Edge[.]zip | Triage

resource
unpack003/EdgeGameAssist.exe
unpack003/EdgeGameAssist.winmd
unpack003/Microsoft.Gaming.XboxGameBar.Private.winmd
unpack003/Microsoft.Gaming.XboxGameBar.dll
unpack003/Microsoft.Gaming.XboxGameBar.winmd
unpack003/Microsoft.UI.Xaml.winmd
unpack001/Edge/Application/128.0.2739.42/WidevineCdm/_platform_specific/win_x64/widevinecdm.dll
unpack001/Edge/Application/128.0.2739.42/concrt140.dll
unpack001/Edge/Application/128.0.2739.42/msvcp140.dll
unpack001/Edge/Application/128.0.2739.42/msvcp140_codecvt_ids.dll
unpack001/Edge/Application/128.0.2739.42/vccorlib140.dll
unpack001/Edge/Application/128.0.2739.42/vcruntime140.dll
unpack001/Edge/Application/128.0.2739.42/vcruntime140_1.dll

Edge.zip

.zip

Edge/Application/128.0.2739.42/128.0.2739.42.manifest

Edge/Application/128.0.2739.42/BHO/ie_to_edge_bho.dll

.dll regsvr32 windows:10 windows x86 arch:x86

aa08982f83cf3d61a068e4c61a6a8838

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

b7:9f:de:af:d9:05:34:ff:bd:27:c2:43:bd:cd:7e:eb:5e:67:1a:4c:66:84:ff:b9:42:e5:1f:54:4c:59:49:63
Signer

Actual PE Digest

b7:9f:de:af:d9:05:34:ff:bd:27:c2:43:bd:cd:7e:eb:5e:67:1a:4c:66:84:ff:b9:42:e5:1f:54:4c:59:49:63

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release_x64\win_clang_x86\ie_to_edge_bho.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive

CloseHandle

CompareFileTime

CompareStringW

CreateDirectoryW

CreateEventW

CreateFileW

CreateMutexW

CreateProcessW

CreateThread

DebugBreak

DecodePointer

DeleteCriticalSection

EncodePointer

EnterCriticalSection

EnumSystemLocalesW

ExitProcess

FindClose

FindFirstFileExW

FindNextFileW

FindResourceExW

FlushFileBuffers

FlushInstructionCache

FreeEnvironmentStringsW

FreeLibrary

GetACP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetConsoleMode

GetConsoleOutputCP

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

GetDateFormatW

GetEnvironmentStringsW

GetExitCodeProcess

GetFileSizeEx

GetFileType

GetLastError

GetLocalTime

GetLocaleInfoW

GetModuleFileNameW

GetModuleHandleExW

GetModuleHandleW

GetOEMCP

GetProcAddress

GetProcessHeap

GetProcessTimes

GetProductInfo

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemTimeAsFileTime

GetTimeFormatW

GetTimeZoneInformation

GetUserDefaultLCID

GetVersionExW

HeapAlloc

HeapDestroy

HeapFree

HeapReAlloc

HeapSize

InitializeCriticalSectionAndSpinCount

InitializeCriticalSectionEx

InitializeSListHead

InterlockedFlushSList

InterlockedPopEntrySList

InterlockedPushEntrySList

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

IsValidLocale

LCMapStringW

LeaveCriticalSection

LoadLibraryExA

LoadLibraryExW

LoadResource

LocalFree

LockResource

MultiByteToWideChar

OpenProcess

OutputDebugStringW

QueryPerformanceCounter

RaiseException

ReadConsoleW

ReadFile

ReleaseMutex

ReleaseSRWLockExclusive

RtlUnwind

SetEndOfFile

SetEnvironmentVariableW

SetEvent

SetFilePointerEx

SetLastError

SetStdHandle

SetUnhandledExceptionFilter

SizeofResource

SleepConditionVariableSRW

TerminateProcess

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

UnhandledExceptionFilter

VerSetConditionMask

VerifyVersionInfoW

VirtualAlloc

VirtualFree

WaitForSingleObject

WakeAllConditionVariable

WideCharToMultiByte

WriteConsoleW

WriteFile

urlmon

CreateUri

URLDownloadToCacheFileW

user32

CallWindowProcW

CharLowerBuffW

CreateWindowExW

DefWindowProcW

DestroyWindow

DispatchMessageW

GetAncestor

GetClassInfoExW

GetWindowLongW

KillTimer

LoadCursorW

MsgWaitForMultipleObjects

PeekMessageW

RegisterClassExW

SetTimer

SetWindowLongW

TranslateMessage

UnregisterClassW

oleaut32

DispCallFunc

LoadRegTypeLi

LoadTypeLi

SysAllocString

SysFreeString

SysStringLen

VariantClear

VariantInit

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW

GetTokenInformation

OpenProcessToken

RegCloseKey

RegCreateKeyExW

RegDeleteValueW

RegGetValueW

RegOpenKeyExW

RegQueryValueExW

RegSetValueExW

SystemFunction036

shlwapi

ord437

PathCombineW

PathFileExistsW

ord12

StrChrW

ord154

StrStrW

UrlUnescapeW

shell32

SHGetKnownFolderPath

SHGetSpecialFolderPathW

ShellExecuteW

ole32

CoCreateInstance

CoInitializeEx

CoTaskMemFree

CoUninitialize

wininet

CommitUrlCacheEntryBinaryBlob

DeleteUrlCacheContainerW

DeleteUrlCacheEntryW

GetUrlCacheEntryBinaryBlob

UrlCacheCreateContainer

UrlCacheFindFirstEntry

UrlCacheFindNextEntry

UrlCacheFreeEntryInfo

Exports

DllCanUnloadNow

DllGetClassObject

DllInstall

DllRegisterServer

DllUnregisterServer

Sections

.text
Size: 327KB - Virtual size: 326KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/BHO/ie_to_edge_bho_64.dll

.dll regsvr32 windows:10 windows x64 arch:x64

9c78e3cb5f4ddff53fb920472b09a133

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

f7:5d:92:8b:33:42:1b:67:14:53:09:e2:2a:70:b8:76:4a:6f:74:9d:bc:ec:51:e3:3b:4d:84:53:90:fa:c8:8f
Signer

Actual PE Digest

f7:5d:92:8b:33:42:1b:67:14:53:09:e2:2a:70:b8:76:4a:6f:74:9d:bc:ec:51:e3:3b:4d:84:53:90:fa:c8:8f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release_x64\ie_to_edge_bho_64.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive

CloseHandle

CompareFileTime

CompareStringW

CreateDirectoryW

CreateEventW

CreateFileW

CreateMutexW

CreateProcessW

CreateThread

DebugBreak

DecodePointer

DeleteCriticalSection

EncodePointer

EnterCriticalSection

EnumSystemLocalesW

ExitProcess

FindClose

FindFirstFileExW

FindNextFileW

FindResourceExW

FlsAlloc

FlsFree

FlsGetValue

FlsSetValue

FlushFileBuffers

FlushInstructionCache

FreeEnvironmentStringsW

FreeLibrary

GetACP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetConsoleMode

GetConsoleOutputCP

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

GetDateFormatW

GetEnvironmentStringsW

GetExitCodeProcess

GetFileSizeEx

GetFileType

GetLastError

GetLocalTime

GetLocaleInfoW

GetModuleFileNameW

GetModuleHandleExW

GetModuleHandleW

GetOEMCP

GetProcAddress

GetProcessHeap

GetProcessTimes

GetProductInfo

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemTimeAsFileTime

GetTimeFormatW

GetTimeZoneInformation

GetUserDefaultLCID

GetVersionExW

HeapAlloc

HeapDestroy

HeapFree

HeapReAlloc

HeapSize

InitializeCriticalSectionAndSpinCount

InitializeCriticalSectionEx

InitializeSListHead

InterlockedFlushSList

InterlockedPopEntrySList

InterlockedPushEntrySList

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

IsValidLocale

LCMapStringW

LeaveCriticalSection

LoadLibraryExA

LoadLibraryExW

LoadResource

LocalFree

LockResource

MultiByteToWideChar

OpenProcess

OutputDebugStringW

QueryPerformanceCounter

RaiseException

ReadConsoleW

ReadFile

ReleaseMutex

ReleaseSRWLockExclusive

RtlCaptureContext

RtlLookupFunctionEntry

RtlPcToFileHeader

RtlUnwind

RtlUnwindEx

RtlVirtualUnwind

SetEndOfFile

SetEnvironmentVariableW

SetEvent

SetFilePointerEx

SetLastError

SetStdHandle

SetUnhandledExceptionFilter

SizeofResource

SleepConditionVariableSRW

TerminateProcess

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

UnhandledExceptionFilter

VerSetConditionMask

VerifyVersionInfoW

VirtualAlloc

VirtualFree

WaitForSingleObject

WakeAllConditionVariable

WideCharToMultiByte

WriteConsoleW

WriteFile

urlmon

CreateUri

URLDownloadToCacheFileW

user32

CallWindowProcW

CharLowerBuffW

CreateWindowExW

DefWindowProcW

DestroyWindow

DispatchMessageW

GetAncestor

GetClassInfoExW

GetWindowLongPtrW

KillTimer

LoadCursorW

MsgWaitForMultipleObjects

PeekMessageW

RegisterClassExW

SetTimer

SetWindowLongPtrW

TranslateMessage

UnregisterClassW

oleaut32

DispCallFunc

LoadRegTypeLi

LoadTypeLi

SysAllocString

SysFreeString

SysStringLen

VariantClear

VariantInit

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW

GetTokenInformation

OpenProcessToken

RegCloseKey

RegCreateKeyExW

RegDeleteValueW

RegGetValueW

RegOpenKeyExW

RegQueryValueExW

RegSetValueExW

SystemFunction036

shlwapi

ord437

PathCombineW

PathFileExistsW

ord12

StrChrW

ord154

StrStrW

UrlUnescapeW

shell32

SHGetKnownFolderPath

SHGetSpecialFolderPathW

ShellExecuteW

ole32

CoCreateInstance

CoInitializeEx

CoTaskMemFree

CoUninitialize

wininet

CommitUrlCacheEntryBinaryBlob

DeleteUrlCacheContainerW

DeleteUrlCacheEntryW

GetUrlCacheEntryBinaryBlob

UrlCacheCreateContainer

UrlCacheFindFirstEntry

UrlCacheFindNextEntry

UrlCacheFreeEntryInfo

Exports

DllCanUnloadNow

DllGetClassObject

DllInstall

DllRegisterServer

DllUnregisterServer

Sections

.text
Size: 394KB - Virtual size: 393KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gxfg
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 156B

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/BHO/ie_to_edge_stub.exe

.exe windows:10 windows x64 arch:x64

200d5a19da27713996b5fd71e7de27c1

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

e1:c1:46:a7:7c:a4:be:aa:dd:0b:ae:81:a5:a2:76:d0:45:0d:03:37:02:83:92:c0:33:73:3b:45:17:7d:22:b0
Signer

Actual PE Digest

e1:c1:46:a7:7c:a4:be:aa:dd:0b:ae:81:a5:a2:76:d0:45:0d:03:37:02:83:92:c0:33:73:3b:45:17:7d:22:b0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\_work\e\src\out\Release_x64\ie_to_edge_stub.exe.pdb

Imports

advapi32

RegCloseKey

RegCreateKeyExW

RegGetValueW

RegOpenKeyExW

RegQueryValueExW

RegSetValueExW

oleaut32

SysFreeString

SysStringLen

shell32

CommandLineToArgvW

SHGetKnownFolderPath

SHGetSpecialFolderPathW

ShellExecuteW

shlwapi

PathCombineW

PathFileExistsW

StrChrW

user32

CharLowerBuffW

UnregisterClassW

wininet

DeleteUrlCacheContainerW

GetUrlCacheEntryBinaryBlob

UrlCacheCreateContainer

kernel32

AcquireSRWLockExclusive

CloseHandle

CompareStringW

CreateDirectoryW

CreateFileW

CreateProcessW

DebugBreak

DecodePointer

DeleteCriticalSection

EncodePointer

EnterCriticalSection

EnumSystemLocalesW

ExitProcess

FindClose

FindFirstFileExW

FindNextFileW

FlsAlloc

FlsFree

FlsGetValue

FlsSetValue

FlushFileBuffers

FreeEnvironmentStringsW

FreeLibrary

GetACP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetConsoleMode

GetConsoleOutputCP

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

GetDateFormatW

GetEnvironmentStringsW

GetExitCodeProcess

GetFileSizeEx

GetFileType

GetLastError

GetLocalTime

GetLocaleInfoW

GetModuleFileNameW

GetModuleHandleExW

GetModuleHandleW

GetOEMCP

GetProcAddress

GetProcessHeap

GetProductInfo

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemTimeAsFileTime

GetTimeFormatW

GetTimeZoneInformation

GetUserDefaultLCID

GetVersionExW

HeapAlloc

HeapDestroy

HeapFree

HeapReAlloc

HeapSize

InitializeCriticalSectionAndSpinCount

InitializeCriticalSectionEx

InitializeSListHead

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

IsValidLocale

LCMapStringW

LeaveCriticalSection

LoadLibraryExW

LocalFree

MultiByteToWideChar

OutputDebugStringW

QueryPerformanceCounter

RaiseException

ReadConsoleW

ReadFile

ReleaseSRWLockExclusive

RtlCaptureContext

RtlLookupFunctionEntry

RtlPcToFileHeader

RtlUnwind

RtlUnwindEx

RtlVirtualUnwind

SetEndOfFile

SetEnvironmentVariableW

SetFilePointerEx

SetLastError

SetStdHandle

SetUnhandledExceptionFilter

SleepConditionVariableSRW

TerminateProcess

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

UnhandledExceptionFilter

VerSetConditionMask

VerifyVersionInfoW

WaitForSingleObject

WakeAllConditionVariable

WideCharToMultiByte

WriteConsoleW

WriteFile

ole32

CoInitializeEx

CoTaskMemFree

urlmon

CreateUri

Sections

.text
Size: 360KB - Virtual size: 359KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gxfg
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 140B

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/EBWebView/x64/EmbeddedBrowserWebView.dll

.dll windows:10 windows x64 arch:x64

d9a3f42d75449aad65860897076eda34

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

1a:1f:25:c4:93:9f:43:04:08:55:0f:20:52:5c:26:eb:98:15:3e:49:77:be:00:64:20:63:26:56:6a:c3:40:99
Signer

Actual PE Digest

1a:1f:25:c4:93:9f:43:04:08:55:0f:20:52:5c:26:eb:98:15:3e:49:77:be:00:64:20:63:26:56:6a:c3:40:99

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release_x64\EBWebView\x64\EmbeddedBrowserWebView.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive

AssignProcessToJobObject

CancelIo

CloseHandle

CompareStringW

ConnectNamedPipe

CreateDirectoryW

CreateEventW

CreateFileA

CreateFileMappingW

CreateFileW

CreateIoCompletionPort

CreateNamedPipeW

CreateProcessW

CreateThread

CreateToolhelp32Snapshot

DecodePointer

DeleteCriticalSection

DeleteFileW

DeleteProcThreadAttributeList

DisconnectNamedPipe

DuplicateHandle

EncodePointer

EnterCriticalSection

EnumSystemLocalesW

ExitProcess

ExpandEnvironmentStringsW

FileTimeToSystemTime

FindClose

FindFirstFileExW

FindFirstFileW

FindNextFileW

FindResourceW

FlsAlloc

FlsFree

FlsGetValue

FlsSetValue

FlushFileBuffers

FlushViewOfFile

FormatMessageW

FreeEnvironmentStringsW

FreeLibrary

FreeLibraryAndExitThread

GetACP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetComputerNameExW

GetConsoleMode

GetConsoleOutputCP

GetCurrentDirectoryW

GetCurrentProcess

GetCurrentProcessId

GetCurrentThread

GetCurrentThreadId

GetDateFormatW

GetDriveTypeW

GetEnvironmentStringsW

GetEnvironmentVariableW

GetExitCodeProcess

GetFileAttributesExW

GetFileAttributesW

GetFileInformationByHandle

GetFileSizeEx

GetFileType

GetFinalPathNameByHandleW

GetFullPathNameW

GetLastError

GetLocalTime

GetLocaleInfoEx

GetLocaleInfoW

GetLogicalDriveStringsW

GetLogicalProcessorInformation

GetLongPathNameW

GetModuleFileNameW

GetModuleHandleA

GetModuleHandleExA

GetModuleHandleExW

GetModuleHandleW

GetNamedPipeClientProcessId

GetNamedPipeServerProcessId

GetNativeSystemInfo

GetOEMCP

GetPriorityClass

GetProcAddress

GetProcessHeap

GetProcessId

GetProcessMitigationPolicy

GetProductInfo

GetQueuedCompletionStatus

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemDirectoryW

GetSystemInfo

GetSystemTimeAsFileTime

GetTempPathW

GetThreadId

GetThreadPriority

GetTickCount

GetTickCount64

GetTimeFormatW

GetTimeZoneInformation

GetUserDefaultLCID

GetUserDefaultLangID

GetVersionExW

GetWindowsDirectoryW

GlobalLock

GlobalSize

GlobalUnlock

HeapAlloc

HeapDestroy

HeapFree

HeapReAlloc

HeapSize

InitOnceExecuteOnce

InitializeConditionVariable

InitializeCriticalSection

InitializeCriticalSectionAndSpinCount

InitializeCriticalSectionEx

InitializeProcThreadAttributeList

InitializeSListHead

InitializeSRWLock

InterlockedFlushSList

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

IsValidLocale

IsWow64Process

K32GetModuleInformation

K32GetProcessMemoryInfo

K32QueryWorkingSetEx

LCMapStringW

LeaveCriticalSection

LoadLibraryExA

LoadLibraryExW

LoadLibraryW

LoadResource

LocalAlloc

LocalFree

LockResource

MapViewOfFile

MultiByteToWideChar

OpenProcess

OutputDebugStringA

OutputDebugStringW

PostQueuedCompletionStatus

Process32FirstW

Process32NextW

QueryDosDeviceW

QueryFullProcessImageNameW

QueryInformationJobObject

QueryPerformanceCounter

QueryPerformanceFrequency

QueryThreadCycleTime

RaiseException

ReadConsoleW

ReadFile

RegisterWaitForSingleObject

ReleaseSRWLockExclusive

RemoveDirectoryW

ResetEvent

ResumeThread

RtlCaptureContext

RtlCaptureStackBackTrace

RtlLookupFunctionEntry

RtlPcToFileHeader

RtlUnwind

RtlUnwindEx

RtlVirtualUnwind

SetCurrentDirectoryW

SetEndOfFile

SetEnvironmentVariableW

SetEvent

SetFileAttributesW

SetFilePointerEx

SetHandleInformation

SetLastError

SetStdHandle

SetThreadInformation

SetThreadPriority

SetUnhandledExceptionFilter

SizeofResource

Sleep

SleepConditionVariableSRW

SleepEx

SwitchToThread

SystemTimeToTzSpecificLocalTime

TerminateProcess

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

TryAcquireSRWLockExclusive

UnhandledExceptionFilter

UnmapViewOfFile

UnregisterWaitEx

UpdateProcThreadAttribute

VirtualAlloc

VirtualFree

VirtualProtect

VirtualQuery

WaitForMultipleObjects

WaitForSingleObject

WaitNamedPipeW

WakeAllConditionVariable

WakeConditionVariable

WideCharToMultiByte

WriteConsoleW

WriteFile

lstrcmpiW

oleaut32

SafeArrayCreateVector

SafeArrayGetDim

SafeArrayGetElement

SafeArrayGetLBound

SafeArrayGetUBound

SafeArrayGetVartype

SafeArrayPutElement

SysAllocString

SysAllocStringLen

SysFreeString

VariantClear

VariantCopy

VariantInit

ntdll

NtClose

NtOpenKeyEx

NtQueryValueKey

RtlFormatCurrentUserKeyPath

RtlFreeUnicodeString

RtlGetLastNtStatus

RtlInitUnicodeString

Exports

??0IDataFieldVisitor@telemetry_client@@QEAA@AEBV01@@Z

??0IDataFieldVisitor@telemetry_client@@QEAA@XZ

??1IDataFieldVisitor@telemetry_client@@UEAA@XZ

??4IDataFieldVisitor@telemetry_client@@QEAAAEAV01@AEBV01@@Z

??_7IDataFieldVisitor@telemetry_client@@6B@

CreateWebViewEnvironmentWithOptionsInternal

DllCanUnloadNow

DllGetClassObject

GetHandleVerifier

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 909KB - Virtual size: 909KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gxfg
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 196B

.tls
Size: 1024B - Virtual size: 529B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

CPADinfo
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

malloc_h
Size: 512B - Virtual size: 226B

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/EBWebView/x86/EmbeddedBrowserWebView.dll

.dll windows:10 windows x86 arch:x86

aee431ceb8adde349c3cc90f784e6b84

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

24:ec:ae:d6:63:40:65:0b:2b:bb:60:df:f6:75:68:99:42:be:a2:e0:f7:b3:28:93:45:c9:b7:57:10:f2:c7:af
Signer

Actual PE Digest

24:ec:ae:d6:63:40:65:0b:2b:bb:60:df:f6:75:68:99:42:be:a2:e0:f7:b3:28:93:45:c9:b7:57:10:f2:c7:af

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release\EBWebView\x86\EmbeddedBrowserWebView.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive

AssignProcessToJobObject

CancelIo

CloseHandle

CompareStringW

ConnectNamedPipe

CreateDirectoryW

CreateEventW

CreateFileA

CreateFileMappingW

CreateFileW

CreateIoCompletionPort

CreateNamedPipeW

CreateProcessW

CreateThread

CreateToolhelp32Snapshot

DecodePointer

DeleteCriticalSection

DeleteFileW

DeleteProcThreadAttributeList

DisconnectNamedPipe

DuplicateHandle

EncodePointer

EnterCriticalSection

EnumSystemLocalesW

ExitProcess

ExpandEnvironmentStringsW

FileTimeToSystemTime

FindClose

FindFirstFileExW

FindFirstFileW

FindNextFileW

FindResourceW

FlushFileBuffers

FlushViewOfFile

FormatMessageW

FreeEnvironmentStringsW

FreeLibrary

FreeLibraryAndExitThread

GetACP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetComputerNameExW

GetConsoleMode

GetConsoleOutputCP

GetCurrentDirectoryW

GetCurrentProcess

GetCurrentProcessId

GetCurrentThread

GetCurrentThreadId

GetDateFormatW

GetDriveTypeW

GetEnvironmentStringsW

GetEnvironmentVariableW

GetExitCodeProcess

GetFileAttributesExW

GetFileAttributesW

GetFileInformationByHandle

GetFileSizeEx

GetFileType

GetFinalPathNameByHandleW

GetFullPathNameW

GetLastError

GetLocalTime

GetLocaleInfoEx

GetLocaleInfoW

GetLogicalDriveStringsW

GetLogicalProcessorInformation

GetLongPathNameW

GetModuleFileNameW

GetModuleHandleA

GetModuleHandleExA

GetModuleHandleExW

GetModuleHandleW

GetNamedPipeClientProcessId

GetNamedPipeServerProcessId

GetNativeSystemInfo

GetOEMCP

GetPriorityClass

GetProcAddress

GetProcessHeap

GetProcessId

GetProcessMitigationPolicy

GetProductInfo

GetQueuedCompletionStatus

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemDirectoryW

GetSystemInfo

GetSystemTimeAsFileTime

GetTempPathW

GetThreadId

GetThreadPriority

GetTickCount64

GetTickCount

GetTimeFormatW

GetTimeZoneInformation

GetUserDefaultLCID

GetUserDefaultLangID

GetVersionExW

GetWindowsDirectoryW

GlobalLock

GlobalSize

GlobalUnlock

HeapAlloc

HeapDestroy

HeapFree

HeapReAlloc

HeapSize

InitOnceExecuteOnce

InitializeConditionVariable

InitializeCriticalSection

InitializeCriticalSectionAndSpinCount

InitializeCriticalSectionEx

InitializeProcThreadAttributeList

InitializeSListHead

InitializeSRWLock

InterlockedFlushSList

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

IsValidLocale

IsWow64Process

K32GetModuleInformation

K32GetProcessMemoryInfo

K32QueryWorkingSetEx

LCMapStringW

LeaveCriticalSection

LoadLibraryExA

LoadLibraryExW

LoadLibraryW

LoadResource

LocalAlloc

LocalFree

LockResource

MapViewOfFile

MultiByteToWideChar

OpenProcess

OutputDebugStringA

OutputDebugStringW

PostQueuedCompletionStatus

Process32FirstW

Process32NextW

QueryDosDeviceW

QueryFullProcessImageNameW

QueryInformationJobObject

QueryPerformanceCounter

QueryPerformanceFrequency

QueryThreadCycleTime

RaiseException

ReadConsoleW

ReadFile

RegisterWaitForSingleObject

ReleaseSRWLockExclusive

RemoveDirectoryW

ResetEvent

ResumeThread

RtlCaptureStackBackTrace

RtlUnwind

SetCurrentDirectoryW

SetEndOfFile

SetEnvironmentVariableW

SetEvent

SetFileAttributesW

SetFilePointerEx

SetHandleInformation

SetLastError

SetStdHandle

SetThreadInformation

SetThreadPriority

SetUnhandledExceptionFilter

SizeofResource

Sleep

SleepConditionVariableSRW

SleepEx

SwitchToThread

SystemTimeToTzSpecificLocalTime

TerminateProcess

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

TryAcquireSRWLockExclusive

UnhandledExceptionFilter

UnmapViewOfFile

UnregisterWaitEx

UpdateProcThreadAttribute

VirtualAlloc

VirtualFree

VirtualProtect

VirtualQuery

WaitForMultipleObjects

WaitForSingleObject

WaitNamedPipeW

WakeAllConditionVariable

WakeConditionVariable

WideCharToMultiByte

WriteConsoleW

WriteFile

lstrcmpiW

oleaut32

SafeArrayCreateVector

SafeArrayGetDim

SafeArrayGetElement

SafeArrayGetLBound

SafeArrayGetUBound

SafeArrayGetVartype

SafeArrayPutElement

SysAllocString

SysAllocStringLen

SysFreeString

VariantClear

VariantCopy

VariantInit

ntdll

NtClose

NtOpenKeyEx

NtQueryValueKey

RtlFormatCurrentUserKeyPath

RtlFreeUnicodeString

RtlGetLastNtStatus

RtlInitUnicodeString

Exports

??0IDataFieldVisitor@telemetry_client@@QAE@ABV01@@Z

??0IDataFieldVisitor@telemetry_client@@QAE@XZ

??1IDataFieldVisitor@telemetry_client@@UAE@XZ

??4IDataFieldVisitor@telemetry_client@@QAEAAV01@ABV01@@Z

??_7IDataFieldVisitor@telemetry_client@@6B@

CreateWebViewEnvironmentWithOptionsInternal

DllCanUnloadNow

DllGetClassObject

GetHandleVerifier

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 749KB - Virtual size: 749KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 273B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

CPADinfo
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

malloc_h
Size: 512B - Virtual size: 187B

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/Edge.dat

Edge/Application/128.0.2739.42/EdgeWebView.dat

Edge/Application/128.0.2739.42/Extensions/external_extensions.json

Edge/Application/128.0.2739.42/Installer/msedge_7z.data

Edge/Application/128.0.2739.42/Installer/setup.exe

.exe windows:10 windows x64 arch:x64

7092b3b70bf172b8a37ac9407e5ce08a

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

85:6f:4a:24:89:56:81:e6:3b:14:ce:9d:09:cf:b1:3f:a0:bf:ae:dd:b8:51:18:b0:27:c4:f0:7e:9b:b3:34:37
Signer

Actual PE Digest

85:6f:4a:24:89:56:81:e6:3b:14:ce:9d:09:cf:b1:3f:a0:bf:ae:dd:b8:51:18:b0:27:c4:f0:7e:9b:b3:34:37

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\_work\e\src\out\Release_x64\setup.exe.pdb

Imports

kernel32

AcquireSRWLockExclusive

AddVectoredExceptionHandler

AssignProcessToJobObject

CloseHandle

CompareStringW

ConnectNamedPipe

CopyFileW

CreateDirectoryW

CreateEventW

CreateFileA

CreateFileMappingW

CreateFileW

CreateHardLinkW

CreateIoCompletionPort

CreateMutexW

CreateNamedPipeW

CreateProcessW

CreateSemaphoreW

CreateThread

CreateToolhelp32Snapshot

DecodePointer

DeleteCriticalSection

DeleteFileW

DeleteProcThreadAttributeList

DeviceIoControl

DisconnectNamedPipe

DuplicateHandle

EncodePointer

EnterCriticalSection

EnumResourceNamesW

EnumSystemLocalesW

ExitProcess

ExpandEnvironmentStringsW

FileTimeToSystemTime

FindClose

FindFirstFileExW

FindNextFileW

FindResourceW

FlsAlloc

FlsFree

FlsGetValue

FlsSetValue

FlushFileBuffers

FlushViewOfFile

FormatMessageA

FormatMessageW

FreeEnvironmentStringsW

FreeLibrary

GetACP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetComputerNameExW

GetConsoleMode

GetConsoleOutputCP

GetCurrentDirectoryW

GetCurrentProcess

GetCurrentProcessId

GetCurrentThread

GetCurrentThreadId

GetDateFormatW

GetDiskFreeSpaceExW

GetDriveTypeW

GetEnvironmentStringsW

GetEnvironmentVariableW

GetExitCodeProcess

GetFileAttributesExW

GetFileAttributesW

GetFileInformationByHandle

GetFileInformationByHandleEx

GetFileSizeEx

GetFileTime

GetFileType

GetFullPathNameW

GetGeoInfoW

GetLastError

GetLocalTime

GetLocaleInfoEx

GetLocaleInfoW

GetLogicalDriveStringsW

GetLogicalProcessorInformation

GetLongPathNameW

GetModuleFileNameW

GetModuleHandleA

GetModuleHandleExW

GetModuleHandleW

GetNativeSystemInfo

GetOEMCP

GetPriorityClass

GetProcAddress

GetProcessHandleCount

GetProcessHeap

GetProcessId

GetProcessMitigationPolicy

GetProcessTimes

GetProcessWorkingSetSizeEx

GetProductInfo

GetQueuedCompletionStatus

GetShortPathNameA

GetShortPathNameW

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemDefaultLCID

GetSystemDirectoryW

GetSystemInfo

GetSystemTimeAsFileTime

GetTempPathW

GetThreadContext

GetThreadId

GetThreadLocale

GetThreadPreferredUILanguages

GetThreadPriority

GetThreadPriorityBoost

GetTickCount

GetTimeFormatW

GetTimeZoneInformation

GetUserDefaultLCID

GetUserDefaultLangID

GetUserDefaultUILanguage

GetUserGeoID

GetVersionExW

GetVolumePathNameW

GetWindowsDirectoryW

HeapAlloc

HeapDestroy

HeapFree

HeapReAlloc

HeapSetInformation

HeapSize

InitOnceExecuteOnce

InitializeCriticalSection

InitializeCriticalSectionAndSpinCount

InitializeCriticalSectionEx

InitializeProcThreadAttributeList

InitializeSListHead

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

IsValidLocale

IsWow64Process

K32EnumProcesses

K32GetModuleInformation

K32GetPerformanceInfo

K32GetProcessImageFileNameW

K32GetProcessMemoryInfo

LCMapStringW

LeaveCriticalSection

LoadLibraryExA

LoadLibraryExW

LoadLibraryW

LoadResource

LocalFree

LockFileEx

LockResource

MapViewOfFile

MoveFileExW

MoveFileW

MultiByteToWideChar

OpenMutexW

OpenProcess

OpenThread

OutputDebugStringA

OutputDebugStringW

PeekNamedPipe

PostQueuedCompletionStatus

Process32FirstW

Process32NextW

QueryDosDeviceW

QueryFullProcessImageNameW

QueryPerformanceCounter

QueryPerformanceFrequency

QueryThreadCycleTime

QueueUserAPC

RaiseException

ReadConsoleW

ReadFile

ReadProcessMemory

RegisterWaitForSingleObject

ReleaseMutex

ReleaseSRWLockExclusive

ReleaseSemaphore

RemoveDirectoryW

RemoveVectoredExceptionHandler

ReplaceFileW

ResetEvent

ResumeThread

RtlCaptureContext

RtlCaptureStackBackTrace

RtlLookupFunctionEntry

RtlPcToFileHeader

RtlUnwind

RtlUnwindEx

RtlVirtualUnwind

SetConsoleCtrlHandler

SetCurrentDirectoryW

SetEndOfFile

SetEnvironmentVariableW

SetErrorMode

SetEvent

SetFileAttributesW

SetFileInformationByHandle

SetFilePointer

SetFilePointerEx

SetFileTime

SetHandleInformation

SetLastError

SetNamedPipeHandleState

SetPriorityClass

SetProcessShutdownParameters

SetProcessWorkingSetSizeEx

SetStdHandle

SetThreadInformation

SetThreadPriority

SetThreadPriorityBoost

SetUnhandledExceptionFilter

SizeofResource

Sleep

SleepConditionVariableSRW

SleepEx

SuspendThread

SwitchToThread

SystemTimeToTzSpecificLocalTime

TerminateProcess

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

TransactNamedPipe

TryAcquireSRWLockExclusive

UnhandledExceptionFilter

UnlockFileEx

UnmapViewOfFile

UnregisterWait

UnregisterWaitEx

UpdateProcThreadAttribute

VerSetConditionMask

VerifyVersionInfoW

VirtualAlloc

VirtualAllocEx

VirtualFree

VirtualProtect

VirtualQuery

VirtualQueryEx

WTSGetActiveConsoleSessionId

WaitForMultipleObjects

WaitForSingleObject

WaitNamedPipeW

WakeAllConditionVariable

WakeConditionVariable

WideCharToMultiByte

Wow64GetThreadContext

WriteConsoleW

WriteFile

WriteProcessMemory

lstrcmpiA

lstrcmpiW

ntdll

NtClose

NtDeleteKey

NtOpenKeyEx

NtQueryValueKey

RtlFormatCurrentUserKeyPath

RtlFreeUnicodeString

RtlInitUnicodeString

ncrypt

NCryptCreatePersistedKey

NCryptDeleteKey

NCryptEnumKeys

NCryptExportKey

NCryptFinalizeKey

NCryptFreeBuffer

NCryptFreeObject

NCryptIsAlgSupported

NCryptOpenKey

NCryptOpenStorageProvider

NCryptSignHash

crypt32

CertCloseStore

CertFindCertificateInStore

CertFreeCertificateContext

CertGetNameStringW

CryptMsgClose

CryptMsgGetParam

CryptQueryObject

Exports

??0IDataFieldVisitor@telemetry_client@@QEAA@AEBV01@@Z

??0IDataFieldVisitor@telemetry_client@@QEAA@XZ

??1IDataFieldVisitor@telemetry_client@@UEAA@XZ

??4IDataFieldVisitor@telemetry_client@@QEAAAEAV01@AEBV01@@Z

??_7IDataFieldVisitor@telemetry_client@@6B@

GetHandleVerifier

sqlite3_dbdata_init

Sections

.text
Size: 5.2MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 756KB - Virtual size: 755KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gxfg
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 228B

.rodata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 481B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

CPADinfo
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

LZMADEC
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

malloc_h
Size: 512B - Virtual size: 226B

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 448KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/Locales/af.pak

Edge/Application/128.0.2739.42/Locales/am.pak

Edge/Application/128.0.2739.42/Locales/ar.pak

Edge/Application/128.0.2739.42/Locales/as.pak

Edge/Application/128.0.2739.42/Locales/az.pak

Edge/Application/128.0.2739.42/Locales/bg.pak

Edge/Application/128.0.2739.42/Locales/bn-IN.pak

Edge/Application/128.0.2739.42/Locales/bs.pak

Edge/Application/128.0.2739.42/Locales/ca-Es-VALENCIA.pak

Edge/Application/128.0.2739.42/Locales/ca.pak

Edge/Application/128.0.2739.42/Locales/cs.pak

Edge/Application/128.0.2739.42/Locales/cy.pak

Edge/Application/128.0.2739.42/Locales/da.pak

Edge/Application/128.0.2739.42/Locales/de.pak

Edge/Application/128.0.2739.42/Locales/el.pak

Edge/Application/128.0.2739.42/Locales/en-GB.pak

Edge/Application/128.0.2739.42/Locales/en-US.pak

Edge/Application/128.0.2739.42/Locales/es-419.pak

Edge/Application/128.0.2739.42/Locales/es.pak

Edge/Application/128.0.2739.42/Locales/et.pak

Edge/Application/128.0.2739.42/Locales/eu.pak

Edge/Application/128.0.2739.42/Locales/fa.pak

Edge/Application/128.0.2739.42/Locales/fi.pak

Edge/Application/128.0.2739.42/Locales/fil.pak

Edge/Application/128.0.2739.42/Locales/fr-CA.pak

Edge/Application/128.0.2739.42/Locales/fr.pak

Edge/Application/128.0.2739.42/Locales/ga.pak

Edge/Application/128.0.2739.42/Locales/gd.pak

Edge/Application/128.0.2739.42/Locales/gl.pak

Edge/Application/128.0.2739.42/Locales/gu.pak

Edge/Application/128.0.2739.42/Locales/he.pak

Edge/Application/128.0.2739.42/Locales/hi.pak

Edge/Application/128.0.2739.42/Locales/hr.pak

Edge/Application/128.0.2739.42/Locales/hu.pak

Edge/Application/128.0.2739.42/Locales/id.pak

Edge/Application/128.0.2739.42/Locales/is.pak

Edge/Application/128.0.2739.42/Locales/it.pak

Edge/Application/128.0.2739.42/Locales/ja.pak

Edge/Application/128.0.2739.42/Locales/ka.pak

Edge/Application/128.0.2739.42/Locales/kk.pak

Edge/Application/128.0.2739.42/Locales/km.pak

Edge/Application/128.0.2739.42/Locales/kn.pak

Edge/Application/128.0.2739.42/Locales/ko.pak

Edge/Application/128.0.2739.42/Locales/kok.pak

Edge/Application/128.0.2739.42/Locales/lb.pak

Edge/Application/128.0.2739.42/Locales/lo.pak

Edge/Application/128.0.2739.42/Locales/lt.pak

Edge/Application/128.0.2739.42/Locales/lv.pak

Edge/Application/128.0.2739.42/Locales/mi.pak

Edge/Application/128.0.2739.42/Locales/mk.pak

Edge/Application/128.0.2739.42/Locales/ml.pak

Edge/Application/128.0.2739.42/Locales/mr.pak

Edge/Application/128.0.2739.42/Locales/ms.pak

Edge/Application/128.0.2739.42/Locales/mt.pak

Edge/Application/128.0.2739.42/Locales/nb.pak

Edge/Application/128.0.2739.42/Locales/ne.pak

Edge/Application/128.0.2739.42/Locales/nl.pak

Edge/Application/128.0.2739.42/Locales/nn.pak

Edge/Application/128.0.2739.42/Locales/or.pak

Edge/Application/128.0.2739.42/Locales/pa.pak

Edge/Application/128.0.2739.42/Locales/pl.pak

Edge/Application/128.0.2739.42/Locales/pt-BR.pak

Edge/Application/128.0.2739.42/Locales/pt-PT.pak

Edge/Application/128.0.2739.42/Locales/qu.pak

Edge/Application/128.0.2739.42/Locales/ro.pak

Edge/Application/128.0.2739.42/Locales/ru.pak

Edge/Application/128.0.2739.42/Locales/sk.pak

Edge/Application/128.0.2739.42/Locales/sl.pak

Edge/Application/128.0.2739.42/Locales/sq.pak

Edge/Application/128.0.2739.42/Locales/sr-Cyrl-BA.pak

Edge/Application/128.0.2739.42/Locales/sr-Latn-RS.pak

Edge/Application/128.0.2739.42/Locales/sr.pak

Edge/Application/128.0.2739.42/Locales/sv.pak

Edge/Application/128.0.2739.42/Locales/ta.pak

Edge/Application/128.0.2739.42/Locales/te.pak

Edge/Application/128.0.2739.42/Locales/th.pak

Edge/Application/128.0.2739.42/Locales/tr.pak

Edge/Application/128.0.2739.42/Locales/tt.pak

Edge/Application/128.0.2739.42/Locales/ug.pak

Edge/Application/128.0.2739.42/Locales/uk.pak

Edge/Application/128.0.2739.42/Locales/ur.pak

Edge/Application/128.0.2739.42/Locales/vi.pak

Edge/Application/128.0.2739.42/Locales/zh-CN.pak

Edge/Application/128.0.2739.42/Locales/zh-TW.pak

Edge/Application/128.0.2739.42/MEIPreload/manifest.json

Edge/Application/128.0.2739.42/MEIPreload/preloaded_data.pb

Edge/Application/128.0.2739.42/PdfPreview/PdfPreviewHandler.dll

.dll windows:10 windows x64 arch:x64

3d5da91f7399a4896ae98aae7981d482

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

44:fa:fa:5a:2f:c1:1f:49:fb:46:72:1b:50:e8:83:ee:b2:fd:d3:f2:1e:6a:46:60:51:83:6c:e7:74:40:f6:7f
Signer

Actual PE Digest

44:fa:fa:5a:2f:c1:1f:49:fb:46:72:1b:50:e8:83:ee:b2:fd:d3:f2:1e:6a:46:60:51:83:6c:e7:74:40:f6:7f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release_x64\PdfPreviewHandler.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive

AcquireSRWLockShared

CloseHandle

CreateFileW

DecodePointer

DisableThreadLibraryCalls

EncodePointer

FreeLibrary

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

GetEnvironmentVariableW

GetFileAttributesW

GetLastError

GetModuleFileNameW

GetModuleHandleW

GetProcAddress

GetProcessHeap

GetSystemTimeAsFileTime

HeapFree

InitializeSListHead

IsDebuggerPresent

IsProcessorFeaturePresent

LoadLibraryExW

LoadLibraryW

OutputDebugStringA

OutputDebugStringW

QueryPerformanceCounter

ReleaseSRWLockExclusive

ReleaseSRWLockShared

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

SetUnhandledExceptionFilter

SleepConditionVariableSRW

TerminateProcess

UnhandledExceptionFilter

WakeAllConditionVariable

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

user32

BeginPaint

CreateWindowExW

DefWindowProcW

DestroyWindow

EndPaint

GetClientRect

GetFocus

GetWindowLongPtrW

LoadCursorW

PostMessageW

PostQuitMessage

RegisterClassExW

SetFocus

SetParent

SetWindowLongPtrW

SetWindowPos

ShowWindow

UpdateWindow

shell32

SHGetKnownFolderPath

api-ms-win-core-path-l1-1-0

PathCchAppendEx

advapi32

EventRegister

EventSetInformation

EventUnregister

EventWriteTransfer

GetSidSubAuthority

GetSidSubAuthorityCount

GetTokenInformation

OpenProcessToken

RegCloseKey

RegGetValueW

RegOpenKeyExW

RegQueryValueExW

ole32

CoTaskMemAlloc

CoTaskMemFree

vcruntime140

_CxxThrowException

__C_specific_handler

__CxxFrameHandler3

__std_exception_copy

__std_exception_destroy

__std_terminate

__std_type_info_destroy_list

__uncaught_exceptions

_purecall

memchr

memcmp

memcpy

memmove

memset

wcsrchr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-locale-l1-1-0

___mb_cur_max_l_func

__pctype_func

_configthreadlocale

_create_locale

_free_locale

setlocale

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func

__stdio_common_vfprintf

__stdio_common_vsprintf

__stdio_common_vsscanf

fflush

fputwc

fwrite

getc

getwc

ungetc

ungetwc

api-ms-win-crt-string-l1-1-0

_isctype_l

_iswlower_l

_strdup

_wcsicmp

mbrlen

strcmp

strlen

tolower

toupper

wcscmp

wcslen

wcsncpy_s

wcsnlen

api-ms-win-crt-runtime-l1-1-0

__sys_nerr

_cexit

_configure_narrow_argv

_crt_atexit

_errno

_execute_onexit_table

_initialize_narrow_environment

_initialize_onexit_table

_initterm

_initterm_e

_register_onexit_function

_seh_filter_dll

abort

strerror_s

api-ms-win-crt-heap-l1-1-0

_callnewh

free

malloc

realloc

api-ms-win-crt-multibyte-l1-1-0

_mbtowc_l

api-ms-win-crt-time-l1-1-0

_strftime_l

api-ms-win-crt-convert-l1-1-0

_strtod_l

_strtof_l

_strtoi64_l

_strtold_l

_strtoui64_l

_ultow_s

_wtoi

mbrtowc

mbsrtowcs

wcrtomb

wcrtomb_s

wcstol

Exports

DllCanUnloadNow

DllGetClassObject

Sections

.text
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 140B

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/PrivacySandboxAttestationsPreloaded/manifest.json

Edge/Application/128.0.2739.42/PrivacySandboxAttestationsPreloaded/privacy-sandbox-attestations.dat

Edge/Application/128.0.2739.42/ResiliencyLinks/Edge.dat.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/EdgeWebView.dat.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Extensions/external_extensions.json.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/af.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/am.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/ar.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/as.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/az.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/bg.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/bn-IN.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/bs.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/ca-Es-VALENCIA.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/ca.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/cs.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/cy.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/da.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/de.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/el.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/en-GB.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/en-US.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/es-419.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/es.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/et.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/eu.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/fa.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/fi.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/fil.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/fr-CA.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/fr.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/ga.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/gd.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/gl.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/gu.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/he.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/hi.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/hr.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/hu.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/id.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/is.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/it.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/ja.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/ka.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/kk.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/km.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/kn.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/ko.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/kok.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/lb.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/lo.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/lt.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/lv.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/mi.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/mk.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/ml.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/mr.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/ms.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/mt.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/nb.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/ne.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/nl.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/nn.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/or.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/pa.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/pl.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/pt-BR.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/pt-PT.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/qu.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/ro.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/ru.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/sk.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/sl.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/sq.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/sr-Cyrl-BA.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/sr-Latn-RS.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/sr.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/sv.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/ta.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/te.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/th.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/tr.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/tt.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/ug.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/uk.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/ur.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/vi.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/zh-CN.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Locales/zh-TW.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/MEIPreload/manifest.json.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/MEIPreload/preloaded_data.pb.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/PrivacySandboxAttestationsPreloaded/manifest.json.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/PrivacySandboxAttestationsPreloaded/privacy-sandbox-attestations.dat.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Trust Protection Lists/Mu/Advertising.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Trust Protection Lists/Mu/Analytics.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Trust Protection Lists/Mu/CompatExceptions.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Trust Protection Lists/Mu/Content.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Trust Protection Lists/Mu/Cryptomining.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Trust Protection Lists/Mu/Entities.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Trust Protection Lists/Mu/Fingerprinting.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Trust Protection Lists/Mu/LICENSE.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Trust Protection Lists/Mu/Other.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Trust Protection Lists/Mu/Social.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Trust Protection Lists/Mu/TransparentAdvertisers.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Trust Protection Lists/Sigma/Advertising.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Trust Protection Lists/Sigma/Analytics.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Trust Protection Lists/Sigma/Content.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Trust Protection Lists/Sigma/Cryptomining.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Trust Protection Lists/Sigma/Entities.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Trust Protection Lists/Sigma/Fingerprinting.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Trust Protection Lists/Sigma/LICENSE.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Trust Protection Lists/Sigma/Other.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Trust Protection Lists/Sigma/Social.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Trust Protection Lists/Sigma/Staging.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/Trust Protection Lists/manifest.json.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/VisualElements/Logo.png.DATA

.png

Edge/Application/128.0.2739.42/ResiliencyLinks/VisualElements/LogoBeta.png.DATA

.png

Edge/Application/128.0.2739.42/ResiliencyLinks/VisualElements/LogoCanary.png.DATA

.png

Edge/Application/128.0.2739.42/ResiliencyLinks/VisualElements/LogoDev.png.DATA

.png

Edge/Application/128.0.2739.42/ResiliencyLinks/VisualElements/SmallLogo.png.DATA

.png

Edge/Application/128.0.2739.42/ResiliencyLinks/VisualElements/SmallLogoBeta.png.DATA

.png

Edge/Application/128.0.2739.42/ResiliencyLinks/VisualElements/SmallLogoCanary.png.DATA

.png

Edge/Application/128.0.2739.42/ResiliencyLinks/VisualElements/SmallLogoDev.png.DATA

.png

Edge/Application/128.0.2739.42/ResiliencyLinks/WidevineCdm/_platform_specific/win_x64/widevinecdm.dll.sig.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/WidevineCdm/manifest.json.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/copilot_provider_msix/copilot_provider_neutral.msix.DATA

.appx

AppxBlockMap.xml

.xml

AppxManifest.xml

.xml

AppxSignature.p7x

Images/AppList.png

.png

Images/StoreDisplay-150.png

.png

Images/StoreLogo.scale-100.png

.png

Images/StoreLogo.scale-125.png

.png

Images/StoreLogo.scale-150.png

.png

Images/StoreLogo.scale-200.png

.png

Images/StoreLogo.scale-400.png

.png

[Content_Types].xml

.xml

priconfig.xml

.xml

resources.pri

windowsAIChatProvider.sccd

.xml

Edge/Application/128.0.2739.42/ResiliencyLinks/copilot_provider_msix/package_metadata.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/delegatedWebFeatures.sccd.DATA

.xml

Edge/Application/128.0.2739.42/ResiliencyLinks/edge_feedback/camera_mf_trace.wprp.DATA

.xml

Edge/Application/128.0.2739.42/ResiliencyLinks/edge_feedback/mf_trace.wprp.DATA

.xml

Edge/Application/128.0.2739.42/ResiliencyLinks/edge_game_assist/EdgeGameAssist_1.0.2729.0_x64.msix.DATA

.appx

AppxBlockMap.xml

.xml

AppxManifest.xml

AppxMetadata/CodeIntegrity.cat

AppxSignature.p7x

Assets/GamerIllustration.theme-dark.png

.png

Assets/GamerIllustration.theme-light.png

.png

Assets/LockScreenLogo.scale-200.png

.png

Assets/SplashScreen.scale-200.png

.png

Assets/Square150x150Logo.scale-200.png

.png

Assets/Square44x44Logo.scale-200.png

.png

Assets/Square44x44Logo.targetsize-24_altform-unplated.png

.png

Assets/StoreLogo.scale-200.png

.png

Assets/Wide310x150Logo.scale-200.png

.png

EdgeGameAssist.exe

.exe windows:6 windows x64 arch:x64

e96bdfe2626f20cc6f747ead6702043e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_APPCONTAINER

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\_work\1\a\edge_game_bar_widget\x64\Release\edge_game_bar_widget\EdgeGameAssist.pdb

Imports

user32

CreateWindowExW

SetParent

RegisterClassExW

GetSystemMetrics

SetWindowLongPtrW

DefWindowProcW

kernel32

SleepConditionVariableSRW

QueryPerformanceCounter

SetEnvironmentVariableA

SetEnvironmentVariableW

GetCurrentProcessId

GetLastError

WakeAllConditionVariable

AcquireSRWLockExclusive

GetCurrentThreadId

OutputDebugStringW

OutputDebugStringA

GetTickCount64

GetSystemTimeAsFileTime

GetModuleHandleExW

DisableThreadLibraryCalls

TrySubmitThreadpoolCallback

InitializeSListHead

ReleaseSRWLockExclusive

GetProcessHeap

MultiByteToWideChar

FreeLibrary

InterlockedPushEntrySList

GetProcAddress

LoadLibraryW

HeapAlloc

HeapFree

InterlockedFlushSList

ole32

CoTaskMemAlloc

CoCreateFreeThreadedMarshaler

CoInitializeEx

CoGetObjectContext

CoGetApartmentType

CoTaskMemFree

CoCreateInstance

advapi32

EventWriteTransfer

RegGetValueW

EventSetInformation

EventRegister

shell32

SHCreateAssociationRegistration

msvcp140_app

??1_Lockit@std@@QEAA@XZ

_Wcscoll

_Wcsxfrm

?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

?_Xbad_alloc@std@@YAXXZ

?_Xout_of_range@std@@YAXPEBD@Z

?_Xinvalid_argument@std@@YAXPEBD@Z

?id@?$ctype@_W@std@@2V0locale@2@A

?id@?$collate@_W@std@@2V0locale@2@A

?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z

?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z

?tolower@?$ctype@_W@std@@QEBA_W_W@Z

?is@?$ctype@_W@std@@QEBA_NF_W@Z

??1facet@locale@std@@MEAA@XZ

??0facet@locale@std@@IEAA@_K@Z

?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ

?_Incref@facet@locale@std@@UEAAXXZ

??Bid@locale@std@@QEAA_KXZ

?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ

??1_Locinfo@std@@QEAA@XZ

??0_Locinfo@std@@QEAA@PEBD@Z

?__ExceptionPtrRethrow@@YAXPEBX@Z

?__ExceptionPtrCurrentException@@YAXPEAX@Z

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

?__ExceptionPtrAssign@@YAXPEAXPEBX@Z

?__ExceptionPtrDestroy@@YAXPEAX@Z

?__ExceptionPtrCreate@@YAXPEAX@Z

?_Xlength_error@std@@YAXPEBD@Z

??0_Lockit@std@@QEAA@H@Z

?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

vcruntime140_1_app

__CxxFrameHandler4

vcruntime140_app

__std_exception_copy

_purecall

wcsrchr

__std_exception_destroy

memset

__std_terminate

memcpy

strchr

memmove

__std_type_info_destroy_list

_CxxThrowException

__current_exception_context

__current_exception

__C_specific_handler

api-ms-win-crt-runtime-l1-1-0

terminate

_invalid_parameter_noinfo

_invalid_parameter_noinfo_noreturn

_errno

_seh_filter_exe

_initterm_e

_register_thread_local_exe_atexit_callback

_initterm

_cexit

_crt_atexit

_execute_onexit_table

_register_onexit_function

_c_exit

_initialize_onexit_table

_initialize_narrow_environment

_configure_narrow_argv

_seh_filter_dll

_exit

exit

_get_wide_winmain_command_line

_initialize_wide_environment

_set_app_type

_configure_wide_argv

api-ms-win-crt-string-l1-1-0

_wcsicmp

iswspace

api-ms-win-crt-heap-l1-1-0

_callnewh

realloc

_set_new_mode

free

malloc

api-ms-win-crt-convert-l1-1-0

wcstol

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode

__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-core-winrt-l1-1-0

RoInitialize

oleaut32

SysAllocString

SetErrorInfo

GetErrorInfo

SysFreeString

SysStringLen

Exports

DllGetActivationFactory

VSDesignerCanUnloadNow

VSDesignerDllMain

Sections

.text
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

EdgeGameAssist.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

GameBarWidgetUI/Icons/icon.light.targetsize-16.png

.png

GameBarWidgetUI/Icons/icon.light.targetsize-20.png

.png

GameBarWidgetUI/Icons/icon.light.targetsize-24.png

.png

GameBarWidgetUI/Icons/icon.light.targetsize-256.png

.png

GameBarWidgetUI/Icons/icon.light.targetsize-32.png

.png

GameBarWidgetUI/Icons/icon.light.targetsize-44.png

.png

GameBarWidgetUI/Icons/icon.targetsize-16.png

.png

GameBarWidgetUI/Icons/icon.targetsize-20.png

.png

GameBarWidgetUI/Icons/icon.targetsize-24.png

.png

GameBarWidgetUI/Icons/icon.targetsize-256.png

.png

GameBarWidgetUI/Icons/icon.targetsize-32.png

.png

GameBarWidgetUI/Icons/icon.targetsize-44.png

.png

Microsoft.Gaming.XboxGameBar.Private.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

Microsoft.Gaming.XboxGameBar.dll

.dll windows:6 windows x64 arch:x64

6cf341ab65a8c101ca42b282299da500

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_APPCONTAINER

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\b\bin\Release\x64\GbrtClient\GbrtClient.pdb

Imports

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

GetModuleFileNameA

DisableThreadLibraryCalls

FreeLibrary

GetModuleHandleW

GetProcAddress

api-ms-win-core-synch-l1-1-0

WaitForSingleObject

WaitForSingleObjectEx

CreateEventW

CreateMutexExW

ReleaseSemaphore

ReleaseSRWLockExclusive

AcquireSRWLockExclusive

OpenSemaphoreW

CreateSemaphoreExW

SetEvent

CreateEventExW

ReleaseSRWLockShared

TryAcquireSRWLockShared

ReleaseMutex

api-ms-win-core-heap-l1-1-0

GetProcessHeap

HeapFree

HeapAlloc

api-ms-win-core-errorhandling-l1-1-0

SetLastError

GetLastError

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId

GetCurrentThreadId

GetCurrentProcess

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

DebugBreak

IsDebuggerPresent

OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

api-ms-win-core-file-l1-1-0

WriteFile

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-sysinfo-l1-2-0

VerSetConditionMask

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

msvcp140_app

?_Xout_of_range@std@@YAXPEBD@Z

?__ExceptionPtrCreate@@YAXPEAX@Z

?__ExceptionPtrDestroy@@YAXPEAX@Z

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

?__ExceptionPtrCurrentException@@YAXPEAX@Z

_Thrd_yield

?__ExceptionPtrAssign@@YAXPEAXPEBX@Z

?__ExceptionPtrRethrow@@YAXPEBX@Z

?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z

?_Xlength_error@std@@YAXPEBD@Z

_Xtime_get_ticks

vcruntime140_1_app

__CxxFrameHandler4

vcruntime140_app

__std_terminate

memcpy

__std_exception_copy

memmove

__C_specific_handler

memset

_CxxThrowException

__std_type_info_destroy_list

__std_exception_destroy

api-ms-win-crt-runtime-l1-1-0

_crt_atexit

_initialize_narrow_environment

_register_onexit_function

_configure_narrow_argv

_seh_filter_dll

_cexit

_initialize_onexit_table

_initterm

_invalid_parameter_noinfo_noreturn

_initterm_e

_execute_onexit_table

abort

terminate

_invalid_parameter_noinfo

_errno

api-ms-win-crt-string-l1-1-0

iswspace

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s

__stdio_common_vswprintf

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-heap-l1-1-0

malloc

_callnewh

free

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

InterlockedFlushSList

InterlockedPushEntrySList

oleaut32

SysStringLen

SetErrorInfo

SysFreeString

GetErrorInfo

SysAllocString

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

api-ms-win-core-com-l1-1-0

CoCreateInstance

CoTaskMemAlloc

CoGetObjectContext

CoGetApartmentType

CoCreateFreeThreadedMarshaler

api-ms-win-core-util-l1-1-0

EncodePointer

api-ms-win-core-threadpool-l1-2-0

TrySubmitThreadpoolCallback

CloseThreadpoolWait

SetThreadpoolWaitEx

CreateThreadpoolWait

api-ms-win-crt-math-l1-1-0

ceilf

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 253KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Microsoft.Gaming.XboxGameBar.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

Microsoft.UI.Xaml.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 278KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

Microsoft.Web.WebView2.Core.dll

.dll windows:6 windows x64 arch:x64

7b31c452453a61e4ce90ad0ae4ad43a7

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

7a:ef:f7:9d:ba:76:8b:2b:da:37:51:40:c8:f7:98:ea:d9:fb:3a:8d:7c:d0:5f:73:1c:94:86:c0:94:74:a9:0c
Signer

Actual PE Digest

7a:ef:f7:9d:ba:76:8b:2b:da:37:51:40:c8:f7:98:ea:d9:fb:3a:8d:7c:d0:5f:73:1c:94:86:c0:94:74:a9:0c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

Microsoft.Web.WebView2.Core.pdb

Imports

kernel32

OutputDebugStringW

GetCurrentThreadId

FormatMessageW

IsDebuggerPresent

GetLastError

SetLastError

GetModuleFileNameA

CreateSemaphoreExW

HeapFree

ReleaseSemaphore

GetModuleHandleExW

WaitForSingleObject

ReleaseMutex

WaitForSingleObjectEx

OpenSemaphoreW

CloseHandle

HeapAlloc

GetProcAddress

CreateMutexExW

GetCurrentProcessId

GetProcessHeap

GetModuleHandleW

DebugBreak

DecodePointer

ReleaseSRWLockExclusive

AcquireSRWLockExclusive

InitOnceExecuteOnce

EncodePointer

ReleaseSRWLockShared

AcquireSRWLockShared

GetFileAttributesW

CreateFileW

OutputDebugStringA

GetModuleFileNameW

LoadLibraryExW

LoadLibraryW

FreeLibrary

GetEnvironmentVariableW

DeleteCriticalSection

InterlockedFlushSList

InterlockedPushEntrySList

RtlUnwindEx

InitializeSListHead

GetSystemTimeAsFileTime

QueryPerformanceCounter

SleepConditionVariableSRW

WakeAllConditionVariable

IsProcessorFeaturePresent

TerminateProcess

InitializeCriticalSectionAndSpinCount

GetCurrentProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

RaiseException

RtlPcToFileHeader

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

WideCharToMultiByte

MultiByteToWideChar

api-ms-win-core-com-l1-1-0

CoTaskMemFree

CoTaskMemAlloc

CoCreateInstance

CoCreateFreeThreadedMarshaler

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

RoOriginateErrorW

api-ms-win-core-winrt-string-l1-1-0

WindowsStringHasEmbeddedNull

WindowsIsStringEmpty

WindowsGetStringRawBuffer

api-ms-win-shcore-stream-winrt-l1-1-0

CreateRandomAccessStreamOverStream

CreateStreamOverRandomAccessStream

oleaut32

SysAllocString

GetErrorInfo

SysFreeString

SetErrorInfo

VariantClear

VariantInit

SysStringLen

api-ms-win-eventing-provider-l1-1-0

EventUnregister

EventWriteTransfer

EventRegister

EventSetInformation

api-ms-win-core-registry-l1-1-0

RegCloseKey

RegGetValueW

RegQueryValueExW

RegOpenKeyExW

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table

terminate

_initterm

_invalid_parameter_noinfo

_errno

_cexit

abort

_invalid_parameter_noinfo_noreturn

_seh_filter_dll

_configure_narrow_argv

_initialize_narrow_environment

_register_onexit_function

_execute_onexit_table

_crt_atexit

_initterm_e

api-ms-win-crt-string-l1-1-0

wcslen

iswspace

wcsncmp

_wcsicmp

wcscmp

strcpy_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s

__stdio_common_vswprintf

api-ms-win-crt-convert-l1-1-0

_wtoi

_ultow_s

wcstol

api-ms-win-crt-heap-l1-1-0

free

malloc

_callnewh

calloc

api-ms-win-crt-math-l1-1-0

floor

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 721KB - Virtual size: 721KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Microsoft.Web.WebView2.Core.winmd

.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

3d:bd:aa:51:39:92:e5:98:33:6a:ba:b1:aa:9a:f8:6e:2a:98:e5:75:d4:17:66:b2:1e:68:b1:2d:c8:45:0f:89
Signer

Actual PE Digest

3d:bd:aa:51:39:92:e5:98:33:6a:ba:b1:aa:9a:f8:6e:2a:98:e5:75:d4:17:66:b2:1e:68:b1:2d:c8:45:0f:89

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

[Content_Types].xml

.xml

coreAppActivation.sccd

.xml

resources.pri

Edge/Application/128.0.2739.42/ResiliencyLinks/icudtl.dat.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/identity_proxy/resources.pri.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/identity_proxy/win10/identity_helper.Sparse.Beta.msix.DATA

.appx

AppxBlockMap.xml

.xml

AppxManifest.xml

.xml

AppxSignature.p7x

LogoBeta.png

.png

SmallLogoBeta.png

.png

[Content_Types].xml

.xml

Edge/Application/128.0.2739.42/ResiliencyLinks/identity_proxy/win10/identity_helper.Sparse.Canary.msix.DATA

.appx

AppxBlockMap.xml

.xml

AppxManifest.xml

.xml

AppxSignature.p7x

LogoCanary.png

.png

SmallLogoCanary.png

.png

[Content_Types].xml

.xml

Edge/Application/128.0.2739.42/ResiliencyLinks/identity_proxy/win10/identity_helper.Sparse.Dev.msix.DATA

.appx

AppxBlockMap.xml

.xml

AppxManifest.xml

.xml

AppxSignature.p7x

LogoDev.png

.png

SmallLogoDev.png

.png

[Content_Types].xml

.xml

Edge/Application/128.0.2739.42/ResiliencyLinks/identity_proxy/win10/identity_helper.Sparse.Internal.msix.DATA

.appx

AppxBlockMap.xml

.xml

AppxManifest.xml

.xml

AppxSignature.p7x

Logo.png

.png

SmallLogo.png

.png

[Content_Types].xml

.xml

Edge/Application/128.0.2739.42/ResiliencyLinks/identity_proxy/win10/identity_helper.Sparse.Stable.msix.DATA

.appx

AppxBlockMap.xml

.xml

AppxManifest.xml

.xml

AppxSignature.p7x

Logo.png

.png

SmallLogo.png

.png

[Content_Types].xml

.xml

Edge/Application/128.0.2739.42/ResiliencyLinks/identity_proxy/win11/identity_helper.Sparse.Beta.msix.DATA

.appx

AppxBlockMap.xml

.xml

AppxManifest.xml

.xml

AppxSignature.p7x

LogoBeta.png

.png

SmallLogoBeta.png

.png

[Content_Types].xml

.xml

Edge/Application/128.0.2739.42/ResiliencyLinks/identity_proxy/win11/identity_helper.Sparse.Canary.msix.DATA

.appx

Edge/Application/128.0.2739.42/ResiliencyLinks/identity_proxy/win11/identity_helper.Sparse.Dev.msix.DATA

.appx

Edge/Application/128.0.2739.42/ResiliencyLinks/identity_proxy/win11/identity_helper.Sparse.Internal.msix.DATA

.appx

Edge/Application/128.0.2739.42/ResiliencyLinks/identity_proxy/win11/identity_helper.Sparse.Stable.msix.DATA

.appx

Edge/Application/128.0.2739.42/ResiliencyLinks/msedge.dll.sig.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/msedge.exe.sig.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/msedge_100_percent.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/msedge_200_percent.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/msedgewebview2.exe.sig.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/resources.pak.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/v8_context_snapshot.bin.DATA

Edge/Application/128.0.2739.42/ResiliencyLinks/vk_swiftshader_icd.json.DATA

Edge/Application/128.0.2739.42/Trust Protection Lists/Mu/Advertising

Edge/Application/128.0.2739.42/Trust Protection Lists/Mu/Analytics

Edge/Application/128.0.2739.42/Trust Protection Lists/Mu/CompatExceptions

Edge/Application/128.0.2739.42/Trust Protection Lists/Mu/Content

Edge/Application/128.0.2739.42/Trust Protection Lists/Mu/Cryptomining

Edge/Application/128.0.2739.42/Trust Protection Lists/Mu/Entities

Edge/Application/128.0.2739.42/Trust Protection Lists/Mu/Fingerprinting

Edge/Application/128.0.2739.42/Trust Protection Lists/Mu/LICENSE

Edge/Application/128.0.2739.42/Trust Protection Lists/Mu/Other

Edge/Application/128.0.2739.42/Trust Protection Lists/Mu/Social

Edge/Application/128.0.2739.42/Trust Protection Lists/Mu/TransparentAdvertisers

Edge/Application/128.0.2739.42/Trust Protection Lists/Sigma/Advertising

Edge/Application/128.0.2739.42/Trust Protection Lists/Sigma/Analytics

Edge/Application/128.0.2739.42/Trust Protection Lists/Sigma/Content

Edge/Application/128.0.2739.42/Trust Protection Lists/Sigma/Cryptomining

Edge/Application/128.0.2739.42/Trust Protection Lists/Sigma/Entities

Edge/Application/128.0.2739.42/Trust Protection Lists/Sigma/Fingerprinting

Edge/Application/128.0.2739.42/Trust Protection Lists/Sigma/LICENSE

Edge/Application/128.0.2739.42/Trust Protection Lists/Sigma/Other

Edge/Application/128.0.2739.42/Trust Protection Lists/Sigma/Social

Edge/Application/128.0.2739.42/Trust Protection Lists/Sigma/Staging

Edge/Application/128.0.2739.42/Trust Protection Lists/manifest.json

Edge/Application/128.0.2739.42/VisualElements/Logo.png

.png

Edge/Application/128.0.2739.42/VisualElements/LogoBeta.png

.png

Edge/Application/128.0.2739.42/VisualElements/LogoCanary.png

.png

Edge/Application/128.0.2739.42/VisualElements/LogoDev.png

.png

Edge/Application/128.0.2739.42/VisualElements/SmallLogo.png

.png

Edge/Application/128.0.2739.42/VisualElements/SmallLogoBeta.png

.png

Edge/Application/128.0.2739.42/VisualElements/SmallLogoCanary.png

.png

Edge/Application/128.0.2739.42/VisualElements/SmallLogoDev.png

.png

Edge/Application/128.0.2739.42/WidevineCdm/_platform_specific/win_x64/widevinecdm.dll

.dll windows:5 windows x64 arch:x64

5d3aa908e334e626a5c0f84098f52e62

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

widevinecdm.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive

AcquireSRWLockShared

CloseHandle

CompareStringW

CreateEventW

CreateFileW

CreateSemaphoreW

CreateThread

DecodePointer

DeleteCriticalSection

DuplicateHandle

EncodePointer

EnterCriticalSection

EnumSystemLocalesW

ExitProcess

ExitThread

ExpandEnvironmentStringsW

FindClose

FindFirstFileExW

FindNextFileW

FlsAlloc

FlsFree

FlsGetValue

FlsSetValue

FlushFileBuffers

FreeEnvironmentStringsW

FreeLibrary

FreeLibraryAndExitThread

GetACP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetConsoleMode

GetConsoleOutputCP

GetCurrentDirectoryW

GetCurrentProcess

GetCurrentProcessId

GetCurrentThread

GetCurrentThreadId

GetDateFormatW

GetEnvironmentStringsW

GetExitCodeThread

GetFileSizeEx

GetFileType

GetFinalPathNameByHandleW

GetLastError

GetLocalTime

GetLocaleInfoW

GetLogicalDriveStringsW

GetModuleFileNameW

GetModuleHandleA

GetModuleHandleExW

GetModuleHandleW

GetNativeSystemInfo

GetOEMCP

GetProcAddress

GetProcessHeap

GetProductInfo

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemInfo

GetSystemTimeAsFileTime

GetThreadGroupAffinity

GetThreadId

GetThreadPriority

GetTickCount

GetTimeFormatW

GetTimeZoneInformation

GetUserDefaultLCID

GetVersionExW

HeapAlloc

HeapFree

HeapReAlloc

HeapSize

InitOnceBeginInitialize

InitOnceComplete

InitOnceExecuteOnce

InitializeConditionVariable

InitializeCriticalSection

InitializeCriticalSectionAndSpinCount

InitializeCriticalSectionEx

InitializeSListHead

InitializeSRWLock

InterlockedFlushSList

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

IsValidLocale

IsWow64Process

LCMapStringW

LeaveCriticalSection

LoadLibraryExA

LoadLibraryExW

LoadLibraryW

MultiByteToWideChar

OutputDebugStringA

OutputDebugStringW

QueryDosDeviceW

QueryPerformanceCounter

QueryPerformanceFrequency

RaiseException

ReadConsoleW

ReadFile

ReleaseSRWLockExclusive

ReleaseSRWLockShared

ReleaseSemaphore

ResetEvent

RtlCaptureContext

RtlCaptureStackBackTrace

RtlLookupFunctionEntry

RtlPcToFileHeader

RtlUnwind

RtlUnwindEx

RtlVirtualUnwind

SetCurrentDirectoryW

SetEnvironmentVariableW

SetEvent

SetFilePointerEx

SetLastError

SetStdHandle

SetThreadPriority

SetUnhandledExceptionFilter

Sleep

SleepConditionVariableCS

SleepConditionVariableSRW

TerminateProcess

TerminateThread

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

TryAcquireSRWLockExclusive

TryEnterCriticalSection

UnhandledExceptionFilter

VirtualProtect

VirtualQuery

WaitForSingleObject

WaitForSingleObjectEx

WakeAllConditionVariable

WakeConditionVariable

WideCharToMultiByte

WriteConsoleW

WriteFile

user32

CharUpperW

EnumDisplayMonitors

GetMonitorInfoW

UnregisterClassW

ole32

CoTaskMemFree

advapi32

RegCloseKey

RegOpenKeyExW

RegQueryValueExW

SystemFunction036

winmm

timeBeginPeriod

timeEndPeriod

timeGetTime

Exports

CreateCdmInstance

DeinitializeCdmModule

GetCdmVersion

GetHandleVerifier

InitializeCdmModule_4

VerifyCdmHost_0

Sections

.text
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 11.1MB - Virtual size: 11.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 51.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gxfg
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 92B

.rodata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.voltbl
Size: 512B - Virtual size: 70B

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/WidevineCdm/_platform_specific/win_x64/widevinecdm.dll.sig

Edge/Application/128.0.2739.42/WidevineCdm/manifest.json

Edge/Application/128.0.2739.42/concrt140.dll

.dll windows:6 windows x64 arch:x64

b53a9a2e86c058cbcd81f6f4285ec2fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\concrt140.amd64.pdb

Imports

msvcp140

?_Xbad_function_call@std@@YAXXZ

?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ

_Mtx_init_in_situ

_Mtx_destroy_in_situ

_Mtx_lock

_Mtx_unlock

_Cnd_init_in_situ

_Cnd_destroy_in_situ

_Cnd_wait

_Cnd_broadcast

?_Throw_Cpp_error@std@@YAXH@Z

?_Xbad_alloc@std@@YAXXZ

?_Xlength_error@std@@YAXPEBD@Z

?_Xout_of_range@std@@YAXPEBD@Z

?__ExceptionPtrDestroy@@YAXPEAX@Z

?__ExceptionPtrCreate@@YAXPEAX@Z

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

?__ExceptionPtrCurrentException@@YAXPEAX@Z

?__ExceptionPtrRethrow@@YAXPEBX@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_purecall

__std_terminate

__std_exception_copy

__std_exception_destroy

_CxxThrowException

memset

__uncaught_exception

memcpy

__C_specific_handler

__RTDynamicCast

__std_type_info_destroy_list

__current_exception_context

__current_exception

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn

_initterm_e

_initterm

_cexit

terminate

_seh_filter_dll

_configure_narrow_argv

_initialize_narrow_environment

_initialize_onexit_table

_register_onexit_function

_execute_onexit_table

_crt_atexit

api-ms-win-crt-heap-l1-1-0

free

malloc

_callnewh

api-ms-win-crt-math-l1-1-0

exp

sqrt

api-ms-win-crt-string-l1-1-0

wcsncpy_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfwprintf

__stdio_common_vswprintf_s

__acrt_iob_func

fflush

kernel32

WaitForSingleObjectEx

DisableThreadLibraryCalls

GetSystemTimeAsFileTime

GetCurrentProcessId

QueryPerformanceCounter

IsDebuggerPresent

IsProcessorFeaturePresent

TerminateProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

GetModuleHandleA

GetModuleFileNameW

FreeLibraryAndExitThread

FreeLibrary

CloseThreadpoolWait

SetThreadpoolWait

CreateThreadpoolWait

CloseThreadpoolTimer

WaitForThreadpoolTimerCallbacks

CreateThreadpoolTimer

FreeLibraryWhenCallbackReturns

GetThreadTimes

EncodePointer

OutputDebugStringW

LoadLibraryW

LoadLibraryExW

GetProcAddress

SetLastError

SetThreadpoolTimer

CreateSemaphoreExW

ReleaseSemaphore

InitializeSListHead

VerifyVersionInfoW

SetProcessAffinityMask

GetProcessAffinityMask

VirtualFree

FlushProcessWriteBuffers

VerSetConditionMask

DeleteCriticalSection

TryEnterCriticalSection

LeaveCriticalSection

EnterCriticalSection

SetThreadGroupAffinity

GetThreadGroupAffinity

GetNumaHighestNodeNumber

GetLogicalProcessorInformationEx

GetTickCount64

GetCurrentProcessorNumberEx

TlsFree

TlsSetValue

TlsGetValue

TlsAlloc

GetThreadPriority

InterlockedPopEntrySList

InterlockedPushEntrySList

InterlockedFlushSList

QueryDepthSList

GetCurrentThread

CloseHandle

DuplicateHandle

GetLastError

SetEvent

CreateThread

GetCurrentProcess

GetCurrentThreadId

InitializeCriticalSectionEx

CreateEventExW

Sleep

SignalObjectAndWait

SwitchToThread

SetThreadPriority

Exports

??0?$_SpinWait@$00@details@Concurrency@@QEAA@P6AXXZ@Z

??0?$_SpinWait@$0A@@details@Concurrency@@QEAA@P6AXXZ@Z

??0SchedulerPolicy@Concurrency@@QEAA@AEBV01@@Z

??0SchedulerPolicy@Concurrency@@QEAA@XZ

??0SchedulerPolicy@Concurrency@@QEAA@_KZZ

??0_Cancellation_beacon@details@Concurrency@@QEAA@XZ

??0_Concurrent_queue_base_v4@details@Concurrency@@IEAA@_K@Z

??0_Concurrent_queue_iterator_base_v4@details@Concurrency@@IEAA@AEBV_Concurrent_queue_base_v4@12@@Z

??0_Condition_variable@details@Concurrency@@QEAA@XZ

??0_Context@details@Concurrency@@QEAA@PEAVContext@2@@Z

??0_NonReentrantBlockingLock@details@Concurrency@@QEAA@XZ

??0_NonReentrantPPLLock@details@Concurrency@@QEAA@XZ

??0_ReaderWriterLock@details@Concurrency@@QEAA@XZ

??0_ReentrantBlockingLock@details@Concurrency@@QEAA@XZ

??0_ReentrantLock@details@Concurrency@@QEAA@XZ

??0_ReentrantPPLLock@details@Concurrency@@QEAA@XZ

??0_Runtime_object@details@Concurrency@@QEAA@H@Z

??0_Runtime_object@details@Concurrency@@QEAA@XZ

??0_Scheduler@details@Concurrency@@QEAA@PEAVScheduler@2@@Z

??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QEAA@AEAV123@@Z

??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QEAA@AEAV123@@Z

??0_SpinLock@details@Concurrency@@QEAA@AECJ@Z

??0_StructuredTaskCollection@details@Concurrency@@QEAA@PEAV_CancellationTokenState@12@@Z

??0_TaskCollection@details@Concurrency@@QEAA@PEAV_CancellationTokenState@12@@Z

??0_TaskCollection@details@Concurrency@@QEAA@XZ

??0_Timer@details@Concurrency@@IEAA@I_N@Z

??0agent@Concurrency@@QEAA@AEAVScheduleGroup@1@@Z

??0agent@Concurrency@@QEAA@AEAVScheduler@1@@Z

??0agent@Concurrency@@QEAA@XZ

??0bad_target@Concurrency@@QEAA@PEBD@Z

??0bad_target@Concurrency@@QEAA@XZ

??0context_self_unblock@Concurrency@@QEAA@PEBD@Z

??0context_self_unblock@Concurrency@@QEAA@XZ

??0context_unblock_unbalanced@Concurrency@@QEAA@PEBD@Z

??0context_unblock_unbalanced@Concurrency@@QEAA@XZ

??0critical_section@Concurrency@@QEAA@XZ

??0default_scheduler_exists@Concurrency@@QEAA@PEBD@Z

??0default_scheduler_exists@Concurrency@@QEAA@XZ

??0event@Concurrency@@QEAA@XZ

??0improper_lock@Concurrency@@QEAA@PEBD@Z

??0improper_lock@Concurrency@@QEAA@XZ

??0improper_scheduler_attach@Concurrency@@QEAA@PEBD@Z

??0improper_scheduler_attach@Concurrency@@QEAA@XZ

??0improper_scheduler_detach@Concurrency@@QEAA@PEBD@Z

??0improper_scheduler_detach@Concurrency@@QEAA@XZ

??0improper_scheduler_reference@Concurrency@@QEAA@PEBD@Z

??0improper_scheduler_reference@Concurrency@@QEAA@XZ

??0invalid_link_target@Concurrency@@QEAA@PEBD@Z

??0invalid_link_target@Concurrency@@QEAA@XZ

??0invalid_multiple_scheduling@Concurrency@@QEAA@PEBD@Z

??0invalid_multiple_scheduling@Concurrency@@QEAA@XZ

??0invalid_oversubscribe_operation@Concurrency@@QEAA@PEBD@Z

??0invalid_oversubscribe_operation@Concurrency@@QEAA@XZ

??0invalid_scheduler_policy_key@Concurrency@@QEAA@PEBD@Z

??0invalid_scheduler_policy_key@Concurrency@@QEAA@XZ

??0invalid_scheduler_policy_thread_specification@Concurrency@@QEAA@PEBD@Z

??0invalid_scheduler_policy_thread_specification@Concurrency@@QEAA@XZ

??0invalid_scheduler_policy_value@Concurrency@@QEAA@PEBD@Z

??0invalid_scheduler_policy_value@Concurrency@@QEAA@XZ

??0message_not_found@Concurrency@@QEAA@PEBD@Z

??0message_not_found@Concurrency@@QEAA@XZ

??0missing_wait@Concurrency@@QEAA@PEBD@Z

??0missing_wait@Concurrency@@QEAA@XZ

??0nested_scheduler_missing_detach@Concurrency@@QEAA@PEBD@Z

??0nested_scheduler_missing_detach@Concurrency@@QEAA@XZ

??0operation_timed_out@Concurrency@@QEAA@PEBD@Z

??0operation_timed_out@Concurrency@@QEAA@XZ

??0reader_writer_lock@Concurrency@@QEAA@XZ

??0scheduler_not_attached@Concurrency@@QEAA@PEBD@Z

??0scheduler_not_attached@Concurrency@@QEAA@XZ

??0scheduler_resource_allocation_error@Concurrency@@QEAA@J@Z

??0scheduler_resource_allocation_error@Concurrency@@QEAA@PEBDJ@Z

??0scheduler_worker_creation_error@Concurrency@@QEAA@J@Z

??0scheduler_worker_creation_error@Concurrency@@QEAA@PEBDJ@Z

??0scoped_lock@critical_section@Concurrency@@QEAA@AEAV12@@Z

??0scoped_lock@reader_writer_lock@Concurrency@@QEAA@AEAV12@@Z

??0scoped_lock_read@reader_writer_lock@Concurrency@@QEAA@AEAV12@@Z

??0unsupported_os@Concurrency@@QEAA@PEBD@Z

??0unsupported_os@Concurrency@@QEAA@XZ

??1SchedulerPolicy@Concurrency@@QEAA@XZ

??1_Cancellation_beacon@details@Concurrency@@QEAA@XZ

??1_Concurrent_queue_base_v4@details@Concurrency@@MEAA@XZ

??1_Concurrent_queue_iterator_base_v4@details@Concurrency@@IEAA@XZ

??1_Concurrent_vector_base_v4@details@Concurrency@@IEAA@XZ

??1_Condition_variable@details@Concurrency@@QEAA@XZ

??1_NonReentrantBlockingLock@details@Concurrency@@QEAA@XZ

??1_ReentrantBlockingLock@details@Concurrency@@QEAA@XZ

??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QEAA@XZ

??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QEAA@XZ

??1_SpinLock@details@Concurrency@@QEAA@XZ

??1_StructuredTaskCollection@details@Concurrency@@QEAA@XZ

??1_TaskCollection@details@Concurrency@@QEAA@XZ

??1_Timer@details@Concurrency@@MEAA@XZ

??1agent@Concurrency@@UEAA@XZ

??1critical_section@Concurrency@@QEAA@XZ

??1event@Concurrency@@QEAA@XZ

??1reader_writer_lock@Concurrency@@QEAA@XZ

??1scoped_lock@critical_section@Concurrency@@QEAA@XZ

??1scoped_lock@reader_writer_lock@Concurrency@@QEAA@XZ

??1scoped_lock_read@reader_writer_lock@Concurrency@@QEAA@XZ

??4?$_SpinWait@$00@details@Concurrency@@QEAAAEAV012@$$QEAV012@@Z

??4?$_SpinWait@$00@details@Concurrency@@QEAAAEAV012@AEBV012@@Z

??4?$_SpinWait@$0A@@details@Concurrency@@QEAAAEAV012@$$QEAV012@@Z

??4?$_SpinWait@$0A@@details@Concurrency@@QEAAAEAV012@AEBV012@@Z

??4SchedulerPolicy@Concurrency@@QEAAAEAV01@AEBV01@@Z

??_F?$_SpinWait@$00@details@Concurrency@@QEAAXXZ

??_F?$_SpinWait@$0A@@details@Concurrency@@QEAAXXZ

??_F_Context@details@Concurrency@@QEAAXXZ

??_F_Scheduler@details@Concurrency@@QEAAXXZ

?AgentEventGuid@Concurrency@@3U_GUID@@B

?Alloc@Concurrency@@YAPEAX_K@Z

?Block@Context@Concurrency@@SAXXZ

?ChoreEventGuid@Concurrency@@3U_GUID@@B

?ConcRTEventGuid@Concurrency@@3U_GUID@@B

?ConcRT_ProviderGuid@Concurrency@@3U_GUID@@B

?ContextEventGuid@Concurrency@@3U_GUID@@B

?Create@CurrentScheduler@Concurrency@@SAXAEBVSchedulerPolicy@2@@Z

?Create@Scheduler@Concurrency@@SAPEAV12@AEBVSchedulerPolicy@2@@Z

?CreateResourceManager@Concurrency@@YAPEAUIResourceManager@1@XZ

?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPEAVScheduleGroup@2@AEAVlocation@2@@Z

?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPEAVScheduleGroup@2@XZ

?CurrentContext@Context@Concurrency@@SAPEAV12@XZ

?Detach@CurrentScheduler@Concurrency@@SAXXZ

?DisableTracing@Concurrency@@YAJXZ

?EnableTracing@Concurrency@@YAJXZ

?Free@Concurrency@@YAXPEAX@Z

?Get@CurrentScheduler@Concurrency@@SAPEAVScheduler@2@XZ

?GetExecutionContextId@Concurrency@@YAIXZ

?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ

?GetOSVersion@Concurrency@@YA?AW4OSVersion@IResourceManager@1@XZ

?GetPolicy@CurrentScheduler@Concurrency@@SA?AVSchedulerPolicy@2@XZ

?GetPolicyValue@SchedulerPolicy@Concurrency@@QEBAIW4PolicyElementKey@2@@Z

?GetProcessorCount@Concurrency@@YAIXZ

?GetProcessorNodeCount@Concurrency@@YAIXZ

?GetSchedulerId@Concurrency@@YAIXZ

?GetSharedTimerQueue@details@Concurrency@@YAPEAXXZ

?Id@Context@Concurrency@@SAIXZ

?Id@CurrentScheduler@Concurrency@@SAIXZ

?IsAvailableLocation@CurrentScheduler@Concurrency@@SA_NAEBVlocation@2@@Z

?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ

?LockEventGuid@Concurrency@@3U_GUID@@B

?Log2@details@Concurrency@@YAK_K@Z

?NFS_Allocate@details@Concurrency@@YAPEAX_K0PEAX@Z

?NFS_Free@details@Concurrency@@YAXPEAX@Z

?NFS_GetLineSize@details@Concurrency@@YA_KXZ

?Oversubscribe@Context@Concurrency@@SAX_N@Z

?PPLParallelForEventGuid@Concurrency@@3U_GUID@@B

?PPLParallelForeachEventGuid@Concurrency@@3U_GUID@@B

?PPLParallelInvokeEventGuid@Concurrency@@3U_GUID@@B

?RegisterShutdownEvent@CurrentScheduler@Concurrency@@SAXPEAX@Z

?ResetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXXZ

?ResourceManagerEventGuid@Concurrency@@3U_GUID@@B

?ScheduleGroupEventGuid@Concurrency@@3U_GUID@@B

?ScheduleGroupId@Context@Concurrency@@SAIXZ

?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPEAX@Z0@Z

?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPEAX@Z0AEAVlocation@2@@Z

?SchedulerEventGuid@Concurrency@@3U_GUID@@B

?SetConcurrencyLimits@SchedulerPolicy@Concurrency@@QEAAXII@Z

?SetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXAEBVSchedulerPolicy@2@@Z

?SetPolicyValue@SchedulerPolicy@Concurrency@@QEAAIW4PolicyElementKey@2@I@Z

?VirtualProcessorEventGuid@Concurrency@@3U_GUID@@B

?VirtualProcessorId@Context@Concurrency@@SAIXZ

?Yield@Context@Concurrency@@SAXXZ

?_Abort@_StructuredTaskCollection@details@Concurrency@@AEAAXXZ

?_Acquire@_NonReentrantBlockingLock@details@Concurrency@@QEAAXXZ

?_Acquire@_NonReentrantPPLLock@details@Concurrency@@QEAAXPEAX@Z

?_Acquire@_ReentrantBlockingLock@details@Concurrency@@QEAAXXZ

?_Acquire@_ReentrantLock@details@Concurrency@@QEAAXXZ

?_Acquire@_ReentrantPPLLock@details@Concurrency@@QEAAXPEAX@Z

?_AcquireRead@_ReaderWriterLock@details@Concurrency@@QEAAXXZ

?_AcquireWrite@_ReaderWriterLock@details@Concurrency@@QEAAXXZ

?_Advance@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IEAAXXZ

?_Assign@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IEAAXAEBV123@@Z

?_Byte_reverse_table@details@Concurrency@@3QBEB

?_Cancel@_StructuredTaskCollection@details@Concurrency@@QEAAXXZ

?_Cancel@_TaskCollection@details@Concurrency@@QEAAXXZ

?_CheckTaskCollection@_UnrealizedChore@details@Concurrency@@IEAAXXZ

?_CleanupToken@_StructuredTaskCollection@details@Concurrency@@AEAAXXZ

?_ConcRT_CoreAssert@details@Concurrency@@YAXPEBD0H@Z

?_ConcRT_Trace@details@Concurrency@@YAXHPEB_WZZ

?_Confirm_cancel@_Cancellation_beacon@details@Concurrency@@QEAA_NXZ

?_CurrentContext@_Context@details@Concurrency@@SA?AV123@XZ

?_Current_node@location@Concurrency@@SA?AV12@XZ

?_Destroy@_AsyncTaskCollection@details@Concurrency@@EEAAXXZ

?_DoYield@?$_SpinWait@$00@details@Concurrency@@IEAAXXZ

?_DoYield@?$_SpinWait@$0A@@details@Concurrency@@IEAAXXZ

?_Get@_CurrentScheduler@details@Concurrency@@SA?AV_Scheduler@23@XZ

?_GetCombinableSize@details@Concurrency@@YA_KXZ

?_GetConcRTTraceInfo@Concurrency@@YAPEBU_CONCRT_TRACE_INFO@details@1@XZ

?_GetConcurrency@details@Concurrency@@YAIXZ

?_GetCurrentInlineDepth@_StackGuard@details@Concurrency@@CAAEA_KXZ

?_GetNumberOfVirtualProcessors@_CurrentScheduler@details@Concurrency@@SAIXZ

?_GetScheduler@_Scheduler@details@Concurrency@@QEAAPEAVScheduler@3@XZ

?_Id@_CurrentScheduler@details@Concurrency@@SAIXZ

?_Internal_assign@_Concurrent_vector_base_v4@details@Concurrency@@IEAAXAEBV123@_KP6AXPEAX1@ZP6AX2PEBX1@Z5@Z

?_Internal_capacity@_Concurrent_vector_base_v4@details@Concurrency@@IEBA_KXZ

?_Internal_clear@_Concurrent_vector_base_v4@details@Concurrency@@IEAA_KP6AXPEAX_K@Z@Z

?_Internal_compact@_Concurrent_vector_base_v4@details@Concurrency@@IEAAPEAX_KPEAXP6AX10@ZP6AX1PEBX0@Z@Z

?_Internal_copy@_Concurrent_vector_base_v4@details@Concurrency@@IEAAXAEBV123@_KP6AXPEAXPEBX1@Z@Z

?_Internal_empty@_Concurrent_queue_base_v4@details@Concurrency@@IEBA_NXZ

?_Internal_finish_clear@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXXZ

?_Internal_grow_by@_Concurrent_vector_base_v4@details@Concurrency@@IEAA_K_K0P6AXPEAXPEBX0@Z2@Z

?_Internal_grow_to_at_least_with_result@_Concurrent_vector_base_v4@details@Concurrency@@IEAA_K_K0P6AXPEAXPEBX0@Z2@Z

?_Internal_move_push@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXPEAX@Z

?_Internal_pop_if_present@_Concurrent_queue_base_v4@details@Concurrency@@IEAA_NPEAX@Z

?_Internal_push@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXPEBX@Z

?_Internal_push_back@_Concurrent_vector_base_v4@details@Concurrency@@IEAAPEAX_KAEA_K@Z

?_Internal_reserve@_Concurrent_vector_base_v4@details@Concurrency@@IEAAX_K00@Z

?_Internal_resize@_Concurrent_vector_base_v4@details@Concurrency@@IEAAX_K00P6AXPEAX0@ZP6AX1PEBX0@Z3@Z

?_Internal_size@_Concurrent_queue_base_v4@details@Concurrency@@IEBA_KXZ

?_Internal_swap@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXAEAV123@@Z

?_Internal_swap@_Concurrent_vector_base_v4@details@Concurrency@@IEAAXAEAV123@@Z

?_Internal_throw_exception@_Concurrent_queue_base_v4@details@Concurrency@@IEBAXXZ

?_Internal_throw_exception@_Concurrent_vector_base_v4@details@Concurrency@@IEBAX_K@Z

?_IsCanceling@_StructuredTaskCollection@details@Concurrency@@QEAA_NXZ

?_IsCanceling@_TaskCollection@details@Concurrency@@QEAA_NXZ

?_IsSynchronouslyBlocked@_Context@details@Concurrency@@QEBA_NXZ

?_NewCollection@_AsyncTaskCollection@details@Concurrency@@SAPEAV123@PEAV_CancellationTokenState@23@@Z

?_NumberOfSpins@?$_SpinWait@$00@details@Concurrency@@IEAAKXZ

?_NumberOfSpins@?$_SpinWait@$0A@@details@Concurrency@@IEAAKXZ

?_Oversubscribe@_Context@details@Concurrency@@SAX_N@Z

?_Reference@_Scheduler@details@Concurrency@@QEAAIXZ

?_Release@_NonReentrantBlockingLock@details@Concurrency@@QEAAXXZ

?_Release@_NonReentrantPPLLock@details@Concurrency@@QEAAXXZ

?_Release@_ReentrantBlockingLock@details@Concurrency@@QEAAXXZ

?_Release@_ReentrantLock@details@Concurrency@@QEAAXXZ

?_Release@_ReentrantPPLLock@details@Concurrency@@QEAAXXZ

?_Release@_Scheduler@details@Concurrency@@QEAAIXZ

?_ReleaseRead@_ReaderWriterLock@details@Concurrency@@QEAAXXZ

?_ReleaseWrite@_ReaderWriterLock@details@Concurrency@@QEAAXXZ

?_Reset@?$_SpinWait@$00@details@Concurrency@@IEAAXXZ

?_Reset@?$_SpinWait@$0A@@details@Concurrency@@IEAAXXZ

?_RunAndWait@_StructuredTaskCollection@details@Concurrency@@QEAA?AW4_TaskCollectionStatus@23@PEAV_UnrealizedChore@23@@Z

?_RunAndWait@_TaskCollection@details@Concurrency@@QEAA?AW4_TaskCollectionStatus@23@PEAV_UnrealizedChore@23@@Z

?_Schedule@_StructuredTaskCollection@details@Concurrency@@QEAAXPEAV_UnrealizedChore@23@@Z

?_Schedule@_StructuredTaskCollection@details@Concurrency@@QEAAXPEAV_UnrealizedChore@23@PEAVlocation@3@@Z

?_Schedule@_TaskCollection@details@Concurrency@@QEAAXPEAV_UnrealizedChore@23@@Z

?_Schedule@_TaskCollection@details@Concurrency@@QEAAXPEAV_UnrealizedChore@23@PEAVlocation@3@@Z

?_ScheduleTask@_CurrentScheduler@details@Concurrency@@SAXP6AXPEAX@Z0@Z

?_Segment_index_of@_Concurrent_vector_base_v4@details@Concurrency@@KA_K_K@Z

?_SetSpinCount@?$_SpinWait@$00@details@Concurrency@@QEAAXI@Z

?_SetSpinCount@?$_SpinWait@$0A@@details@Concurrency@@QEAAXI@Z

?_ShouldSpinAgain@?$_SpinWait@$00@details@Concurrency@@IEAA_NXZ

?_ShouldSpinAgain@?$_SpinWait@$0A@@details@Concurrency@@IEAA_NXZ

?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QEAA_NXZ

?_SpinOnce@?$_SpinWait@$0A@@details@Concurrency@@QEAA_NXZ

?_SpinYield@Context@Concurrency@@SAXXZ

?_Start@_Timer@details@Concurrency@@IEAAXXZ

?_Stop@_Timer@details@Concurrency@@IEAAXXZ

?_Trace_agents@Concurrency@@YAXW4Agents_EventType@1@_JZZ

?_Trace_ppl_function@Concurrency@@YAXAEBU_GUID@@EW4ConcRT_EventType@1@@Z

?_TryAcquire@_NonReentrantBlockingLock@details@Concurrency@@QEAA_NXZ

?_TryAcquire@_ReentrantBlockingLock@details@Concurrency@@QEAA_NXZ

?_TryAcquire@_ReentrantLock@details@Concurrency@@QEAA_NXZ

?_TryAcquireWrite@_ReaderWriterLock@details@Concurrency@@QEAA_NXZ

?_UnderlyingYield@details@Concurrency@@YAXXZ

?_Value@_SpinCount@details@Concurrency@@SAIXZ

?_Yield@_Context@details@Concurrency@@SAXXZ

?cancel@agent@Concurrency@@QEAA_NXZ

?current@location@Concurrency@@SA?AV12@XZ

?done@agent@Concurrency@@IEAA_NXZ

?from_numa_node@location@Concurrency@@SA?AV12@G@Z

?get_error_code@scheduler_resource_allocation_error@Concurrency@@QEBAJXZ

?is_current_task_group_canceling@Concurrency@@YA_NXZ

?lock@critical_section@Concurrency@@QEAAXXZ

?lock@reader_writer_lock@Concurrency@@QEAAXXZ

?lock_read@reader_writer_lock@Concurrency@@QEAAXXZ

?native_handle@critical_section@Concurrency@@QEAAAEAV12@XZ

?notify_all@_Condition_variable@details@Concurrency@@QEAAXXZ

?notify_one@_Condition_variable@details@Concurrency@@QEAAXXZ

?reset@event@Concurrency@@QEAAXXZ

?set@event@Concurrency@@QEAAXXZ

?set_task_execution_resources@Concurrency@@YAXGPEAU_GROUP_AFFINITY@@@Z

?set_task_execution_resources@Concurrency@@YAX_K@Z

?start@agent@Concurrency@@QEAA_NXZ

?status@agent@Concurrency@@QEAA?AW4agent_status@2@XZ

?status_port@agent@Concurrency@@QEAAPEAV?$ISource@W4agent_status@Concurrency@@@2@XZ

?try_lock@critical_section@Concurrency@@QEAA_NXZ

?try_lock@reader_writer_lock@Concurrency@@QEAA_NXZ

?try_lock_for@critical_section@Concurrency@@QEAA_NI@Z

?try_lock_read@reader_writer_lock@Concurrency@@QEAA_NXZ

?unlock@critical_section@Concurrency@@QEAAXXZ

?unlock@reader_writer_lock@Concurrency@@QEAAXXZ

?wait@Concurrency@@YAXI@Z

?wait@_Condition_variable@details@Concurrency@@QEAAXAEAVcritical_section@3@@Z

?wait@agent@Concurrency@@SA?AW4agent_status@2@PEAV12@I@Z

?wait@event@Concurrency@@QEAA_KI@Z

?wait_for@_Condition_variable@details@Concurrency@@QEAA_NAEAVcritical_section@3@I@Z

?wait_for_all@agent@Concurrency@@SAX_KPEAPEAV12@PEAW4agent_status@2@I@Z

?wait_for_multiple@event@Concurrency@@SA_KPEAPEAV12@_K_NI@Z

?wait_for_one@agent@Concurrency@@SAX_KPEAPEAV12@AEAW4agent_status@2@AEA_KI@Z

Sections

.text
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/cookie_exporter.exe

.exe windows:6 windows x64 arch:x64

93623b0f02883b108b7f1e14b1da842c

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

df:fb:af:55:6d:14:7e:4d:18:16:5c:3c:0f:ca:b7:94:40:b8:60:fc:6c:19:65:04:a6:62:22:50:10:93:02:b4
Signer

Actual PE Digest

df:fb:af:55:6d:14:7e:4d:18:16:5c:3c:0f:ca:b7:94:40:b8:60:fc:6c:19:65:04:a6:62:22:50:10:93:02:b4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\_work\e\src\out\Release_x64\cookie_exporter.exe.pdb

Imports

kernel32

CloseHandle

CreateFileW

DeleteCriticalSection

EncodePointer

EnterCriticalSection

ExitProcess

FindClose

FindFirstFileExW

FindNextFileW

FlsAlloc

FlsFree

FlsGetValue

FlsSetValue

FlushFileBuffers

FreeEnvironmentStringsW

FreeLibrary

GetACP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetConsoleMode

GetConsoleOutputCP

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

GetEnvironmentStringsW

GetFileType

GetLastError

GetModuleFileNameW

GetModuleHandleExW

GetModuleHandleW

GetOEMCP

GetProcAddress

GetProcessHeap

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemTimeAsFileTime

HeapAlloc

HeapFree

HeapReAlloc

HeapSize

InitializeCriticalSectionAndSpinCount

InitializeSListHead

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

LCMapStringW

LeaveCriticalSection

LoadLibraryExA

LoadLibraryExW

MultiByteToWideChar

QueryPerformanceCounter

RaiseException

RtlCaptureContext

RtlLookupFunctionEntry

RtlPcToFileHeader

RtlUnwindEx

RtlVirtualUnwind

SetErrorMode

SetFilePointerEx

SetLastError

SetStdHandle

SetThreadErrorMode

SetUnhandledExceptionFilter

TerminateProcess

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

UnhandledExceptionFilter

WideCharToMultiByte

WriteConsoleW

WriteFile

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gxfg
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 140B

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/copilot_provider_msix/copilot_provider_neutral.msix

.appx

Edge/Application/128.0.2739.42/copilot_provider_msix/package_metadata

Edge/Application/128.0.2739.42/d3dcompiler_47.dll

.dll windows:10 windows x64 arch:x64

8235041cfd6fffb926142c2c78013446

Code Sign

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/02/2023, 20:11

Not After

31/01/2024, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

ae:e6:a2:15:01:4a:bd:fd:0d:fa:fe:50:6c:e8:44:3e:5a:2f:7f:55:01:ad:c5:64:f5:65:c6:24:f1:77:44:56
Signer

Actual PE Digest

ae:e6:a2:15:01:4a:bd:fd:0d:fa:fe:50:6c:e8:44:3e:5a:2f:7f:55:01:ad:c5:64:f5:65:c6:24:f1:77:44:56

Digest Algorithm

sha256

PE Digest Matches

true

ae:e6:a2:15:01:4a:bd:fd:0d:fa:fe:50:6c:e8:44:3e:5a:2f:7f:55:01:ad:c5:64:f5:65:c6:24:f1:77:44:56
Signer

Actual PE Digest

ae:e6:a2:15:01:4a:bd:fd:0d:fa:fe:50:6c:e8:44:3e:5a:2f:7f:55:01:ad:c5:64:f5:65:c6:24:f1:77:44:56

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D3DCompiler_47.pdb

Imports

kernel32

WriteFile

FreeLibrary

Sleep

TlsAlloc

TlsSetValue

HeapDestroy

TlsGetValue

TlsFree

GetFullPathNameW

GetFullPathNameA

GetEnvironmentVariableA

VirtualFree

VirtualAlloc

GetSystemInfo

GetProcAddress

LoadLibraryExW

SetLastError

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

IsDebuggerPresent

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

IsProcessorFeaturePresent

GetCurrentThreadId

GetStdHandle

GetFileType

GetStartupInfoW

FlsAlloc

FlsGetValue

FlsSetValue

FlsFree

InitializeCriticalSectionAndSpinCount

GetSystemTimeAsFileTime

CompareStringW

LCMapStringW

GetLocaleInfoW

IsValidLocale

GetUserDefaultLCID

EnumSystemLocalesW

ExitProcess

GetModuleHandleW

GetModuleHandleExW

IsValidCodePage

GetACP

GetOEMCP

GetCPInfo

SetFilePointerEx

GetStringTypeW

ReadFile

GetEnvironmentStringsW

FreeEnvironmentStringsW

SetEnvironmentVariableW

RaiseException

FlushFileBuffers

GetConsoleOutputCP

GetConsoleMode

GetModuleFileNameW

ReadConsoleW

HeapSize

HeapReAlloc

WriteConsoleW

QueryPerformanceCounter

GetCurrentProcessId

InitializeSListHead

RtlUnwindEx

InterlockedFlushSList

EncodePointer

InitializeCriticalSectionEx

RtlPcToFileHeader

LocalAlloc

LocalFree

GetFileSizeEx

GetLastError

CreateFileW

HeapFree

GetProcessHeap

UnmapViewOfFile

GetFileSize

CreateFileMappingW

MapViewOfFile

GetFileAttributesW

SetFileAttributesW

DeleteFileW

SetEndOfFile

DeviceIoControl

MapViewOfFileEx

CreateFileMappingA

ExpandEnvironmentStringsW

HeapAlloc

OutputDebugStringA

CloseHandle

LeaveCriticalSection

EnterCriticalSection

lstrcmpiA

HeapCreate

GetModuleFileNameA

CreateFileA

DeleteCriticalSection

InitializeCriticalSection

WideCharToMultiByte

FindClose

FindFirstFileExW

FindNextFileW

GetCommandLineA

GetCommandLineW

GetDriveTypeW

GetCurrentDirectoryW

SetEvent

ResetEvent

WaitForSingleObjectEx

CreateEventW

MultiByteToWideChar

SetStdHandle

DisableThreadLibraryCalls

advapi32

CryptDestroyHash

CryptAcquireContextW

RegQueryValueExA

RegEnumKeyExA

RegOpenKeyExA

CryptGetHashParam

CryptCreateHash

CryptHashData

RegQueryValueExW

RegOpenKeyExW

RegCloseKey

CryptReleaseContext

rpcrt4

UuidCreate

Exports

D3DAssemble

D3DCompile

D3DCompile2

D3DCompileFromFile

D3DCompressShaders

D3DCreateBlob

D3DCreateFunctionLinkingGraph

D3DCreateLinker

D3DDecompressShaders

D3DDisassemble

D3DDisassemble10Effect

D3DDisassemble11Trace

D3DDisassembleRegion

D3DGetBlobPart

D3DGetDebugInfo

D3DGetInputAndOutputSignatureBlob

D3DGetInputSignatureBlob

D3DGetOutputSignatureBlob

D3DGetTraceInstructionOffsets

D3DLoadModule

D3DPreprocess

D3DReadFileToBlob

D3DReflect

D3DReflectLibrary

D3DReturnFailure1

D3DSetBlobPart

D3DStripShader

D3DWriteBlobToFile

DebugSetMute

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 916KB - Virtual size: 913KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/delegatedWebFeatures.sccd

.xml

Edge/Application/128.0.2739.42/dual_engine_adapter_x64.dll

.dll windows:10 windows x64 arch:x64

31177331ba89714143af8700fd11efa2

Code Sign

33:00:00:05:56:c9:20:2b:1f:74:32:5d:2d:00:00:00:00:05:56
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

09:20:c4:16:89:e6:2c:7b:28:ee:92:c7:c4:69:5e:18:7a:a2:6f:88:fa:4e:dd:a1:9a:ff:2b:55:a3:66:7f:c8
Signer

Actual PE Digest

09:20:c4:16:89:e6:2c:7b:28:ee:92:c7:c4:69:5e:18:7a:a2:6f:88:fa:4e:dd:a1:9a:ff:2b:55:a3:66:7f:c8

Digest Algorithm

sha256

PE Digest Matches

true

09:20:c4:16:89:e6:2c:7b:28:ee:92:c7:c4:69:5e:18:7a:a2:6f:88:fa:4e:dd:a1:9a:ff:2b:55:a3:66:7f:c8
Signer

Actual PE Digest

09:20:c4:16:89:e6:2c:7b:28:ee:92:c7:c4:69:5e:18:7a:a2:6f:88:fa:4e:dd:a1:9a:ff:2b:55:a3:66:7f:c8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release_x64\dual_engine_adapter_x64.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive

AcquireSRWLockShared

CancelIo

CloseHandle

CompareStringW

ConnectNamedPipe

CreateEventW

CreateFileA

CreateFileMappingW

CreateFileW

CreateIoCompletionPort

CreateNamedPipeW

CreateSemaphoreA

CreateThread

DeleteCriticalSection

DisableThreadLibraryCalls

DisconnectNamedPipe

DuplicateHandle

EncodePointer

EnterCriticalSection

EnumSystemLocalesW

ExitProcess

ExpandEnvironmentStringsW

FileTimeToSystemTime

FindClose

FindFirstFileExW

FindFirstFileW

FindNextFileW

FlsAlloc

FlsFree

FlsGetValue

FlsSetValue

FlushFileBuffers

FormatMessageW

FreeEnvironmentStringsW

FreeLibrary

GetACP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetComputerNameExW

GetConsoleMode

GetConsoleOutputCP

GetCurrentDirectoryW

GetCurrentProcess

GetCurrentProcessId

GetCurrentThread

GetCurrentThreadId

GetDateFormatW

GetDriveTypeW

GetEnvironmentStringsW

GetEnvironmentVariableW

GetFileAttributesExW

GetFileAttributesW

GetFileSizeEx

GetFileType

GetFullPathNameW

GetLastError

GetLocalTime

GetLocaleInfoW

GetLogicalProcessorInformation

GetLogicalProcessorInformationEx

GetLongPathNameW

GetModuleFileNameW

GetModuleHandleA

GetModuleHandleExW

GetModuleHandleW

GetNamedPipeClientProcessId

GetNamedPipeServerProcessId

GetNativeSystemInfo

GetOEMCP

GetProcAddress

GetProcessHeap

GetProcessId

GetProductInfo

GetQueuedCompletionStatus

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemDirectoryW

GetSystemInfo

GetSystemTimeAsFileTime

GetTempPathW

GetThreadId

GetThreadPriority

GetTickCount

GetTimeFormatW

GetTimeZoneInformation

GetUserDefaultLCID

GetVersionExW

GetWindowsDirectoryW

InitOnceExecuteOnce

InitializeConditionVariable

InitializeCriticalSection

InitializeCriticalSectionAndSpinCount

InitializeSListHead

InitializeSRWLock

InterlockedFlushSList

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

IsValidLocale

IsWow64Process

K32GetModuleInformation

K32QueryWorkingSetEx

LCMapStringW

LeaveCriticalSection

LoadLibraryExA

LoadLibraryExW

LoadLibraryW

LocalFree

MapViewOfFile

MultiByteToWideChar

OpenProcess

OutputDebugStringA

PostQueuedCompletionStatus

QueryPerformanceCounter

QueryPerformanceFrequency

QueryThreadCycleTime

RaiseException

ReadConsoleW

ReadFile

RegisterWaitForSingleObject

ReleaseSRWLockExclusive

ReleaseSRWLockShared

ReleaseSemaphore

ResetEvent

RtlCaptureContext

RtlCaptureStackBackTrace

RtlLookupFunctionEntry

RtlPcToFileHeader

RtlUnwind

RtlUnwindEx

RtlVirtualUnwind

SetCurrentDirectoryW

SetEnvironmentVariableW

SetEvent

SetFilePointerEx

SetLastError

SetStdHandle

SetThreadInformation

SetThreadPriority

SetUnhandledExceptionFilter

Sleep

SleepConditionVariableSRW

SleepEx

SwitchToThread

SystemTimeToTzSpecificLocalTime

TerminateProcess

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

TryAcquireSRWLockExclusive

UnhandledExceptionFilter

UnmapViewOfFile

UnregisterWaitEx

VirtualAlloc

VirtualFree

VirtualProtect

VirtualQuery

WaitForMultipleObjects

WaitForSingleObject

WaitNamedPipeW

WakeAllConditionVariable

WakeConditionVariable

WideCharToMultiByte

WriteConsoleW

WriteFile

oleaut32

SafeArrayAccessData

SafeArrayCreateVector

SafeArrayGetDim

SafeArrayGetElemsize

SafeArrayGetLBound

SafeArrayGetUBound

SafeArrayGetVartype

SafeArrayUnaccessData

VariantClear

dbghelp

SymCleanup

SymFromAddr

SymGetLineFromAddr64

SymGetSearchPathW

SymInitialize

SymSetOptions

SymSetSearchPathW

shell32

CommandLineToArgvW

ord680

SHGetFolderPathW

SHGetKnownFolderPath

ntdll

RtlGetLastNtStatus

api-ms-win-core-winrt-l1-1-0

RoInitialize

RoUninitialize

Exports

DualEngineInit

DualEngineInitialize

DualEngineReady

GetHandleVerifier

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 610KB - Virtual size: 609KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gxfg
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 196B

IMAGE_SCN_MEM_READ

.rodata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 529B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

malloc_h
Size: 512B - Virtual size: 226B

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/dxcompiler.dll

.dll windows:10 windows x64 arch:x64

ab3093cf1cff53f421cecf4eeee429f4

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

f7:50:f1:fc:b2:8e:ef:cd:c8:bc:03:74:24:80:64:70:26:d2:06:6d:3c:db:2e:7f:22:dc:d9:68:02:9e:54:8f
Signer

Actual PE Digest

f7:50:f1:fc:b2:8e:ef:cd:c8:bc:03:74:24:80:64:70:26:d2:06:6d:3c:db:2e:7f:22:dc:d9:68:02:9e:54:8f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release_x64\dxcompiler.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive

CloseHandle

CompareStringOrdinal

CompareStringW

CreateDirectoryW

CreateFileMappingW

CreateFileW

CreateHardLinkW

CreateThread

DecodePointer

DeleteCriticalSection

DeleteFileW

EncodePointer

EnterCriticalSection

EnumSystemLocalesW

ExitProcess

ExitThread

FindClose

FindFirstFileExW

FindFirstFileW

FindNextFileW

FlsAlloc

FlsFree

FlsGetValue

FlsSetValue

FlushFileBuffers

FreeEnvironmentStringsW

FreeLibrary

FreeLibraryAndExitThread

GetACP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetConsoleMode

GetConsoleOutputCP

GetConsoleScreenBufferInfo

GetCurrentDirectoryW

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

GetDateFormatW

GetEnvironmentStringsW

GetFileAttributesW

GetFileInformationByHandle

GetFileSizeEx

GetFileType

GetLastError

GetLocaleInfoW

GetModuleFileNameW

GetModuleHandleExW

GetModuleHandleW

GetNativeSystemInfo

GetOEMCP

GetProcAddress

GetProcessHeap

GetProcessTimes

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemInfo

GetSystemTimeAsFileTime

GetTempPathW

GetTimeFormatW

GetTimeZoneInformation

GetUserDefaultLCID

HeapAlloc

HeapFree

HeapReAlloc

HeapSize

InitializeCriticalSection

InitializeCriticalSectionAndSpinCount

InitializeCriticalSectionEx

InitializeSListHead

InterlockedFlushSList

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

IsValidLocale

LCMapStringW

LeaveCriticalSection

LoadLibraryA

LoadLibraryExW

LocalFree

MapViewOfFile

MoveFileExW

MultiByteToWideChar

OutputDebugStringW

QueryPerformanceCounter

QueryPerformanceFrequency

RaiseException

ReadConsoleW

ReadFile

ReleaseSRWLockExclusive

RemoveDirectoryW

RtlCaptureContext

RtlLookupFunctionEntry

RtlPcToFileHeader

RtlUnwind

RtlUnwindEx

RtlVirtualUnwind

SetConsoleTextAttribute

SetEndOfFile

SetEnvironmentVariableW

SetFilePointerEx

SetFileTime

SetLastError

SetStdHandle

SetUnhandledExceptionFilter

Sleep

SleepConditionVariableSRW

TerminateProcess

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

UnhandledExceptionFilter

UnmapViewOfFile

VirtualAlloc

VirtualProtect

VirtualQuery

WaitForSingleObject

WakeAllConditionVariable

WideCharToMultiByte

WriteConsoleW

WriteFile

user32

UnregisterClassA

advapi32

EventRegister

EventUnregister

EventWriteTransfer

ole32

CoTaskMemAlloc

CoTaskMemFree

oleaut32

SysAllocString

SysAllocStringByteLen

SysAllocStringLen

SysFreeString

SysStringByteLen

SysStringLen

VarBstrCat

VariantClear

VariantCopy

VariantInit

Exports

DxcCreateInstance

DxcCreateInstance2

Sections

.text
Size: 12.9MB - Virtual size: 12.9MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 527KB - Virtual size: 527KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gxfg
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 140B

.tls
Size: 512B - Virtual size: 25B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/dxil.dll

.dll windows:10 windows x64 arch:x64

42e0b0387affe2aaa84bcec72eb74baf

Code Sign

33:00:00:04:fe:59:ca:b7:e6:2a:a5:22:c1:00:00:00:00:04:fe
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/02/2023, 20:11

Not After

31/01/2024, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

a8:2c:b2:4c:05:25:05:a1:8f:1a:64:06:0c:d9:34:c0:97:d5:c1:0d:76:f3:36:0a:cf:28:0d:15:1d:11:d1:b7
Signer

Actual PE Digest

a8:2c:b2:4c:05:25:05:a1:8f:1a:64:06:0c:d9:34:c0:97:d5:c1:0d:76:f3:36:0a:cf:28:0d:15:1d:11:d1:b7

Digest Algorithm

sha256

PE Digest Matches

true

a8:2c:b2:4c:05:25:05:a1:8f:1a:64:06:0c:d9:34:c0:97:d5:c1:0d:76:f3:36:0a:cf:28:0d:15:1d:11:d1:b7
Signer

Actual PE Digest

a8:2c:b2:4c:05:25:05:a1:8f:1a:64:06:0c:d9:34:c0:97:d5:c1:0d:76:f3:36:0a:cf:28:0d:15:1d:11:d1:b7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

dxil.pdb

Imports

kernel32

DeleteCriticalSection

GetFileSizeEx

HeapFree

WriteFile

CreateFileW

HeapSize

MultiByteToWideChar

HeapReAlloc

CloseHandle

HeapAlloc

GetProcessHeap

WideCharToMultiByte

TlsSetValue

SetLastError

TlsAlloc

TlsGetValue

TlsFree

GetConsoleScreenBufferInfo

SetConsoleTextAttribute

GetCurrentProcess

GetStdHandle

GetConsoleMode

GetProcessTimes

GetSystemTimeAsFileTime

EnterCriticalSection

LeaveCriticalSection

InitializeCriticalSection

GetCommandLineA

RaiseException

GetLastError

InitializeCriticalSectionEx

FindNextFileW

FindFirstFileExW

FindClose

RtlPcToFileHeader

IsDebuggerPresent

OutputDebugStringW

LocalFree

FormatMessageA

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

UnhandledExceptionFilter

SetUnhandledExceptionFilter

TerminateProcess

IsProcessorFeaturePresent

SetStdHandle

GetFileType

FreeLibrary

GetModuleHandleExW

GetCurrentThreadId

GetStartupInfoW

GetConsoleOutputCP

SetFilePointerEx

ExitProcess

GetModuleHandleW

GetProcAddress

GetModuleFileNameW

FlsAlloc

FlsGetValue

FlsSetValue

FlsFree

InitializeCriticalSectionAndSpinCount

LoadLibraryExW

LCMapStringW

IsValidCodePage

GetACP

GetOEMCP

GetCPInfo

GetStringTypeW

FlushFileBuffers

WriteConsoleW

GetEnvironmentStringsW

FreeEnvironmentStringsW

SetEvent

ResetEvent

WaitForSingleObjectEx

CreateEventW

QueryPerformanceCounter

GetCurrentProcessId

InitializeSListHead

RtlUnwindEx

InterlockedFlushSList

EncodePointer

GetCommandLineW

advapi32

EventRegister

EventUnregister

EventWriteTransfer

ole32

CoGetMalloc

Exports

DxcCreateInstance

DxcCreateInstance2

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 250KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/edge_feedback/camera_mf_trace.wprp

.xml

Edge/Application/128.0.2739.42/edge_feedback/mf_trace.wprp

.xml

Edge/Application/128.0.2739.42/edge_game_assist/EdgeGameAssist_1.0.2729.0_x64.msix

.appx

Edge/Application/128.0.2739.42/elevation_service.exe

.exe windows:10 windows x64 arch:x64

80e9006e2acc3dee1904c84ed25a45a7

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

8c:53:56:33:2f:84:69:5b:63:3b:be:fc:ac:3c:c1:3b:d2:0e:7a:8e:60:52:ab:13:a8:3f:53:4f:37:b7:40:73
Signer

Actual PE Digest

8c:53:56:33:2f:84:69:5b:63:3b:be:fc:ac:3c:c1:3b:d2:0e:7a:8e:60:52:ab:13:a8:3f:53:4f:37:b7:40:73

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\_work\e\src\out\Release_x64\elevation_service.exe.pdb

Imports

dbghelp

SymCleanup

SymFromAddr

SymGetLineFromAddr64

SymGetSearchPathW

SymInitialize

SymSetOptions

SymSetSearchPathW

oleaut32

SysAllocStringByteLen

SysStringByteLen

kernel32

AcquireSRWLockExclusive

AcquireSRWLockShared

AssignProcessToJobObject

CloseHandle

CompareStringW

CopyFileW

CreateDirectoryW

CreateEventW

CreateFileA

CreateFileMappingW

CreateFileW

CreateHardLinkW

CreateProcessW

DecodePointer

DeleteCriticalSection

DeleteFileW

DeleteProcThreadAttributeList

DuplicateHandle

EncodePointer

EnterCriticalSection

EnumSystemLocalesW

ExitProcess

ExpandEnvironmentStringsW

FindClose

FindFirstFileExW

FindNextFileW

FlsAlloc

FlsFree

FlsGetValue

FlsSetValue

FlushFileBuffers

FormatMessageW

FreeEnvironmentStringsW

FreeLibrary

GetACP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetComputerNameExW

GetConsoleMode

GetConsoleOutputCP

GetCurrentDirectoryW

GetCurrentProcess

GetCurrentProcessId

GetCurrentThread

GetCurrentThreadId

GetDateFormatW

GetDriveTypeW

GetEnvironmentStringsW

GetEnvironmentVariableW

GetExitCodeProcess

GetFileAttributesExW

GetFileAttributesW

GetFileSizeEx

GetFileType

GetFullPathNameW

GetLastError

GetLocalTime

GetLocaleInfoW

GetLogicalProcessorInformation

GetLongPathNameW

GetModuleFileNameW

GetModuleHandleA

GetModuleHandleExW

GetModuleHandleW

GetNativeSystemInfo

GetOEMCP

GetProcAddress

GetProcessHeap

GetProcessId

GetProductInfo

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemDirectoryW

GetSystemInfo

GetSystemTimeAsFileTime

GetTempPathW

GetThreadPriority

GetTickCount

GetTimeFormatW

GetTimeZoneInformation

GetUserDefaultLCID

GetVersionExW

GetWindowsDirectoryW

HeapAlloc

HeapDestroy

HeapFree

HeapReAlloc

HeapSetInformation

HeapSize

InitOnceExecuteOnce

InitializeCriticalSectionAndSpinCount

InitializeCriticalSectionEx

InitializeProcThreadAttributeList

InitializeSListHead

InitializeSRWLock

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

IsValidLocale

IsWow64Process

K32GetModuleInformation

LCMapStringW

LeaveCriticalSection

LoadLibraryExA

LoadLibraryExW

LoadLibraryW

LocalFree

MapViewOfFile

MoveFileExW

MultiByteToWideChar

OpenProcess

OutputDebugStringA

OutputDebugStringW

QueryFullProcessImageNameW

QueryPerformanceCounter

QueryPerformanceFrequency

QueryThreadCycleTime

RaiseException

ReadConsoleW

ReadFile

ReleaseSRWLockExclusive

ReleaseSRWLockShared

RemoveDirectoryW

ResetEvent

ResumeThread

RtlCaptureContext

RtlCaptureStackBackTrace

RtlLookupFunctionEntry

RtlPcToFileHeader

RtlUnwind

RtlUnwindEx

RtlVirtualUnwind

SetCurrentDirectoryW

SetEndOfFile

SetEnvironmentVariableW

SetEvent

SetFileAttributesW

SetFilePointer

SetFilePointerEx

SetFileTime

SetHandleInformation

SetLastError

SetStdHandle

SetThreadInformation

SetThreadPriority

SetUnhandledExceptionFilter

Sleep

SleepConditionVariableSRW

SwitchToThread

SystemTimeToFileTime

TerminateProcess

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

TryAcquireSRWLockExclusive

TzSpecificLocalTimeToSystemTime

UnhandledExceptionFilter

UnmapViewOfFile

UpdateProcThreadAttribute

VirtualAlloc

VirtualFree

VirtualProtect

VirtualQuery

WTSGetActiveConsoleSessionId

WaitForSingleObject

WakeAllConditionVariable

WideCharToMultiByte

WriteConsoleW

WriteFile

lstrcmpiW

crypt32

CryptProtectData

CryptUnprotectData

rpcrt4

I_RpcOpenClientProcess

api-ms-win-core-winrt-l1-1-0

RoActivateInstance

RoGetActivationFactory

api-ms-win-core-winrt-string-l1-1-0

WindowsCompareStringOrdinal

WindowsCreateString

WindowsCreateStringReference

WindowsDeleteString

WindowsGetStringRawBuffer

ntdll

NtClose

NtDeleteKey

NtOpenKeyEx

NtQueryValueKey

RtlFormatCurrentUserKeyPath

RtlFreeUnicodeString

RtlInitUnicodeString

wtsapi32

WTSEnumerateSessionsW

WTSFreeMemory

WTSQuerySessionInformationW

WTSQueryUserToken

Exports

GetHandleVerifier

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gxfg
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 172B

.tls
Size: 512B - Virtual size: 481B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

LZMADEC
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/eventlog_provider.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

bd:97:15:1f:a0:80:23:83:d1:be:4d:21:73:b4:fb:d0:69:71:76:15:0e:69:3d:e9:49:c2:c5:00:a4:b9:83:52
Signer

Actual PE Digest

bd:97:15:1f:a0:80:23:83:d1:be:4d:21:73:b4:fb:d0:69:71:76:15:0e:69:3d:e9:49:c2:c5:00:a4:b9:83:52

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release_x64\eventlog_provider.dll.pdb

Exports

?fn@@YA_NXZ

Sections

.text
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 140B

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/ffmpeg.dll

.dll windows:10 windows x64 arch:x64

91b8685f04cd4eceae98e68aec559609

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

35:de:3c:3d:86:66:1c:95:0c:ea:b1:cd:d6:a5:15:49:73:69:ac:c7:f5:af:4a:be:99:42:f4:9d:c4:69:45:d6
Signer

Actual PE Digest

35:de:3c:3d:86:66:1c:95:0c:ea:b1:cd:d6:a5:15:49:73:69:ac:c7:f5:af:4a:be:99:42:f4:9d:c4:69:45:d6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release_x64\ffmpeg.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive

CloseHandle

CompareStringW

CreateFileW

CreateThread

DeleteCriticalSection

EncodePointer

EnterCriticalSection

EnumSystemLocalesW

ExitProcess

ExitThread

FindClose

FindFirstFileExW

FindNextFileW

FlsAlloc

FlsFree

FlsGetValue

FlsSetValue

FlushFileBuffers

FreeEnvironmentStringsW

FreeLibrary

FreeLibraryAndExitThread

GetACP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetConsoleMode

GetConsoleOutputCP

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

GetDateFormatW

GetEnvironmentStringsW

GetFileSizeEx

GetFileType

GetLastError

GetLocaleInfoW

GetModuleFileNameW

GetModuleHandleExW

GetModuleHandleW

GetOEMCP

GetProcAddress

GetProcessAffinityMask

GetProcessHeap

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemTimeAsFileTime

GetTimeFormatW

GetTimeZoneInformation

GetUserDefaultLCID

HeapAlloc

HeapFree

HeapQueryInformation

HeapReAlloc

HeapSize

InitOnceBeginInitialize

InitOnceComplete

InitializeConditionVariable

InitializeCriticalSectionAndSpinCount

InitializeSListHead

InitializeSRWLock

InterlockedFlushSList

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

IsValidLocale

LCMapStringW

LeaveCriticalSection

LoadLibraryExW

MultiByteToWideChar

QueryPerformanceCounter

QueryPerformanceFrequency

RaiseException

ReadConsoleW

ReadFile

ReleaseSRWLockExclusive

RtlCaptureContext

RtlLookupFunctionEntry

RtlPcToFileHeader

RtlUnwind

RtlUnwindEx

RtlVirtualUnwind

SetEnvironmentVariableW

SetFilePointerEx

SetLastError

SetStdHandle

SetUnhandledExceptionFilter

Sleep

SleepConditionVariableSRW

TerminateProcess

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

UnhandledExceptionFilter

WaitForSingleObjectEx

WakeAllConditionVariable

WakeConditionVariable

WideCharToMultiByte

WriteConsoleW

WriteFile

Exports

av_buffer_create

av_buffer_get_opaque

av_dict_count

av_dict_free

av_dict_get

av_dict_set

av_dump_format

av_force_cpu_flags

av_frame_alloc

av_frame_clone

av_frame_free

av_frame_unref

av_free

av_get_bytes_per_sample

av_get_cpu_flags

av_guess_format

av_image_check_size

av_init_packet

av_interleaved_write_frame

av_log_set_level

av_malloc

av_max_alloc

av_new_packet

av_packet_alloc

av_packet_copy_props

av_packet_free

av_packet_get_side_data

av_packet_unref

av_read_frame

av_rescale_q

av_rescale_q_rnd

av_samples_get_buffer_size

av_seek_frame

av_strdup

av_stream_get_first_dts

av_stream_get_side_data

av_strerror

av_write_trailer

avcodec_align_dimensions

avcodec_alloc_context3

avcodec_descriptor_get

avcodec_descriptor_next

avcodec_find_decoder

avcodec_flush_buffers

avcodec_free_context

avcodec_get_name

avcodec_open2

avcodec_parameters_copy

avcodec_parameters_to_context

avcodec_receive_frame

avcodec_send_packet

avformat_alloc_context

avformat_alloc_output_context2

avformat_close_input

avformat_find_stream_info

avformat_free_context

avformat_new_stream

avformat_open_input

avformat_write_header

avio_alloc_context

avio_close

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 492KB - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 885KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gxfg
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 140B

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/icudtl.dat

Edge/Application/128.0.2739.42/identity_helper.exe

.exe windows:10 windows x64 arch:x64

3c57dfd423028f6558e255e95d860736

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

67:f7:36:3b:8c:cc:3a:81:bb:19:d1:71:5c:5c:6f:26:de:c8:4b:cd:84:9c:a0:b5:ef:49:4d:cc:c9:0a:56:43
Signer

Actual PE Digest

67:f7:36:3b:8c:cc:3a:81:bb:19:d1:71:5c:5c:6f:26:de:c8:4b:cd:84:9c:a0:b5:ef:49:4d:cc:c9:0a:56:43

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\_work\e\src\out\Release_x64\identity_helper.exe.pdb

Imports

msedge_elf

GetInstallDetailsPayload

SignalInitializeCrashReporting

advapi32

BuildTrusteeWithSidW

ConvertStringSidToSidW

GetLengthSid

GetNamedSecurityInfoW

GetSecurityDescriptorControl

GetSecurityDescriptorDacl

GetSecurityDescriptorGroup

GetSecurityDescriptorOwner

GetSecurityDescriptorSacl

GetTokenInformation

IsValidAcl

IsValidSecurityDescriptor

IsValidSid

OpenProcessToken

RegCloseKey

RegGetValueW

RegOpenKeyExW

RegQueryValueExW

SetEntriesInAclW

SetNamedSecurityInfoW

SetSecurityInfo

dbghelp

SymCleanup

SymFromAddr

SymGetLineFromAddr64

SymGetSearchPathW

SymInitialize

SymSetOptions

SymSetSearchPathW

user32

CreateWindowExW

DefWindowProcW

DestroyWindow

DispatchMessageW

GetMessageW

PostQuitMessage

RegisterClassExW

ShowWindow

TranslateMessage

kernel32

AcquireSRWLockExclusive

CloseHandle

CompareStringW

CreateFileMappingW

CreateFileW

CreateThread

DeleteCriticalSection

EncodePointer

EnterCriticalSection

EnumSystemLocalesW

ExitProcess

ExpandEnvironmentStringsW

FindClose

FindFirstFileExW

FindNextFileW

FlsAlloc

FlsFree

FlsGetValue

FlsSetValue

FlushFileBuffers

FormatMessageW

FreeEnvironmentStringsW

FreeLibrary

GetACP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetComputerNameExW

GetConsoleMode

GetConsoleOutputCP

GetCurrentDirectoryW

GetCurrentProcess

GetCurrentProcessId

GetCurrentThread

GetCurrentThreadId

GetDateFormatW

GetDriveTypeW

GetEnvironmentStringsW

GetEnvironmentVariableW

GetFileAttributesW

GetFileSizeEx

GetFileType

GetFullPathNameW

GetLastError

GetLocalTime

GetLocaleInfoW

GetLogicalProcessorInformation

GetLongPathNameW

GetModuleFileNameW

GetModuleHandleA

GetModuleHandleExW

GetModuleHandleW

GetNativeSystemInfo

GetOEMCP

GetProcAddress

GetProcessHeap

GetProductInfo

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemDirectoryW

GetSystemInfo

GetSystemTimeAsFileTime

GetTempPathW

GetThreadPriority

GetTickCount

GetTimeFormatW

GetTimeZoneInformation

GetUserDefaultLCID

GetVersionExW

GetWindowsDirectoryW

InitOnceExecuteOnce

InitializeCriticalSectionAndSpinCount

InitializeSListHead

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

IsValidLocale

IsWow64Process

LCMapStringW

LeaveCriticalSection

LoadLibraryExA

LoadLibraryExW

LoadLibraryW

LocalFree

MapViewOfFile

MultiByteToWideChar

OutputDebugStringA

PrefetchVirtualMemory

QueryPerformanceCounter

QueryPerformanceFrequency

QueryThreadCycleTime

RaiseException

ReadConsoleW

ReadFile

ReleaseSRWLockExclusive

RtlCaptureContext

RtlCaptureStackBackTrace

RtlLookupFunctionEntry

RtlPcToFileHeader

RtlUnwind

RtlUnwindEx

RtlVirtualUnwind

SetCurrentDirectoryW

SetEnvironmentVariableW

SetFilePointerEx

SetLastError

SetProcessShutdownParameters

SetStdHandle

SetThreadInformation

SetThreadPriority

SetUnhandledExceptionFilter

Sleep

SleepConditionVariableSRW

SwitchToThread

TerminateProcess

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

TryAcquireSRWLockExclusive

UnhandledExceptionFilter

UnmapViewOfFile

VirtualAlloc

VirtualFree

VirtualProtect

VirtualQuery

WakeAllConditionVariable

WideCharToMultiByte

WriteConsoleW

WriteFile

api-ms-win-core-winrt-l1-1-0

RoInitialize

RoUninitialize

ole32

CoCreateInstance

CoTaskMemFree

shell32

CommandLineToArgvW

ord680

SHGetFolderPathW

SHGetKnownFolderPath

oleaut32

SysAllocString

SysAllocStringLen

SysFreeString

VariantClear

winmm

timeGetTime

Exports

GetHandleVerifier

Sections

.text
Size: 751KB - Virtual size: 751KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gxfg
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 140B

.tls
Size: 512B - Virtual size: 373B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/identity_helper.exe.manifest

.xml

Edge/Application/128.0.2739.42/identity_proxy/beta.identity_helper.exe.manifest

.xml

Edge/Application/128.0.2739.42/identity_proxy/canary.identity_helper.exe.manifest

.xml

Edge/Application/128.0.2739.42/identity_proxy/dev.identity_helper.exe.manifest

.xml

Edge/Application/128.0.2739.42/identity_proxy/internal.identity_helper.exe.manifest

.xml

Edge/Application/128.0.2739.42/identity_proxy/resources.pri

Edge/Application/128.0.2739.42/identity_proxy/stable.identity_helper.exe.manifest

.xml

Edge/Application/128.0.2739.42/identity_proxy/win10/identity_helper.Sparse.Beta.msix

.appx

Edge/Application/128.0.2739.42/identity_proxy/win10/identity_helper.Sparse.Canary.msix

.appx

Edge/Application/128.0.2739.42/identity_proxy/win10/identity_helper.Sparse.Dev.msix

.appx

Edge/Application/128.0.2739.42/identity_proxy/win10/identity_helper.Sparse.Internal.msix

.appx

Edge/Application/128.0.2739.42/identity_proxy/win10/identity_helper.Sparse.Stable.msix

.appx

Edge/Application/128.0.2739.42/identity_proxy/win11/identity_helper.Sparse.Beta.msix

.appx

Edge/Application/128.0.2739.42/identity_proxy/win11/identity_helper.Sparse.Canary.msix

.appx

Edge/Application/128.0.2739.42/identity_proxy/win11/identity_helper.Sparse.Dev.msix

.appx

Edge/Application/128.0.2739.42/identity_proxy/win11/identity_helper.Sparse.Internal.msix

.appx

Edge/Application/128.0.2739.42/identity_proxy/win11/identity_helper.Sparse.Stable.msix

.appx

Edge/Application/128.0.2739.42/learning_tools.dll

.dll windows:10 windows x64 arch:x64

62873229aefa47940114bcc32f0cc552

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

02:41:64:0d:30:1c:52:91:a7:bc:41:49:77:ab:27:31:aa:74:4c:bf:b8:b6:fe:fb:77:73:0e:7e:3d:56:46:e6
Signer

Actual PE Digest

02:41:64:0d:30:1c:52:91:a7:bc:41:49:77:ab:27:31:aa:74:4c:bf:b8:b6:fe:fb:77:73:0e:7e:3d:56:46:e6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release_x64\learning_tools.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive

CloseHandle

CompareStringW

CreateFileW

DeleteCriticalSection

EncodePointer

EnterCriticalSection

EnumSystemLocalesW

ExitProcess

FindClose

FindFirstFileExW

FindNextFileW

FlsAlloc

FlsFree

FlsGetValue

FlsSetValue

FlushFileBuffers

FreeEnvironmentStringsW

FreeLibrary

GetACP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetConsoleMode

GetConsoleOutputCP

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

GetDateFormatW

GetEnvironmentStringsW

GetFileSizeEx

GetFileType

GetLastError

GetLocaleInfoW

GetModuleFileNameW

GetModuleHandleExW

GetModuleHandleW

GetOEMCP

GetProcAddress

GetProcessHeap

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemTimeAsFileTime

GetTimeFormatW

GetTimeZoneInformation

GetUserDefaultLCID

HeapAlloc

HeapFree

HeapReAlloc

HeapSize

InitializeCriticalSectionAndSpinCount

InitializeSListHead

InterlockedFlushSList

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

IsValidLocale

LCMapStringW

LeaveCriticalSection

LoadLibraryExW

MultiByteToWideChar

QueryPerformanceCounter

RaiseException

ReadConsoleW

ReadFile

ReleaseSRWLockExclusive

RtlCaptureContext

RtlLookupFunctionEntry

RtlPcToFileHeader

RtlUnwind

RtlUnwindEx

RtlVirtualUnwind

SetEnvironmentVariableW

SetFilePointerEx

SetLastError

SetStdHandle

SetUnhandledExceptionFilter

SleepConditionVariableSRW

TerminateProcess

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

UnhandledExceptionFilter

WakeAllConditionVariable

WideCharToMultiByte

WriteConsoleW

WriteFile

Exports

BuildLinguisticModelResourceRequest

GetPdfReadAloudScript

GetReadingViewExtractionScript

GetReadingViewLearningToolsScript

GetReadingViewThemes

GetTranslateScript

GetWebReadAloudScript

Sections

.text
Size: 301KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 844KB - Virtual size: 843KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gxfg
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 140B

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/libEGL.dll

.dll windows:10 windows x64 arch:x64

9a96e9625913c28565890e319d5bf446

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:03:f4:b8:c4:5d:e1:4e:70:b6:7e:00:00:00:00:03:f4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/07/2024, 21:02

Not After

15/09/2025, 21:02

Subject

CN=Microsoft 3rd Party Application Component,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

22:91:62:b5:67:9e:f7:69:28:b6:4e:70:48:75:e7:dc:ae:e0:ab:a7:94:31:1d:a3:32:25:87:44:3a:6b:70:6e
Signer

Actual PE Digest

22:91:62:b5:67:9e:f7:69:28:b6:4e:70:48:75:e7:dc:ae:e0:ab:a7:94:31:1d:a3:32:25:87:44:3a:6b:70:6e

Digest Algorithm

sha256

PE Digest Matches

true

22:91:62:b5:67:9e:f7:69:28:b6:4e:70:48:75:e7:dc:ae:e0:ab:a7:94:31:1d:a3:32:25:87:44:3a:6b:70:6e
Signer

Actual PE Digest

22:91:62:b5:67:9e:f7:69:28:b6:4e:70:48:75:e7:dc:ae:e0:ab:a7:94:31:1d:a3:32:25:87:44:3a:6b:70:6e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release_x64\libEGL.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive

CloseHandle

CompareStringW

CreateFileW

DeleteCriticalSection

EncodePointer

EnterCriticalSection

EnumSystemLocalesW

ExitProcess

FindClose

FindFirstFileExW

FindNextFileW

FlsAlloc

FlsFree

FlsGetValue

FlsSetValue

FlushFileBuffers

FreeEnvironmentStringsW

FreeLibrary

GetACP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetConsoleMode

GetConsoleOutputCP

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

GetDateFormatW

GetEnvironmentStringsW

GetFileSizeEx

GetFileType

GetLastError

GetLocaleInfoW

GetModuleFileNameW

GetModuleHandleA

GetModuleHandleExW

GetModuleHandleW

GetOEMCP

GetProcAddress

GetProcessHeap

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemTimeAsFileTime

GetTimeFormatW

GetTimeZoneInformation

GetUserDefaultLCID

HeapAlloc

HeapFree

HeapReAlloc

HeapSize

InitializeCriticalSectionAndSpinCount

InitializeSListHead

InterlockedFlushSList

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

IsValidLocale

LCMapStringW

LeaveCriticalSection

LoadLibraryExW

LoadLibraryW

MultiByteToWideChar

QueryPerformanceCounter

RaiseException

ReadConsoleW

ReadFile

ReleaseSRWLockExclusive

RtlCaptureContext

RtlLookupFunctionEntry

RtlPcToFileHeader

RtlUnwind

RtlUnwindEx

RtlVirtualUnwind

SetEnvironmentVariableW

SetFilePointerEx

SetLastError

SetStdHandle

SetUnhandledExceptionFilter

SleepConditionVariableSRW

TerminateProcess

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

UnhandledExceptionFilter

WakeAllConditionVariable

WideCharToMultiByte

WriteConsoleW

WriteFile

Exports

eglAcquireExternalContextANGLE

eglBindAPI

eglBindTexImage

eglChooseConfig

eglClientWaitSync

eglClientWaitSyncKHR

eglCopyBuffers

eglCopyMetalSharedEventANGLE

eglCreateContext

eglCreateDeviceANGLE

eglCreateImage

eglCreateImageKHR

eglCreateNativeClientBufferANDROID

eglCreatePbufferFromClientBuffer

eglCreatePbufferSurface

eglCreatePixmapSurface

eglCreatePlatformPixmapSurface

eglCreatePlatformPixmapSurfaceEXT

eglCreatePlatformWindowSurface

eglCreatePlatformWindowSurfaceEXT

eglCreateStreamKHR

eglCreateStreamProducerD3DTextureANGLE

eglCreateSync

eglCreateSyncKHR

eglCreateWindowSurface

eglDebugMessageControlKHR

eglDestroyContext

eglDestroyImage

eglDestroyImageKHR

eglDestroyStreamKHR

eglDestroySurface

eglDestroySync

eglDestroySyncKHR

eglDupNativeFenceFDANDROID

eglExportVkImageANGLE

eglForceGPUSwitchANGLE

eglGetCompositorTimingANDROID

eglGetCompositorTimingSupportedANDROID

eglGetConfigAttrib

eglGetConfigs

eglGetCurrentContext

eglGetCurrentDisplay

eglGetCurrentSurface

eglGetDisplay

eglGetError

eglGetFrameTimestampSupportedANDROID

eglGetFrameTimestampsANDROID

eglGetMscRateANGLE

eglGetNativeClientBufferANDROID

eglGetNextFrameIdANDROID

eglGetPlatformDisplay

eglGetPlatformDisplayEXT

eglGetProcAddress

eglGetSyncAttrib

eglGetSyncAttribKHR

eglGetSyncValuesCHROMIUM

eglHandleGPUSwitchANGLE

eglInitialize

eglLabelObjectKHR

eglLockSurfaceKHR

eglMakeCurrent

eglPostSubBufferNV

eglPrepareSwapBuffersANGLE

eglPresentationTimeANDROID

eglProgramCacheGetAttribANGLE

eglProgramCachePopulateANGLE

eglProgramCacheQueryANGLE

eglProgramCacheResizeANGLE

eglQueryAPI

eglQueryContext

eglQueryDebugKHR

eglQueryDeviceAttribEXT

eglQueryDeviceStringEXT

eglQueryDisplayAttribANGLE

eglQueryDisplayAttribEXT

eglQueryDmaBufFormatsEXT

eglQueryDmaBufModifiersEXT

eglQueryStreamKHR

eglQueryStreamu64KHR

eglQueryString

eglQueryStringiANGLE

eglQuerySurface

eglQuerySurface64KHR

eglQuerySurfacePointerANGLE

eglReacquireHighPowerGPUANGLE

eglReleaseDeviceANGLE

eglReleaseExternalContextANGLE

eglReleaseHighPowerGPUANGLE

eglReleaseTexImage

eglReleaseThread

eglSetBlobCacheFuncsANDROID

eglSetDamageRegionKHR

eglSetValidationEnabledANGLE

eglSignalSyncKHR

eglStreamAttribKHR

eglStreamConsumerAcquireKHR

eglStreamConsumerGLTextureExternalAttribsNV

eglStreamConsumerGLTextureExternalKHR

eglStreamConsumerReleaseKHR

eglStreamPostD3DTextureANGLE

eglSurfaceAttrib

eglSwapBuffers

eglSwapBuffersWithDamageKHR

eglSwapBuffersWithFrameTokenANGLE

eglSwapInterval

eglTerminate

eglUnlockSurfaceKHR

eglWaitClient

eglWaitGL

eglWaitNative

eglWaitSync

eglWaitSyncKHR

eglWaitUntilWorkScheduledANGLE

Sections

.text
Size: 323KB - Virtual size: 322KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gxfg
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 140B

.tls
Size: 512B - Virtual size: 289B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/libGLESv2.dll

.dll windows:10 windows x64 arch:x64

84f3f7956ea32833032fba7a0331316e

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:03:f3:b9:6a:64:bb:ef:f7:ed:63:00:00:00:00:03:f3
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/07/2024, 21:02

Not After

15/09/2025, 21:02

Subject

CN=Microsoft 3rd Party Application Component,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

d5:82:61:ff:7c:32:0b:0a:89:88:b3:fa:dd:20:79:cd:02:f3:44:7a:dc:52:90:04:be:71:64:64:69:19:6e:9e
Signer

Actual PE Digest

d5:82:61:ff:7c:32:0b:0a:89:88:b3:fa:dd:20:79:cd:02:f3:44:7a:dc:52:90:04:be:71:64:64:69:19:6e:9e

Digest Algorithm

sha256

PE Digest Matches

true

d5:82:61:ff:7c:32:0b:0a:89:88:b3:fa:dd:20:79:cd:02:f3:44:7a:dc:52:90:04:be:71:64:64:69:19:6e:9e
Signer

Actual PE Digest

d5:82:61:ff:7c:32:0b:0a:89:88:b3:fa:dd:20:79:cd:02:f3:44:7a:dc:52:90:04:be:71:64:64:69:19:6e:9e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release_x64\libGLESv2.dll.pdb

Imports

user32

CreateWindowExW

DefWindowProcW

DestroyWindow

GetClassInfoW

GetClientRect

GetWindowThreadProcessId

InvalidateRect

IsIconic

IsWindow

LoadCursorW

MonitorFromWindow

RegisterClassW

UnregisterClassA

WindowFromDC

kernel32

AcquireSRWLockExclusive

CloseHandle

CompareStringW

CreateFileW

CreateThread

DeleteCriticalSection

DuplicateHandle

EncodePointer

EnterCriticalSection

EnumSystemLocalesW

ExitProcess

ExitThread

FindClose

FindFirstFileExW

FindNextFileW

FlsAlloc

FlsFree

FlsGetValue

FlsSetValue

FlushFileBuffers

FreeEnvironmentStringsW

FreeLibrary

FreeLibraryAndExitThread

GetACP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetConsoleMode

GetConsoleOutputCP

GetCurrentDirectoryW

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

GetDateFormatW

GetEnvironmentStringsW

GetEnvironmentVariableW

GetFileSizeEx

GetFileType

GetLastError

GetLocaleInfoW

GetModuleFileNameW

GetModuleHandleA

GetModuleHandleExA

GetModuleHandleExW

GetModuleHandleW

GetOEMCP

GetProcAddress

GetProcessHeap

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemInfo

GetSystemTimeAsFileTime

GetTempPathA

GetTimeFormatW

GetTimeZoneInformation

GetUserDefaultLCID

HeapAlloc

HeapFree

HeapReAlloc

HeapSize

InitOnceExecuteOnce

InitializeCriticalSectionAndSpinCount

InitializeSListHead

InterlockedFlushSList

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

IsValidLocale

LCMapStringW

LeaveCriticalSection

LoadLibraryA

LoadLibraryExA

LoadLibraryExW

LoadLibraryW

MultiByteToWideChar

QueryPerformanceCounter

QueryPerformanceFrequency

RaiseException

ReadConsoleW

ReadFile

ReleaseSRWLockExclusive

RtlCaptureContext

RtlLookupFunctionEntry

RtlPcToFileHeader

RtlUnwind

RtlUnwindEx

RtlVirtualUnwind

SetCurrentDirectoryW

SetEndOfFile

SetEnvironmentVariableW

SetFilePointerEx

SetLastError

SetStdHandle

SetUnhandledExceptionFilter

Sleep

SleepConditionVariableSRW

SwitchToThread

TerminateProcess

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

TryAcquireSRWLockExclusive

UnhandledExceptionFilter

VerSetConditionMask

VerifyVersionInfoW

VirtualProtect

VirtualQuery

WaitForSingleObjectEx

WakeAllConditionVariable

WakeConditionVariable

WideCharToMultiByte

WriteConsoleW

WriteFile

dxgi

CreateDXGIFactory1

Exports

EGL_AcquireExternalContextANGLE

EGL_BindAPI

EGL_BindTexImage

EGL_ChooseConfig

EGL_ClientWaitSync

EGL_ClientWaitSyncKHR

EGL_CopyBuffers

EGL_CopyMetalSharedEventANGLE

EGL_CreateContext

EGL_CreateDeviceANGLE

EGL_CreateImage

EGL_CreateImageKHR

EGL_CreateNativeClientBufferANDROID

EGL_CreatePbufferFromClientBuffer

EGL_CreatePbufferSurface

EGL_CreatePixmapSurface

EGL_CreatePlatformPixmapSurface

EGL_CreatePlatformPixmapSurfaceEXT

EGL_CreatePlatformWindowSurface

EGL_CreatePlatformWindowSurfaceEXT

EGL_CreateStreamKHR

EGL_CreateStreamProducerD3DTextureANGLE

EGL_CreateSync

EGL_CreateSyncKHR

EGL_CreateWindowSurface

EGL_DebugMessageControlKHR

EGL_DestroyContext

EGL_DestroyImage

EGL_DestroyImageKHR

EGL_DestroyStreamKHR

EGL_DestroySurface

EGL_DestroySync

EGL_DestroySyncKHR

EGL_DupNativeFenceFDANDROID

EGL_ExportVkImageANGLE

EGL_ForceGPUSwitchANGLE

EGL_GetCompositorTimingANDROID

EGL_GetCompositorTimingSupportedANDROID

EGL_GetConfigAttrib

EGL_GetConfigs

EGL_GetCurrentContext

EGL_GetCurrentDisplay

EGL_GetCurrentSurface

EGL_GetDisplay

EGL_GetError

EGL_GetFrameTimestampSupportedANDROID

EGL_GetFrameTimestampsANDROID

EGL_GetMscRateANGLE

EGL_GetNativeClientBufferANDROID

EGL_GetNextFrameIdANDROID

EGL_GetPlatformDisplay

EGL_GetPlatformDisplayEXT

EGL_GetProcAddress

EGL_GetSyncAttrib

EGL_GetSyncAttribKHR

EGL_GetSyncValuesCHROMIUM

EGL_HandleGPUSwitchANGLE

EGL_Initialize

EGL_LabelObjectKHR

EGL_LockSurfaceKHR

EGL_MakeCurrent

EGL_PostSubBufferNV

EGL_PrepareSwapBuffersANGLE

EGL_PresentationTimeANDROID

EGL_ProgramCacheGetAttribANGLE

EGL_ProgramCachePopulateANGLE

EGL_ProgramCacheQueryANGLE

EGL_ProgramCacheResizeANGLE

EGL_QueryAPI

EGL_QueryContext

EGL_QueryDebugKHR

EGL_QueryDeviceAttribEXT

EGL_QueryDeviceStringEXT

EGL_QueryDisplayAttribANGLE

EGL_QueryDisplayAttribEXT

EGL_QueryDmaBufFormatsEXT

EGL_QueryDmaBufModifiersEXT

EGL_QueryStreamKHR

EGL_QueryStreamu64KHR

EGL_QueryString

EGL_QueryStringiANGLE

EGL_QuerySurface

EGL_QuerySurface64KHR

EGL_QuerySurfacePointerANGLE

EGL_ReacquireHighPowerGPUANGLE

EGL_ReleaseDeviceANGLE

EGL_ReleaseExternalContextANGLE

EGL_ReleaseHighPowerGPUANGLE

EGL_ReleaseTexImage

EGL_ReleaseThread

EGL_SetBlobCacheFuncsANDROID

EGL_SetDamageRegionKHR

EGL_SetValidationEnabledANGLE

EGL_SignalSyncKHR

EGL_StreamAttribKHR

EGL_StreamConsumerAcquireKHR

EGL_StreamConsumerGLTextureExternalAttribsNV

EGL_StreamConsumerGLTextureExternalKHR

EGL_StreamConsumerReleaseKHR

EGL_StreamPostD3DTextureANGLE

EGL_SurfaceAttrib

EGL_SwapBuffers

EGL_SwapBuffersWithDamageKHR

EGL_SwapBuffersWithFrameTokenANGLE

EGL_SwapInterval

EGL_Terminate

EGL_UnlockSurfaceKHR

EGL_WaitClient

EGL_WaitGL

EGL_WaitNative

EGL_WaitSync

EGL_WaitSyncKHR

EGL_WaitUntilWorkScheduledANGLE

GL_AcquireTexturesANGLE

GL_ActiveShaderProgram

GL_ActiveShaderProgramEXT

GL_ActiveTexture

GL_AlphaFunc

GL_AlphaFuncx

GL_AttachShader

GL_BeginPerfMonitorAMD

GL_BeginPixelLocalStorageANGLE

GL_BeginQuery

GL_BeginQueryEXT

GL_BeginTransformFeedback

GL_BindAttribLocation

GL_BindBuffer

GL_BindBufferBase

GL_BindBufferRange

GL_BindFragDataLocationEXT

GL_BindFragDataLocationIndexedEXT

GL_BindFramebuffer

GL_BindFramebufferOES

GL_BindImageTexture

GL_BindProgramPipeline

GL_BindProgramPipelineEXT

GL_BindRenderbuffer

GL_BindRenderbufferOES

GL_BindSampler

GL_BindTexture

GL_BindTransformFeedback

GL_BindUniformLocationCHROMIUM

GL_BindVertexArray

GL_BindVertexArrayOES

GL_BindVertexBuffer

GL_BlendBarrier

GL_BlendBarrierKHR

GL_BlendColor

GL_BlendEquation

GL_BlendEquationSeparate

GL_BlendEquationSeparatei

GL_BlendEquationSeparateiEXT

GL_BlendEquationSeparateiOES

GL_BlendEquationi

GL_BlendEquationiEXT

GL_BlendEquationiOES

GL_BlendFunc

GL_BlendFuncSeparate

GL_BlendFuncSeparatei

GL_BlendFuncSeparateiEXT

GL_BlendFuncSeparateiOES

GL_BlendFunci

GL_BlendFunciEXT

GL_BlendFunciOES

GL_BlitFramebuffer

GL_BlitFramebufferANGLE

GL_BlitFramebufferNV

GL_BufferData

GL_BufferStorageEXT

GL_BufferStorageExternalEXT

GL_BufferStorageMemEXT

GL_BufferSubData

GL_CheckFramebufferStatus

GL_CheckFramebufferStatusOES

GL_Clear

GL_ClearBufferfi

GL_ClearBufferfv

GL_ClearBufferiv

GL_ClearBufferuiv

GL_ClearColor

GL_ClearColorx

GL_ClearDepthf

GL_ClearDepthx

GL_ClearStencil

GL_ClearTexImageEXT

GL_ClearTexSubImageEXT

GL_ClientActiveTexture

GL_ClientWaitSync

GL_ClipControlEXT

GL_ClipPlanef

GL_ClipPlanex

GL_Color4f

GL_Color4ub

GL_Color4x

GL_ColorMask

GL_ColorMaski

GL_ColorMaskiEXT

GL_ColorMaskiOES

GL_ColorPointer

GL_CompileShader

GL_CompressedCopyTextureCHROMIUM

GL_CompressedTexImage2D

GL_CompressedTexImage2DRobustANGLE

GL_CompressedTexImage3D

GL_CompressedTexImage3DOES

GL_CompressedTexImage3DRobustANGLE

GL_CompressedTexSubImage2D

GL_CompressedTexSubImage2DRobustANGLE

GL_CompressedTexSubImage3D

GL_CompressedTexSubImage3DOES

GL_CompressedTexSubImage3DRobustANGLE

GL_CopyBufferSubData

GL_CopyImageSubData

GL_CopyImageSubDataEXT

GL_CopyImageSubDataOES

GL_CopySubTexture3DANGLE

GL_CopySubTextureCHROMIUM

GL_CopyTexImage2D

GL_CopyTexSubImage2D

GL_CopyTexSubImage3D

GL_CopyTexSubImage3DOES

GL_CopyTexture3DANGLE

GL_CopyTextureCHROMIUM

GL_CoverageModulationCHROMIUM

GL_CreateMemoryObjectsEXT

GL_CreateProgram

GL_CreateShader

GL_CreateShaderProgramv

GL_CreateShaderProgramvEXT

GL_CullFace

GL_CurrentPaletteMatrixOES

GL_DebugMessageCallback

GL_DebugMessageCallbackKHR

GL_DebugMessageControl

GL_DebugMessageControlKHR

GL_DebugMessageInsert

GL_DebugMessageInsertKHR

GL_DeleteBuffers

GL_DeleteFencesNV

GL_DeleteFramebuffers

GL_DeleteFramebuffersOES

GL_DeleteMemoryObjectsEXT

GL_DeletePerfMonitorsAMD

GL_DeleteProgram

GL_DeleteProgramPipelines

GL_DeleteProgramPipelinesEXT

GL_DeleteQueries

GL_DeleteQueriesEXT

GL_DeleteRenderbuffers

GL_DeleteRenderbuffersOES

GL_DeleteSamplers

GL_DeleteSemaphoresEXT

GL_DeleteShader

GL_DeleteSync

GL_DeleteTextures

GL_DeleteTransformFeedbacks

GL_DeleteVertexArrays

GL_DeleteVertexArraysOES

GL_DepthFunc

GL_DepthMask

GL_DepthRangef

GL_DepthRangex

GL_DetachShader

GL_Disable

GL_DisableClientState

GL_DisableExtensionANGLE

GL_DisableVertexAttribArray

GL_Disablei

GL_DisableiEXT

GL_DisableiOES

GL_DiscardFramebufferEXT

GL_DispatchCompute

GL_DispatchComputeIndirect

GL_DrawArrays

GL_DrawArraysIndirect

GL_DrawArraysInstanced

GL_DrawArraysInstancedANGLE

GL_DrawArraysInstancedBaseInstanceANGLE

GL_DrawArraysInstancedBaseInstanceEXT

GL_DrawArraysInstancedEXT

GL_DrawBuffers

GL_DrawBuffersEXT

GL_DrawElements

GL_DrawElementsBaseVertex

GL_DrawElementsBaseVertexEXT

GL_DrawElementsBaseVertexOES

GL_DrawElementsIndirect

GL_DrawElementsInstanced

GL_DrawElementsInstancedANGLE

GL_DrawElementsInstancedBaseInstanceEXT

GL_DrawElementsInstancedBaseVertex

GL_DrawElementsInstancedBaseVertexBaseInstanceANGLE

GL_DrawElementsInstancedBaseVertexBaseInstanceEXT

GL_DrawElementsInstancedBaseVertexEXT

GL_DrawElementsInstancedBaseVertexOES

GL_DrawElementsInstancedEXT

GL_DrawRangeElements

GL_DrawRangeElementsBaseVertex

GL_DrawRangeElementsBaseVertexEXT

GL_DrawRangeElementsBaseVertexOES

GL_DrawTexfOES

GL_DrawTexfvOES

GL_DrawTexiOES

GL_DrawTexivOES

GL_DrawTexsOES

GL_DrawTexsvOES

GL_DrawTexxOES

GL_DrawTexxvOES

GL_EGLImageTargetRenderbufferStorageOES

GL_EGLImageTargetTexStorageEXT

GL_EGLImageTargetTexture2DOES

GL_EGLImageTargetTextureStorageEXT

GL_Enable

GL_EnableClientState

GL_EnableVertexAttribArray

GL_Enablei

GL_EnableiEXT

GL_EnableiOES

GL_EndPerfMonitorAMD

GL_EndPixelLocalStorageANGLE

GL_EndQuery

GL_EndQueryEXT

GL_EndTilingQCOM

GL_EndTransformFeedback

GL_FenceSync

GL_Finish

GL_FinishFenceNV

GL_Flush

GL_FlushMappedBufferRange

GL_FlushMappedBufferRangeEXT

GL_Fogf

GL_Fogfv

GL_Fogx

GL_Fogxv

GL_FramebufferFetchBarrierEXT

GL_FramebufferFoveationConfigQCOM

GL_FramebufferFoveationParametersQCOM

GL_FramebufferMemorylessPixelLocalStorageANGLE

GL_FramebufferParameteri

GL_FramebufferParameteriMESA

GL_FramebufferPixelLocalClearValuefvANGLE

GL_FramebufferPixelLocalClearValueivANGLE

GL_FramebufferPixelLocalClearValueuivANGLE

GL_FramebufferPixelLocalStorageInterruptANGLE

GL_FramebufferPixelLocalStorageRestoreANGLE

GL_FramebufferRenderbuffer

GL_FramebufferRenderbufferOES

GL_FramebufferTexture

GL_FramebufferTexture2D

GL_FramebufferTexture2DMultisampleEXT

GL_FramebufferTexture2DOES

GL_FramebufferTexture3DOES

GL_FramebufferTextureEXT

GL_FramebufferTextureLayer

GL_FramebufferTextureMultiviewOVR

GL_FramebufferTextureOES

GL_FramebufferTexturePixelLocalStorageANGLE

GL_FrontFace

GL_Frustumf

GL_Frustumx

GL_GenBuffers

GL_GenFencesNV

GL_GenFramebuffers

GL_GenFramebuffersOES

GL_GenPerfMonitorsAMD

GL_GenProgramPipelines

GL_GenProgramPipelinesEXT

GL_GenQueries

GL_GenQueriesEXT

GL_GenRenderbuffers

GL_GenRenderbuffersOES

GL_GenSamplers

GL_GenSemaphoresEXT

GL_GenTextures

GL_GenTransformFeedbacks

GL_GenVertexArrays

GL_GenVertexArraysOES

GL_GenerateMipmap

GL_GenerateMipmapOES

GL_GetActiveAttrib

GL_GetActiveUniform

GL_GetActiveUniformBlockName

GL_GetActiveUniformBlockiv

GL_GetActiveUniformBlockivRobustANGLE

GL_GetActiveUniformsiv

GL_GetAttachedShaders

GL_GetAttribLocation

GL_GetBooleani_v

GL_GetBooleani_vRobustANGLE

GL_GetBooleanv

GL_GetBooleanvRobustANGLE

GL_GetBufferParameteri64v

GL_GetBufferParameteri64vRobustANGLE

GL_GetBufferParameteriv

GL_GetBufferParameterivRobustANGLE

GL_GetBufferPointerv

GL_GetBufferPointervOES

GL_GetBufferPointervRobustANGLE

GL_GetClipPlanef

GL_GetClipPlanex

GL_GetCompressedTexImageANGLE

GL_GetDebugMessageLog

GL_GetDebugMessageLogKHR

GL_GetError

GL_GetFenceivNV

GL_GetFixedv

GL_GetFloatv

GL_GetFloatvRobustANGLE

GL_GetFragDataIndexEXT

GL_GetFragDataLocation

GL_GetFramebufferAttachmentParameteriv

GL_GetFramebufferAttachmentParameterivOES

GL_GetFramebufferAttachmentParameterivRobustANGLE

GL_GetFramebufferParameteriv

GL_GetFramebufferParameterivMESA

GL_GetFramebufferParameterivRobustANGLE

GL_GetFramebufferPixelLocalStorageParameterfvANGLE

GL_GetFramebufferPixelLocalStorageParameterfvRobustANGLE

GL_GetFramebufferPixelLocalStorageParameterivANGLE

GL_GetFramebufferPixelLocalStorageParameterivRobustANGLE

GL_GetGraphicsResetStatus

GL_GetGraphicsResetStatusEXT

GL_GetGraphicsResetStatusKHR

GL_GetInteger64i_v

GL_GetInteger64i_vRobustANGLE

GL_GetInteger64v

GL_GetInteger64vEXT

GL_GetInteger64vRobustANGLE

GL_GetIntegeri_v

GL_GetIntegeri_vRobustANGLE

GL_GetIntegerv

GL_GetIntegervRobustANGLE

GL_GetInternalformativ

GL_GetInternalformativRobustANGLE

GL_GetLightfv

GL_GetLightxv

GL_GetMaterialfv

GL_GetMaterialxv

GL_GetMemoryObjectParameterivEXT

GL_GetMultisamplefv

GL_GetMultisamplefvANGLE

GL_GetMultisamplefvRobustANGLE

GL_GetObjectLabel

GL_GetObjectLabelEXT

GL_GetObjectLabelKHR

GL_GetObjectPtrLabel

GL_GetObjectPtrLabelKHR

GL_GetPerfMonitorCounterDataAMD

GL_GetPerfMonitorCounterInfoAMD

GL_GetPerfMonitorCounterStringAMD

GL_GetPerfMonitorCountersAMD

GL_GetPerfMonitorGroupStringAMD

GL_GetPerfMonitorGroupsAMD

GL_GetPointerv

GL_GetPointervKHR

GL_GetPointervRobustANGLERobustANGLE

GL_GetProgramBinary

GL_GetProgramBinaryOES

GL_GetProgramInfoLog

GL_GetProgramInterfaceiv

GL_GetProgramInterfaceivRobustANGLE

GL_GetProgramPipelineInfoLog

GL_GetProgramPipelineInfoLogEXT

GL_GetProgramPipelineiv

GL_GetProgramPipelineivEXT

GL_GetProgramResourceIndex

GL_GetProgramResourceLocation

GL_GetProgramResourceLocationIndexEXT

GL_GetProgramResourceName

GL_GetProgramResourceiv

GL_GetProgramiv

GL_GetProgramivRobustANGLE

GL_GetQueryObjecti64vEXT

GL_GetQueryObjecti64vRobustANGLE

GL_GetQueryObjectivEXT

GL_GetQueryObjectivRobustANGLE

GL_GetQueryObjectui64vEXT

GL_GetQueryObjectui64vRobustANGLE

GL_GetQueryObjectuiv

GL_GetQueryObjectuivEXT

GL_GetQueryObjectuivRobustANGLE

GL_GetQueryiv

GL_GetQueryivEXT

GL_GetQueryivRobustANGLE

GL_GetRenderbufferImageANGLE

GL_GetRenderbufferParameteriv

GL_GetRenderbufferParameterivOES

GL_GetRenderbufferParameterivRobustANGLE

GL_GetSamplerParameterIiv

GL_GetSamplerParameterIivEXT

GL_GetSamplerParameterIivOES

GL_GetSamplerParameterIivRobustANGLE

GL_GetSamplerParameterIuiv

GL_GetSamplerParameterIuivEXT

GL_GetSamplerParameterIuivOES

GL_GetSamplerParameterIuivRobustANGLE

GL_GetSamplerParameterfv

GL_GetSamplerParameterfvRobustANGLE

GL_GetSamplerParameteriv

GL_GetSamplerParameterivRobustANGLE

Sections

.text
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 229KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gxfg
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 140B

.tls
Size: 512B - Virtual size: 322B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/microsoft_shell_integration.dll

.dll windows:10 windows x64 arch:x64

edcf246daa3c43e3f0a548f69258b2ac

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

d7:0a:61:4c:6b:9c:68:27:f9:63:aa:a4:38:c9:ae:43:5d:f6:ff:79:7b:09:b3:0b:0e:d6:85:78:8b:90:4e:23
Signer

Actual PE Digest

d7:0a:61:4c:6b:9c:68:27:f9:63:aa:a4:38:c9:ae:43:5d:f6:ff:79:7b:09:b3:0b:0e:d6:85:78:8b:90:4e:23

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release_x64\microsoft_shell_integration.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive

CloseHandle

CompareStringW

CreateFileW

DecodePointer

DeleteCriticalSection

EncodePointer

EnterCriticalSection

EnumSystemLocalesW

ExitProcess

FindClose

FindFirstFileExW

FindNextFileW

FlsAlloc

FlsFree

FlsGetValue

FlsSetValue

FlushFileBuffers

FreeEnvironmentStringsW

FreeLibrary

GetACP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetConsoleMode

GetConsoleOutputCP

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

GetDateFormatW

GetEnvironmentStringsW

GetFileSizeEx

GetFileType

GetLastError

GetLocaleInfoW

GetModuleFileNameW

GetModuleHandleExW

GetModuleHandleW

GetOEMCP

GetProcAddress

GetProcessHeap

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemInfo

GetSystemTimeAsFileTime

GetTimeFormatW

GetTimeZoneInformation

GetUserDefaultLCID

HeapAlloc

HeapFree

HeapReAlloc

HeapSize

InitializeCriticalSectionAndSpinCount

InitializeCriticalSectionEx

InitializeSListHead

InterlockedFlushSList

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

IsValidLocale

LCMapStringW

LeaveCriticalSection

LoadLibraryExA

LoadLibraryExW

MultiByteToWideChar

OutputDebugStringW

QueryPerformanceCounter

RaiseException

ReadConsoleW

ReadFile

ReleaseSRWLockExclusive

RtlCaptureContext

RtlLookupFunctionEntry

RtlPcToFileHeader

RtlUnwind

RtlUnwindEx

RtlVirtualUnwind

SetEnvironmentVariableW

SetFilePointerEx

SetLastError

SetStdHandle

SetUnhandledExceptionFilter

SleepConditionVariableSRW

TerminateProcess

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

UnhandledExceptionFilter

VirtualProtect

VirtualQuery

WakeAllConditionVariable

WideCharToMultiByte

WriteConsoleW

WriteFile

oleaut32

SysAllocString

SysFreeString

Exports

ChallengeUser

CreateWin7SpellCheckerFactory

DisableControllerNavigation

EnableControllerNavigation

EnableControllerNavigationHwnd

GetProcessAppSessionGuid

GetUIAClientInfo

IsItemPinnedToTaskbarByAppID

RegisterClosestInteractiveBoundsWindow

XboxAreWebAppsEnabled

XboxAreWebAppsUserInstallable

XboxCreateArgbScreenshot

XboxDidAppTerminateNormally

XboxFreeArgbScreenshot

XboxGetProtocolHandlerForScheme

XboxIsBrowserOnFastStorage

XboxIsBrowserSetBackgroundImageEnabled

XboxIsHevcCapEnabledForCurrentProcess

XboxNavigateBack

XboxSetBackgroundImageFromArgbBuffer

XboxShowLegalDocuments

Sections

.text
Size: 288KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gxfg
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 140B

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/mip_core.dll

.dll windows:6 windows x64 arch:x64

ab888f80a1d2821a5354b8f5fb531b17

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

4b:4d:8d:43:97:d0:6e:eb:ae:9c:8d:32:a3:30:da:60:68:9d:c5:5b:9a:be:aa:38:33:96:a5:9f:e5:00:9a:78
Signer

Actual PE Digest

4b:4d:8d:43:97:d0:6e:eb:ae:9c:8d:32:a3:30:da:60:68:9d:c5:5b:9a:be:aa:38:33:96:a5:9f:e5:00:9a:78

Digest Algorithm

sha256

PE Digest Matches

true

4b:4d:8d:43:97:d0:6e:eb:ae:9c:8d:32:a3:30:da:60:68:9d:c5:5b:9a:be:aa:38:33:96:a5:9f:e5:00:9a:78
Signer

Actual PE Digest

4b:4d:8d:43:97:d0:6e:eb:ae:9c:8d:32:a3:30:da:60:68:9d:c5:5b:9a:be:aa:38:33:96:a5:9f:e5:00:9a:78

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\bins\release\amd64\core\mip_core.pdb

Imports

ws2_32

gethostbyaddr

shutdown

socket

setsockopt

connect

closesocket

send

recv

WSASetLastError

getservbyname

getservbyport

inet_ntoa

inet_addr

htons

htonl

WSAGetLastError

WSACleanup

WSAStartup

gethostbyname

select

ntohs

getsockopt

ioctlsocket

rpcrt4

UuidCreate

msvcp140

??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z

?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z

?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z

?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z

?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z

??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z

??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAG@Z

?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ

?_Incref@facet@locale@std@@UEAAXXZ

?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A

_Thrd_sleep

?_Xinvalid_argument@std@@YAXPEBD@Z

?getloc@ios_base@std@@QEBA?AVlocale@2@XZ

_Cnd_register_at_thread_exit

_Cnd_unregister_at_thread_exit

?_Syserror_map@std@@YAPEBDH@Z

?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z

?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z

?exceptions@ios_base@std@@QEAAXH@Z

?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z

?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z

?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ

??0_Locinfo@std@@QEAA@PEBD@Z

?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z

?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z

?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ

_Strcoll

_Strxfrm

?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ

?c_str@?$_Yarn@D@std@@QEBAPEBDXZ

??0facet@locale@std@@IEAA@_K@Z

??1facet@locale@std@@MEAA@XZ

?tolower@?$ctype@D@std@@QEBADD@Z

?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z

?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z

?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z

?id@?$ctype@D@std@@2V0locale@2@A

?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

?id@?$collate@D@std@@2V0locale@2@A

?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

?classic@locale@std@@SAAEBV12@XZ

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ

??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z

?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ

??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z

?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ

??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z

??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAH@Z

?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ

?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ

?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z

?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z

?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ

?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ

?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ

?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z

?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z

?__ExceptionPtrCompare@@YA_NPEBX0@Z

?_Winerror_map@std@@YAHH@Z

?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z

?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z

??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z

??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ

?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEA_K@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z

?widen@?$ctype@_W@std@@QEBA_WD@Z

?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?id@?$ctype@_W@std@@2V0locale@2@A

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z

?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z

??0task_continuation_context@Concurrency@@AEAA@XZ

?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ

?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ

?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ

?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z

?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ

?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z

?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ

?_ReportUnobservedException@details@Concurrency@@YAXXZ

?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z

?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z

_Cnd_broadcast

?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z

?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z

_Cnd_destroy_in_situ

_Cnd_init_in_situ

_Thrd_join

_Cnd_timedwait

_Mtx_current_owns

_Cnd_signal

_Cnd_wait

?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

?_Xbad_alloc@std@@YAXXZ

?_Throw_Cpp_error@std@@YAXH@Z

_Cnd_do_broadcast_at_thread_exit

_Thrd_detach

?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A

?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ

?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z

?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z

?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

?always_noconv@codecvt_base@std@@QEBA_NXZ

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

??Bid@locale@std@@QEAA_KXZ

??1_Lockit@std@@QEAA@XZ

??0_Lockit@std@@QEAA@H@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z

_Unlock_shared_ptr_spin_lock

_Lock_shared_ptr_spin_lock

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z

?_Xbad_function_call@std@@YAXXZ

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

_Xtime_get_ticks

?__ExceptionPtrAssign@@YAXPEAXPEBX@Z

_Thrd_id

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z

?_Throw_C_error@std@@YAXH@Z

_Mtx_unlock

_Mtx_lock

_Mtx_destroy_in_situ

_Mtx_init_in_situ

_Query_perf_frequency

_Query_perf_counter

?__ExceptionPtrCurrentException@@YAXPEAX@Z

?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z

?__ExceptionPtrRethrow@@YAXPEBX@Z

?__ExceptionPtrToBool@@YA_NPEBX@Z

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

?__ExceptionPtrDestroy@@YAXPEAX@Z

?__ExceptionPtrCreate@@YAXPEAX@Z

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ

?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ

?uncaught_exception@std@@YA_NXZ

?_Xout_of_range@std@@YAXPEBD@Z

?_Xlength_error@std@@YAXPEBD@Z

??1_Locinfo@std@@QEAA@XZ

?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z

concrt140

??0_ReentrantBlockingLock@details@Concurrency@@QEAA@XZ

?_Acquire@_ReentrantBlockingLock@details@Concurrency@@QEAAXXZ

?_Release@_ReentrantBlockingLock@details@Concurrency@@QEAAXXZ

??1_ReentrantBlockingLock@details@Concurrency@@QEAA@XZ

kernel32

SetEvent

InitializeCriticalSectionAndSpinCount

ReadConsoleW

ReadConsoleA

SetConsoleMode

GetConsoleMode

FindNextFileW

FindFirstFileW

InitOnceComplete

InitOnceBeginInitialize

InitializeSListHead

IsDebuggerPresent

IsProcessorFeaturePresent

GetSystemDirectoryA

GetACP

GetModuleHandleExW

GetFileType

GetStdHandle

AcquireSRWLockShared

AcquireSRWLockExclusive

ReleaseSRWLockShared

ReleaseSRWLockExclusive

InitializeSRWLock

SetLastError

TryEnterCriticalSection

AreFileApisANSI

ReadFile

HeapCreate

HeapFree

GetFullPathNameW

WriteFile

GetDiskFreeSpaceW

OutputDebugStringA

LockFile

SetFilePointer

GetFullPathNameA

SetEndOfFile

UnlockFileEx

GetTempPathW

CreateMutexW

WaitForSingleObject

CreateFileW

UnmapViewOfFile

HeapValidate

HeapSize

GetTempPathA

GetDiskFreeSpaceA

GetFileAttributesA

GetFileAttributesExW

OutputDebugStringW

FlushViewOfFile

WaitForSingleObjectEx

DeleteFileW

CreateEventW

LoadLibraryW

HeapAlloc

HeapCompact

HeapDestroy

UnlockFile

LocalFree

LockFileEx

GetFileSize

GetProcessHeap

WideCharToMultiByte

FormatMessageA

CreateFileMappingW

MapViewOfFile

QueryPerformanceCounter

GetTickCount

FlushFileBuffers

MultiByteToWideChar

TlsFree

TlsSetValue

TlsGetValue

TlsAlloc

Sleep

DeleteCriticalSection

LeaveCriticalSection

EnterCriticalSection

InitializeCriticalSection

GlobalFree

SystemTimeToFileTime

FormatMessageW

GetModuleHandleA

GetSystemTime

LoadLibraryExA

VirtualQuery

VirtualProtect

GetSystemInfo

GetSystemTimeAsFileTime

GetFileAttributesW

GetEnvironmentVariableA

CloseHandle

GetFileTime

FindNextFileA

FindFirstFileA

FindClose

DeleteFileA

CreateFileA

GetModuleHandleW

GetModuleFileNameA

GetCurrentProcessId

GetCurrentThreadId

RaiseException

LoadLibraryA

GetProcAddress

FreeLibrary

GetLastError

VerifyVersionInfoW

VerSetConditionMask

ResetEvent

RtlCaptureContext

RtlLookupFunctionEntry

UnhandledExceptionFilter

RtlVirtualUnwind

SetUnhandledExceptionFilter

GetCurrentProcess

HeapReAlloc

TerminateProcess

GetEnvironmentVariableW

VirtualFree

vcruntime140

_purecall

__std_terminate

memcmp

memcpy

memmove

__std_exception_copy

__std_exception_destroy

_CxxThrowException

__std_type_info_destroy_list

__current_exception_context

memchr

__std_type_info_compare

__C_specific_handler

strchr

strstr

strrchr

wcsstr

__current_exception

memset

vcruntime140_1

__CxxFrameHandler4

Exports

?AddContext@ApiContextStorage@mipns@@SAXV?$shared_ptr@VApiContext@mipns@@@std@@@Z

?ApplyGlobalAuditCustomSettings@mipns@@YAXAEBV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@Z

?ApplyGlobalAuditMaskingFilter@mipns@@YAXAEBV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@@std@@@2@@std@@@Z

?ApplyGlobalTelemetryCustomSettings@mipns@@YAXAEBV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@Z

?ApplyGlobalTelemetryMaskingFilter@mipns@@YAXAEBV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@@std@@@2@@std@@@Z

?CheckLastErrorAndThrow@mipns@@YAXXZ

?CrackBlock@mipns@@YA?AV?$vector@EV?$allocator@E@std@@@std@@AEBVCryptoDelegate@1@AEBV23@I111PEBEIW4RSAPadding@1@W4CryptoHashAlgorithm@1@@Z

?Create@HttpClient@mipns@@SA?AV?$shared_ptr@VHttpClient@mipns@@@std@@XZ

?Create@JsonDelegateImpl@mipns@@SA?AV?$shared_ptr@VJsonDelegateImpl@mipns@@@std@@XZ

?Create@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBUApplicationInfo@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@W4LogLevel@2@_NAEBV?$shared_ptr@VLoggerDelegate@mipns@@@4@AEBV?$shared_ptr@UDiagnosticConfiguration@mipns@@@4@@Z

?Create@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBV?$shared_ptr@$$CBVMipConfiguration@mipns@@@4@@Z

?Create@OpenSslCryptoDelegateImpl@mipns@@SA?AV?$shared_ptr@VOpenSslCryptoDelegateImpl@mipns@@@std@@XZ

?Create@StorageDelegateImpl@mipns@@SA?AV?$shared_ptr@VStorageDelegate@mipns@@@std@@AEBVStorageSettings@StorageDelegate@2@@Z

?Create@Win32CryptoDelegateImpl@mipns@@SA?AV?$shared_ptr@VWin32CryptoDelegateImpl@mipns@@@std@@XZ

?Create@XmlDelegateImpl@xml@mipns@@SA?AV?$shared_ptr@VXmlDelegateImpl@xml@mipns@@@std@@XZ

?CreateAsymmetricCryptoProvider@mipns@@YA?AV?$shared_ptr@VRsaCryptoProvider@mipns@@@std@@AEBV?$shared_ptr@VCryptoDelegate@mipns@@@3@W4CryptoAlgorithm@1@AEBV?$vector@EV?$allocator@E@std@@@3@I@Z

?CreateAuditEvent@mipns@@YA?AV?$shared_ptr@VAuditEvent@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@@Z

?CreateAuditManager@mipns@@YA?AV?$shared_ptr@VAuditManager@mipns@@@std@@AEBUDiagnosticConfiguration@1@V?$shared_ptr@VAuditDelegate@mipns@@@3@1@Z

?CreateAuditOnlyEventProperty@mipns@@YA?AV?$shared_ptr@VEventProperty@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@0@Z

?CreateAuthRequestTransformer@mipns@@YA?AV?$shared_ptr@VRequestTransformer@mipns@@@std@@AEBV?$shared_ptr@VMipContext@mipns@@@3@AEBVIdentity@1@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@AEBV?$shared_ptr@VAuthDelegate@mipns@@@3@AEBV?$shared_ptr@VAuthChallengeProvider@mipns@@@3@AEBV?$shared_ptr@VHttpProvider@mipns@@@3@@Z

?CreateAutoTelemetryEvent@mipns@@YA?AV?$unique_ptr@VAutoTelemetryEvent@mipns@@U?$default_delete@VAutoTelemetryEvent@mipns@@@std@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@W4EventLevel@1@AEBV?$shared_ptr@VTelemetryContext@mipns@@@3@AEBV?$shared_ptr@VTelemetryManager@mipns@@@3@@Z

?CreateAutoTelemetryEvent@mipns@@YA?AV?$unique_ptr@VAutoTelemetryEvent@mipns@@U?$default_delete@VAutoTelemetryEvent@mipns@@@std@@@std@@AEBV?$shared_ptr@VTelemetryEvent@mipns@@@3@AEBV?$shared_ptr@VTelemetryContext@mipns@@@3@AEBV?$shared_ptr@VTelemetryManager@mipns@@@3@@Z

?CreateCryptoProvider@mipns@@YA?AV?$shared_ptr@VCryptoProvider@mipns@@@std@@AEBVCryptoDelegate@1@W4CipherMode@1@AEBVCryptoKey@1@@Z

?CreateDefaultAuditDelegate@mipns@@YA?AV?$shared_ptr@VAuditDelegate@mipns@@@std@@AEBV?$shared_ptr@VOneDSAriaHelper@mipns@@@3@AEBUDiagnosticConfiguration@1@@Z

?CreateDefaultLoggerDelegate@logger@mipns@@YA?AV?$shared_ptr@VLoggerDelegate@mipns@@@std@@AEBULoggerConfiguration@2@@Z

?CreateDefaultTelemetryDelegate@mipns@@YA?AV?$shared_ptr@VTelemetryDelegate@mipns@@@std@@AEBV?$shared_ptr@VOneDSAriaHelper@mipns@@@3@AEBUDiagnosticConfiguration@1@@Z

?CreateDomainFromEmail@mipns@@YA?AV?$shared_ptr@VDomain@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@@Z

?CreateDomainFromUrl@mipns@@YA?AV?$shared_ptr@VDomain@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@@Z

?CreateEmptyAuditDelegate@mipns@@YA?AV?$shared_ptr@VAuditDelegate@mipns@@@std@@XZ

?CreateEmptyTelemetryDelegate@mipns@@YA?AV?$shared_ptr@VTelemetryDelegate@mipns@@@std@@XZ

?CreateEventContext@mipns@@YA?AV?$shared_ptr@VEventContext@mipns@@@std@@W4Cloud@1@W4DataBoundary@1@AEBVMipContext@1@@Z

?CreateEventFactory@mipns@@YA?AV?$shared_ptr@VDiagnosticEventFactory@mipns@@@std@@XZ

?CreateEventFailureProperties@mipns@@YA?AV?$vector@V?$shared_ptr@VEventProperty@mipns@@@std@@V?$allocator@V?$shared_ptr@VEventProperty@mipns@@@std@@@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@00H@Z

?CreateEventFailureProperties@mipns@@YA?AV?$vector@V?$shared_ptr@VEventProperty@mipns@@@std@@V?$allocator@V?$shared_ptr@VEventProperty@mipns@@@std@@@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@00HAEBVError@1@@Z

?CreateEventFailureProperties@mipns@@YA?AV?$vector@V?$shared_ptr@VEventProperty@mipns@@@std@@V?$allocator@V?$shared_ptr@VEventProperty@mipns@@@std@@@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@00HAEBVexception_ptr@3@@Z

?CreateEventProperty@mipns@@YA?AV?$shared_ptr@VEventProperty@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@0W4Pii@1@@Z

?CreateEventProperty@mipns@@YA?AV?$shared_ptr@VEventProperty@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@NW4Pii@1@@Z

?CreateEventProperty@mipns@@YA?AV?$shared_ptr@VEventProperty@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@_JW4Pii@1@@Z

?CreateEventProperty@mipns@@YA?AV?$shared_ptr@VEventProperty@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@_N@Z

?CreateHttpDirector@mipns@@YA?AV?$shared_ptr@VHttpDirector@mipns@@@std@@AEBV?$shared_ptr@VMipContext@mipns@@@3@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@AEBVIdentity@1@AEBV?$shared_ptr@VHttpDelegate@mipns@@@3@AEBV?$shared_ptr@VHttpProvider@mipns@@@3@AEBV?$shared_ptr@VTelemetryContext@mipns@@@3@@Z

?CreateHttpRequest@mipns@@YA?AV?$shared_ptr@VHttpRequestBase@mipns@@@std@@AEBVHttpRequestBase@1@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@@Z

?CreateHttpRequest@mipns@@YA?AV?$shared_ptr@VHttpRequestBase@mipns@@@std@@W4TransportLayerSecurityMinimumVersion@1@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@W4HttpRequestType@1@1@Z

?CreateMipContext@mipns@@YA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBV?$shared_ptr@$$CBVMipConfiguration@mipns@@@3@@Z

?CreateOneDSAriaHelper@mipns@@YA?AV?$shared_ptr@VOneDSAriaHelper@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@AEBUDiagnosticConfiguration@1@AEBV?$shared_ptr@VCloudManager@mipns@@@3@W4LogLevel@1@@Z

?CreatePersistentStore@mipns@@YA?AV?$unique_ptr@VPersistentStore@mipns@@U?$default_delete@VPersistentStore@mipns@@@std@@@std@@AEBV?$shared_ptr@VMipContext@mipns@@@3@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@W4MipComponent@1@1AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@3@33AEBV?$shared_ptr@VStorageDelegate@mipns@@@3@_N@Z

?CreateRedirectRequestTransformer@mipns@@YA?AV?$shared_ptr@VRequestTransformer@mipns@@@std@@AEBV?$shared_ptr@VMipContext@mipns@@@3@AEBVIdentity@1@AEBV?$shared_ptr@VRedirectProvider@mipns@@@3@AEBV?$shared_ptr@VHttpProvider@mipns@@@3@@Z

?CreateStreamFromBuffer@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@PEAE_J@Z

?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@AEBV?$shared_ptr@V?$basic_iostream@DU?$char_traits@D@std@@@std@@@3@@Z

?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@AEBV?$shared_ptr@V?$basic_istream@DU?$char_traits@D@std@@@std@@@3@@Z

?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@AEBV?$shared_ptr@V?$basic_ostream@DU?$char_traits@D@std@@@std@@@3@@Z

?CreateTelemetryContext@mipns@@YA?AV?$shared_ptr@VTelemetryContext@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@0AEBV?$shared_ptr@VEventContext@mipns@@@3@AEBV23@@Z

?CreateTelemetryEvent@mipns@@YA?AV?$shared_ptr@VTelemetryEvent@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@W4EventLevel@1@@Z

?CreateTelemetryManager@mipns@@YA?AV?$shared_ptr@VTelemetryManager@mipns@@@std@@AEBUDiagnosticConfiguration@1@V?$shared_ptr@VTelemetryDelegate@mipns@@@3@1@Z

?CreateTelemetrySchemaValidator@mipns@@YA?AV?$shared_ptr@VTelemetrySchemaValidator@mipns@@@std@@_N@Z

?CreateUri@mipns@@YA?AV?$unique_ptr@VUri@mipns@@U?$default_delete@VUri@mipns@@@std@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@@Z

?CreateWithCustomFeatureSettings@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBUApplicationInfo@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@W4LogLevel@2@_NAEBV?$shared_ptr@VLoggerDelegate@mipns@@@4@AEBV?$shared_ptr@UDiagnosticConfiguration@mipns@@@4@AEBV?$map@W4FlightingFeature@mipns@@_NU?$less@W4FlightingFeature@mipns@@@std@@V?$allocator@U?$pair@$$CBW4FlightingFeature@mipns@@_N@std@@@4@@4@@Z

?DecryptBuffer@bufferprotector@mipns@@YA_JAEBVCryptoDelegate@2@W4CipherMode@2@AEBVCryptoKey@2@2_JPEBE3PEAE3_NAEBV?$vector@U?$ByteData@_J@mipns@@V?$allocator@U?$ByteData@_J@mipns@@@std@@@std@@@Z

?DecryptBuffer@bufferprotector@mipns@@YA_JAEBVCryptoDelegate@2@W4CipherMode@2@AEBVCryptoKey@2@_JPEBE3PEAE3_N6@Z

?EncryptBuffer@bufferprotector@mipns@@YA_JAEBVCryptoDelegate@2@W4CipherMode@2@AEBVCryptoKey@2@2_JPEBE3PEAE3_NAEAV?$vector@V?$vector@EV?$allocator@E@std@@@std@@V?$allocator@V?$vector@EV?$allocator@E@std@@@std@@@2@@std@@@Z

?EncryptBuffer@bufferprotector@mipns@@YA_JAEBVCryptoDelegate@2@W4CipherMode@2@AEBVCryptoKey@2@_JPEBE3PEAE3_N6@Z

?GenerateAESKey@mipns@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVCryptoDelegate@1@@Z

?GenerateAESKeyAsBytes@mipns@@YA?AV?$vector@EV?$allocator@E@std@@@std@@AEBVCryptoDelegate@1@I@Z

?GetContext@ApiContextStorage@mipns@@SA?AV?$shared_ptr@VApiContext@mipns@@@std@@XZ

?GetCryptoDelegate@mipns@@YA?AV?$shared_ptr@VCryptoDelegate@mipns@@@std@@AEBV?$shared_ptr@VMipContext@mipns@@@3@@Z

?GetHashSize@mipns@@YA_KW4CryptoHashAlgorithm@1@@Z

?GetIsPiiAllowed@logger@mipns@@YA_NXZ

?GetLogLevel@logger@mipns@@YA?AW4LogLevel@2@XZ

?GetLoggerDelegateInstance@logger@mipns@@YAAEBV?$shared_ptr@VLoggerDelegate@mipns@@@std@@XZ

?GetSanitizedUrl@mipns@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV23@@Z

?IsMipCoreLite@mipns@@YA_NXZ

?IsValidAesKey@mipns@@YA_NAEBVCryptoKey@1@@Z

?RemoveContext@ApiContextStorage@mipns@@SAXV?$shared_ptr@VApiContext@mipns@@@std@@@Z

?SetIsPiiAllowed@logger@mipns@@YAX_N@Z

?SetLastError@mipns@@YAXV?$shared_ptr@VDelegateResponseError@mipns@@@std@@@Z

?SetLogLevel@logger@mipns@@YAXW4LogLevel@2@@Z

?SetLoggerDelegateInstance@logger@mipns@@YAXAEBV?$shared_ptr@VLoggerDelegate@mipns@@@std@@@Z

?SetOneDSHttpDelegate@mipns@@YAXAEBV?$shared_ptr@VHttpDelegate@mipns@@@std@@@Z

?SetOneDSIsTls12Enforced@mipns@@YAX_N@Z

?SetOneDSTaskDispatcherDelegate@mipns@@YAXAEBV?$shared_ptr@VTaskDispatcherDelegate@mipns@@@std@@@Z

MIP_CC_CreateDictionary

MIP_CC_CreateHttpDelegate

MIP_CC_CreateLoggerDelegate

MIP_CC_CreateLoggerDelegateMessageData

MIP_CC_CreateMipContext

MIP_CC_CreateMipContextWithCustomFeatureSettings

MIP_CC_CreateProtectionDescriptorFromTemplate

MIP_CC_CreateProtectionDescriptorFromUserRights

MIP_CC_CreateProtectionDescriptorFromUserRoles

MIP_CC_CreateStream

MIP_CC_CreateStringList

MIP_CC_CreateTaskDispatcherDelegate

MIP_CC_CreateTelemetryConfiguration

MIP_CC_Dictionary_GetEntries

MIP_CC_ExecuteDispatchedTask

MIP_CC_NotifyHttpDelegateResponse

MIP_CC_ProtectionDescriptor_DoesAllowOfflineAccess

MIP_CC_ProtectionDescriptor_DoesContentExpire

MIP_CC_ProtectionDescriptor_GetContentId

MIP_CC_ProtectionDescriptor_GetContentValidUntil

MIP_CC_ProtectionDescriptor_GetDescription

MIP_CC_ProtectionDescriptor_GetDescriptionSize

MIP_CC_ProtectionDescriptor_GetDoubleKeyUrl

MIP_CC_ProtectionDescriptor_GetDoubleKeyUrlSize

MIP_CC_ProtectionDescriptor_GetEncryptedAppData

MIP_CC_ProtectionDescriptor_GetLabelId

MIP_CC_ProtectionDescriptor_GetName

MIP_CC_ProtectionDescriptor_GetNameSize

MIP_CC_ProtectionDescriptor_GetOwner

MIP_CC_ProtectionDescriptor_GetOwnerSize

MIP_CC_ProtectionDescriptor_GetProtectionType

MIP_CC_ProtectionDescriptor_GetReferrer

MIP_CC_ProtectionDescriptor_GetReferrerSize

MIP_CC_ProtectionDescriptor_GetSignedAppData

MIP_CC_ProtectionDescriptor_GetTemplateId

MIP_CC_ReleaseDictionary

MIP_CC_ReleaseHttpDelegate

MIP_CC_ReleaseLoggerDelegate

MIP_CC_ReleaseMipContext

MIP_CC_ReleaseProtectionDescriptor

MIP_CC_ReleaseStream

MIP_CC_ReleaseStringList

MIP_CC_ReleaseTaskDispatcherDelegate

MIP_CC_ReleaseTelemetryConfiguration

MIP_CC_StringList_GetStrings

MIP_CC_TelemetryConfiguration_AddMaskedProperty

MIP_CC_TelemetryConfiguration_SetCustomSettings

MIP_CC_TelemetryConfiguration_SetHostName

MIP_CC_TelemetryConfiguration_SetHttpDelegate

MIP_CC_TelemetryConfiguration_SetIsFastShutdownEnabled

MIP_CC_TelemetryConfiguration_SetIsLocalCachingEnabled

MIP_CC_TelemetryConfiguration_SetIsNetworkDetectionEnabled

MIP_CC_TelemetryConfiguration_SetIsTelemetryOptedOut

MIP_CC_TelemetryConfiguration_SetIsTraceLoggingEnabled

MIP_CC_TelemetryConfiguration_SetLibraryName

MIP_CC_TelemetryConfiguration_SetTaskDispatcherDelegate

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.didat
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Edge/Application/128.0.2739.42/mip_protection_sdk.dll

.dll windows:6 windows x64 arch:x64

895261ecb963221739705c1de91666f7

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

a8:c3:fa:5a:73:27:e2:05:ae:18:97:4d:1b:ba:45:ec:81:8e:ad:a9:ad:b3:3b:18:bb:2e:4f:91:69:9d:57:2f
Signer

Actual PE Digest

a8:c3:fa:5a:73:27:e2:05:ae:18:97:4d:1b:ba:45:ec:81:8e:ad:a9:ad:b3:3b:18:bb:2e:4f:91:69:9d:57:2f

Digest Algorithm

sha256

PE Digest Matches

true

a8:c3:fa:5a:73:27:e2:05:ae:18:97:4d:1b:ba:45:ec:81:8e:ad:a9:ad:b3:3b:18:bb:2e:4f:91:69:9d:57:2f
Signer

Actual PE Digest

a8:c3:fa:5a:73:27:e2:05:ae:18:97:4d:1b:ba:45:ec:81:8e:ad:a9:ad:b3:3b:18:bb:2e:4f:91:69:9d:57:2f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\bins\release\amd64\protection\mip_protection_sdk.pdb

Imports

rpcrt4

UuidCreate

msvcp140

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z

_Xtime_get_ticks

_Query_perf_counter

_Query_perf_frequency

_Mtx_current_owns

_Cnd_init_in_situ

_Cnd_destroy_in_situ

_Cnd_wait

_Cnd_timedwait

_Cnd_broadcast

?_Throw_Cpp_error@std@@YAXH@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z

?_Xinvalid_argument@std@@YAXPEBD@Z

??0_Lockit@std@@QEAA@H@Z

??1_Lockit@std@@QEAA@XZ

??Bid@locale@std@@QEAA_KXZ

?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

?tolower@?$ctype@D@std@@QEBADD@Z

?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?id@?$ctype@D@std@@2V0locale@2@A

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z

?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z

?_ReportUnobservedException@details@Concurrency@@YAXXZ

?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ

?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z

?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ

?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z

?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ

?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ

?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ

??0task_continuation_context@Concurrency@@AEAA@XZ

?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z

?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

_Thrd_id

_Thrd_detach

_Cnd_do_broadcast_at_thread_exit

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z

_Cnd_signal

_Thrd_join

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ

?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z

?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z

??0_Locinfo@std@@QEAA@PEBD@Z

??1_Locinfo@std@@QEAA@XZ

??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z

?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z

?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z

??0codecvt_base@std@@QEAA@_K@Z

??1codecvt_base@std@@UEAA@XZ

?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z

?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z

??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z

??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ

?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ

?_Incref@facet@locale@std@@UEAAXXZ

?do_encoding@codecvt_base@std@@MEBAHXZ

?do_max_length@codecvt_base@std@@MEBAHXZ

?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z

?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z

?getloc@ios_base@std@@QEBA?AVlocale@2@XZ

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z

?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z

?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A