PEAUlsparaclient@1@PEBUlspap@1@JPEBUlslinerestr@1@PEBUlsbreakrecline@1@HPEAPEAU61@PEAUlslinfo@1@PEAPEAVCLsLine@1@PEAJ888@Z
?LsGetObjectName@Ptls6@@YA?AVLSNAMEEXP@1@PEBVCLsDnode@1@@Z
?LsGetPenaltyModule@Ptls6@@YAJPEAUlscontext@1@PEAPEAUtspenaltymodule@1@@Z
?LsGetReverseLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z
?LsGetRubyLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z
?LsGetStretchabilityForLine@Ptls6@@YAJPEAVCLsLine@1@PEAJ1@Z
?LsGetTatenakayokoLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z
?LsGetWarichuLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z
?LsLwMultDivR@Ptls6@@YAJJJJ@Z
?LsModifyLineHeight@Ptls6@@YAJPEAUlscontext@1@PEAVCLsLine@1@JJJJ@Z
?LsNotReached@Ptls6@@YAXXZ
?LsPointUV2FromPointUV1@Ptls6@@YAJKPEBUtagLSPOINTUV@1@0KPEAU21@@Z
?LsPointXYFromPointUV@Ptls6@@YAJPEBUtagLSPOINT@1@KPEBUtagLSPOINTUV@1@PEAU21@@Z
?LsQueryEnumAutonum@Ptls6@@YAJPEAVCLsObject@1@PEAPEAVILsSubline@1@@Z
?LsQueryEnumBorderDnode@Ptls6@@YAJPEAVCLsDnode@1@PEAUlsqednodeborderinfo@1@@Z
?LsQueryEnumDnode@Ptls6@@YAJPEAVCLsDnode@1@PEAUlsqednodeinfo@1@@Z
?LsQueryEnumFrontierDnode@Ptls6@@YAJPEAVCLsDnode@1@PEAUlsqednodefrontierinfo@1@@Z
?LsQueryEnumHih@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqeryhihinfo@1@@Z
?LsQueryEnumLine@Ptls6@@YAJPEAVCLsLine@1@PEAUlsqelineinfo@1@@Z
?LsQueryEnumMathAccent@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathaccentinfo@1@@Z
?LsQueryEnumMathBox@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathboxinfo@1@@Z
?LsQueryEnumMathBoxedFormula@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathboxedformulainfo@1@@Z
?LsQueryEnumMathDelimiters@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathdelimsinfo@1@@Z
?LsQueryEnumMathDelimitersWithSeparators@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathdelimsepinfo@1@@Z
?LsQueryEnumMathDelimitersWithSeparatorsPart@Ptls6@@YAJPEAUlsmathfunction@1@JPEAUlsqemathdelimseppartinfo@1@@Z
?LsQueryEnumMathEquation@Ptls6@@YAJPEAUlsmathfunction@1@JPEAUlsqemathequationinfo@1@@Z
?LsQueryEnumMathEquationArray@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqematheqarrayinfo@1@@Z
?LsQueryEnumMathFraction@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathfractioninfo@1@@Z
?LsQueryEnumMathFunctionApply@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathfunctionapplyinfo@1@@Z
?LsQueryEnumMathGeneral@Ptls6@@YAJPEAUlsmathgeneral@1@PEAUlsqemathgeneralinfo@1@@Z
?LsQueryEnumMathLeftSubSuperScript@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathleftsubsuperscriptinfo@1@@Z
?LsQueryEnumMathList@Ptls6@@YAJPEAUlsmathlist@1@PEAUlsqemathlistinfo@1@@Z
?LsQueryEnumMathLowerLimit@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathlowerliminfo@1@@Z
?LsQueryEnumMathMarshal@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqemathmarshalinfo@1@@Z
?LsQueryEnumMathMatrix@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathmatrixinfo@1@@Z
?LsQueryEnumMathMatrixCell@Ptls6@@YAJPEAUlsmathfunction@1@JJPEAUlsqemathmatrixcellinfo@1@@Z
?LsQueryEnumMathMatrixColumn@Ptls6@@YAJPEAUlsmathfunction@1@JPEAUlsqemathmatrixcolumninfo@1@@Z
?LsQueryEnumMathMatrixRow@Ptls6@@YAJPEAUlsmathfunction@1@JPEAUlsqemathmatrixrowinfo@1@@Z
?LsQueryEnumMathNaryOperator@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathnaryoperatorinfo@1@@Z
?LsQueryEnumMathOperatorCharacter@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathopcharinfo@1@@Z
?LsQueryEnumMathOverBar@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathoverbarinfo@1@@Z
?LsQueryEnumMathPhantom@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathphantominfo@1@@Z
?LsQueryEnumMathRadical@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathradicalinfo@1@@Z
?LsQueryEnumMathSlashedFraction@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathslashedfractioninfo@1@@Z
?LsQueryEnumMathStack@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathstackinfo@1@@Z
?LsQueryEnumMathStretchStack@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathstretchstackinfo@1@@Z
?LsQueryEnumMathSubScript@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathsubscriptinfo@1@@Z
?LsQueryEnumMathSubSuperScript@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathsubsuperscriptinfo@1@@Z
?LsQueryEnumMathSuperScript@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathsuperscriptinfo@1@@Z
?LsQueryEnumMathUnderBar@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathunderbarinfo@1@@Z
?LsQueryEnumMathUpperLimit@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathupperliminfo@1@@Z
?LsQueryEnumMathZone@Ptls6@@YAJPEAUlsmathzone@1@PEAUlsqemathzoneinfo@1@@Z
?LsQueryEnumPenDnode@Ptls6@@YAJPEAVCLsDnode@1@PEAUlsqednodepeninfo@1@@Z
?LsQueryEnumRealDnode@Ptls6@@YAJPEAVCLsDnode@1@PEAUlsqednoderealinfo@1@@Z
?LsQueryEnumReverse@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqeryreverseinfo@1@@Z
?LsQueryEnumRuby@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqerubyinfo@1@@Z
?LsQueryEnumTatenakayoko@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqetatenakinfo@1@@Z
?LsQueryEnumWarichu@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqerywarichuinfo@1@@Z
?LsQueryLineCpPpoint@Ptls6@@YAJPEAVCLsLine@1@JJPEAUlsqsubinfo@1@PEAJPEAUlstextcell@1@@Z
?LsQueryLineDown@Ptls6@@YAJPEAVCLsLine@1@JHJJPEAHPEAUlsqsubinfo@1@PEAJPEAUlstextcell@1@@Z
?LsQueryLineDup@Ptls6@@YAJPEAVCLsLine@1@PEAUlslinearea@1@@Z
?LsQueryLineMaxDepth@Ptls6@@YAJPEAVCLsLine@1@PEAJ@Z
?LsQueryLinePointPcp@Ptls6@@YAJPEAVCLsLine@1@PEBUtagLSPOINTUV@1@JPEAUlsqsubinfo@1@PEAJPEAUlstextcell@1@@Z
?LsQueryLineUp@Ptls6@@YAJPEAVCLsLine@1@JHJJPEAHPEAUlsqsubinfo@1@PEAJPEAUlstextcell@1@@Z
?LsQueryLineVisibleRectangle@Ptls6@@YAJPEAVCLsLine@1@PEAKPEAUtagLSRECT@1@@Z
?LsQuerySpanInfo@Ptls6@@YAJPEAVCLsLine@1@Ulsspan_struct@1@HJPEAUtagLSPOINTUV@1@PEAKPEAJ44444444444444444PEAUtagLSRECT@1@@Z
?LsQuerySpanTotalRelativeOffset@Ptls6@@YAJPEAVCLsLine@1@Ulsspan_struct@1@PEAUtagLSOFFSET@1@@Z
?LsQueryTextCellDetails@Ptls6@@YAJPEAVCLsLine@1@PEAUlscelldetails@1@JJJPEA_WPEAG3PEAJPEAUtagLSOFFSET@1@PEAK@Z
?LsSetDebugFlags@Ptls6@@YAJPEAUlscontext@1@K@Z
?LsTransformRectangle@Ptls6@@YAXKPEBUtagLSRECT@1@KPEBUtagLSPOINTUV@1@PEAU21@@Z
?LsUpdateBreakRecord@Ptls6@@YAJPEAUlscontext@1@PEAUlsbreakrecline@1@JJJJPEAH@Z
?LsdnDistribute@Ptls6@@YAJPEAVCLsDnode@1@0J@Z
?LsdnFinishByCurrentPosition@Ptls6@@YAJPEAVCLsDnode@1@PEAVILsObjectFormattingSession@1@PEAVCLsObject@1@AEBUOBJDIM@1@H@Z
?LsdnFinishSimple@Ptls6@@YAJPEAVCLsDnode@1@JPEAVCLsObject@1@PEBUOBJDIM@1@H@Z
?LsdnFinishWordRegular@Ptls6@@YAJPEAVCLsDnode@1@JPEAUlsrun@1@PEBUlschp@1@PEAVCLsObject@1@PEBUOBJDIM@1@HHH@Z
?LsdnFinishWordRegularAddAdvancePen@Ptls6@@YAJPEAVCLsDnode@1@JPEAUlsrun@1@PEBUlschp@1@PEAVCLsObject@1@PEBUOBJDIM@1@JJJHHH@Z
?LsdnGetDup@Ptls6@@YAJPEAVCLsDnode@1@PEAJ@Z
?LsdnModifyParaEnding@Ptls6@@YAJPEAVCLsDnode@1@W4_lskeop@1@@Z
?LsdnQueryPenNode@Ptls6@@YAJPEAVCLsDnode@1@PEAJ11@Z
?LsdnResetObjDim@Ptls6@@YAJPEAVCLsDnode@1@PEBUOBJDIM@1@@Z
?LsdnResetPenNode@Ptls6@@YAJPEAVCLsDnode@1@JJJ@Z
?LsdnSetAbsBaseLine@Ptls6@@YAJPEAVCLsDnode@1@J@Z
?LsdnSetRigidDup@Ptls6@@YAJPEAVCLsDnode@1@J@Z
?LsmsrvFIsOperator@Ptls6@@YAJ_WPEAHPEAW4_lsmathbehavior@1@@Z
?LsmsrvGetBreakingQualityForOperatorCharacter@Ptls6@@YAJ_WW4_lsmathbehavior@1@PEAHPEAW4_lsmathbreakquality@1@@Z
?LsmsrvGetBuildupClass@Ptls6@@YAJ_WPEAHPEAW4_lsmathservbuildupclass@1@@Z
?LsmsrvGetSpacing@Ptls6@@YAJJJPEBUlsmathstyle@1@PEAJ@Z
?LsmsrvGetSpacingClassAsDifferential@Ptls6@@YAJPEAJ@Z
?LsmsrvGetSpacingClassAsMathOp@Ptls6@@YAJPEAJ@Z
?LsmsrvGetSpacingClassAsSubformula@Ptls6@@YAJPEAJ@Z
?LsmsrvGetSpacingClassAsText@Ptls6@@YAJPEAJ@Z
?LsmsrvGetSpacingClassForOperatorCharacter@Ptls6@@YAJ_WW4_lsmathbehavior@1@PEAJ2@Z
?LsmsrvGetSpacingClassForRegularFunction@Ptls6@@YAJW4_lsmathfunctionname@1@W4_lsmathbehavior@1@PEAJ2@Z
?LssbDistributeInSubline@Ptls6@@YAJPEAVILsSubline@1@J@Z
?LssbFDoneDisplay@Ptls6@@YAJPEAVILsSubline@1@PEAH@Z
?LssbFDonePresSubline@Ptls6@@YAJPEAVILsSubline@1@PEAH@Z
?LssbGetDupSubline@Ptls6@@YAJPEBVILsSubline@1@PEAKPEAJ@Z
?LssbGetDurTrailInSubline@Ptls6@@YAJPEAVILsSubline@1@PEAJ@Z
?LssbGetDurTrailWithPensInSubline@Ptls6@@YAJPEAVILsSubline@1@PEAJ@Z
?LssbGetNumberDnodesInSubline@Ptls6@@YAJPEAVILsSubline@1@PEAJ@Z
?LssbGetObjDimSubline@Ptls6@@YAJPEBVILsSubline@1@PEAKPEAUOBJDIM@1@@Z
?LssbGetPlsrunsFromSubline@Ptls6@@YAJPEAVILsSubline@1@JPEAPEAUlsrun@1@@Z
?LssbGetVisibleDcpInSubline@Ptls6@@YAJPEAVILsSubline@1@PEAJ@Z
CreateTextServices
DisableOleinitCheck
DllGetActivationFactory
DllGetVersion
GetMathAlphanumeric
GetMathAlphanumericCode
IID_IRichEditOle
IID_IRichEditOleCallback
IID_IRicheditUiaNotificationOverrides
IID_IRicheditUiaOverrides
IID_IRicheditWindowlessAccessibility
IID_ITextDocument2
IID_ITextHost
IID_ITextHost2
IID_ITextServices
IID_ITextServices2
MathBuildDown
MathBuildUp
MathTranslate
RichEdit10ANSIWndProc
RichEditANSIWndProc
RichEditWndProc
SetCustomTextOutHandlerEx
SetTextServicesDpiCalculationOverride
ShutdownTextServices

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 446KB - Virtual size: 446KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WindowsAPICodePack.Shell.CommonFileDialogs.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\GitHub\CommonFileDialogs\src\CommonFileDialogs\obj\Release\net6.0-windows\WindowsAPICodePack.Shell.CommonFileDialogs.pdb

Sections

.text
Size: 488KB - Virtual size: 486KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WindowsAppRuntime.png
.png
WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dll
.dll windows:6 windows x64 arch:x64

26970099aedb6ceafc0d01f79fd527c4

Code Sign

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05/05/2022, 19:23

Not After

04/05/2023, 19:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

69:df:45:c2:4d:e0:3e:6b:d7:00:c6:c6:74:71:95:92:37:fd:98:a2:c8:8b:e5:f7:97:b8:fe:b7:91:ef:d6:12
Signer

Actual PE Digest

69:df:45:c2:4d:e0:3e:6b:d7:00:c6:c6:74:71:95:92:37:fd:98:a2:c8:8b:e5:f7:97:b8:fe:b7:91:ef:d6:12

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.pdb

Imports

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_narrow_environment
terminate
_configure_narrow_argv
_initterm_e
_seh_filter_dll
abort
_initialize_onexit_table
_cexit
_initterm

api-ms-win-crt-heap-l1-1-0

free
calloc

api-ms-win-crt-string-l1-1-0

wcsncmp

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WindowsAppSdk.AppxDeploymentExtensions.Desktop.dll
.dll windows:6 windows x64 arch:x64

063571b83ae0cc4b76adc95d925a463f

Code Sign

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05/05/2022, 19:23

Not After

04/05/2023, 19:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

54:aa:f2:09:57:34:91:02:19:fd:ff:2b:a5:ea:fc:79:79:50:da:e5:7f:e4:61:5c:ab:65:7b:39:6a:cb:2e:21
Signer

Actual PE Digest

54:aa:f2:09:57:34:91:02:19:fd:ff:2b:a5:ea:fc:79:79:50:da:e5:7f:e4:61:5c:ab:65:7b:39:6a:cb:2e:21

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

WindowsAppSdk.AppxDeploymentExtensions.Desktop.pdb

Imports

kernel32

IsDebuggerPresent
CloseHandle
ReleaseSemaphore
ReleaseMutex
WaitForSingleObjectEx
AcquireSRWLockExclusive
FormatMessageW
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryW
WaitForSingleObject
OpenSemaphoreW
GetCurrentThreadId
OutputDebugStringW
SetLastError
RtlUnwind
DecodePointer
ReleaseSRWLockExclusive
InitOnceBeginInitialize
GetCurrentProcessId
CreateMutexExW
InitOnceComplete
InitOnceExecuteOnce
CreateSemaphoreExW
LoadLibraryExW
FreeLibrary
TlsFree
EncodePointer
GetModuleFileNameA
GetModuleHandleExW
GetProcAddress
GetModuleHandleW
DebugBreak
TlsSetValue
TlsGetValue
GetLastError
TlsAlloc
InterlockedFlushSList
InterlockedPushEntrySList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LCMapStringEx
CompareStringEx
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetStringTypeW
WideCharToMultiByte
MultiByteToWideChar
GetFileInformationByHandleEx
AreFileApisANSI
SetFileInformationByHandle
SetFileAttributesW
GetFileAttributesExW
GetFileAttributesW
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
CreateFileW
CreateDirectoryW
LocalFree
FormatMessageA
GetLocaleInfoEx

advapi32

EventSetInformation
EventRegister
EventUnregister
EventWriteTransfer

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

api-ms-win-eventing-provider-l1-1-0

EventActivityIdControl

api-ms-win-core-string-l1-1-0

CompareStringOrdinal

api-ms-win-core-com-l1-1-0

CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW
RegQueryValueExW
RegDeleteValueW
RegEnumKeyExW
RegCloseKey
RegCopyTreeW
RegDeleteTreeW
RegGetValueW
RegCreateKeyExW
RegSetValueExW
RegOpenCurrentUser
RegDeleteKeyExW
RegQueryInfoKeyW

api-ms-win-core-registry-l1-1-1

RegSetKeyValueW

api-ms-win-core-sysinfo-l1-1-0

GetSystemDirectoryW

api-ms-win-core-processthreads-l1-1-0

OpenThreadToken
GetExitCodeProcess
GetCurrentThread
SetThreadToken
CreateProcessW

api-ms-win-core-psapi-l1-1-0

K32GetModuleFileNameExW

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameW

api-ms-win-appmodel-runtime-l1-1-0

PackageNameAndPublisherIdFromFamilyName

api-ms-win-crt-runtime-l1-1-0

_initterm
_errno
abort
_cexit
_invalid_parameter_noinfo_noreturn
terminate
_initterm_e
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_seh_filter_dll
_configure_narrow_argv
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vsnprintf_s

api-ms-win-crt-string-l1-1-0

_wcsdup
iswspace
wcsnlen
wcsncmp
strcpy_s
wcstok_s

api-ms-win-crt-convert-l1-1-0

wcstol

api-ms-win-crt-heap-l1-1-0

realloc
_callnewh
calloc
free
malloc

shell32

SHSetLocalizedName
SHGetKnownFolderPath

propsys

InitPropVariantFromStringVector

api-ms-win-crt-locale-l1-1-0

___mb_cur_max_func
___lc_codepage_func
_lock_locales
_unlock_locales
setlocale
___lc_locale_name_func
___lc_collate_cp_func
__pctype_func

oleaut32

SysFreeString
SysAllocString
GetErrorInfo
SysStringLen
SetErrorInfo

ole32

CoCreateFreeThreadedMarshaler

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
LoadExtensionRegistrationTable

Sections

.text
Size: 458KB - Virtual size: 457KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
af-ZA/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
af-ZA/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ar-SA/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ar-SA/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ar/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c0:e5:5f:0d:87:45:0f:07:77:87:6e:6d:cf:f3:bb:cd:96:48:a9:f9:21:6f:1d:3d:6e:eb:92:d7:fe:01:a5:1e
Signer

Actual PE Digest

c0:e5:5f:0d:87:45:0f:07:77:87:6e:6d:cf:f3:bb:cd:96:48:a9:f9:21:6f:1d:3d:6e:eb:92:d7:fe:01:a5:1e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
az-Latn-AZ/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
az-Latn-AZ/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bg-BG/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bg-BG/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bs-Latn-BA/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bs-Latn-BA/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ca-ES/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ca-ES/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ca/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d7:9d:62:8b:fd:8f:87:97:2a:74:30:f9:b4:20:5a:f2:bb:13:9a:ba:d3:08:a3:b0:8c:ac:e6:d3:15:0a:c6:02
Signer

Actual PE Digest

d7:9d:62:8b:fd:8f:87:97:2a:74:30:f9:b4:20:5a:f2:bb:13:9a:ba:d3:08:a3:b0:8c:ac:e6:d3:15:0a:c6:02

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
cs-CZ/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cs-CZ/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cs/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a0:02:31:12:ee:b8:30:1b:79:d1:8b:dd:67:3e:1a:58:01:7a:9f:63:e9:f1:f6:da:da:5a:0b:5d:7e:e0:0e:1f
Signer

Actual PE Digest

a0:02:31:12:ee:b8:30:1b:79:d1:8b:dd:67:3e:1a:58:01:7a:9f:63:e9:f1:f6:da:da:5a:0b:5d:7e:e0:0e:1f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
cy-GB/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cy-GB/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
da-DK/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
da-DK/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
da/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b4:f5:4c:53:b0:69:19:95:0a:c7:a8:f5:2b:4b:3e:74:de:6c:8d:f6:7f:d0:d9:7a:2b:5f:5f:97:f6:55:d9:d9
Signer

Actual PE Digest

b4:f5:4c:53:b0:69:19:95:0a:c7:a8:f5:2b:4b:3e:74:de:6c:8d:f6:7f:d0:d9:7a:2b:5f:5f:97:f6:55:d9:d9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dcompi.dll
.dll windows:10 windows x64 arch:x64

e33ce130897d487e393d14da9bf70d6c

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

75:95:bf:5f:df:35:6c:19:0f:bf:5e:50:b2:2a:f1:ec:37:df:2c:ca:52:17:a1:eb:1f:36:ce:1d:30:6d:87:d1
Signer

Actual PE Digest

75:95:bf:5f:df:35:6c:19:0f:bf:5e:50:b2:2a:f1:ec:37:df:2c:ca:52:17:a1:eb:1f:36:ce:1d:30:6d:87:d1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

dcompi.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

abort
_errno
_invalid_parameter_noinfo_noreturn
_invoke_watson
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
terminate
_execute_onexit_table
_crt_atexit
_cexit
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s
__stdio_common_vsprintf_s
__stdio_common_vswprintf
__stdio_common_vsnwprintf_s

api-ms-win-crt-math-l1-1-0

sqrt
ceilf
_finite
sin

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-string-l1-1-0

strncat_s
_wcsicmp_l
wcsncmp
_wcsicmp
wcsnlen
wcscpy_s
towlower
_wcsdup
wcsncpy_s
strcpy_s

api-ms-win-crt-heap-l1-1-0

malloc
realloc
_free_base
_calloc_base
free
_malloc_base

api-ms-win-crt-convert-l1-1-0

_wtof

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func
__pctype_func
___mb_cur_max_func
___lc_locale_name_func
_lock_locales
setlocale
_unlock_locales
___lc_collate_cp_func

marshal

LM_CloseSurfaceHandle
LM_CreateCompositionBuffer
LegacyMarshalerCloseCompositionInputSink
LegacyMarshalerDuplicateCompositionInputSink
LegacyMarshalerDestroyChannel
LegacyMarshalerCloseSectionHandle
LM_CreateTokenHandle
LM_CloseTokenHandle
LM_PresentCompositionBuffers
RaiseFailFastException
RaiseException
LegacyMarshalerSetChannelCommitCompletionEvent
LegacyMarshalerWaitForChannel
LegacyMarshalerCommitChannel
LegacyMarshalerProcessChannelBatchBuffer
LegacyMarshalerCreateChannel
LegacyMarshalerGetFrameStatistics
SetLastError
GetLastError
LegacyMarshalerInitialize
WideCharToMultiByte
LegacyMarshalerGetBatchId
LegacyMarshalerSynchronize
LegacyMarshalerSetChannelConnectionId
LegacyMarshalerCreateAndBindSharedSection
LegacyMarshalerGetDeletedResources
LegacyMarshalerReleaseAllResources

dwmcorei

LiftedCompositionEngine_Uninitialize
LiftedCompositionEngine_Initialize

kernel32

RtlLookupFunctionEntry
RtlUnwindEx
GetSystemInfo
LoadLibraryExA
VirtualProtect
VirtualQuery
InitializeSListHead
GetSystemTimeAsFileTime
SleepConditionVariableSRW
WakeAllConditionVariable
CompareStringEx
LCMapStringEx
InitializeCriticalSectionEx
GetStringTypeW
MultiByteToWideChar
GetCurrentThread
TerminateThread
TerminateProcess
QueryPerformanceCounter
HeapReAlloc
FreeLibrary
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
CompareStringOrdinal
InitializeSRWLock
CreateThreadpoolTimer
ResetEvent
SetEvent
CloseThreadpoolWait
WaitForThreadpoolWaitCallbacks
SetThreadpoolWait
InterlockedFlushSList
DuplicateHandle
RtlCaptureStackBackTrace
EncodePointer
InitOnceExecuteOnce
DecodePointer
VirtualFree
VirtualAlloc
GetNativeSystemInfo
InitOnceComplete
InitOnceBeginInitialize
CreateFileMappingW
CreateEventW
GetTickCount64
QueryPerformanceFrequency
InitializeCriticalSection
DeleteCriticalSection
GetCurrentProcess
MapViewOfFile
GetTickCount
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
DebugBreak
GetModuleHandleW
GetProcessHeap
GetCurrentProcessId
AcquireSRWLockShared
CreateMutexExW
GetProcAddress
HeapAlloc
ReleaseSRWLockShared
SetThreadpoolTimer
CloseHandle
OpenSemaphoreW
WaitForSingleObjectEx
AcquireSRWLockExclusive
CloseThreadpoolTimer
OutputDebugStringW
ReleaseSRWLockExclusive
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CreateThreadpoolWait
CreateEventExW
FormatMessageW
ReleaseMutex
GetCurrentThreadId
WaitForSingleObject
RtlPcToFileHeader
WaitForThreadpoolTimerCallbacks
GetModuleHandleExW
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
ReleaseSemaphore

user32

GetSystemMetrics
GetDC
MonitorFromWindow
GetMonitorInfoW
ReleaseDC

coremessagingxp

CoreMsgCreateSession
CoreUICallReceive
WinUIGetDispatcherQueueForCurrentThread
CoreUICallCreateConversationHost

microsoft.ui.composition.ossupport

UnsubscribeFeatureStateChangeNotification
GetFeatureVariant
TerminateProcessOnMemoryExhaustion
SubscribeFeatureStateChangeNotification
GetFeatureEnabledState
RecordFeatureUsage

api-ms-win-downlevel-advapi32-l1-1-0

RegQueryValueExW
RegCloseKey
RegOpenKeyExW
EventRegister
EventUnregister
EventWriteTransfer
AllocateLocallyUniqueId

api-ms-win-downlevel-ole32-l1-1-0

CoTaskMemAlloc
CoCreateFreeThreadedMarshaler
CoCreateInstance
CoGetApartmentType

api-ms-win-core-com-l1-1-1

RoGetAgileReference

api-ms-win-core-winrt-error-l1-1-0

GetRestrictedErrorInfo
RoTransformError
SetRestrictedErrorInfo
RoOriginateErrorW
RoOriginateError
RoFailFastWithErrorContext

api-ms-win-core-winrt-error-l1-1-1

IsErrorPropagationEnabled
RoReportFailedDelegate
RoGetMatchingRestrictedErrorInfo

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-winrt-string-l1-1-0

WindowsTrimStringEnd
WindowsGetStringLen
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateString
WindowsTrimStringStart
WindowsCreateStringReference
WindowsDuplicateString
WindowsSubstringWithSpecifiedLength
WindowsCompareStringOrdinal
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsConcatString

api-ms-win-eventing-provider-l1-1-0

EventSetInformation

ntdll

NtQuerySystemInformation
DbgPrintEx
RtlNumberGenericTableElements
RtlGetElementGenericTable
RtlLookupElementGenericTable
RtlInsertElementGenericTable
RtlEnumerateGenericTableWithoutSplaying
DbgPrompt
RtlInitializeGenericTable
RtlFreeHeap
RtlAllocateHeap
RtlCreateHeap
RtlDeleteElementGenericTable
RtlDestroyHeap
NtUnmapViewOfSection

d3d11

D3D11CreateDevice

dcomp

ord1040

microsoft.internal.frameworkudk

DxPrivates_WarpPrivateAPIFromDevice
DCompPrivates_CreateSharedVisualHandle
Windowing_GetMonitorFromDisplayId
DCompPrivates_OpenAndAttachSharedTarget
DxPrivates_SwapChainPartnerFromDxgiSwapChain
DxPrivates_PartnerDeviceFromDevice

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
WinUIDCompositionCreateDevice3

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 312KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
de-DE/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
de-DE/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
de/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

73:1b:15:f6:db:39:a3:be:11:e4:b6:4b:3e:fc:da:d6:f6:73:be:81:aa:fe:8f:1e:08:20:5c:0c:b0:94:b3:a2
Signer

Actual PE Digest

73:1b:15:f6:db:39:a3:be:11:e4:b6:4b:3e:fc:da:d6:f6:73:be:81:aa:fe:8f:1e:08:20:5c:0c:b0:94:b3:a2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dwmcorei.dll
.dll windows:10 windows x64 arch:x64

e75dfa8c9df6c906ea6d287f79988806

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ad:00:af:a6:ea:1a:cf:bc:0f:c7:29:58:6d:5b:8a:5a:e9:21:ed:7b:95:f6:d7:21:80:d5:38:2f:6a:df:c8:57
Signer

Actual PE Digest

ad:00:af:a6:ea:1a:cf:bc:0f:c7:29:58:6d:5b:8a:5a:e9:21:ed:7b:95:f6:d7:21:80:d5:38:2f:6a:df:c8:57

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

dwmcorei.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_errno
_seh_filter_dll
_configure_narrow_argv
_initterm_e
_invalid_parameter_noinfo
_initialize_narrow_environment
_initialize_onexit_table
_invoke_watson
_invalid_parameter_noinfo_noreturn
_register_onexit_function
terminate
abort
_cexit
_crt_atexit
_execute_onexit_table
_initterm

api-ms-win-crt-stdio-l1-1-0

puts
__stdio_common_vsprintf
__stdio_common_vswprintf
__stdio_common_vsprintf_s

api-ms-win-crt-heap-l1-1-0

free
_calloc_base
_free_base
malloc

api-ms-win-crt-convert-l1-1-0

strtoul

microsoft.ui.composition.ossupport

TerminateProcessOnMemoryExhaustion
RecordFeatureUsage
MicrosoftTelemetryAssertTriggeredNoArgs
GetFeatureEnabledState
UnsubscribeFeatureStateChangeNotification
SubscribeFeatureStateChangeNotification

marshal

LM_GetSurfaceInfo
LegacyMarshalerCloseSectionHandle
SetLastError
LegacyMarshalerGetFrameStatistics
LegacyMarshalerCloseCompositionInputSink
LegacyMarshalerDuplicateCompositionInputSink
LM_TokenManagerThread
GetLastError
LM_GetFrameSurfaceUpdates
LM_ValidateSurfaceHandle
LegacyMarshalerQueryCompositionInputIsImplicit
LM_CloseSurfaceHandle
LM_TokenManagerOpenSectionAndEvents
LM_TokenManagerDeleteAllTokens
LegacyMarshalerCreateConnection
LegacyMarshalerConfirmFrame
LegacyMarshalerBeginFrame
LegacyMarshalerGetConnectionBatch
LegacyMarshalerDestroyConnection
RaiseFailFastException
RaiseException
LegacyMarshalerQueryCompositionInputSinkLuid
LegacyMarshalerQueryCompositionInputQueueAndTransform
LegacyMarshalerQueryCompositionInputSink
LegacyMarshalerUpdateInputSinkTransforms

d2d1

ord5
ord2
ord1
ord3
ord4

d3d11

D3D11CreateDevice

d3dcompiler_47

D3DLoadModule
D3DCreateLinker
D3DCreateFunctionLinkingGraph
D3DCreateBlob

dxgi

CreateDXGIFactory1

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary
GetModuleFileNameA
LoadLibraryExA
GetModuleHandleExW
GetModuleHandleW
GetProcAddress

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection
CancelWaitableTimer
LeaveCriticalSection
ReleaseMutex
EnterCriticalSection
WaitForSingleObjectEx
ReleaseSRWLockExclusive
InitializeCriticalSection
CreateEventExW
OpenSemaphoreW
WaitForSingleObject
ReleaseSRWLockShared
CreateMutexExW
ReleaseSemaphore
AcquireSRWLockShared
SetWaitableTimerEx
SetEvent
CreateEventW
InitializeCriticalSectionEx
ResetEvent
CreateSemaphoreExW
AcquireSRWLockExclusive

api-ms-win-core-heap-l1-1-0

HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolTimer
CreateThreadpoolTimer
SubmitThreadpoolWork
WaitForThreadpoolTimerCallbacks
CloseThreadpoolWork
CreateThreadpoolWork
WaitForThreadpoolWorkCallbacks
CloseThreadpoolTimer

api-ms-win-core-processthreads-l1-1-0

GetThreadId
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetCurrentProcessId
TerminateThread
ProcessIdToSessionId
TerminateProcess
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
CreateThread
SetThreadPriority
ResumeThread

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

OutputDebugStringA
OutputDebugStringW
DebugBreak
IsDebuggerPresent

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventUnregister
EventRegister
EventEnabled
EventSetInformation
EventActivityIdControl

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-registry-l1-1-0

RegQueryValueExW
RegGetValueW
RegOpenKeyExW
RegCloseKey

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize
InitOnceComplete
Sleep
SleepConditionVariableSRW
WakeAllConditionVariable

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount
GetTickCount64

api-ms-win-core-interlocked-l1-1-0

QueryDepthSList
InitializeSListHead
InterlockedFlushSList
InterlockedPushEntrySList

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureStackBackTrace
RtlPcToFileHeader
RtlUnwindEx

api-ms-win-core-fibers-l1-1-0

FlsGetValue
FlsSetValue
FlsFree
FlsAlloc

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects
CreateWaitableTimerW

api-ms-win-core-realtime-l1-1-0

QueryThreadCycleTime

api-ms-win-core-memory-l1-1-0

VirtualProtect
UnmapViewOfFile
VirtualQuery
MapViewOfFile

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-power-setting-l1-1-0

PowerSettingRegisterNotification
PowerSettingUnregisterNotification

api-ms-win-core-string-l1-1-0

CompareStringOrdinal

api-ms-win-core-processthreads-l1-1-3

SetThreadDescription

api-ms-win-core-winrt-error-l1-1-0

GetRestrictedErrorInfo
SetRestrictedErrorInfo

microsoft.internal.frameworkudk

DCompPrivates_ResizeDCompositionSurface
DCompPrivates_CreateColorContent
DCompPrivates_OpenSharedDCompositionObject
DCompPrivates_CreateCompositionBatchQuery
DxPrivates_WarpPrivateAPIFromDevice

kernel32

GetVersionExW
PulseEvent
GetSystemInfo

user32

SystemParametersInfoW
GetSystemMetrics
DispatchMessageW
TranslateMessage
PeekMessageW
MsgWaitForMultipleObjects
IsGUIThread
GetPointerDeviceRects

gdi32

GetRegionData
DeleteObject

ntdll

DbgPrintEx
NtQuerySystemInformation
DbgPrompt
RtlInsertElementGenericTable
RtlInitializeGenericTable
RtlDeleteElementGenericTable
RtlLookupElementGenericTable
RtlGetDeviceFamilyInfoEnum
RtlEnumerateGenericTableWithoutSplaying

api-ms-win-dx-d3dkmt-l1-1-0

D3DKMTEscape
D3DKMTQueryAdapterInfo
D3DKMTCloseAdapter

api-ms-win-dx-d3dkmt-l1-1-1

D3DKMTOpenAdapterFromLuid

coremessagingxp

CoreUICallSend
CoreUICallReceive
CoreMsgCreateSession
CoreUICallCreateConversationHost
CoreUICallCreateEndpointHost

microsoft.inputstatemanager

StopAndEndInertia
NotifyInputSinkRemoved
DestroyInProcInputHost
SetManipulationInputTarget
RegisterManipulationThread
NotifyInputSinkParented
NotifyInputSinkTransformChanged
CreateInProcInputHost
AttachSystemInputSink

dcomp

DCompositionCreateDevice2

api-ms-win-crt-string-l1-1-0

strcpy_s

api-ms-win-crt-math-l1-1-0

_hypot
acos
acosf
asinf
atan2f
atanf
ceilf
cosf
exp
expf
_isnan
floorf
fmod
fmodf
log
log10f
logf
pow
powf
sin
fmaxf
floor
sinf
sqrt
modff
_finite
tanf
sqrtf
tan
fminf

api-ms-win-crt-utility-l1-1-0

qsort

Exports

Exports

LiftedCompositionEngine_Initialize
LiftedCompositionEngine_Uninitialize

Sections

.text
Size: 1.9MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 772KB - Virtual size: 769KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
el-GR/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
el-GR/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
el/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bc:74:65:bf:4a:34:59:f7:ef:bb:e7:a8:f6:8d:c5:4a:84:41:45:9d:8c:27:47:53:d3:00:13:3a:e8:50:70:75
Signer

Actual PE Digest

bc:74:65:bf:4a:34:59:f7:ef:bb:e7:a8:f6:8d:c5:4a:84:41:45:9d:8c:27:47:53:d3:00:13:3a:e8:50:70:75

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
en-GB/JiayiLauncher.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
en-GB/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
en-GB/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
en-us/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
en-us/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
es-ES/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
es-ES/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
es-MX/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
es-MX/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
es/JiayiLauncher.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
es/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c2:08:61:f8:4f:b7:da:99:72:4b:49:e1:95:00:e8:2c:bb:51:77:7d:49:ca:8d:35:d0:e7:22:9d:94:0e:1d:5f
Signer

Actual PE Digest

c2:08:61:f8:4f:b7:da:99:72:4b:49:e1:95:00:e8:2c:bb:51:77:7d:49:ca:8d:35:d0:e7:22:9d:94:0e:1d:5f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
et-EE/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
et-EE/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
eu-ES/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
eu-ES/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fa-IR/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fa-IR/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fi-FI/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fi-FI/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fi/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

10:15:a5:64:e1:4f:93:9e:b1:2b:20:e5:60:d5:00:0c:21:8a:1b:b3:23:67:82:4a:ce:33:f0:48:6c:32:53:c0
Signer

Actual PE Digest

10:15:a5:64:e1:4f:93:9e:b1:2b:20:e5:60:d5:00:0c:21:8a:1b:b3:23:67:82:4a:ce:33:f0:48:6c:32:53:c0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
fr-CA/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fr-CA/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fr-FR/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fr-FR/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fr/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

48:69:39:49:94:84:9d:39:34:6e:dc:1f:12:7e:0c:55:8b:9e:a4:82:d9:f9:fd:e7:37:f7:de:41:2e:de:55:53
Signer

Actual PE Digest

48:69:39:49:94:84:9d:39:34:6e:dc:1f:12:7e:0c:55:8b:9e:a4:82:d9:f9:fd:e7:37:f7:de:41:2e:de:55:53

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gl-ES/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
gl-ES/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
he-IL/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
he-IL/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
he/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7f:06:d2:49:ba:6f:4b:50:fb:9f:70:96:8c:72:d5:bf:bd:5b:a7:05:2e:35:32:b4:3f:10:f6:0c:19:19:e7:7d
Signer

Actual PE Digest

7f:06:d2:49:ba:6f:4b:50:fb:9f:70:96:8c:72:d5:bf:bd:5b:a7:05:2e:35:32:b4:3f:10:f6:0c:19:19:e7:7d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
hi-IN/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
hi-IN/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
hi/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4b:2d:c3:35:47:50:62:c4:d4:dc:3b:67:b5:11:bc:9f:57:76:64:89:a8:c5:02:a0:3c:af:81:db:b3:6e:71:d3
Signer

Actual PE Digest

4b:2d:c3:35:47:50:62:c4:d4:dc:3b:67:b5:11:bc:9f:57:76:64:89:a8:c5:02:a0:3c:af:81:db:b3:6e:71:d3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
hr-HR/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
hr-HR/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
hr/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ed:ba:21:b1:f9:d0:50:03:72:da:4d:c6:7d:95:61:e4:f3:11:44:d7:cc:dd:a5:34:d4:8e:df:24:9b:00:ca:7a
Signer

Actual PE Digest

ed:ba:21:b1:f9:d0:50:03:72:da:4d:c6:7d:95:61:e4:f3:11:44:d7:cc:dd:a5:34:d4:8e:df:24:9b:00:ca:7a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
hu-HU/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
hu-HU/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
hu/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

63:ad:bb:99:e7:64:6a:e2:a3:62:a2:38:a1:4c:b3:ca:00:cd:19:cf:35:04:4f:05:d7:c8:80:20:d2:46:76:9f
Signer

Actual PE Digest

63:ad:bb:99:e7:64:6a:e2:a3:62:a2:38:a1:4c:b3:ca:00:cd:19:cf:35:04:4f:05:d7:c8:80:20:d2:46:76:9f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
id-ID/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
id-ID/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
id/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e1:78:87:3f:20:5f:22:f2:f4:fb:55:9c:b2:d0:a4:a7:d2:ea:12:40:55:f9:86:a3:80:49:4a:c4:f4:41:df:c7
Signer

Actual PE Digest

e1:78:87:3f:20:5f:22:f2:f4:fb:55:9c:b2:d0:a4:a7:d2:ea:12:40:55:f9:86:a3:80:49:4a:c4:f4:41:df:c7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
is-IS/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
is-IS/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
it-IT/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
it-IT/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
it/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c6:a5:6f:b1:ca:29:d0:1f:a6:66:10:e4:dd:25:d3:61:8a:94:2d:62:89:1b:63:60:d6:8b:d7:75:b2:41:21:5b
Signer

Actual PE Digest

c6:a5:6f:b1:ca:29:d0:1f:a6:66:10:e4:dd:25:d3:61:8a:94:2d:62:89:1b:63:60:d6:8b:d7:75:b2:41:21:5b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ja-JP/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ja-JP/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ja/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f4:e7:b2:b0:53:85:04:9e:f9:c2:7d:15:b9:42:63:67:ad:fd:45:19:bd:5a:66:9e:42:8b:d4:55:3f:2e:4c:e3
Signer

Actual PE Digest

f4:e7:b2:b0:53:85:04:9e:f9:c2:7d:15:b9:42:63:67:ad:fd:45:19:bd:5a:66:9e:42:8b:d4:55:3f:2e:4c:e3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ka-GE/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ka-GE/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
kk-KZ/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
kk-KZ/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ko-KR/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ko-KR/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ko/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7a:ad:89:f5:2d:f6:8d:cc:24:00:bd:b0:0e:8a:d7:44:aa:5e:44:7e:6d:bc:fd:f6:16:1b:63:18:9f:88:db:7f
Signer

Actual PE Digest

7a:ad:89:f5:2d:f6:8d:cc:24:00:bd:b0:0e:8a:d7:44:aa:5e:44:7e:6d:bc:fd:f6:16:1b:63:18:9f:88:db:7f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lt-LT/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lt-LT/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lv-LV/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lv-LV/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
marshal.dll
.dll windows:10 windows x64 arch:x64

6a0faadcf51fface9154e26a69c52205

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7f:e3:54:8d:46:e1:82:fd:c1:26:b8:ab:58:5f:fc:c2:c5:3a:0f:c9:00:4f:c6:ac:5a:9f:e2:d2:a8:a9:09:a6
Signer

Actual PE Digest

7f:e3:54:8d:46:e1:82:fd:c1:26:b8:ab:58:5f:fc:c2:c5:3a:0f:c9:00:4f:c6:ac:5a:9f:e2:d2:a8:a9:09:a6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

marshal.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_invoke_watson
_errno
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
terminate
abort
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf

api-ms-win-crt-heap-l1-1-0

_calloc_base
_free_base
free
malloc
calloc

api-ms-win-crt-convert-l1-1-0

_wcstoui64

microsoft.ui.composition.ossupport

ZwOpenKey
ExUuidCreate
RtlDeleteElementGenericTable_Onecore
RtlInsertElementGenericTable_Onecore
RtlLookupElementGenericTable_Onecore
RtlEnumerateGenericTableWithoutSplaying_Onecore
RtlInitializeGenericTable_Onecore
InterlockedFlushSList_Winbase
ZwQueryValueKey
InterlockedPushEntrySList_Winbase
NtQueryObject_Ntdll
WideCharToMultiByte_Winbase
GetLastError_Winbase
SetLastError_Winbase
RaiseException_Winbase
RaiseFailFastException_Winbase
UnhandledExceptionFilter_Winbase
SetUnhandledExceptionFilter_Winbase
InitializeSListHead_Winbase
InterlockedPopEntrySList_Winbase

api-ms-win-ntuser-rectangle-l1-1-0

OffsetRect
UnionRect

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress
GetModuleHandleW
GetModuleHandleExW
GetModuleFileNameA

api-ms-win-core-heap-l1-1-0

HeapAlloc
GetProcessHeap
HeapFree

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionEx
DeleteCriticalSection
CreateEventW
CreateEventExW
OpenSemaphoreW
WaitForSingleObjectEx
ReleaseMutex
WaitForSingleObject
ReleaseSemaphore
CreateSemaphoreExW
ReleaseSRWLockExclusive
InitializeSRWLock
ResetEvent
AcquireSRWLockExclusive
SetEvent
TryAcquireSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
CreateMutexExW

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-handle-l1-1-0

DuplicateHandle
CloseHandle

api-ms-win-core-sysinfo-l1-2-0

GetSystemTimePreciseAsFileTime

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-rtlsupport-l1-1-0

RtlUnwindEx
RtlCaptureStackBackTrace
RtlPcToFileHeader
RtlLookupFunctionEntry

api-ms-win-security-base-l1-1-0

AllocateLocallyUniqueId

api-ms-win-core-fibers-l1-1-0

FlsSetValue
FlsGetValue
FlsFree
FlsAlloc

api-ms-win-core-util-l1-1-0

EncodePointer

api-ms-win-core-memory-l1-1-0

CreateFileMappingW
UnmapViewOfFile
MapViewOfFile

gdi32

CreateRectRgnIndirect
ExtCreateRegion

api-ms-win-crt-string-l1-1-0

strnlen
memcpy_s
strcpy_s

api-ms-win-crt-math-l1-1-0

_finite
ceilf

Exports

Exports

GetLastError
LM_CloseSurfaceHandle
LM_CloseTokenHandle
LM_CreateCompositionBuffer
LM_CreateTokenHandle
LM_GetFrameSurfaceUpdates
LM_GetSurfaceInfo
LM_OpenCompositionBuffer
LM_PresentCompositionBuffers
LM_TokenManagerDeleteAllTokens
LM_TokenManagerOpenSectionAndEvents
LM_TokenManagerThread
LM_ValidateSurfaceHandle
LegacyMarshalerBeginFrame
LegacyMarshalerCloseCompositionInputSink
LegacyMarshalerCloseSectionHandle
LegacyMarshalerCommitChannel
LegacyMarshalerConfirmFrame
LegacyMarshalerCreateAndBindSharedSection
LegacyMarshalerCreateChannel
LegacyMarshalerCreateCompositionInputSink
LegacyMarshalerCreateConnection
LegacyMarshalerCreateImplicitCompositionInputSink
LegacyMarshalerDestroyChannel
LegacyMarshalerDestroyConnection
LegacyMarshalerDuplicateCompositionInputSink
LegacyMarshalerGetBatchId
LegacyMarshalerGetConnectionBatch
LegacyMarshalerGetDeletedResources
LegacyMarshalerGetFrameStatistics
LegacyMarshalerInitialize
LegacyMarshalerProcessChannelBatchBuffer
LegacyMarshalerQueryCompositionInputIsImplicit
LegacyMarshalerQueryCompositionInputQueueAndTransform
LegacyMarshalerQueryCompositionInputSink
LegacyMarshalerQueryCompositionInputSinkLuid
LegacyMarshalerQueryCompositionInputSinkViewId
LegacyMarshalerReleaseAllResources
LegacyMarshalerSetChannelCommitCompletionEvent
LegacyMarshalerSetChannelConnectionId
LegacyMarshalerSynchronize
LegacyMarshalerUpdateInputSinkTransforms
LegacyMarshalerWaitForChannel
RaiseException
RaiseFailFastException
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WideCharToMultiByte

Sections

.text
Size: 380KB - Virtual size: 379KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ms-MY/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ms-MY/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ms/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e8:96:45:0e:33:07:09:fa:de:ba:f5:80:47:cf:54:ee:e7:d0:4a:11:fb:15:df:4c:be:d6:0d:b9:b3:68:9b:62
Signer

Actual PE Digest

e8:96:45:0e:33:07:09:fa:de:ba:f5:80:47:cf:54:ee:e7:d0:4a:11:fb:15:df:4c:be:d6:0d:b9:b3:68:9b:62

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
nb-NO/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
nb-NO/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
nb/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a6:e0:3d:dc:6c:1d:70:4f:a5:42:85:93:e1:85:3c:c2:c2:ad:4d:e7:25:20:93:70:dd:40:25:20:e8:a2:0c:2c
Signer

Actual PE Digest

a6:e0:3d:dc:6c:1d:70:4f:a5:42:85:93:e1:85:3c:c2:c2:ad:4d:e7:25:20:93:70:dd:40:25:20:e8:a2:0c:2c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
nl-NL/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
nl-NL/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
nl/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

40:22:de:bd:65:7f:e6:f7:f4:b5:b3:be:81:13:e9:55:e4:8c:73:ed:df:3c:25:69:77:6e:a2:89:2f:00:3e:a7
Signer

Actual PE Digest

40:22:de:bd:65:7f:e6:f7:f4:b5:b3:be:81:13:e9:55:e4:8c:73:ed:df:3c:25:69:77:6e:a2:89:2f:00:3e:a7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
nn-NO/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
nn-NO/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pl-PL/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pl-PL/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pl/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

80:a0:f6:65:86:83:ce:0b:f1:50:84:b8:18:57:64:e6:31:a3:c3:cb:32:0b:fb:10:39:f1:57:07:43:a3:64:fa
Signer

Actual PE Digest

80:a0:f6:65:86:83:ce:0b:f1:50:84:b8:18:57:64:e6:31:a3:c3:cb:32:0b:fb:10:39:f1:57:07:43:a3:64:fa

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
pt-BR/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ab:cd:3e:03:f6:76:82:75:bc:70:98:bb:00:c2:76:e5:45:db:9e:1a:2c:e8:ba:5d:da:56:29:dd:e9:ae:1e:e3
Signer

Actual PE Digest

ab:cd:3e:03:f6:76:82:75:bc:70:98:bb:00:c2:76:e5:45:db:9e:1a:2c:e8:ba:5d:da:56:29:dd:e9:ae:1e:e3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
pt-BR/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pt-BR/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pt-PT/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pt-PT/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pt/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6e:56:33:28:ab:e5:c7:77:62:52:eb:14:ac:99:f9:b7:4c:ef:bc:d9:42:3a:18:58:eb:cb:9e:16:5e:85:7b:5b
Signer

Actual PE Digest

6e:56:33:28:ab:e5:c7:77:62:52:eb:14:ac:99:f9:b7:4c:ef:bc:d9:42:3a:18:58:eb:cb:9e:16:5e:85:7b:5b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources.pri
ro-RO/JiayiLauncher.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ro-RO/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ro-RO/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ro/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

17:d0:18:24:a6:7d:50:4f:4e:d5:0f:56:ff:91:ee:e3:82:ee:c1:4b:69:6c:73:bc:e5:46:3c:f0:45:b4:6e:fd
Signer

Actual PE Digest

17:d0:18:24:a6:7d:50:4f:4e:d5:0f:56:ff:91:ee:e3:82:ee:c1:4b:69:6c:73:bc:e5:46:3c:f0:45:b4:6e:fd

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ru-RU/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ru-RU/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ru/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d8:74:f3:45:fa:9a:88:8b:08:39:4a:16:49:15:03:c3:f0:dd:de:e8:91:59:a5:80:12:2c:4c:ad:4b:e2:e9:e8
Signer

Actual PE Digest

d8:74:f3:45:fa:9a:88:8b:08:39:4a:16:49:15:03:c3:f0:dd:de:e8:91:59:a5:80:12:2c:4c:ad:4b:e2:e9:e8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sk-SK/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sk-SK/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sk/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

13:3f:f9:a4:01:d3:11:9b:5f:c3:39:d5:60:90:30:58:0c:53:e2:68:30:3e:29:b0:80:60:03:d7:97:ac:6b:1c
Signer

Actual PE Digest

13:3f:f9:a4:01:d3:11:9b:5f:c3:39:d5:60:90:30:58:0c:53:e2:68:30:3e:29:b0:80:60:03:d7:97:ac:6b:1c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sl-SI/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sl-SI/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sq-AL/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sq-AL/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sr-Cyrl-RS/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sr-Cyrl-RS/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sr-Latn-RS/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sr-Latn-RS/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sv-SE/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sv-SE/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sv/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1c:f1:a6:0b:fe:86:ee:84:b4:ae:f4:a3:71:29:03:16:79:be:98:63:ba:7d:22:c2:9a:10:41:33:d7:76:07:66
Signer

Actual PE Digest

1c:f1:a6:0b:fe:86:ee:84:b4:ae:f4:a3:71:29:03:16:79:be:98:63:ba:7d:22:c2:9a:10:41:33:d7:76:07:66

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
th-TH/JiayiLauncher.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
th-TH/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
th-TH/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
th/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

96:0c:3b:76:dc:f3:5f:54:be:54:07:7c:fe:de:4e:96:36:57:7c:f0:77:81:41:c6:ee:cc:d9:29:3e:1c:66:fc
Signer

Actual PE Digest

96:0c:3b:76:dc:f3:5f:54:be:54:07:7c:fe:de:4e:96:36:57:7c:f0:77:81:41:c6:ee:cc:d9:29:3e:1c:66:fc

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tr-TR/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
tr-TR/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
tr/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

97:6c:b3:ed:08:e4:dd:01:d9:75:23:b3:41:98:b8:24:f9:bd:56:65:ae:2a:6f:d0:41:ea:9f:dc:35:41:4f:4c
Signer

Actual PE Digest

97:6c:b3:ed:08:e4:dd:01:d9:75:23:b3:41:98:b8:24:f9:bd:56:65:ae:2a:6f:d0:41:ea:9f:dc:35:41:4f:4c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
uk-UA/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
uk-UA/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
uk/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f2:e7:49:d4:b1:c1:05:a0:0e:3a:4b:4d:e5:05:34:8f:7e:94:11:78:fa:4d:d8:80:0a:88:23:54:37:95:a0:93
Signer

Actual PE Digest

f2:e7:49:d4:b1:c1:05:a0:0e:3a:4b:4d:e5:05:34:8f:7e:94:11:78:fa:4d:d8:80:0a:88:23:54:37:95:a0:93

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vi-VN/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vi-VN/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vi/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a4:26:79:cb:7b:20:4f:c7:97:68:5b:54:8c:a1:cf:87:60:1c:fc:3f:6c:fc:39:f4:65:07:c3:9a:7a:f6:91:30
Signer

Actual PE Digest

a4:26:79:cb:7b:20:4f:c7:97:68:5b:54:8c:a1:cf:87:60:1c:fc:3f:6c:fc:39:f4:65:07:c3:9a:7a:f6:91:30

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wuceffectsi.dll
.dll windows:10 windows x64 arch:x64

3db229e7f85e0e8798e892c9fa9e985d

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:bf:c9:f9:a4:bc:81:11:9e:f2:8e:c2:16:95:3c:53:1d:47:1d:fe:d4:f9:29:af:d9:25:39:71:f6:bd:75:7b
Signer

Actual PE Digest

0a:bf:c9:f9:a4:bc:81:11:9e:f2:8e:c2:16:95:3c:53:1d:47:1d:fe:d4:f9:29:af:d9:25:39:71:f6:bd:75:7b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

wuceffectsi.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo
_errno
_invalid_parameter_noinfo_noreturn
terminate
_beginthreadex
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
abort

api-ms-win-crt-string-l1-1-0

strcpy_s
iswspace
_wcsicmp
strcmp
_wcsicmp_l

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s
__stdio_common_vsnprintf_s
__stdio_common_vswprintf

api-ms-win-crt-locale-l1-1-0

_create_locale

api-ms-win-crt-convert-l1-1-0

_ltoa_s
_itoa_s

api-ms-win-crt-heap-l1-1-0

free
malloc
_calloc_base
_free_base

microsoft.ui.composition.ossupport

TerminateProcessOnMemoryExhaustion

kernel32

RaiseFailFastException
InitOnceBeginInitialize
InitOnceComplete
InitializeSRWLock
TryAcquireSRWLockExclusive
GetExitCodeThread
Sleep
InitializeSListHead
GetSystemTimeAsFileTime
RtlPcToFileHeader
WakeConditionVariable
InitializeConditionVariable
InterlockedFlushSList
InterlockedPushEntrySList
InitializeCriticalSectionEx
QueryPerformanceFrequency
GetSystemTimePreciseAsFileTime
FlsFree
FlsSetValue
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
SetLastError
ReleaseSemaphore
GetModuleHandleExW
WaitForSingleObject
GetCurrentThreadId
ReleaseMutex
FormatMessageW
GetLastError
OutputDebugStringW
WaitForSingleObjectEx
OpenSemaphoreW
CloseHandle
HeapAlloc
GetProcAddress
CreateMutexExW
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
DebugBreak
IsDebuggerPresent
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryW
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
FindResourceA
LoadResource
LockResource
SizeofResource
RaiseException
DecodePointer
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitOnceExecuteOnce
EncodePointer
ReleaseSRWLockShared
AcquireSRWLockShared
QueryPerformanceCounter
RtlCaptureStackBackTrace
FlsGetValue
TerminateProcess
GetCurrentProcess
TerminateThread
GetCurrentThread
WakeAllConditionVariable
SleepConditionVariableSRW
RtlLookupFunctionEntry
RtlUnwindEx
FlsAlloc
MultiByteToWideChar

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW
RoOriginateError

api-ms-win-core-winrt-string-l1-1-0

WindowsStringHasEmbeddedNull
WindowsSubstringWithSpecifiedLength
WindowsIsStringEmpty
WindowsCreateString
WindowsDuplicateString
WindowsDeleteString
WindowsCreateStringReference
WindowsGetStringRawBuffer

api-ms-win-core-com-l1-1-0

CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoCreateFreeThreadedMarshaler

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

ntdll

DbgPrompt
NtQuerySystemInformation
DbgPrintEx

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventSetInformation
EventRegister
EventUnregister

oleaut32

SysStringLen
SysFreeString
SysAllocString
GetErrorInfo
SetErrorInfo

api-ms-win-crt-math-l1-1-0

cos
sinf
sqrtf
powf
ceilf
cosf

Exports

Exports

CompileEffectDescription
CreateEffectDescription
DeserializeEffectDescription
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
SerializeEffectDescription

Sections

.text
Size: 276KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wwwroot/JiayiLauncher.styles.css
wwwroot/_content/Blazored.Modal/Blazored.Modal.bundle.scp.css
wwwroot/_content/Blazored.Modal/BlazoredModal.razor.js
.js
wwwroot/_content/Blazored.Toast/Blazored.Toast.bundle.scp.css
wwwroot/css/app.css
wwwroot/css/theme.css
wwwroot/images/discord.svg
wwwroot/images/drag.svg
wwwroot/images/github.svg
wwwroot/images/logo.png
.png
wwwroot/index.html
zh-CN/JiayiLauncher.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
zh-CN/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
zh-CN/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
zh-HK/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c0:4f:30:4b:0c:33:d6:69:e0:77:8e:41:a0:0d:20:51:f3:6c:27:28:00:f7:b8:c9:ba:34:c5:cf:86:a4:6e:47
Signer

Actual PE Digest

c0:4f:30:4b:0c:33:d6:69:e0:77:8e:41:a0:0d:20:51:f3:6c:27:28:00:f7:b8:c9:ba:34:c5:cf:86:a4:6e:47

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
zh-Hans/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3b:ec:6e:fb:5d:2e:82:12:68:67:56:b3:f2:c7:0f:31:26:bc:9c:0f:d3:7f:0b:df:e0:5a:7e:4c:51:54:bb:ce
Signer

Actual PE Digest

3b:ec:6e:fb:5d:2e:82:12:68:67:56:b3:f2:c7:0f:31:26:bc:9c:0f:d3:7f:0b:df:e0:5a:7e:4c:51:54:bb:ce

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
zh-Hant/Microsoft.Maui.Controls.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:ae:2d:35:51:c8:53:8f:55:1d:00:00:00:00:03:ae
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:08

Not After

14/11/2024, 19:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:79:ae:7b:ab:0e:da:48:3c:39:aa:1d:93:7f:c1:b5:60:26:2d:ed:b9:1c:a6:59:49:e4:d6:eb:ed:5b:08:25
Signer

Actual PE Digest

03:79:ae:7b:ab:0e:da:48:3c:39:aa:1d:93:7f:c1:b5:60:26:2d:ed:b9:1c:a6:59:49:e4:d6:eb:ed:5b:08:25

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
zh-TW/JiayiLauncher.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
zh-TW/Microsoft.UI.Xaml.Phone.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
zh-TW/Microsoft.ui.xaml.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: JiayiLauncherVirusTest

Password: JiayiLauncherVirusTest

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 88KB - Virtual size: 87KB

.data Size: 12KB - Virtual size: 10KB

.reloc Size: 4KB - Virtual size: 624B

Password: JiayiLauncherVirusTest

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 72KB - Virtual size: 71KB

.data Size: 8KB - Virtual size: 7KB

.reloc Size: 4KB - Virtual size: 508B

Password: JiayiLauncherVirusTest

6305853c9e0ba4de7f0aa7cc83fd57cb

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4dCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

72:e7:7d:77:d6:fe:1e:b9:ac:dc:26:de:de:31:7e:f5:6c:97:85:ef:44:eb:1a:75:57:13:c7:f9:ac:ee:56:b4Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-fibers-l1-1-0

api-ms-win-core-util-l1-1-0

kernel32

advapi32

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-core-winrt-error-l1-1-0

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-winrt-error-l1-1-1

api-ms-win-core-delayload-l1-1-1

api-ms-win-core-delayload-l1-1-0

api-ms-win-core-string-l1-1-0

ntdll

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-utility-l1-1-0

Exports

Exports

Sections

.text Size: 672KB - Virtual size: 669KB

.rdata Size: 252KB - Virtual size: 249KB

.data Size: 4KB - Virtual size: 7KB

.pdata Size: 44KB - Virtual size: 41KB

.didat Size: 4KB - Virtual size: 224B

.rsrc Size: 40KB - Virtual size: 37KB

.reloc Size: 12KB - Virtual size: 10KB

Password: JiayiLauncherVirusTest

dc9892f71cc7676fad6e14df5cfd5544

Code Sign

.text
Size: 88KB - Virtual size: 87KB

.data
Size: 12KB - Virtual size: 10KB

.reloc
Size: 4KB - Virtual size: 624B

.text
Size: 72KB - Virtual size: 71KB

.data
Size: 8KB - Virtual size: 7KB

.reloc
Size: 4KB - Virtual size: 508B

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

72:e7:7d:77:d6:fe:1e:b9:ac:dc:26:de:de:31:7e:f5:6c:97:85:ef:44:eb:1a:75:57:13:c7:f9:ac:ee:56:b4
Signer

.text
Size: 672KB - Virtual size: 669KB

.rdata
Size: 252KB - Virtual size: 249KB

.data
Size: 4KB - Virtual size: 7KB

.pdata
Size: 44KB - Virtual size: 41KB

.didat
Size: 4KB - Virtual size: 224B

.rsrc
Size: 40KB - Virtual size: 37KB

.reloc
Size: 12KB - Virtual size: 10KB

33:00:00:02:cd:f3:64:bf:f8:d4:4c:5d:51:00:00:00:00:02:cd
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

8b:82:0b:38:0b:8a:0a:30:42:68:ed:c8:b7:6a:1f:94:68:bd:53:e7:81:af:88:df:31:e1:7f:dc:17:df:c8:0b
Signer

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 9KB - Virtual size: 17KB

.pdata
Size: 82KB - Virtual size: 81KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 12KB - Virtual size: 11KB

.text
Size: 148KB - Virtual size: 147KB

.data
Size: 12KB - Virtual size: 9KB

.reloc
Size: 4KB - Virtual size: 732B

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

53:45:51:3f:e5:fe:ca:8e:10:a9:ea:28:ab:7f:9b:22:dc:e5:48:10:00:d4:44:34:18:72:8a:1d:6c:e1:cd:9a
Signer