c:\DAX325\UI\UWP\x64\Release\DAXRPCClient\DAXRPCClient.pdb
Static task
static1
General
-
Target
intoput.rar
-
Size
4.2MB
-
MD5
0757c5e7873e28624b948fb5c4e346e9
-
SHA1
359eda453ad4837ff8ef1e7e1c9cfb5acd1ab360
-
SHA256
94ec6d15c7a33cf91aae3fe0fc07d1c8cf04b1aef5d5617a5b3699afa50a8df0
-
SHA512
8cb648610c911231805dada729b7ec0adbf8d61e72b05c6ca4370fec6605e17353cfb98a1e3854c584ab9b66161d42919501e447365b32e52f798758ddc8c774
-
SSDEEP
98304:akJL323RNVqbMQ03LA1Nu9w0ebcBtEpTUmOERuJ1VZvO3dt6D0w:93wqIQ03LKNu9LtXEpsER2sdw0w
Malware Config
Signatures
-
Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack002/DAX.winmd unpack002/DAXRPCClient.dll unpack002/DAXUIDolbyAudio.dll unpack002/DAXUIDolbyAudio.exe
Files
-
intoput.rar.rar
-
intoput/App/win10x64.Appx.appx
-
AppxBlockMap.xml.xml
-
AppxManifest.xml
-
AppxMetadata/CodeIntegrity.cat
-
AppxSignature.p7x
-
Assets/SplashScreen.scale-100.png.png
-
Assets/SplashScreen.scale-200.png.png
-
Assets/SplashScreen.scale-400.png.png
-
Assets/Square150x150Logo.scale-100.png.png
-
Assets/Square150x150Logo.scale-200.png.png
-
Assets/Square150x150Logo.scale-400.png.png
-
Assets/Square310x310Logo.scale-100.png.png
-
Assets/Square310x310Logo.scale-200.png.png
-
Assets/Square310x310Logo.scale-400.png.png
-
Assets/Square44x44Logo.altform-unplated_targetsize-16.png.png
-
Assets/Square44x44Logo.altform-unplated_targetsize-24.png.png
-
Assets/Square44x44Logo.altform-unplated_targetsize-48.png.png
-
Assets/Square44x44Logo.scale-100.png.png
-
Assets/Square44x44Logo.scale-125.png.png
-
Assets/Square44x44Logo.scale-200.png.png
-
Assets/Square44x44Logo.targetsize-16.png.png
-
Assets/Square44x44Logo.targetsize-24.png.png
-
Assets/Square44x44Logo.targetsize-48.png.png
-
Assets/Square71x71Logo.scale-100.png.png
-
Assets/Square71x71Logo.scale-200.png.png
-
Assets/Square71x71Logo.scale-400.png.png
-
Assets/StoreLogo.scale-100.png.png
-
Assets/StoreLogo.scale-125.png.png
-
Assets/StoreLogo.scale-150.png.png
-
Assets/StoreLogo.scale-200.png.png
-
Assets/StoreLogo.scale-400.png.png
-
Assets/Wide310x150Logo.scale-100.png.png
-
Assets/Wide310x150Logo.scale-200.png.png
-
Assets/Wide310x150Logo.scale-400.png.png
-
DAX.winmd.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
DAXRPCClient.dll.dll windows:6 windows x64 arch:x64
1d8634e304a0bbe07c11a48688bc646f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
oleaut32
LPSAFEARRAY_UserSize64
BSTR_UserSize64
BSTR_UserFree64
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserUnmarshal64
BSTR_UserMarshal
BSTR_UserUnmarshal
LPSAFEARRAY_UserMarshal64
LPSAFEARRAY_UserFree64
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserFree
BSTR_UserUnmarshal64
LPSAFEARRAY_UserSize
BSTR_UserFree
BSTR_UserSize
SafeArrayDestroy
SysFreeString
SafeArrayAllocDescriptorEx
SysAllocString
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroyDescriptor
BSTR_UserMarshal64
rpcrt4
NdrServerCallAll
NdrClientCall3
RpcBindingFree
RpcStringFreeW
RpcStringBindingComposeW
RpcBindingFromStringBindingW
NdrServerCall2
vccorlib140_app
?__abi_WinRTraiseOutOfMemoryException@@YAXXZ
?__abi_WinRTraiseWrongThreadException@@YAXXZ
?__abi_WinRTraiseOutOfBoundsException@@YAXXZ
?__abi_WinRTraiseChangedStateException@@YAXXZ
?__abi_WinRTraiseNullReferenceException@@YAXXZ
?__abi_translateCurrentException@@YAJ_N@Z
?__abi_WinRTraiseCOMException@@YAXJ@Z
?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ
?__abi_WinRTraiseInvalidArgumentException@@YAXXZ
?__abi_WinRTraiseAccessDeniedException@@YAXXZ
?__abi_WinRTraiseOperationCanceledException@@YAXXZ
?__abi_WinRTraiseFailureException@@YAXXZ
?__abi_WinRTraiseDisconnectedException@@YAXXZ
?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z
?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ
?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z
?Free@Heap@Details@Platform@@SAXPEAX@Z
?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z
?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z
??0Object@Platform@@QE$AAA@XZ
?__abi_WinRTraiseNotImplementedException@@YAXXZ
?__abi_WinRTraiseInvalidCastException@@YAXXZ
?__abi_WinRTraiseObjectDisposedException@@YAXXZ
?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z
?InitializeData@Details@Platform@@YAJH@Z
?UninitializeData@Details@Platform@@YAXH@Z
?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z
?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z
msvcp140_app
_Mtx_destroy_in_situ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
_Cnd_destroy_in_situ
_Cnd_broadcast
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
_Mtx_unlock
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
_Cnd_wait
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
_Mtx_init_in_situ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
_Cnd_init_in_situ
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?_Xbad_function_call@std@@YAXXZ
?_Throw_C_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_XGetLastError@std@@YAXXZ
?__ExceptionPtrCurrentException@@YAXPEAX@Z
_Mtx_lock
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
vcruntime140_app
__C_specific_handler
__std_exception_destroy
__std_exception_copy
_purecall
__std_terminate
memset
_CxxThrowException
__std_type_info_destroy_list
__CxxFrameHandler3
memmove
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
api-ms-win-crt-string-l1-1-0
wcslen
api-ms-win-core-winrt-string-l1-1-0
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsCreateStringReference
api-ms-win-core-util-l1-1-0
DecodePointer
api-ms-win-core-synch-l1-1-0
ReleaseSRWLockExclusive
EnterCriticalSection
AcquireSRWLockExclusive
InitializeCriticalSectionEx
DeleteCriticalSection
LeaveCriticalSection
api-ms-win-core-com-l1-1-0
CoCreateFreeThreadedMarshaler
CoTaskMemAlloc
CoTaskMemFree
api-ms-win-core-synch-l1-2-0
WakeAllConditionVariable
SleepConditionVariableCS
InitializeConditionVariable
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-processthreads-l1-1-0
GetCurrentThreadId
GetCurrentProcessId
api-ms-win-core-sysinfo-l1-1-0
GetSystemTimeAsFileTime
api-ms-win-core-libraryloader-l1-2-0
DisableThreadLibraryCalls
api-ms-win-core-interlocked-l1-1-0
InitializeSListHead
Exports
Exports
DllCanUnloadNow
DllGetActivationFactory
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
DAXUIDolbyAudio.SCCD.xml
-
DAXUIDolbyAudio.dll.dll windows:6 windows x64 arch:x64
d788858170bd5ec7bc9e1594301647b6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
D:\data\PkgProc\JN9gnIJs0EqpbAAVFb8ZXQ\Extracted\DAXUIDolbyAudio.pdb
Imports
sharedlibrary
CreateCommandLine
$NEAT$
mrt100_app
RhpNewFast
RhpCheckCctor2
RhpNewFinalizable
RhpNewArray
RhpReversePInvoke
RhpReversePInvokeReturn
RhpPInvokeExceptionGuard
RhpSuppressGcStress
RhpRegisterModule
RhpUnsuppressGcStress
RhpThrowEx
RhpAssignRefEDX
RhpRethrow
RhTypeCast_CheckCastInterface
RhpCopyMultibyteWithWriteBarrier
RhpCheckedAssignRefEDX
RhTypeCast_CheckCastClass
RhTypeCast_CheckCastArray
RhpInitialInterfaceDispatch
RhTypeCast_IsInstanceOfInterface
RhpResolveInterfaceMethod
RhTypeCast_CheckArrayStore
RhTypeCast_CheckUnbox
RhAllocLocal
RhUnboxAny
RhpCopyAnyWithWriteBarrier
RhBoxAny
RhTypeCast_IsInstanceOf
RhTypeCast_CheckCast
RhpGetThread
RhpTrapThreads
RhpWaitForSuspend
RhpWaitForGC
RhpInitMultibyte
RhTypeCast_IsInstanceOfClass
RhTypeCast_IsInstanceOfArray
RhpCheckedLockCmpXchg
RhpLoopHijack
api-ms-win-core-winrt-l1-1-0
RoInitialize
RoGetActivationFactory
oleaut32
SysFreeString
SysStringLen
api-ms-win-core-winrt-robuffer-l1-1-0
RoGetBufferMarshaler
api-ms-win-core-winrt-string-l1-1-0
WindowsCreateStringReference
api-ms-win-core-localization-l1-2-0
IsValidLocaleName
ResolveLocaleName
Exports
Exports
RHBinder__ShimExeMain
Sections
.rdata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 576KB - Virtual size: 575KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 787KB - Virtual size: 786KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
DAXUIDolbyAudio.exe.exe windows:6 windows x64 arch:x64
bc0652bd8e4f686de4821dc0267faf32
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
daxuidolbyaudio
RHBinder__ShimExeMain
Sections
.rdata Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
-
DAXUIDolbyAudio.xr.xml
-
Microsoft.Services.Store.Engagement.dll.dll windows:6 windows x64 arch:x64
ca104edb2a01e750661c0ac69868c707
Code Sign
33:00:00:00:c4:6e:76:d0:4d:3d:fe:a9:65:00:00:00:00:00:c4Certificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07/09/2016, 17:58Not After07/09/2018, 17:58SubjectCN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:2137-37A0-4AAA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:00:c3:0e:9b:a7:d8:b2:dc:f7:2c:00:00:00:00:00:c3Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before11/08/2017, 20:20Not After11/08/2018, 20:20SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
cc:52:b8:0b:e0:ff:84:57:2b:49:0c:99:0c:14:a5:2b:c2:51:aa:21Signer
Actual PE Digestcc:52:b8:0b:e0:ff:84:57:2b:49:0c:99:0c:14:a5:2b:c2:51:aa:21Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
C:\BA\262\b\release\x64\MicrosoftStore\Microsoft.Services.Store.Engagement.pdb
Imports
api-ms-win-core-winrt-string-l1-1-0
WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsCreateStringReference
WindowsCompareStringOrdinal
WindowsDeleteString
WindowsCreateString
api-ms-win-core-winrt-l1-1-0
RoActivateInstance
RoGetActivationFactory
api-ms-win-core-winrt-error-l1-1-0
RoTransformError
SetRestrictedErrorInfo
RoOriginateError
RoOriginateErrorW
api-ms-win-core-synch-l1-2-0
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
InitOnceExecuteOnce
InitializeCriticalSectionEx
DeleteCriticalSection
InitializeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
ResetEvent
CreateEventExW
LeaveCriticalSection
SetEvent
WaitForSingleObjectEx
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-timezone-l1-1-0
GetDynamicTimeZoneInformation
api-ms-win-core-errorhandling-l1-1-1
RaiseException
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-com-l1-1-1
CoGetContextToken
CoGetObjectContext
CoTaskMemFree
CoCreateGuid
CoGetApartmentType
CoTaskMemAlloc
CoCreateFreeThreadedMarshaler
api-ms-win-eventing-provider-l1-1-0
EventRegister
EventSetInformation
EventWriteTransfer
api-ms-win-core-threadpool-l1-2-0
TrySubmitThreadpoolCallback
vccorlib140_app
??0OutOfBoundsException@Platform@@QE$AAA@XZ
?ToString@int32@default@@QEAAPE$AAVString@Platform@@XZ
??0Delegate@Platform@@QE$AAA@XZ
?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z
?Allocate@Heap@Details@Platform@@SAPEAX_K@Z
?Free@Heap@Details@Platform@@SAXPEAX@Z
?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z
?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ
?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z
?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ
?__abi_translateCurrentException@@YAJ_N@Z
?__abi_WinRTraiseObjectDisposedException@@YAXXZ
?__abi_WinRTraiseInvalidCastException@@YAXXZ
?__abi_WinRTraiseNotImplementedException@@YAXXZ
?__abi_WinRTraiseDisconnectedException@@YAXXZ
?__abi_WinRTraiseFailureException@@YAXXZ
?__abi_WinRTraiseOperationCanceledException@@YAXXZ
?__abi_WinRTraiseAccessDeniedException@@YAXXZ
?__abi_WinRTraiseInvalidArgumentException@@YAXXZ
?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ
?__abi_WinRTraiseCOMException@@YAXJ@Z
?__abi_WinRTraiseNullReferenceException@@YAXXZ
?__abi_WinRTraiseChangedStateException@@YAXXZ
?__abi_WinRTraiseOutOfBoundsException@@YAXXZ
?__abi_WinRTraiseWrongThreadException@@YAXXZ
?__abi_WinRTraiseOutOfMemoryException@@YAXXZ
??0OutOfMemoryException@Platform@@QE$AAA@XZ
??0ChangedStateException@Platform@@QE$AAA@XZ
?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z
?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z
?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z
?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z
?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z
?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z
?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z
?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z
??0FailureException@Platform@@QE$AAA@XZ
??0Object@Platform@@QE$AAA@XZ
?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z
?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z
?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z
?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z
?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z
?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z
?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ
?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z
?ToString@Guid@Platform@@QEAAPE$AAVString@2@XZ
?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z
?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z
?InitializeData@Details@Platform@@YAJH@Z
?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z
?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z
?UninitializeData@Details@Platform@@YAXH@Z
msvcp140_app
?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
_Thrd_join
_Thrd_id
_Cnd_init
_Mtx_destroy
_Thrd_detach
_Thrd_start
_Mtx_init
_Cnd_destroy
_Cnd_do_broadcast_at_thread_exit
?_Xinvalid_argument@std@@YAXPEBD@Z
_Cnd_broadcast
_Cnd_wait
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
??0task_continuation_context@Concurrency@@AEAA@XZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_IsNonBlockingThread@_Task_impl_base@details@Concurrency@@SA_NXZ
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??Bid@locale@std@@QEAA_KXZ
_Cnd_signal
_Cnd_init_in_situ
_Query_perf_frequency
?_Throw_Cpp_error@std@@YAXH@Z
?_Xbad_function_call@std@@YAXXZ
?_Throw_C_error@std@@YAXH@Z
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_init_in_situ
_Query_perf_counter
_Xtime_get_ticks
_Mtx_unlock
_Cnd_destroy_in_situ
concrt140_app
??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QEAA@XZ
??0message_not_found@Concurrency@@QEAA@XZ
??1critical_section@Concurrency@@QEAA@XZ
?_UnderlyingYield@details@Concurrency@@YAXXZ
?_Internal_throw_exception@_Concurrent_queue_base_v4@details@Concurrency@@IEBAXXZ
?_Internal_finish_clear@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXXZ
?_Internal_empty@_Concurrent_queue_base_v4@details@Concurrency@@IEBA_NXZ
?_Internal_pop_if_present@_Concurrent_queue_base_v4@details@Concurrency@@IEAA_NPEAX@Z
?_Internal_push@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXPEBX@Z
??1_Concurrent_queue_base_v4@details@Concurrency@@MEAA@XZ
??0_Concurrent_queue_base_v4@details@Concurrency@@IEAA@_K@Z
?_Release@_Scheduler@details@Concurrency@@QEAAIXZ
?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QEAA_NXZ
?Alloc@Concurrency@@YAPEAX_K@Z
?Free@Concurrency@@YAXPEAX@Z
?_Trace_agents@Concurrency@@YAXW4Agents_EventType@1@_JZZ
??0invalid_link_target@Concurrency@@QEAA@PEBD@Z
??0bad_target@Concurrency@@QEAA@XZ
??0_NonReentrantPPLLock@details@Concurrency@@QEAA@XZ
??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QEAA@AEAV123@@Z
??0_Timer@details@Concurrency@@IEAA@I_N@Z
??1_Timer@details@Concurrency@@MEAA@XZ
?_Start@_Timer@details@Concurrency@@IEAAXXZ
?_Stop@_Timer@details@Concurrency@@IEAAXXZ
??0_Runtime_object@details@Concurrency@@QEAA@XZ
?_ScheduleTask@_CurrentScheduler@details@Concurrency@@SAXP6AXPEAX@Z0@Z
?_Get@_CurrentScheduler@details@Concurrency@@SA?AV_Scheduler@23@XZ
?_Yield@_Context@details@Concurrency@@SAXXZ
??0_ReentrantPPLLock@details@Concurrency@@QEAA@XZ
??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QEAA@AEAV123@@Z
??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QEAA@XZ
?_Reference@_Scheduler@details@Concurrency@@QEAAIXZ
vcruntime140_app
_purecall
__std_terminate
memmove
__std_exception_destroy
__std_exception_copy
memset
__C_specific_handler
__CxxFrameHandler3
_CxxThrowException
__std_type_info_destroy_list
__RTDynamicCast
memcpy
api-ms-win-crt-string-l1-1-0
towlower
iswxdigit
wcslen
api-ms-win-crt-convert-l1-1-0
wctomb_s
wcstol
_wtoi64
wcstod
api-ms-win-crt-runtime-l1-1-0
_errno
_initterm_e
_invalid_parameter_noinfo_noreturn
terminate
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswprintf_s
__stdio_common_vsnwprintf_s
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
api-ms-win-core-util-l1-1-0
DecodePointer
api-ms-win-core-processthreads-l1-1-2
GetCurrentProcessId
GetCurrentThreadId
api-ms-win-core-sysinfo-l1-2-1
GetSystemTimeAsFileTime
api-ms-win-core-libraryloader-l1-2-0
DisableThreadLibraryCalls
api-ms-win-core-interlocked-l1-2-0
InitializeSListHead
Exports
Exports
DllCanUnloadNow
DllGetActivationFactory
Sections
.text Size: 391KB - Virtual size: 390KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.giats Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Microsoft.Services.Store.Engagement.winmd.dll windows:6 windows x86 arch:x86
Code Sign
33:00:00:00:c1:09:f8:02:41:bb:4d:aa:dc:00:00:00:00:00:c1Certificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07/09/2016, 17:58Not After07/09/2018, 17:58SubjectCN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12E7-3064-6112,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:00:c3:0e:9b:a7:d8:b2:dc:f7:2c:00:00:00:00:00:c3Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before11/08/2017, 20:20Not After11/08/2018, 20:20SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
f6:34:57:3a:69:6f:5d:3f:22:d9:61:af:39:43:33:85:88:cb:9d:f6Signer
Actual PE Digestf6:34:57:3a:69:6f:5d:3f:22:d9:61:af:39:43:33:85:88:cb:9d:f6Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
-
[Content_Types].xml.xml
-
clrcompression.dll.dll windows:6 windows x64 arch:x64
5a51928c11ae88f8c7e463bab1d9868a
Code Sign
33:00:00:00:c3:3b:b8:10:d6:ab:75:9c:84:00:00:00:00:00:c3Certificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07/09/2016, 17:58Not After07/09/2018, 17:58SubjectCN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:D236-37DA-9761,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78Certificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before11/08/2017, 20:11Not After11/08/2018, 20:11SubjectCN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:33:26:1a:00:00:00:00:00:31Certificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before31/08/2010, 22:19Not After31/08/2020, 22:29SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:c3:0e:9b:a7:d8:b2:dc:f7:2c:00:00:00:00:00:c3Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before11/08/2017, 20:20Not After11/08/2018, 20:20SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
5f:c2:2d:ec:3b:4f:e0:cb:e2:8c:dd:1d:f9:f2:3c:1d:39:80:50:37:d3:f2:a6:5a:33:a4:72:42:04:71:b7:34Signer
Actual PE Digest5f:c2:2d:ec:3b:4f:e0:cb:e2:8c:dd:1d:f9:f2:3c:1d:39:80:50:37:d3:f2:a6:5a:33:a4:72:42:04:71:b7:34Digest Algorithmsha256PE Digest Matchestrue3a:ab:ab:80:66:8a:82:8b:4d:93:ec:a8:89:4b:25:b1:35:bf:7a:a1Signer
Actual PE Digest3a:ab:ab:80:66:8a:82:8b:4d:93:ec:a8:89:4b:25:b1:35:bf:7a:a1Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
E:\A\_work\280\s\corefx\bin\obj\Windows_NT.x64.Release\native_aot\clrcompression\Release\clrcompression.pdb
Imports
kernel32
GetCurrentThreadId
GetTickCount64
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
QueryPerformanceCounter
ole32
CoTaskMemFree
CoTaskMemAlloc
Exports
Exports
crc32
deflate
deflateEnd
deflateInit2_
inflate
inflateEnd
inflateInit2_
zlibCompileFlags
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
resources.pri
-
intoput/Driver/win10 x64.zip.zip
-
CaptureStreamMonitor.dll.dll windows:6 windows x64 arch:x64
b38b92fdca5dc8e93ca8cad742a03d27
Code Sign
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before22/10/2013, 12:00Not After22/10/2028, 12:00SubjectCN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
01:9b:b5:3d:d0:6f:10:b3:db:a8:2e:8d:3f:af:65:88Certificate
IssuerCN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before26/07/2018, 00:00Not After19/10/2021, 12:00SubjectCN=Dolby Laboratories\, Inc.,O=Dolby Laboratories\, Inc.,L=San Francisco,ST=California,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate
IssuerCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before04/01/2017, 00:00Not After18/01/2028, 00:00SubjectCN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before07/01/2016, 12:00Not After07/01/2031, 12:00SubjectCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:85:7f:83:dc:2a:6c:a9:79:b8:00:00:00:00:00:85Certificate
IssuerCN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before05/06/2019, 18:06Not After03/06/2020, 18:06SubjectCN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0b:aa:c1:00:00:00:00:00:09Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before18/04/2012, 23:48Not After18/04/2027, 23:58SubjectCN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
1d:ba:5c:a0:63:5d:be:62:36:d6:de:15:3d:cd:fc:25:ff:3d:f4:f4:2d:42:35:a6:6b:12:74:60:e2:c5:42:63Signer
Actual PE Digest1d:ba:5c:a0:63:5d:be:62:36:d6:de:15:3d:cd:fc:25:ff:3d:f4:f4:2d:42:35:a6:6b:12:74:60:e2:c5:42:63Digest Algorithmsha256PE Digest Matchestrue1d:ba:5c:a0:63:5d:be:62:36:d6:de:15:3d:cd:fc:25:ff:3d:f4:f4:2d:42:35:a6:6b:12:74:60:e2:c5:42:63Signer
Actual PE Digest1d:ba:5c:a0:63:5d:be:62:36:d6:de:15:3d:cd:fc:25:ff:3d:f4:f4:2d:42:35:a6:6b:12:74:60:e2:c5:42:63Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
c:\DAX325\API\x64\Release\CaptureStreamMonitor.pdb
Imports
kernel32
DeleteCriticalSection
GetProcessHeap
LocalAlloc
FormatMessageW
LocalFree
SizeofResource
K32GetProcessImageFileNameW
GetApplicationUserModelId
OpenProcess
MultiByteToWideChar
FileTimeToSystemTime
LockResource
HeapDestroy
FindResourceExW
LoadResource
FindResourceW
GetProcessTimes
WaitForSingleObject
CreateEventW
SetEvent
WTSGetActiveConsoleSessionId
CompareFileTime
WriteConsoleW
CreateFileW
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
CloseHandle
HeapFree
SetStdHandle
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
SetFilePointerEx
GetFileType
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
ExitProcess
GetModuleHandleExW
ExitThread
RtlPcToFileHeader
RtlUnwindEx
LoadLibraryW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
WideCharToMultiByte
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
GetCurrentThreadId
DuplicateHandle
WaitForSingleObjectEx
Sleep
GetCurrentProcess
SwitchToThread
GetCurrentThread
GetExitCodeThread
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
GetProcAddress
EncodePointer
QueryPerformanceCounter
LCMapStringW
GetLocaleInfoW
GetCPInfo
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
OutputDebugStringW
CreateTimerQueue
SignalObjectAndWait
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryExW
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
advapi32
InitializeSecurityDescriptor
DeregisterEventSource
EventRegister
EventUnregister
RegisterEventSourceW
EventWriteString
ReportEventW
SetSecurityDescriptorDacl
ole32
CoCreateInstance
CoTaskMemFree
PropVariantClear
CoInitializeEx
CoUninitialize
oleaut32
SafeArrayAccessData
SafeArrayUnaccessData
BSTR_UserSize
BSTR_UserFree
LPSAFEARRAY_UserSize
BSTR_UserUnmarshal64
LPSAFEARRAY_UserFree
SysStringLen
SysAllocStringLen
SafeArrayDestroy
SafeArrayGetUBound
SafeArrayGetLBound
SysFreeString
SysAllocString
BSTR_UserMarshal64
LPSAFEARRAY_UserSize64
BSTR_UserSize64
BSTR_UserFree64
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserUnmarshal64
BSTR_UserMarshal
BSTR_UserUnmarshal
LPSAFEARRAY_UserMarshal64
LPSAFEARRAY_UserFree64
LPSAFEARRAY_UserUnmarshal
rpcrt4
RpcStringBindingComposeW
RpcStringFreeW
RpcBindingFree
NdrClientCall3
NdrServerCallAll
NdrServerCall2
RpcBindingFromStringBindingW
Exports
Exports
StartMonitor
Sections
.text Size: 455KB - Virtual size: 455KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 197KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
DAX3API.exe.exe windows:6 windows x64 arch:x64
1185f84a1e213bda3176af175bcd7efd
Code Sign
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before22/10/2013, 12:00Not After22/10/2028, 12:00SubjectCN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
01:9b:b5:3d:d0:6f:10:b3:db:a8:2e:8d:3f:af:65:88Certificate
IssuerCN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before26/07/2018, 00:00Not After19/10/2021, 12:00SubjectCN=Dolby Laboratories\, Inc.,O=Dolby Laboratories\, Inc.,L=San Francisco,ST=California,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate
IssuerCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before04/01/2017, 00:00Not After18/01/2028, 00:00SubjectCN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before07/01/2016, 12:00Not After07/01/2031, 12:00SubjectCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:85:7f:83:dc:2a:6c:a9:79:b8:00:00:00:00:00:85Certificate
IssuerCN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before05/06/2019, 18:06Not After03/06/2020, 18:06SubjectCN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0b:aa:c1:00:00:00:00:00:09Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before18/04/2012, 23:48Not After18/04/2027, 23:58SubjectCN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
eb:43:48:b7:21:46:cf:9e:6f:de:ba:85:db:8b:b3:2b:91:44:09:e3:82:ec:e6:17:45:45:2f:85:ca:21:44:d2Signer
Actual PE Digesteb:43:48:b7:21:46:cf:9e:6f:de:ba:85:db:8b:b3:2b:91:44:09:e3:82:ec:e6:17:45:45:2f:85:ca:21:44:d2Digest Algorithmsha256PE Digest Matchestrueeb:43:48:b7:21:46:cf:9e:6f:de:ba:85:db:8b:b3:2b:91:44:09:e3:82:ec:e6:17:45:45:2f:85:ca:21:44:d2Signer
Actual PE Digesteb:43:48:b7:21:46:cf:9e:6f:de:ba:85:db:8b:b3:2b:91:44:09:e3:82:ec:e6:17:45:45:2f:85:ca:21:44:d2Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
c:\DAX325\API\output\Release\x64\DAX3API.pdb
Imports
api-ms-win-core-com-l1-1-0
CoCreateFreeThreadedMarshaler
PropVariantClear
CoUninitialize
CoInitializeEx
CoCreateInstance
StringFromGUID2
CoIncrementMTAUsage
propsys
InitPropVariantFromBuffer
PropVariantCompareEx
InitPropVariantFromInt32Vector
api-ms-win-core-string-l1-1-0
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
CompareStringW
api-ms-win-core-util-l1-1-0
EncodePointer
DecodePointer
api-ms-win-core-errorhandling-l1-1-0
GetLastError
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RaiseException
api-ms-win-core-heap-l1-1-0
HeapReAlloc
HeapSize
GetProcessHeap
HeapFree
HeapDestroy
HeapAlloc
api-ms-win-core-synch-l1-1-0
SetEvent
CreateEventW
OpenEventW
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
DeleteCriticalSection
EnterCriticalSection
ReleaseSemaphore
WaitForSingleObject
ResetEvent
LeaveCriticalSection
InitializeCriticalSection
TryEnterCriticalSection
WaitForSingleObjectEx
api-ms-win-core-synch-l1-2-0
SignalObjectAndWait
Sleep
api-ms-win-core-libraryloader-l1-2-0
GetProcAddress
FreeLibrary
LoadLibraryExW
GetModuleHandleExW
FreeLibraryAndExitThread
GetModuleHandleA
GetModuleHandleW
GetModuleFileNameW
api-ms-win-core-libraryloader-l1-2-1
LoadLibraryW
api-ms-win-security-base-l1-1-0
GetTokenInformation
DuplicateTokenEx
CopySid
GetAce
GetSecurityDescriptorControl
GetAclInformation
MakeSelfRelativeSD
AllocateAndInitializeSid
FreeSid
IsValidSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
InitializeAcl
GetSecurityDescriptorSacl
GetSecurityDescriptorOwner
GetSecurityDescriptorLength
GetSecurityDescriptorGroup
GetSecurityDescriptorDacl
GetLengthSid
AddAce
api-ms-win-core-heap-l2-1-0
LocalFree
LocalAlloc
api-ms-win-core-localization-l1-2-0
GetLocaleInfoW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
EnumSystemLocalesW
IsValidCodePage
GetACP
GetOEMCP
FormatMessageW
GetCPInfo
api-ms-win-core-registry-l1-1-0
RegCreateKeyExW
RegCloseKey
RegNotifyChangeKeyValue
RegGetValueW
RegOpenKeyExW
RegQueryValueExW
RegEnumValueW
RegEnumKeyExW
RegSetValueExW
RegQueryInfoKeyW
api-ms-win-security-sddl-l1-1-0
ConvertSidToStringSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
api-ms-win-security-provider-l1-1-0
SetEntriesInAclW
SetSecurityInfo
api-ms-win-eventing-provider-l1-1-0
EventUnregister
EventWriteString
EventRegister
api-ms-win-core-handle-l1-1-0
CloseHandle
DuplicateHandle
api-ms-win-core-processthreads-l1-1-0
CreateThread
GetThreadPriority
TlsFree
ExitProcess
ExitThread
TlsSetValue
GetStartupInfoW
TerminateProcess
OpenProcessToken
CreateProcessAsUserW
GetCurrentProcess
SetThreadPriority
TlsAlloc
GetCurrentProcessId
GetExitCodeThread
GetCurrentThreadId
TlsGetValue
GetCurrentThread
SwitchToThread
api-ms-win-core-processthreads-l1-1-1
GetThreadTimes
OpenProcess
IsProcessorFeaturePresent
api-ms-win-core-memory-l1-1-0
VirtualProtect
VirtualAlloc
VirtualFree
api-ms-win-core-kernel32-legacy-l1-1-0
WTSGetActiveConsoleSessionId
RegisterWaitForSingleObject
UnregisterWait
oleaut32
SafeArrayCreate
BSTR_UserFree64
BSTR_UserUnmarshal64
BSTR_UserMarshal64
BSTR_UserSize64
BSTR_UserFree
BSTR_UserUnmarshal
BSTR_UserMarshal
BSTR_UserSize
SysAllocString
SysStringByteLen
LPSAFEARRAY_UserFree64
LPSAFEARRAY_UserUnmarshal64
LPSAFEARRAY_UserMarshal64
LPSAFEARRAY_UserSize64
LPSAFEARRAY_UserFree
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserSize
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayPutElement
SysAllocStringByteLen
SafeArrayDestroy
SafeArrayCreateVector
SafeArrayCopyData
SysReAllocString
SafeArrayGetElemsize
SysFreeString
api-ms-win-core-debug-l1-1-0
OutputDebugStringW
IsDebuggerPresent
api-ms-win-shcore-obsolete-l1-1-0
CommandLineToArgvW
api-ms-win-service-management-l2-1-0
ChangeServiceConfig2W
api-ms-win-service-management-l1-1-0
OpenServiceW
DeleteService
CreateServiceW
OpenSCManagerW
CloseServiceHandle
api-ms-win-core-file-l1-1-0
WriteFile
GetFileInformationByHandle
GetFileType
FlushFileBuffers
GetFileAttributesExW
RemoveDirectoryW
ReadFile
GetFileSizeEx
SetFilePointerEx
FindNextFileW
FindFirstFileExW
SetEndOfFile
FindClose
CreateFileW
DeleteFileW
CreateDirectoryW
GetShortPathNameW
api-ms-win-core-psapi-l1-1-0
QueryFullProcessImageNameW
api-ms-win-core-file-l2-1-2
CopyFileW
rpcrt4
RpcServerInqBindings
RpcEpUnregister
NdrServerCall2
NdrServerCallAll
RpcServerListen
RpcServerRegisterIf3
RpcEpRegisterW
RpcServerUseProtseqEpW
RpcMgmtStopServerListening
NdrClientCall3
RpcBindingVectorFree
RpcServerUnregisterIf
api-ms-win-core-synch-l1-2-1
WaitForMultipleObjects
api-ms-win-security-base-l1-2-2
DeriveCapabilitySidsFromName
api-ms-win-core-threadpool-l1-2-0
SubmitThreadpoolWork
CloseThreadpoolWork
CreateThreadpoolWork
WaitForThreadpoolWorkCallbacks
api-ms-win-service-winsvc-l1-1-0
RegisterServiceCtrlHandlerW
QueryServiceStatus
ControlService
api-ms-win-service-core-l1-1-0
StartServiceCtrlDispatcherW
SetServiceStatus
api-ms-win-shell-shdirectory-l1-1-0
ord290
ext-ms-win-shell32-shellfolders-l1-1-0
SHGetSpecialFolderPathW
user32
wsprintfW
advapi32
DeregisterEventSource
RegisterEventSourceW
ReportEventW
wtsapi32
WTSQueryUserToken
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-processenvironment-l1-1-0
GetCommandLineA
GetEnvironmentStringsW
GetStdHandle
SetStdHandle
GetCommandLineW
FreeEnvironmentStringsW
api-ms-win-core-file-l1-2-2
AreFileApisANSI
api-ms-win-core-sysinfo-l1-1-0
GetLogicalProcessorInformation
GetSystemTimeAsFileTime
GetTickCount
GetVersionExW
api-ms-win-core-rtlsupport-l1-1-0
RtlUnwindEx
RtlUnwind
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlVirtualUnwind
api-ms-win-core-interlocked-l1-1-0
InitializeSListHead
InterlockedFlushSList
QueryDepthSList
InterlockedPushEntrySList
InterlockedPopEntrySList
api-ms-win-core-threadpool-legacy-l1-1-0
CreateTimerQueue
UnregisterWaitEx
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
api-ms-win-core-systemtopology-l1-1-0
GetNumaHighestNodeNumber
api-ms-win-core-processtopology-obsolete-l1-1-0
GetProcessAffinityMask
SetThreadAffinityMask
api-ms-win-core-console-l1-1-0
GetConsoleMode
GetConsoleCP
WriteConsoleW
ReadConsoleW
api-ms-win-core-winrt-error-l1-1-0
GetRestrictedErrorInfo
SetRestrictedErrorInfo
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
api-ms-win-core-winrt-error-l1-1-1
RoOriginateLanguageException
api-ms-win-core-winrt-string-l1-1-0
WindowsPromoteStringBuffer
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateStringReference
WindowsPreallocateStringBuffer
WindowsDeleteStringBuffer
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 493KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Default.xml.xml
-
Default_settings.xml.xml
-
DolbyAPOv2100.dll.dll regsvr32 windows:6 windows x64 arch:x64
43087673cad66b1ea3f7102c0a732120
Code Sign
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before22/10/2013, 12:00Not After22/10/2028, 12:00SubjectCN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
01:9b:b5:3d:d0:6f:10:b3:db:a8:2e:8d:3f:af:65:88Certificate
IssuerCN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before26/07/2018, 00:00Not After19/10/2021, 12:00SubjectCN=Dolby Laboratories\, Inc.,O=Dolby Laboratories\, Inc.,L=San Francisco,ST=California,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate
IssuerCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before04/01/2017, 00:00Not After18/01/2028, 00:00SubjectCN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before07/01/2016, 12:00Not After07/01/2031, 12:00SubjectCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:85:7f:83:dc:2a:6c:a9:79:b8:00:00:00:00:00:85Certificate
IssuerCN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before05/06/2019, 18:06Not After03/06/2020, 18:06SubjectCN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0b:aa:c1:00:00:00:00:00:09Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before18/04/2012, 23:48Not After18/04/2027, 23:58SubjectCN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
b9:89:ac:57:19:33:0c:39:ac:48:22:30:a0:ae:93:f2:5c:c5:e9:a7:f3:3f:c8:4c:9a:bb:5b:98:5b:bd:2c:21Signer
Actual PE Digestb9:89:ac:57:19:33:0c:39:ac:48:22:30:a0:ae:93:f2:5c:c5:e9:a7:f3:3f:c8:4c:9a:bb:5b:98:5b:bd:2c:21Digest Algorithmsha256PE Digest Matchestrueb9:89:ac:57:19:33:0c:39:ac:48:22:30:a0:ae:93:f2:5c:c5:e9:a7:f3:3f:c8:4c:9a:bb:5b:98:5b:bd:2c:21Signer
Actual PE Digestb9:89:ac:57:19:33:0c:39:ac:48:22:30:a0:ae:93:f2:5c:c5:e9:a7:f3:3f:c8:4c:9a:bb:5b:98:5b:bd:2c:21Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
c:\DAX325\APO\solution_output\DolbyAPOv2100\x64\Release\DolbyAPOv2100.pdb
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LoadResource
SizeofResource
FindResourceW
lstrcmpiW
ReadFile
MultiByteToWideChar
GetThreadLocale
SetThreadLocale
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
DecodePointer
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
CloseHandle
DuplicateHandle
GetCurrentProcess
LocalAlloc
LocalFree
FormatMessageW
EncodePointer
GetCommandLineA
GetOEMCP
ReadConsoleW
DebugBreak
SetEvent
GetACP
WaitForSingleObject
CreateFileW
GetTickCount64
VirtualAlloc
VirtualFree
VirtualLock
VirtualUnlock
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetProcessHeap
GetTimeZoneInformation
SetFilePointerEx
GetFileSizeEx
SetConsoleCtrlHandler
InitializeCriticalSection
TryEnterCriticalSection
RtlPcToFileHeader
WaitForSingleObjectEx
Sleep
SwitchToThread
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
GetNativeSystemInfo
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
RtlCaptureStackBackTrace
IsProcessorFeaturePresent
InitOnceExecuteOnce
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
WideCharToMultiByte
GetStringTypeW
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimePreciseAsFileTime
LCMapStringEx
GetLocaleInfoEx
CompareStringEx
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
OutputDebugStringW
WriteConsoleW
CreateEventW
InitializeCriticalSectionEx
EnumSystemLocalesW
GetUserDefaultLCID
__C_specific_handler
LoadLibraryA
FormatMessageA
LoadLibraryExA
GetModuleHandleExA
GetEnvironmentVariableA
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
ExitProcess
GetStdHandle
GetFileType
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
RtlUnwind
advapi32
RegQueryValueExW
DeregisterEventSource
RegisterEventSourceW
RegDeleteKeyExW
RegGetValueW
EventWriteString
EventRegister
EventUnregister
ReportEventW
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
ole32
CoCreateGuid
PropVariantClear
CoCreateInstance
CoTaskMemRealloc
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
oleaut32
SysFreeString
SysAllocString
VarBstrCmp
UnRegisterTypeLi
RegisterTypeLi
LoadTypeLi
VarUI4FromStr
SysStringLen
user32
CharNextW
CharUpperBuffW
rpcrt4
UuidToStringW
RpcStringFreeW
audioeng
AERT_Allocate
AERT_Free
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
RT_CODE Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
RT_BSS Size: - Virtual size: 8B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 729KB - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RT_CONST Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RT_DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.trace Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
DolbyAPOvlldp130.dll.dll regsvr32 windows:6 windows x64 arch:x64
35043acaba217842ded312f19c9e8f6e
Code Sign
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before22/10/2013, 12:00Not After22/10/2028, 12:00SubjectCN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
01:9b:b5:3d:d0:6f:10:b3:db:a8:2e:8d:3f:af:65:88Certificate
IssuerCN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before26/07/2018, 00:00Not After19/10/2021, 12:00SubjectCN=Dolby Laboratories\, Inc.,O=Dolby Laboratories\, Inc.,L=San Francisco,ST=California,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate
IssuerCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before04/01/2017, 00:00Not After18/01/2028, 00:00SubjectCN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before07/01/2016, 12:00Not After07/01/2031, 12:00SubjectCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:85:7f:83:dc:2a:6c:a9:79:b8:00:00:00:00:00:85Certificate
IssuerCN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before05/06/2019, 18:06Not After03/06/2020, 18:06SubjectCN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0b:aa:c1:00:00:00:00:00:09Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before18/04/2012, 23:48Not After18/04/2027, 23:58SubjectCN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
d7:4d:77:ee:a2:90:f3:9d:97:64:a9:da:32:a7:44:8c:7d:b1:5f:69:be:2f:c1:29:43:00:b7:87:25:e4:76:20Signer
Actual PE Digestd7:4d:77:ee:a2:90:f3:9d:97:64:a9:da:32:a7:44:8c:7d:b1:5f:69:be:2f:c1:29:43:00:b7:87:25:e4:76:20Digest Algorithmsha256PE Digest Matchestrued7:4d:77:ee:a2:90:f3:9d:97:64:a9:da:32:a7:44:8c:7d:b1:5f:69:be:2f:c1:29:43:00:b7:87:25:e4:76:20Signer
Actual PE Digestd7:4d:77:ee:a2:90:f3:9d:97:64:a9:da:32:a7:44:8c:7d:b1:5f:69:be:2f:c1:29:43:00:b7:87:25:e4:76:20Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
c:\DAX325\APO\solution_output\DolbyAPOvlldp130\x64\Release\DolbyAPOvlldp130.pdb
Imports
kernel32
SetStdHandle
GetStringTypeW
SetEnvironmentVariableW
WriteFile
GetConsoleCP
GetConsoleMode
EncodePointer
RaiseException
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LoadResource
SizeofResource
FindResourceW
lstrcmpiW
FreeEnvironmentStringsW
ReadFile
SetThreadLocale
ReadConsoleW
CreateFileW
MultiByteToWideChar
FormatMessageW
LocalFree
LocalAlloc
WriteConsoleW
DeleteCriticalSection
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
CloseHandle
DuplicateHandle
GetCurrentProcess
FindNextFileW
FindFirstFileExW
FindClose
SetEvent
WaitForSingleObject
CreateEventW
GetTickCount64
InitializeCriticalSectionEx
SetFilePointerEx
GetFileSizeEx
SetConsoleCtrlHandler
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
InitializeCriticalSection
TryEnterCriticalSection
VirtualFree
VirtualAlloc
VirtualUnlock
VirtualLock
IsDebuggerPresent
OutputDebugStringW
GetLastError
GetThreadLocale
DecodePointer
RtlPcToFileHeader
WaitForSingleObjectEx
Sleep
SwitchToThread
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
GetNativeSystemInfo
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
RtlCaptureStackBackTrace
IsProcessorFeaturePresent
InitOnceExecuteOnce
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimePreciseAsFileTime
WideCharToMultiByte
__C_specific_handler
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
LoadLibraryA
FormatMessageA
LoadLibraryExA
GetModuleHandleExA
GetEnvironmentVariableA
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
ExitProcess
GetStdHandle
GetFileType
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
RtlUnwind
oleaut32
VarUI4FromStr
UnRegisterTypeLi
SysFreeString
LoadTypeLi
RegisterTypeLi
VarBstrCmp
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
SysAllocString
SysStringLen
advapi32
RegQueryValueExW
RegDeleteKeyExW
RegSetValueExA
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegGetValueW
EventWriteString
EventUnregister
EventRegister
ole32
PropVariantClear
StringFromGUID2
CLSIDFromString
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoUninitialize
CoCreateInstance
user32
CharNextW
CharUpperBuffW
rpcrt4
RpcStringFreeW
UuidToStringW
audioeng
AERT_Free
AERT_Allocate
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 910KB - Virtual size: 910KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
RT_CODE Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
RT_BSS Size: - Virtual size: 8B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 469KB - Virtual size: 469KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RT_CONST Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RT_DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.trace Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
DolbyDspVlldp.dll.dll regsvr32 windows:6 windows x64 arch:x64
6d4e0859e8d969b9af69a7f98e800c21
Code Sign
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before22/10/2013, 12:00Not After22/10/2028, 12:00SubjectCN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
01:9b:b5:3d:d0:6f:10:b3:db:a8:2e:8d:3f:af:65:88Certificate
IssuerCN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before26/07/2018, 00:00Not After19/10/2021, 12:00SubjectCN=Dolby Laboratories\, Inc.,O=Dolby Laboratories\, Inc.,L=San Francisco,ST=California,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate
IssuerCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before04/01/2017, 00:00Not After18/01/2028, 00:00SubjectCN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before07/01/2016, 12:00Not After07/01/2031, 12:00SubjectCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:85:7f:83:dc:2a:6c:a9:79:b8:00:00:00:00:00:85Certificate
IssuerCN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before05/06/2019, 18:06Not After03/06/2020, 18:06SubjectCN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0b:aa:c1:00:00:00:00:00:09Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before18/04/2012, 23:48Not After18/04/2027, 23:58SubjectCN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
28:9c:b1:96:c0:3d:43:aa:f5:55:a7:56:db:2a:92:37:03:22:fb:13:dc:bb:26:7c:ca:82:40:7f:ea:89:61:36Signer
Actual PE Digest28:9c:b1:96:c0:3d:43:aa:f5:55:a7:56:db:2a:92:37:03:22:fb:13:dc:bb:26:7c:ca:82:40:7f:ea:89:61:36Digest Algorithmsha256PE Digest Matchestrue28:9c:b1:96:c0:3d:43:aa:f5:55:a7:56:db:2a:92:37:03:22:fb:13:dc:bb:26:7c:ca:82:40:7f:ea:89:61:36Signer
Actual PE Digest28:9c:b1:96:c0:3d:43:aa:f5:55:a7:56:db:2a:92:37:03:22:fb:13:dc:bb:26:7c:ca:82:40:7f:ea:89:61:36Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
c:\DAX325\API\x64\Release\DolbyDspVlldp.pdb
Imports
kernel32
LoadLibraryExW
LoadResource
SizeofResource
FindResourceW
LocalAlloc
LocalFree
FormatMessageW
lstrcmpiW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
MultiByteToWideChar
GetThreadLocale
SetThreadLocale
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
EncodePointer
CreateFileW
WriteConsoleW
DeleteCriticalSection
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
SetStdHandle
SetFilePointerEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
InitializeCriticalSectionEx
GetLastError
RaiseException
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetFileType
GetStdHandle
GetModuleHandleExW
ExitProcess
InterlockedFlushSList
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
WaitForSingleObjectEx
ResetEvent
SetEvent
CloseHandle
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetLocaleInfoW
LCMapStringW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
DecodePointer
GetStringTypeW
WideCharToMultiByte
IsDebuggerPresent
OutputDebugStringW
user32
CharNextW
ole32
CoUninitialize
StringFromGUID2
CoTaskMemAlloc
CoCreateInstance
PropVariantClear
CoTaskMemRealloc
CoTaskMemFree
CLSIDFromString
oleaut32
VarUI4FromStr
BSTR_UserFree64
BSTR_UserUnmarshal64
BSTR_UserMarshal64
BSTR_UserSize64
BSTR_UserFree
SafeArrayUnaccessData
BSTR_UserMarshal
BSTR_UserSize
VarBstrCmp
LoadTypeLi
RegisterTypeLi
UnRegisterTypeLi
SysStringLen
SysAllocString
SafeArrayAccessData
SafeArrayGetElemsize
SysFreeString
SafeArrayCreateVector
SysAllocStringByteLen
SysStringByteLen
BSTR_UserUnmarshal
LPSAFEARRAY_UserFree64
LPSAFEARRAY_UserUnmarshal64
LPSAFEARRAY_UserMarshal64
LPSAFEARRAY_UserSize64
LPSAFEARRAY_UserFree
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserSize
SysAllocStringLen
advapi32
EventWriteString
RegisterEventSourceW
EventUnregister
EventRegister
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
ReportEventW
DeregisterEventSource
api-ms-win-devices-config-l1-1-1
CM_Locate_DevNodeW
CM_Get_Device_Interface_ListW
CM_Get_Device_Interface_List_SizeW
CM_Get_Parent
CM_Get_Device_Interface_PropertyW
CM_Get_DevNode_PropertyW
rpcrt4
NdrOleAllocate
CStdStubBuffer_QueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
NdrCStdStubBuffer_Release
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrDllRegisterProxy
NdrDllUnregisterProxy
IUnknown_Release_Proxy
NdrOleFree
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
GetSSID
Sections
.text Size: 338KB - Virtual size: 338KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Headphone_Default_Generic_Default_DolbyAudio_vlldp1.2.xml.xml
-
Headphone_Default_Generic_Large_DolbyAudio_vlldp1.2.xml.xml
-
Headphone_Default_Generic_Medium_DolbyAudio_vlldp1.2.xml.xml
-
Headphone_Default_Generic_Small_DolbyAudio_vlldp1.2.xml.xml
-
Runtime.xml.xml
-
hdaudio.inf