zloader | 9ecd96e90def2fa42b060d64290129903115d7410b2c2008e8d4b928c4b5846a

resource
9ecd96e90def2fa42b060d64290129903115d7410b2c2008e8d4b928c4b5846a
unpack001/$PLUGINSDIR/SpiderBanner.dll
unpack001/$PLUGINSDIR/StdUtils.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/WinShell.dll
unpack002/Beaker Browser.exe
unpack002/ffmpeg.dll
unpack002/libEGL.dll
unpack002/libGLESv2.dll
unpack002/node.dll
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-ia32/electron-47.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-ia32/electron-48.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-ia32/electron-49.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-ia32/electron-50.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-ia32/electron-51.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-ia32/electron-53.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-ia32/electron-54.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-ia32/electron-57.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-ia32/electron-64.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-ia32/libsodium.dll
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-ia32/node-47.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-ia32/node-48.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-ia32/node-51.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-ia32/node-57.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-ia32/node-59.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-ia32/node-64.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-x64/electron-47.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-x64/electron-48.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-x64/electron-49.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-x64/electron-50.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-x64/electron-51.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-x64/electron-53.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-x64/electron-54.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-x64/electron-57.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-x64/electron-64.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-x64/libsodium.dll
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-x64/node-47.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-x64/node-48.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-x64/node-51.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-x64/node-57.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-x64/node-59.node
unpack002/resources/app.asar.unpacked/node_modules/sodium-native/prebuilds/win32-x64/node-64.node
unpack002/resources/elevate.exe
unpack001/$PLUGINSDIR/nsProcess.dll
unpack001/$PLUGINSDIR/nsis7z.dll
unpack001/Uninstall Beaker Browser.exe
unpack003/$PLUGINSDIR/StdUtils.dll
unpack003/$PLUGINSDIR/System.dll
unpack003/$PLUGINSDIR/WinShell.dll
unpack003/$PLUGINSDIR/nsProcess.dll

9ecd96e90def2fa42b060d64290129903115d7410b2c2008e8d4b928c4b5846a

.exe windows:4 windows x86 arch:x86

b34f154ec913d2d2c435cbd644e91687

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableW

SetFileAttributesW

Sleep

GetTickCount

GetFileSize

GetModuleFileNameW

GetCurrentProcess

CopyFileW

SetCurrentDirectoryW

GetFileAttributesW

GetWindowsDirectoryW

GetTempPathW

GetCommandLineW

GetVersion

SetErrorMode

lstrlenW

lstrcpynW

GetDiskFreeSpaceW

ExitProcess

GetShortPathNameW

CreateThread

GetLastError

CreateDirectoryW

CreateProcessW

RemoveDirectoryW

lstrcmpiA

CreateFileW

GetTempFileNameW

WriteFile

lstrcpyA

MoveFileExW

lstrcatW

GetSystemDirectoryW

GetProcAddress

GetModuleHandleA

GetExitCodeProcess

WaitForSingleObject

lstrcmpiW

MoveFileW

GetFullPathNameW

SetFileTime

SearchPathW

CompareFileTime

lstrcmpW

CloseHandle

ExpandEnvironmentStringsW

GlobalFree

GlobalLock

GlobalUnlock

GlobalAlloc

FindFirstFileW

FindNextFileW

DeleteFileW

SetFilePointer

ReadFile

FindClose

lstrlenA

MulDiv

MultiByteToWideChar

WideCharToMultiByte

GetPrivateProfileStringW

WritePrivateProfileStringW

FreeLibrary

LoadLibraryExW

GetModuleHandleW

user32

GetSystemMenu

SetClassLongW

EnableMenuItem

IsWindowEnabled

SetWindowPos

GetSysColor

GetWindowLongW

SetCursor

LoadCursorW

CheckDlgButton

GetMessagePos

LoadBitmapW

CallWindowProcW

IsWindowVisible

CloseClipboard

SetClipboardData

EmptyClipboard

OpenClipboard

ScreenToClient

GetWindowRect

GetDlgItem

GetSystemMetrics

SetDlgItemTextW

GetDlgItemTextW

MessageBoxIndirectW

CharPrevW

CharNextA

wsprintfA

DispatchMessageW

PeekMessageW

ReleaseDC

EnableWindow

InvalidateRect

SendMessageW

DefWindowProcW

BeginPaint

GetClientRect

FillRect

DrawTextW

EndDialog

RegisterClassW

SystemParametersInfoW

CreateWindowExW

GetClassInfoW

DialogBoxParamW

CharNextW

ExitWindowsEx

DestroyWindow

GetDC

SetTimer

SetWindowTextW

LoadImageW

SetForegroundWindow

ShowWindow

IsWindow

SetWindowLongW

FindWindowExW

TrackPopupMenu

AppendMenuW

CreatePopupMenu

EndPaint

CreateDialogParamW

SendMessageTimeoutW

wsprintfW

PostQuitMessage

gdi32

SelectObject

SetBkMode

CreateFontIndirectW

SetTextColor

DeleteObject

GetDeviceCaps

CreateBrushIndirect

SetBkColor

shell32

SHGetSpecialFolderLocation

ShellExecuteExW

SHGetPathFromIDListW

SHBrowseForFolderW

SHGetFileInfoW

SHFileOperationW

advapi32

AdjustTokenPrivileges

RegCreateKeyExW

RegOpenKeyExW

SetFileSecurityW

OpenProcessToken

LookupPrivilegeValueW

RegEnumValueW

RegDeleteKeyW

RegDeleteValueW

RegCloseKey

RegSetValueExW

RegQueryValueExW

RegEnumKeyW

comctl32

ImageList_Create

ImageList_AddMasked

ImageList_Destroy

ord17

ole32

OleUninitialize

OleInitialize

CoTaskMemFree

CoCreateInstance

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 451KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

$PLUGINSDIR/SpiderBanner.dll

.dll windows:5 windows x86 arch:x86

90179d905cdca282880541c826651c15

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

lstrcpynW

lstrcpyW

CloseHandle

CreateThread

Sleep

GetModuleHandleW

lstrcmpiW

GlobalAlloc

GlobalFree

lstrlenW

user32

ShowWindow

SetWindowPos

SetWindowLongW

CreateWindowExW

DefWindowProcW

FindWindowExW

GetSystemMetrics

DestroyIcon

LoadImageW

CallWindowProcW

UpdateWindow

SendMessageW

SendDlgItemMessageW

GetActiveWindow

WaitMessage

DispatchMessageW

PeekMessageW

IsWindow

CreateDialogParamW

GetWindowPlacement

InvalidateRect

DestroyWindow

BeginPaint

GetClientRect

wsprintfW

FillRect

DrawEdge

EndPaint

GetDlgItem

gdi32

SetTextColor

SetBkColor

DeleteObject

CreateBrushIndirect

GetTextExtentPoint32W

SelectObject

CreateFontW

ExtTextOutW

Exports

Destroy

Show

ShowPBOnly

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$PLUGINSDIR/StdUtils.dll

.dll windows:5 windows x86 arch:x86

1a5dfb9872a4cb71660a6d1647e9598e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

msvcrt

iswspace

_msize

??2@YAPAXI@Z

abort

_snprintf

swscanf

iswcntrl

_beginthreadex

time

srand

rand

iswalpha

iswgraph

__wgetmainargs

wcsncpy

_wcsnicmp

wcschr

calloc

free

_wcsicmp

??3@YAXPAX@Z

_snwprintf

memset

memcpy

shlwapi

ord176

kernel32

GetVersion

lstrcpynW

GlobalFree

WideCharToMultiByte

InterlockedExchange

HeapValidate

InterlockedDecrement

InterlockedIncrement

GetSystemTime

OutputDebugStringA

DeleteCriticalSection

GetExitCodeProcess

InitializeCriticalSection

SystemTimeToFileTime

TerminateThread

WaitForSingleObject

GetFullPathNameW

GetCommandLineW

GetFileAttributesW

LoadLibraryW

FreeLibrary

CloseHandle

GetFileSizeEx

CreateFileW

LeaveCriticalSection

EnterCriticalSection

GetTickCount

Sleep

VerSetConditionMask

GetCurrentProcess

GetModuleHandleW

FatalAppExitW

GetVersionExW

TerminateProcess

GetModuleFileNameW

RaiseException

VerifyVersionInfoW

GetLastError

GetProcAddress

SetFilePointerEx

WriteFile

ReadFile

GlobalAlloc

user32

UnregisterClassW

SetTimer

DestroyWindow

wsprintfW

KillTimer

CreateWindowExW

RegisterClassW

MessageBoxA

AllowSetForegroundWindow

DispatchMessageW

PeekMessageW

MsgWaitForMultipleObjects

GetWindowThreadProcessId

LoadStringW

MessageBoxW

shell32

ShellExecuteExW

SHFileOperationW

ShellExecuteW

ole32

CoInitialize

CoCreateInstance

CoUninitialize

oleaut32

SysAllocString

SysFreeString

VariantInit

VariantClear

Exports

AppendToFile

DisableVerboseMode

Dummy

EnableVerboseMode

ExecShellAsUser

ExecShellWaitEx

FormatStr

FormatStr2

FormatStr3

GetAllParameters

GetDays

GetHours

GetLibVersion

GetMinutes

GetOsEdition

GetParameter

GetParentPath

GetRealOsBuildNo

GetRealOsName

GetRealOsVersion

HashFile

HashText

InvokeShellVerb

NormalizePath

ParameterCnt

ParameterStr

Rand

RandList

RandMax

RandMinMax

RevStr

SHFileCopy

SHFileMove

ScanStr

ScanStr2

ScanStr3

TestParameter

Time

TimerCreate

TimerDestroy

TrimStr

TrimStrLeft

TrimStrRight

ValidFileName

ValidPathSpec

VerifyRealOsBuildNo

VerifyRealOsVersion

WaitForProcEx

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$PLUGINSDIR/System.dll

.dll windows:4 windows x86 arch:x86

fc0224e99e736751432961db63a41b76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW

GlobalFree

GlobalSize

lstrcpynW

lstrcpyW

GetProcAddress

WideCharToMultiByte

VirtualFree

FreeLibrary

lstrlenW

LoadLibraryW

GlobalAlloc

MultiByteToWideChar

VirtualAlloc

VirtualProtect

GetLastError

user32

wsprintfW

ole32

StringFromGUID2

CLSIDFromString

Exports

Alloc

Call

Copy

Free

Get

Int64Op

Store

StrAlloc

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 638B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$PLUGINSDIR/WinShell.dll

.dll windows:4 windows x86 arch:x86

a75c904bad153f5af2c37cfdf66eba5c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress

LoadLibraryA

GlobalFree

ole32

CoCreateInstance

Exports

SetLnkAUMI

UninstAppUserModelId

UninstShortcut

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$PLUGINSDIR/app-64.7z

.7z

Beaker Browser.exe

.exe windows:5 windows x64 arch:x64

40815d8d804e6440ac6312ed656d3446

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\projects\electron\out\R\electron.exe.pdb

Imports

node

?GetHeapStatistics@Isolate@v8@@QEAAXPEAVHeapStatistics@2@@Z

??0HeapStatistics@v8@@QEAA@XZ

?Has@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@V?$Local@VValue@v8@@@2@@Z

?Get@Object@v8@@QEAA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@V?$Local@VValue@v8@@@2@@Z

??1InternalCallbackScope@node@@QEAA@XZ

??0InternalCallbackScope@node@@QEAA@PEAVEnvironment@1@V?$Local@VObject@v8@@@v8@@AEBUasync_context@1@W4ResourceExpectation@01@@Z

?SetFatalErrorHandler@Isolate@v8@@QEAAXP6AXPEBD0@Z@Z

uv_unref

uv_timer_init

uv_timer_stop

uv_timer_start

?NewFromUnsigned@Integer@v8@@SA?AV?$Local@VInteger@v8@@@2@PEAVIsolate@2@I@Z

?New@Integer@v8@@SA?AV?$Local@VInteger@v8@@@2@PEAVIsolate@2@H@Z

?Int32Value@Value@v8@@QEBAHXZ

?Uint32Value@Value@v8@@QEBAIXZ

?IntegerValue@Value@v8@@QEBA_JXZ

?NumberValue@Value@v8@@QEBANXZ

?BooleanValue@Value@v8@@QEBA_NXZ

?IsUint32@Value@v8@@QEBA_NXZ

?IsInt32@Value@v8@@QEBA_NXZ

?IsExternal@Value@v8@@QEBA_NXZ

?IsNumber@Value@v8@@QEBA_NXZ

?IsBoolean@Value@v8@@QEBA_NXZ

?IsObject@Value@v8@@QEBA_NXZ

?IsArray@Value@v8@@QEBA_NXZ

?IsFunction@Value@v8@@QEBA_NXZ

?NewFromUtf8@String@v8@@SA?AV?$Local@VString@v8@@@2@PEAVIsolate@2@PEBDW4NewStringType@12@H@Z

?WriteUtf8@String@v8@@QEBAHPEADHPEAHH@Z

?Utf8Length@String@v8@@QEBAHXZ

?New@Number@v8@@SA?AV?$Local@VNumber@v8@@@2@PEAVIsolate@2@N@Z

??0Scope@Isolate@v8@@QEAA@PEAV12@@Z

??1Scope@Isolate@v8@@QEAA@XZ

?New@External@v8@@SA?AV?$Local@VExternal@v8@@@2@PEAVIsolate@2@PEAX@Z

?MakeWeak@V8@v8@@CAXPEAPEAVObject@internal@2@PEAXP6AXAEBV?$WeakCallbackInfo@X@2@@ZW4WeakCallbackType@2@@Z

?CreatePlatform@node@@YAPEAVMultiIsolatePlatform@1@HPEAVTracingController@v8@@@Z

?SetTracingController@TraceEventHelper@tracing@node@@SAXPEAVTracingController@v8@@@Z

?ThrowException@Isolate@v8@@QEAA?AV?$Local@VValue@v8@@@2@V32@@Z

?Error@Exception@v8@@SA?AV?$Local@VValue@v8@@@2@V?$Local@VString@v8@@@2@@Z

?TypeError@Exception@v8@@SA?AV?$Local@VValue@v8@@@2@V?$Local@VString@v8@@@2@@Z

?SetFlagsFromString@V8@v8@@SAXPEBDH@Z

?ToLocalEmpty@V8@v8@@CAXXZ

?ToDetailString@Value@v8@@QEBA?AV?$MaybeLocal@VString@v8@@@2@V?$Local@VContext@v8@@@2@@Z

?InitializePlatform@V8@v8@@SAXPEAVPlatform@2@@Z

?GlobalizeReference@V8@v8@@CAPEAPEAVObject@internal@2@PEAVIsolate@42@PEAPEAV342@@Z

?DisposeGlobal@V8@v8@@CAXPEAPEAVObject@internal@2@@Z

?IsName@Value@v8@@QEBA_NXZ

?GetOwnPropertyNames@Object@v8@@QEAA?AV?$MaybeLocal@VArray@v8@@@2@V?$Local@VContext@v8@@@2@W4PropertyFilter@2@W4KeyConversionMode@2@@Z

?GetOwnPropertyDescriptor@Object@v8@@QEAA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@V?$Local@VName@v8@@@2@@Z

?GetCurrentContext@Isolate@v8@@QEAA?AV?$Local@VContext@v8@@@2@XZ

?New@Object@v8@@SA?AV?$Local@VObject@v8@@@2@PEAVIsolate@2@@Z

?Length@Array@v8@@QEBAIXZ

?GetOwnPropertyNames@Object@v8@@QEAA?AV?$Local@VArray@v8@@@2@XZ

?Get@Object@v8@@QEAA?AV?$Local@VValue@v8@@@2@V32@@Z

?Get@Object@v8@@QEAA?AV?$Local@VValue@v8@@@2@I@Z

?ToObject@Value@v8@@QEBA?AV?$Local@VObject@v8@@@2@XZ

?GetCurrent@Isolate@v8@@SAPEAV12@XZ

?Run@Script@v8@@QEAA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@@Z

?Compile@Script@v8@@SA?AV?$Local@VScript@v8@@@2@V?$Local@VString@v8@@@2@PEAVScriptOrigin@2@@Z

?NewExternalOneByte@String@v8@@SA?AV?$MaybeLocal@VString@v8@@@2@PEAVIsolate@2@PEAVExternalOneByteStringResource@12@@Z

?Concat@String@v8@@SA?AV?$Local@VString@v8@@@2@V32@0@Z

?Call@Function@v8@@QEAA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@V?$Local@VValue@v8@@@2@HQEAV52@@Z

?GetTracingController@TraceEventHelper@tracing@node@@SAPEAVTracingController@v8@@XZ

??_7ExternalOneByteStringResource@String@v8@@6B@

??_7ExternalStringResourceBase@String@v8@@6B@

?ToString@Value@v8@@QEBA?AV?$Local@VString@v8@@@2@XZ

??0ExternalOneByteStringResource@String@v8@@IEAA@XZ

?IsCompressible@ExternalStringResourceBase@String@v8@@UEBA_NXZ

?Initialize@V8@v8@@SA_NXZ

??1Locker@v8@@QEAA@XZ

?Global@Context@v8@@QEAA?AV?$Local@VObject@v8@@@2@XZ

?ForApi@Private@v8@@SA?AV?$Local@VPrivate@v8@@@2@PEAVIsolate@2@V?$Local@VString@v8@@@2@@Z

?New@Array@v8@@SA?AV?$Local@VArray@v8@@@2@PEAVIsolate@2@H@Z

?GetPrivate@Object@v8@@QEAA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@V?$Local@VPrivate@v8@@@2@@Z

?SetPrivate@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@V?$Local@VPrivate@v8@@@2@V?$Local@VValue@v8@@@2@@Z

?HasPrivate@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@V?$Local@VPrivate@v8@@@2@@Z

?Set@Object@v8@@QEAA_NIV?$Local@VValue@v8@@@2@@Z

?get_builtin_module@node@@YAPEAUnode_module@1@PEBD@Z

?New@Date@v8@@SA?AV?$Local@VValue@v8@@@2@PEAVIsolate@2@N@Z

node_module_register

?Initialize@Locker@v8@@AEAAXPEAVIsolate@2@@Z

?SetClassName@FunctionTemplate@v8@@QEAAXV?$Local@VString@v8@@@2@@Z

?PrototypeTemplate@FunctionTemplate@v8@@QEAA?AV?$Local@VObjectTemplate@v8@@@2@XZ

?InstanceTemplate@FunctionTemplate@v8@@QEAA?AV?$Local@VObjectTemplate@v8@@@2@XZ

?CreationContext@Object@v8@@QEAA?AV?$Local@VContext@v8@@@2@XZ

?Call@Function@v8@@QEAA?AV?$Local@VValue@v8@@@2@V32@HQEAV32@@Z

?SetInternalFieldCount@ObjectTemplate@v8@@QEAAXH@Z

?NewInstance@ObjectTemplate@v8@@QEAA?AV?$MaybeLocal@VObject@v8@@@2@V?$Local@VContext@v8@@@2@@Z

?ClearWeak@V8@v8@@CAPEAXPEAPEAVObject@internal@2@@Z

?ReThrow@TryCatch@v8@@QEAA?AV?$Local@VValue@v8@@@2@XZ

?HasCaught@TryCatch@v8@@QEBA_NXZ

??1TryCatch@v8@@QEAA@XZ

??0TryCatch@v8@@QEAA@PEAVIsolate@1@@Z

?Escape@EscapableHandleScope@v8@@AEAAPEAPEAVObject@internal@2@PEAPEAV342@@Z

??0EscapableHandleScope@v8@@QEAA@PEAVIsolate@1@@Z

?SetAlignedPointerInInternalField@Object@v8@@QEAAXHPEAX@Z

?HasInstance@Buffer@node@@YA_NV?$Local@VValue@v8@@@v8@@@Z

?Data@Buffer@node@@YAPEADV?$Local@VValue@v8@@@v8@@@Z

?Copy@Buffer@node@@YA?AV?$MaybeLocal@VObject@v8@@@v8@@PEAVIsolate@4@PEBD_K@Z

?Length@Buffer@node@@YA_KV?$Local@VValue@v8@@@v8@@@Z

?MakeCallback@node@@YA?AV?$MaybeLocal@VValue@v8@@@v8@@PEAVIsolate@3@V?$Local@VObject@v8@@@3@PEBDHPEAV?$Local@VValue@v8@@@3@Uasync_context@1@@Z

?IsActive@Locker@v8@@SA_NXZ

?CheckMemoryPressure@Isolate@v8@@AEAAXXZ

?ReportExternalAllocationLimitReached@Isolate@v8@@AEAAXXZ

?New@Buffer@node@@YA?AV?$MaybeLocal@VObject@v8@@@v8@@PEAVIsolate@4@_K@Z

?New@Buffer@node@@YA?AV?$MaybeLocal@VObject@v8@@@v8@@PEAVIsolate@4@PEAD_KP6AX1PEAX@Z3@Z

?AdjustAmountOfExternalAllocatedMemory@Isolate@v8@@QEAA_J_J@Z

?New@Date@v8@@SA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@N@Z

?ToObject@Value@v8@@QEBA?AV?$MaybeLocal@VObject@v8@@@2@V?$Local@VContext@v8@@@2@@Z

?GetConstructorName@Object@v8@@QEAA?AV?$Local@VString@v8@@@2@XZ

?Run@Script@v8@@QEAA?AV?$Local@VValue@v8@@@2@XZ

?IdleNotificationDeadline@Isolate@v8@@QEAA_NN@Z

?Has@Object@v8@@QEAA_NV?$Local@VValue@v8@@@2@@Z

?RequestGarbageCollectionForTesting@Isolate@v8@@QEAAXW4GarbageCollectionType@12@@Z

?GetHeapProfiler@Isolate@v8@@QEAAPEAVHeapProfiler@2@XZ

?TakeHeapSnapshot@HeapProfiler@v8@@QEAAPEBVHeapSnapshot@2@PEAVActivityControl@2@PEAVObjectNameResolver@12@@Z

?GetIdentityHash@Object@v8@@QEAAHXZ

?GetCodeRange@Isolate@v8@@QEAAXPEAPEAXPEA_K@Z

uv_backend_timeout

?LowMemoryNotification@Isolate@v8@@QEAAXXZ

?Clone@Object@v8@@QEAA?AV?$Local@VObject@v8@@@2@XZ

?Delete@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@V?$Local@VValue@v8@@@2@@Z

?ToString@Value@v8@@QEBA?AV?$MaybeLocal@VString@v8@@@2@V?$Local@VContext@v8@@@2@@Z

??1Utf8Value@String@v8@@QEAA@XZ

??0Utf8Value@String@v8@@QEAA@V?$Local@VValue@v8@@@2@@Z

?SetPrototype@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@V?$Local@VValue@v8@@@2@@Z

?NewInstance@ObjectTemplate@v8@@QEAA?AV?$Local@VObject@v8@@@2@XZ

?New@ObjectTemplate@v8@@SA?AV?$Local@VObjectTemplate@v8@@@2@PEAVIsolate@2@V?$Local@VFunctionTemplate@v8@@@2@@Z

?SetAccessorProperty@Template@v8@@QEAAXV?$Local@VName@v8@@@2@V?$Local@VFunctionTemplate@v8@@@2@1W4PropertyAttribute@2@W4AccessControl@2@@Z

?Set@Template@v8@@QEAAXV?$Local@VName@v8@@@2@V?$Local@VData@v8@@@2@W4PropertyAttribute@2@@Z

uscript_getScript_60

?IsUint8Array@Value@v8@@QEBA_NXZ

?New@Uint8Array@v8@@SA?AV?$Local@VUint8Array@v8@@@2@V?$Local@VArrayBuffer@v8@@@2@_K1@Z

?Value@Boolean@v8@@QEBA_NXZ

?New@Context@v8@@SA?AV?$Local@VContext@v8@@@2@PEAVIsolate@2@PEAVExtensionConfiguration@2@V?$MaybeLocal@VObjectTemplate@v8@@@2@V?$MaybeLocal@VValue@v8@@@2@UDeserializeInternalFieldsCallback@2@@Z

?GetContents@ArrayBuffer@v8@@QEAA?AVContents@12@XZ

?New@ArrayBuffer@v8@@SA?AV?$Local@VArrayBuffer@v8@@@2@PEAVIsolate@2@_K@Z

?ToInt32@Value@v8@@QEBA?AV?$MaybeLocal@VInt32@v8@@@2@V?$Local@VContext@v8@@@2@@Z

?ToNumber@Value@v8@@QEBA?AV?$MaybeLocal@VNumber@v8@@@2@V?$Local@VContext@v8@@@2@@Z

?ToBoolean@Value@v8@@QEBA?AV?$MaybeLocal@VBoolean@v8@@@2@V?$Local@VContext@v8@@@2@@Z

?IsRegExp@Value@v8@@QEBA_NXZ

?IsDate@Value@v8@@QEBA_NXZ

?Value@Int32@v8@@QEBAHXZ

?Value@Number@v8@@QEBANXZ

?HasRealIndexedProperty@Object@v8@@QEAA_NI@Z

udata_setCommonData_60

udata_setFileAccess_60

ubrk_openRules_60

ubrk_first_60

ubrk_setText_60

ubrk_getRuleStatus_60

ubrk_open_60

ubrk_next_60

ubrk_close_60

ubrk_isBoundary_60

?createCanonical@Locale@icu_60@@SA?AV12@PEBD@Z

?setDefault@Locale@icu_60@@SAXAEBV12@AEAW4UErrorCode@@@Z

?getDefault@Locale@icu_60@@SAAEBV12@XZ

??1Locale@icu_60@@UEAA@XZ

??0Locale@icu_60@@QEAA@PEBD000@Z

?getUS@Locale@icu_60@@SAAEBV12@XZ

u_getIntPropertyValue_60

?SetNativesDataBlob@V8@v8@@SAXPEAVStartupData@2@@Z

?SetSnapshotDataBlob@V8@v8@@SAXPEAVStartupData@2@@Z

?SetEntropySource@V8@v8@@SAXP6A_NPEAE_K@Z@Z

??0ResourceConstraints@v8@@QEAA@XZ

?ConfigureDefaults@ResourceConstraints@v8@@QEAAX_K0@Z

?New@Isolate@v8@@SAPEAV12@AEBUCreateParams@12@@Z

?Dispose@Isolate@v8@@QEAAXXZ

??0SnapshotCreator@v8@@QEAA@PEB_JPEAVStartupData@1@@Z

??1SnapshotCreator@v8@@QEAA@XZ

?GetIsolate@SnapshotCreator@v8@@QEAAPEAVIsolate@2@XZ

?IsArrayBuffer@Value@v8@@QEBA_NXZ

?IsArrayBufferView@Value@v8@@QEBA_NXZ

?IsExternal@ArrayBuffer@v8@@QEBA_NXZ

?Externalize@ArrayBuffer@v8@@QEAA?AVContents@12@XZ

?Buffer@ArrayBufferView@v8@@QEAA?AV?$Local@VArrayBuffer@v8@@@2@XZ

?ByteOffset@ArrayBufferView@v8@@QEAA_KXZ

?ByteLength@ArrayBufferView@v8@@QEAA_KXZ

?Free@Allocator@ArrayBuffer@v8@@UEAAXPEAX_KW4AllocationMode@123@@Z

?Reserve@Allocator@ArrayBuffer@v8@@UEAAPEAX_K@Z

?SetProtection@Allocator@ArrayBuffer@v8@@UEAAXPEAX_KW4Protection@123@@Z

??_7Allocator@ArrayBuffer@v8@@6B@

?Eternalize@V8@v8@@CAPEAVValue@2@PEAVIsolate@2@PEAV32@@Z

?MemoryPressureNotification@Isolate@v8@@QEAAXW4MemoryPressureLevel@2@@Z

?DumpAndResetStats@Isolate@v8@@QEAAXXZ

?InContext@Isolate@v8@@QEAA_NXZ

?SetCreateHistogramFunction@Isolate@v8@@QEAAXP6APEAXPEBDHH_K@Z@Z

?SetAddHistogramSampleFunction@Isolate@v8@@QEAAXP6AXPEAXH@Z@Z

?IsolateInForegroundNotification@Isolate@v8@@QEAAXXZ

?IsolateInBackgroundNotification@Isolate@v8@@QEAAXXZ

?SetRAILMode@Isolate@v8@@QEAAXW4RAILMode@2@@Z

u_getPropertyValueEnum_60

?createDefault@TimeZone@icu_60@@SAPEAV12@XZ

??0UnicodeString@icu_60@@QEAA@PEB_S@Z

??0UnicodeString@icu_60@@QEAA@PEB_W@Z

u_isspace_60

u_charType_60

ublock_getCode_60

?createWordInstance@BreakIterator@icu_60@@SAPEAV12@AEBVLocale@2@AEAW4UErrorCode@@@Z

?setIndex@UCharCharacterIterator@icu_60@@UEAA_SH@Z

?setIndex32@UCharCharacterIterator@icu_60@@UEAAHH@Z

?current@UCharCharacterIterator@icu_60@@UEBA_SXZ

?previous@UCharCharacterIterator@icu_60@@UEAA_SXZ

?hasPrevious@UCharCharacterIterator@icu_60@@UEAACXZ

ubidi_reorderLogical_60

ubidi_reorderVisual_60

uscript_getShortName_60

uscript_getScriptExtensions_60

??_7UnicodeString@icu_60@@6B@

?Enter@Isolate@v8@@QEAAXXZ

?Exit@Isolate@v8@@QEAAXXZ

?Get@Message@v8@@QEBA?AV?$Local@VString@v8@@@2@XZ

?IsBooleanObject@Value@v8@@QEBA_NXZ

?IsNumberObject@Value@v8@@QEBA_NXZ

?IsStringObject@Value@v8@@QEBA_NXZ

?ToBoolean@Value@v8@@QEBA?AV?$Local@VBoolean@v8@@@2@PEAVIsolate@2@@Z

?ToNumber@Value@v8@@QEBA?AV?$Local@VNumber@v8@@@2@PEAVIsolate@2@@Z

?ToString@Value@v8@@QEBA?AV?$Local@VString@v8@@@2@PEAVIsolate@2@@Z

?ToObject@Value@v8@@QEBA?AV?$Local@VObject@v8@@@2@PEAVIsolate@2@@Z

?ToInt32@Value@v8@@QEBA?AV?$Local@VInt32@v8@@@2@PEAVIsolate@2@@Z

?Length@String@v8@@QEBAHXZ

??0Utf8Value@String@v8@@QEAA@PEAVIsolate@2@V?$Local@VValue@v8@@@2@@Z

?Delete@Object@v8@@QEAA_NV?$Local@VValue@v8@@@2@@Z

?GetPropertyNames@Object@v8@@QEAA?AV?$Local@VArray@v8@@@2@XZ

?HasRealNamedCallbackProperty@Object@v8@@QEAA_NV?$Local@VString@v8@@@2@@Z

?RemovePrototype@FunctionTemplate@v8@@QEAAXXZ

?ReferenceError@Exception@v8@@SA?AV?$Local@VValue@v8@@@2@V?$Local@VString@v8@@@2@@Z

?Message@TryCatch@v8@@QEBA?AV?$Local@VMessage@v8@@@2@XZ

u_iscntrl_60

?PerformCheckpoint@MicrotasksScope@v8@@SAXPEAVIsolate@2@@Z

??0HeapSpaceStatistics@v8@@QEAA@XZ

??0HeapObjectStatistics@v8@@QEAA@XZ

??0HeapCodeStatistics@v8@@QEAA@XZ

?NumberOfHeapSpaces@Isolate@v8@@QEAA_KXZ

?NumberOfTrackedHeapObjectTypes@Isolate@v8@@QEAA_KXZ

?GetHeapObjectStatisticsAtLastGC@Isolate@v8@@QEAA_NPEAVHeapObjectStatistics@2@_K@Z

?GetHeapCodeAndMetadataStatistics@Isolate@v8@@QEAA_NPEAVHeapCodeStatistics@2@@Z

?BooleanValue@Value@v8@@QEBA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@@Z

?IntegerValue@Value@v8@@QEBA?AV?$Maybe@_J@2@V?$Local@VContext@v8@@@2@@Z

?NewFromUtf8@String@v8@@SA?AV?$MaybeLocal@VString@v8@@@2@PEAVIsolate@2@PEBDW4NewStringType@2@H@Z

?Value@Uint32@v8@@QEBAIXZ

?CreateDataProperty@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@V?$Local@VName@v8@@@2@V?$Local@VValue@v8@@@2@@Z

?CreateDataProperty@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@IV?$Local@VValue@v8@@@2@@Z

?CopyContents@ArrayBufferView@v8@@QEAA_KPEAX_K@Z

?ValueOf@Date@v8@@QEBANXZ

?createInstance@Collator@icu_60@@SAPEAV12@AEAW4UErrorCode@@@Z

ubidi_open_60

ubidi_close_60

ubidi_setPara_60

ubidi_countRuns_60

ubidi_getVisualRun_60

?SetAlignedPointerInInternalFields@Object@v8@@QEAAXHQEAHQEAPEAX@Z

?InternalFieldCount@ObjectTemplate@v8@@QEAAHXZ

?SetHandler@ObjectTemplate@v8@@QEAAXAEBUNamedPropertyHandlerConfiguration@2@@Z

??2UMemory@icu_60@@SAPEAX_K@Z

??3UMemory@icu_60@@SAXPEAX@Z

??0UnicodeSet@icu_60@@QEAA@AEBVUnicodeString@1@AEAW4UErrorCode@@@Z

??1UnicodeSet@icu_60@@UEAA@XZ

?freeze@UnicodeSet@icu_60@@QEAAPEAVUnicodeFunctor@2@XZ

?spanUTF8@UnicodeSet@icu_60@@QEBAHPEBDHW4USetSpanCondition@@@Z

??8UnicodeSet@icu_60@@UEBACAEBV01@@Z

?add@UnicodeSet@icu_60@@UEAAAEAV12@HH@Z

?addAll@UnicodeSet@icu_60@@UEAAAEAV12@AEBV12@@Z

?addMatchSetTo@UnicodeSet@icu_60@@UEBAXAEAV12@@Z

?clear@UnicodeSet@icu_60@@UEAAAEAV12@XZ

?clone@UnicodeSet@icu_60@@UEBAPEAVUnicodeFunctor@2@XZ

?compact@UnicodeSet@icu_60@@UEAAAEAV12@XZ

?complement@UnicodeSet@icu_60@@UEAAAEAV12@HH@Z

?complement@UnicodeSet@icu_60@@UEAAAEAV12@XZ

?complementAll@UnicodeSet@icu_60@@UEAAAEAV12@AEBV12@@Z

?contains@UnicodeSet@icu_60@@UEBACH@Z

?contains@UnicodeSet@icu_60@@UEBACHH@Z

?containsAll@UnicodeSet@icu_60@@UEBACAEBV12@@Z

?getDynamicClassID@UnicodeSet@icu_60@@UEBAPEAXXZ

?getRangeCount@UnicodeSet@icu_60@@UEBAHXZ

?getRangeEnd@UnicodeSet@icu_60@@UEBAHH@Z

?getRangeStart@UnicodeSet@icu_60@@UEBAHH@Z

?hashCode@UnicodeSet@icu_60@@UEBAHXZ

?isEmpty@UnicodeSet@icu_60@@UEBACXZ

?matches@UnicodeSet@icu_60@@UEAA?AW4UMatchDegree@2@AEBVReplaceable@2@AEAHHC@Z

?matchesIndexValue@UnicodeSet@icu_60@@EEBACE@Z

?remove@UnicodeSet@icu_60@@UEAAAEAV12@HH@Z

?removeAll@UnicodeSet@icu_60@@UEAAAEAV12@AEBV12@@Z

?removeAllStrings@UnicodeSet@icu_60@@UEAAAEAV12@XZ

?retain@UnicodeSet@icu_60@@UEAAAEAV12@HH@Z

?retainAll@UnicodeSet@icu_60@@UEAAAEAV12@AEBV12@@Z

?setData@UnicodeFilter@icu_60@@UEAAXPEBVTransliterationRuleData@2@@Z

?size@UnicodeSet@icu_60@@UEBAHXZ

?toMatcher@UnicodeFilter@icu_60@@UEBAPEAVUnicodeMatcher@2@XZ

?toPattern@UnicodeSet@icu_60@@UEBAAEAVUnicodeString@2@AEAV32@C@Z

?toReplacer@UnicodeFunctor@icu_60@@UEBAPEAVUnicodeReplacer@2@XZ

utf8_nextCharSafeBody_60

u_errorName_60

u_foldCase_60

uregex_open_60

uregex_close_60

uregex_setText_60

uregex_matches_60

u_strToUpper_60

u_strToLower_60

u_strToUTF8_60

ucol_open_60

ucol_close_60

ucol_strcoll_60

ubrk_current_60

ucnv_setFromUCallBack_60

ucnv_fromUChars_60

uidna_openUTS46_60

uidna_nameToASCII_60

u_charMirror_60

u_getCombiningClass_60

unorm2_getNFCInstance_60

unorm2_getNFKDInstance_60

unorm2_normalize_60

unorm2_getRawDecomposition_60

unorm2_composePair_60

u_countChar32_60

u_strToUTF32_60

??1CachedData@ScriptCompiler@v8@@QEAA@XZ

?Compile@ScriptCompiler@v8@@SA?AV?$MaybeLocal@VScript@v8@@@2@V?$Local@VContext@v8@@@2@PEAVSource@12@W4CompileOptions@12@W4NoCacheReason@12@@Z

?GetLineNumber@Message@v8@@QEBA?AV?$Maybe@H@2@V?$Local@VContext@v8@@@2@@Z

?IsTrue@Value@v8@@QEBA_NXZ

?Write@String@v8@@QEBAHPEAGHHH@Z

?NewFromTwoByte@String@v8@@SA?AV?$MaybeLocal@VString@v8@@@2@PEAVIsolate@2@PEBGW4NewStringType@2@H@Z

?NewExternalTwoByte@String@v8@@SA?AV?$MaybeLocal@VString@v8@@@2@PEAVIsolate@2@PEAVExternalStringResource@12@@Z

?TerminateExecution@Isolate@v8@@QEAAXXZ

?Dispose@ExternalStringResourceBase@String@v8@@MEAAXXZ

??_7ExternalStringResource@String@v8@@6B@

ucnv_open_60

ucnv_close_60

ucnv_toAlgorithmic_60

?length@UnicodeString@icu_60@@QEBAHXZ

?getBuffer@UnicodeString@icu_60@@QEBAPEB_SXZ

?getAvailableLocales@DateFormat@icu_60@@SAPEBVLocale@2@AEAH@Z

??0DateFormatSymbols@icu_60@@QEAA@AEBVLocale@1@AEAW4UErrorCode@@@Z

??1DateFormatSymbols@icu_60@@UEAA@XZ

?getShortMonths@DateFormatSymbols@icu_60@@QEBAPEBVUnicodeString@2@AEAH@Z

?Compile@Script@v8@@SA?AV?$MaybeLocal@VScript@v8@@@2@V?$Local@VContext@v8@@@2@V?$Local@VString@v8@@@2@PEAVScriptOrigin@2@@Z

?GetToStringTag@Symbol@v8@@SA?AV?$Local@VSymbol@v8@@@2@PEAVIsolate@2@@Z

?Set@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@IV?$Local@VValue@v8@@@2@@Z

?Get@Object@v8@@QEAA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@I@Z

?GetPropertyNames@Object@v8@@QEAA?AV?$MaybeLocal@VArray@v8@@@2@V?$Local@VContext@v8@@@2@@Z

?GetPrototype@Object@v8@@QEAA?AV?$Local@VValue@v8@@@2@XZ

?GetIsolate@Object@v8@@QEAAPEAVIsolate@2@XZ

?SetCallHandler@FunctionTemplate@v8@@QEAAXP6AXAEBV?$FunctionCallbackInfo@VValue@v8@@@2@@ZV?$Local@VValue@v8@@@2@@Z

?SetAccessor@ObjectTemplate@v8@@QEAAXV?$Local@VString@v8@@@2@P6AX0AEBV?$PropertyCallbackInfo@VValue@v8@@@2@@ZP6AX0V?$Local@VValue@v8@@@2@AEBV?$PropertyCallbackInfo@X@2@@Z3W4AccessControl@2@W4PropertyAttribute@2@V?$Local@VAccessorSignature@v8@@@2@@Z

?SetNamedPropertyHandler@ObjectTemplate@v8@@QEAAXP6AXV?$Local@VString@v8@@@2@AEBV?$PropertyCallbackInfo@VValue@v8@@@2@@ZP6AX0V?$Local@VValue@v8@@@2@1@ZP6AX0AEBV?$PropertyCallbackInfo@VInteger@v8@@@2@@ZP6AX0AEBV?$PropertyCallbackInfo@VBoolean@v8@@@2@@ZP6AXAEBV?$PropertyCallbackInfo@VArray@v8@@@2@@Z3@Z

?New@Signature@v8@@SA?AV?$Local@VSignature@v8@@@2@PEAVIsolate@2@V?$Local@VFunctionTemplate@v8@@@2@@Z

?Exception@TryCatch@v8@@QEBA?AV?$Local@VValue@v8@@@2@XZ

?SetAlignedPointerInEmbedderData@Context@v8@@QEAAXHPEAX@Z

UCNV_FROM_U_CALLBACK_STOP_60

UCNV_FROM_U_CALLBACK_SKIP_60

UCNV_FROM_U_CALLBACK_SUBSTITUTE_60

ucnv_getSubstChars_60

ucnv_setSubstString_60

ucol_getStrength_60

ucol_setStrength_60

usearch_open_60

usearch_close_60

usearch_getMatchedLength_60

usearch_getCollator_60

usearch_first_60

usearch_next_60

usearch_reset_60

??1ByteSink@icu_60@@UEAA@XZ

?toUTF8@UnicodeString@icu_60@@QEBAXAEAVByteSink@2@@Z

??4UnicodeString@icu_60@@QEAAAEAV01@AEBV01@@Z

?detectHostTimeZone@TimeZone@icu_60@@SAPEAV12@XZ

?adoptDefault@TimeZone@icu_60@@SAXPEAV12@@Z

?Flush@ByteSink@icu_60@@UEAAXXZ

?GetAppendBuffer@ByteSink@icu_60@@UEAAPEADHHPEADHPEAH@Z

u_charDirection_60

?ContainsOnlyOneByte@String@v8@@QEBA_NXZ

?WriteOneByte@String@v8@@QEBAHPEAEHHH@Z

??0ExternalStringResource@String@v8@@IEAA@XZ

?NewFromOneByte@String@v8@@SA?AV?$MaybeLocal@VString@v8@@@2@PEAVIsolate@2@PEBEW4NewStringType@2@H@Z

?MakeExternal@String@v8@@QEAA_NPEAVExternalStringResource@12@@Z

?MakeExternal@String@v8@@QEAA_NPEAVExternalOneByteStringResource@12@@Z

?CanMakeExternal@String@v8@@QEAA_NXZ

?New@Private@v8@@SA?AV?$Local@VPrivate@v8@@@2@PEAVIsolate@2@V?$Local@VString@v8@@@2@@Z

?FindInstanceInPrototypeChain@Object@v8@@QEAA?AV?$Local@VObject@v8@@@2@V?$Local@VFunctionTemplate@v8@@@2@@Z

?SetIntegrityLevel@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@W4IntegrityLevel@2@@Z

?IsCallable@Object@v8@@QEAA_NXZ

?NewInstance@Function@v8@@QEBA?AV?$MaybeLocal@VObject@v8@@@2@V?$Local@VContext@v8@@@2@HQEAV?$Local@VValue@v8@@@2@@Z

?GetBoundFunction@Function@v8@@QEBA?AV?$Local@VValue@v8@@@2@XZ

?GetFunction@FunctionTemplate@v8@@QEAA?AV?$MaybeLocal@VFunction@v8@@@2@V?$Local@VContext@v8@@@2@@Z

?HasInstance@FunctionTemplate@v8@@QEAA_NV?$Local@VValue@v8@@@2@@Z

?RangeError@Exception@v8@@SA?AV?$Local@VValue@v8@@@2@V?$Local@VString@v8@@@2@@Z

?SyntaxError@Exception@v8@@SA?AV?$Local@VValue@v8@@@2@V?$Local@VString@v8@@@2@@Z

?GetIncumbentContext@Isolate@v8@@QEAA?AV?$Local@VContext@v8@@@2@XZ

?SetEmbedderHeapTracer@Isolate@v8@@QEAAXPEAVEmbedderHeapTracer@2@@Z

?IsExecutionTerminating@Isolate@v8@@QEAA_NXZ

?AddBeforeCallEnteredCallback@Isolate@v8@@QEAAXP6AXPEAV12@@Z@Z

?RemoveBeforeCallEnteredCallback@Isolate@v8@@QEAAXP6AXPEAV12@@Z@Z

?EnqueueMicrotask@Isolate@v8@@QEAAXP6AXPEAX@Z0@Z

?AddMicrotasksCompletedCallback@Isolate@v8@@QEAAXP6AXPEAV12@@Z@Z

?RemoveMicrotasksCompletedCallback@Isolate@v8@@QEAAXP6AXPEAV12@@Z@Z

?IsDead@Isolate@v8@@QEAA_NXZ

?MakeWeak@V8@v8@@CAXPEAPEAPEAVObject@internal@2@@Z

?RegisterExternallyReferencedObject@V8@v8@@CAXPEAPEAVObject@internal@2@PEAVIsolate@42@@Z

?Reset@TryCatch@v8@@QEAAXXZ

?DetachGlobal@Context@v8@@QEAAXXZ

u_tolower_60

u_toupper_60

u_memcasecmp_60

u_strFoldCase_60

UCNV_TO_U_CALLBACK_STOP_60

UCNV_FROM_U_CALLBACK_ESCAPE_60

ucnv_getName_60

ucnv_setToUCallBack_60

ucnv_fromUnicode_60

ucnv_toUnicode_60

ucnv_countAvailable_60

ucnv_getAvailableName_60

ucnv_countAliases_60

ucnv_getAlias_60

ucnv_getStandardName_60

ucnv_setFallback_60

ucnv_cbFromUWriteUChars_60

ucol_getFunctionalEquivalent_60

ucol_setAttribute_60

ucol_getAttribute_60

u_isalnum_60

?extract@UnicodeString@icu_60@@QEBAHVChar16Ptr@2@HAEAW4UErrorCode@@@Z

?truncate@UnicodeString@icu_60@@QEAACH@Z

??0UnicodeString@icu_60@@QEAA@PEBDHW4EInvariant@01@@Z

??0UnicodeString@icu_60@@QEAA@AEBV01@H@Z

utext_close_60

utext_openUChars_60

utext_setup_60

?createLineInstance@BreakIterator@icu_60@@SAPEAV12@AEBVLocale@2@AEAW4UErrorCode@@@Z

?createCharacterInstance@BreakIterator@icu_60@@SAPEAV12@AEBVLocale@2@AEAW4UErrorCode@@@Z

?createSentenceInstance@BreakIterator@icu_60@@SAPEAV12@AEBVLocale@2@AEAW4UErrorCode@@@Z

??0RuleBasedBreakIterator@icu_60@@QEAA@AEBVUnicodeString@1@AEAUUParseError@@AEAW4UErrorCode@@@Z

??1RuleBasedBreakIterator@icu_60@@UEAA@XZ

?getNFCInstance@Normalizer2@icu_60@@SAPEBV12@AEAW4UErrorCode@@@Z

??8RuleBasedBreakIterator@icu_60@@UEBACAEBVBreakIterator@1@@Z

?adoptText@RuleBasedBreakIterator@icu_60@@UEAAXPEAVCharacterIterator@2@@Z

?clone@RuleBasedBreakIterator@icu_60@@UEBAPEAVBreakIterator@2@XZ

?createBufferClone@RuleBasedBreakIterator@icu_60@@UEAAPEAVBreakIterator@2@PEAXAEAHAEAW4UErrorCode@@@Z

?current@RuleBasedBreakIterator@icu_60@@UEBAHXZ

?first@RuleBasedBreakIterator@icu_60@@UEAAHXZ

?following@RuleBasedBreakIterator@icu_60@@UEAAHH@Z

?getBinaryRules@RuleBasedBreakIterator@icu_60@@UEAAPEBEAEAI@Z

?getDynamicClassID@RuleBasedBreakIterator@icu_60@@UEBAPEAXXZ

?getRuleStatus@RuleBasedBreakIterator@icu_60@@UEBAHXZ

?getRuleStatusVec@RuleBasedBreakIterator@icu_60@@UEAAHPEAHHAEAW4UErrorCode@@@Z

?getRules@RuleBasedBreakIterator@icu_60@@UEBAAEBVUnicodeString@2@XZ

?getText@RuleBasedBreakIterator@icu_60@@UEBAAEAVCharacterIterator@2@XZ

?getUText@RuleBasedBreakIterator@icu_60@@UEBAPEAUUText@@PEAU3@AEAW4UErrorCode@@@Z

?hashCode@RuleBasedBreakIterator@icu_60@@UEBAHXZ

?isBoundary@RuleBasedBreakIterator@icu_60@@UEAACH@Z

?last@RuleBasedBreakIterator@icu_60@@UEAAHXZ

?next@RuleBasedBreakIterator@icu_60@@UEAAHH@Z

?next@RuleBasedBreakIterator@icu_60@@UEAAHXZ

?preceding@RuleBasedBreakIterator@icu_60@@UEAAHH@Z

?previous@RuleBasedBreakIterator@icu_60@@UEAAHXZ

?refreshInputText@RuleBasedBreakIterator@icu_60@@UEAAAEAV12@PEAUUText@@AEAW4UErrorCode@@@Z

?setText@RuleBasedBreakIterator@icu_60@@UEAAXAEBVUnicodeString@2@@Z

?setText@RuleBasedBreakIterator@icu_60@@UEAAXPEAUUText@@AEAW4UErrorCode@@@Z

uloc_setKeywordValue_60

?getTraditionalChinese@Locale@icu_60@@SAAEBV12@XZ

??8Locale@icu_60@@QEBACAEBV01@@Z

u_hasBinaryProperty_60

utrie2_openFromSerialized_60

u_getBidiPairedBracket_60

?moveFrom@UnicodeString@icu_60@@QEAAAEAV12@AEAV12@@Z

?fromUTF32@UnicodeString@icu_60@@SA?AV12@PEBHH@Z

?IncreaseHeapLimitForDebugging@Isolate@v8@@QEAAXXZ

??0V8StackTraceId@v8_inspector@@QEAA@XZ

?SetAllowAtomicsWait@Isolate@v8@@QEAAX_N@Z

?IsHeapLimitIncreasedForDebugging@Isolate@v8@@QEAA_NXZ

?SetErrorMessageForCodeGenerationFromStrings@Context@v8@@QEAAXV?$Local@VString@v8@@@2@@Z

?AllowCodeGenerationFromStrings@Context@v8@@QEAAX_N@Z

?GetExtrasBindingObject@Context@v8@@QEAA?AV?$Local@VObject@v8@@@2@XZ

?FromSnapshot@Context@v8@@SA?AV?$MaybeLocal@VContext@v8@@@2@PEAVIsolate@2@_KUDeserializeInternalFieldsCallback@2@PEAVExtensionConfiguration@2@V?$MaybeLocal@VValue@v8@@@2@@Z

??1WasmModuleObjectBuilderStreaming@v8@@QEAA@XZ

?GetPromise@WasmModuleObjectBuilderStreaming@v8@@QEAA?AV?$Local@VPromise@v8@@@2@XZ

?Abort@WasmModuleObjectBuilderStreaming@v8@@QEAAXV?$MaybeLocal@VValue@v8@@@2@@Z

?Finish@WasmModuleObjectBuilderStreaming@v8@@QEAAXXZ

?OnBytesReceived@WasmModuleObjectBuilderStreaming@v8@@QEAAXPEBE_K@Z

??0WasmModuleObjectBuilderStreaming@v8@@QEAA@PEAVIsolate@1@@Z

?Evaluate@Module@v8@@QEAA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@@Z

?Value@Integer@v8@@QEBA_JXZ

?VisitWeakHandles@Isolate@v8@@QEAAXPEAVPersistentHandleVisitor@2@@Z

?VisitHandlesWithClassIds@Isolate@v8@@QEAAXPEAVPersistentHandleVisitor@2@@Z

?SetFailedAccessCheckCallbackFunction@Isolate@v8@@QEAAXP6AXV?$Local@VObject@v8@@@2@W4AccessType@2@V?$Local@VValue@v8@@@2@@Z@Z

?AddMessageListenerWithErrorLevel@Isolate@v8@@QEAA_NP6AXV?$Local@VMessage@v8@@@2@V?$Local@VValue@v8@@@2@@ZH1@Z

?SetWasmCompileStreamingCallback@Isolate@v8@@QEAAXP6AXAEBV?$FunctionCallbackInfo@VValue@v8@@@2@@Z@Z

?SetWasmInstanceCallback@Isolate@v8@@QEAAXP6A_NAEBV?$FunctionCallbackInfo@VValue@v8@@@2@@Z@Z

?SetWasmModuleCallback@Isolate@v8@@QEAAXP6A_NAEBV?$FunctionCallbackInfo@VValue@v8@@@2@@Z@Z

?SetAllowWasmCodeGenerationCallback@Isolate@v8@@QEAAXP6A_NV?$Local@VContext@v8@@@2@V?$Local@VString@v8@@@2@@Z@Z

?SetAllowCodeGenerationFromStringsCallback@Isolate@v8@@QEAAXP6A_NV?$Local@VContext@v8@@@2@V?$Local@VString@v8@@@2@@Z@Z

?SetOOMErrorHandler@Isolate@v8@@QEAAXP6AXPEBD_N@Z@Z

?SetStackLimit@Isolate@v8@@QEAAX_K@Z

?ContextDisposedNotification@Isolate@v8@@QEAAH_N@Z

?SetUseCounterCallback@Isolate@v8@@QEAAXP6AXPEAV12@W4UseCounterFeature@12@@Z@Z

?SetPromiseRejectCallback@Isolate@v8@@QEAAXP6AXVPromiseRejectMessage@2@@Z@Z

?AddGCEpilogueCallback@Isolate@v8@@QEAAXP6AXPEAV12@W4GCType@2@W4GCCallbackFlags@2@@Z1@Z

?AddGCPrologueCallback@Isolate@v8@@QEAAXP6AXPEAV12@W4GCType@2@W4GCCallbackFlags@2@@Z1@Z

comctl32

ord410

ord413

ord412

InitCommonControlsEx

ord345

comdlg32

PrintDlgExW

ChooseColorW

GetSaveFileNameW

GetOpenFileNameW

wininet

InternetReadFile

HttpOpenRequestW

InternetCloseHandle

HttpAddRequestHeadersW

HttpSendRequestW

InternetCrackUrlW

HttpQueryInfoW

InternetOpenW

InternetQueryDataAvailable

InternetConnectW

uiautomationcore

UiaClientsAreListening

ffmpeg

avformat_close_input

av_rescale_q

av_dict_get

avcodec_parameters_to_context

avformat_open_input

avformat_free_context

avformat_alloc_context

av_frame_free

av_samples_get_buffer_size

avio_alloc_context

av_frame_alloc

av_malloc

av_seek_frame

av_read_frame

av_frame_unref

avformat_find_stream_info

av_rdft_init

avcodec_send_packet

av_packet_unref

av_get_bytes_per_sample

av_image_check_size

avcodec_receive_frame

avcodec_flush_buffers

av_dict_set

av_new_packet

av_packet_get_side_data

avcodec_find_decoder

av_strerror

av_rdft_calc

av_init_packet

av_rdft_end

av_packet_copy_props

avcodec_descriptor_get

avcodec_open2

avcodec_free_context

avcodec_alloc_context3

av_buffer_get_opaque

av_buffer_create

avcodec_align_dimensions

av_log_set_level

av_get_cpu_flags

av_register_all

av_free

dxgi

CreateDXGIFactory

CreateDXGIFactory1

advapi32

CryptDestroyHash

CryptReleaseContext

GetSecurityInfo

SetEntriesInAclW

CryptSignHashW

ConvertStringSecurityDescriptorToSecurityDescriptorW

GetSecurityDescriptorSacl

RegQueryValueExW

RegOpenKeyExW

RegCloseKey

GetTokenInformation

CreateProcessAsUserW

OpenProcessToken

GetSidSubAuthority

RegEnumValueW

RegDeleteValueW

ConvertSidToStringSidW

ControlTraceW

InitializeAcl

InitializeSecurityDescriptor

RegSetValueExW

RegEnumKeyExW

RegCreateKeyExW

RegDeleteKeyW

RegQueryInfoKeyW

StartTraceW

RegNotifyChangeKeyValue

SetSecurityDescriptorDacl

CryptSetHashParam

CryptCreateHash

CryptGetHashParam

SetThreadToken

EventUnregister

EventRegister

EventWrite

SystemFunction036

OpenTraceW

ProcessTrace

CloseTrace

ImpersonateAnonymousToken

RevertToSelf

DuplicateTokenEx

GetAce

GetKernelObjectSecurity

GetLengthSid

SetKernelObjectSecurity

SetTokenInformation

SetSecurityInfo

ConvertStringSidToSidW

RegDisablePredefinedCache

CopySid

CreateWellKnownSid

InitializeSid

IsValidSid

CreateRestrictedToken

DuplicateToken

EqualSid

LookupPrivilegeValueW

AccessCheck

FreeSid

ImpersonateLoggedOnUser

MapGenericMask

GetNamedSecurityInfoW

iphlpapi

NotifyAddrChange

GetAdaptersAddresses

CancelIPChangeNotify

psapi

GetPerformanceInfo

GetProcessMemoryInfo

QueryWorkingSet

EnumProcessModules

GetModuleInformation

QueryWorkingSetEx

shell32

ShellExecuteW

CommandLineToArgvW

GetCurrentProcessExplicitAppUserModelID

SHGetFolderPathW

SetCurrentProcessExplicitAppUserModelID

SHCreateItemFromParsingName

SHAddToRecentDocs

SHGetDesktopFolder

SHGetFileInfoW

Shell_NotifyIconW

Shell_NotifyIconGetRect

ShellExecuteExW

SHChangeNotify

SHGetKnownFolderPath

SHFileOperationW

SHGetPropertyStoreForWindow

SHGetSpecialFolderPathW

SHGetPathFromIDListW

SHBrowseForFolderW

DragQueryFileW

user32

TranslateMessage

PostQuitMessage

UpdateWindow

UnregisterClassW

CreateWindowExW

SetFocus

EnumWindows

GetWindowThreadProcessId

EnumThreadWindows

ChangeWindowMessageFilterEx

IsWindowVisible

EnableWindow

InvalidateRect

EnableMenuItem

SetWindowLongW

FlashWindowEx

DispatchMessageW

DrawTextW

AllowSetForegroundWindow

IsWindowEnabled

SetWindowDisplayAffinity

SetClassLongPtrW

SendMessageW

CopyIcon

SetWindowPos

AdjustWindowRectEx

GetSystemMenu

GetMenuItemInfoW

GetWindowLongW

RegisterHotKey

UnregisterHotKey

GetWindowLongPtrW

MessageBeep

SetRectEmpty

RegisterClassExW

UpdateLayeredWindow

LoadCursorW

UpdateLayeredWindowIndirect

GetSysColor

PostMessageW

FillRect

DeferWindowPos

GetActiveWindow

GetGuiResources

MsgWaitForMultipleObjectsEx

PeekMessageW

GetQueueStatus

SetPropW

RemovePropW

FindWindowExW

GetCursorPos

DrawIconEx

CreateIconIndirect

GetIconInfo

EnumDisplayDevicesW

CharNextW

GetWindowTextW

NotifyWinEvent

OpenClipboard

CloseClipboard

GetClipboardSequenceNumber

SetClipboardData

GetClipboardData

RegisterClipboardFormatW

EmptyClipboard

IsClipboardFormatAvailable

PtInRect

GetClientRect

SetWindowsHookExW

UnhookWindowsHookEx

CallNextHookEx

ScreenToClient

GetWindowRect

MonitorFromPoint

RegisterWindowMessageW

DestroyWindow

GetKeyState

SetForegroundWindow

LoadIconW

ReleaseDC

SystemParametersInfoW

DefWindowProcW

GetMessageW

LoadImageW

DestroyIcon

TrackMouseEvent

GetSystemMetrics

KillTimer

EndDeferWindowPos

SetTimer

BeginDeferWindowPos

SetWindowLongPtrW

GetDC

MonitorFromWindow

IsWindow

SendMessageTimeoutW

SetThreadDesktop

MessageBoxA

BringWindowToTop

EnumDisplaySettingsExW

GetLayeredWindowAttributes

UnregisterPowerSettingNotification

RegisterPowerSettingNotification

PostThreadMessageW

DisplayConfigGetDeviceInfo

QueryDisplayConfig

GetDisplayConfigBufferSizes

GetRawInputDeviceInfoW

UnregisterDeviceNotification

RegisterDeviceNotificationW

DefRawInputProc

GetRawInputDeviceList

RegisterRawInputDevices

GetRawInputData

MoveWindow

RegisterClassW

GetProcessWindowStation

SetProcessWindowStation

CreateWindowStationW

GetThreadDesktop

CreateDesktopW

CloseWindowStation

IsChild

SetKeyboardState

GetKeyboardLayout

ToUnicodeEx

GetMessageExtraInfo

GetUserObjectInformationW

CloseDesktop

OpenInputDesktop

FindWindowW

PrintWindow

MessageBoxW

SetCaretPos

DestroyCaret

CreateCaret

GetKeyboardState

GetKeyboardLayoutList

GetKeyboardLayoutNameW

GetAsyncKeyState

InflateRect

InvertRect

FrameRect

DrawFocusRect

GetSysColorBrush

DrawFrameControl

DrawEdge

GetCursorInfo

EnumChildWindows

OffsetRect

IntersectRect

ClientToScreen

SetCursor

SetCursorPos

ShowCursor

GetWindowTextLengthW

CallWindowProcW

SetWindowTextW

RedrawWindow

GetWindowRgn

SetWindowRgn

GetWindowDC

SetMenuDefaultItem

ReleaseCapture

SetCapture

CloseTouchInputHandle

GetFocus

IsIconic

SetWindowPlacement

GetWindowPlacement

GetDoubleClickTime

GetMessageTime

GetMessagePos

GetWindow

EnumDisplayMonitors

EnumDisplaySettingsW

GetLastInputInfo

GetAncestor

GetMonitorInfoW

MonitorFromRect

GetClassNameW

IsRectEmpty

GetForegroundWindow

TrackPopupMenu

ClipCursor

IsZoomed

SetParent

GetParent

GetDesktopWindow

WindowFromPoint

MapWindowPoints

GetPropW

EndPaint

BeginPaint

GetCapture

RegisterTouchWindow

ShowWindow

SetLayeredWindowAttributes

GetClassInfoExW

userenv

DestroyEnvironmentBlock

CreateEnvironmentBlock

ws2_32

WSASetEvent

send

ntohs

htons

freeaddrinfo

getaddrinfo

WSAWaitForMultipleEvents

WSASendTo

WSAEventSelect

WSARecvFrom

sendto

recvfrom

getsockopt

getpeername

WSASocketW

WSASend

WSAResetEvent

WSALookupServiceBeginW

WSAGetLastError

ntohl

htonl

ioctlsocket

WSAIoctl

WSAGetOverlappedResult

WSALookupServiceNextW

WSALookupServiceEnd

bind

closesocket

connect

getsockname

socket

WSASetServiceW

gethostname

WSAStartup

accept

listen

recv

setsockopt

shutdown

WSACloseEvent

WSACreateEvent

WSAEnumNetworkEvents

dbghelp

SymFromAddr

SymGetSearchPathW

SymFunctionTableAccess64

StackWalk64

SymGetLineFromAddr64

SymGetModuleBase64

SymSetSearchPathW

SymSetOptions

SymInitialize

dwmapi

DwmIsCompositionEnabled

DwmGetCompositionTimingInfo

DwmDefWindowProc

DwmExtendFrameIntoClientArea

DwmSetWindowAttribute

gdi32

SetMiterLimit

StrokeAndFillPath

StrokePath

WidenPath

ExtCreatePen

MoveToEx

PolyBezierTo

GetTextFaceA

FillPath

SetROP2

SetDCBrushColor

SetArcDirection

SetBrushOrgEx

RemoveFontMemResourceEx

GetGlyphOutlineW

GetCharABCWidthsW

GetGlyphIndicesW

GetTextExtentPointI

GetFontUnicodeRanges

AddFontMemResourceEx

EndPath

CloseFigure

BeginPath

GdiComment

SetTextAlign

SetPolyFillMode

LineTo

GetRegionData

GetObjectType

GetCurrentObject

GetClipRgn

GetClipBox

CreatePen

CreateFontA

GetOutlineTextMetricsW

GetCharWidthW

CreateFontIndirectA

EnumFontFamiliesExA

SwapBuffers

SetPixelFormat

ChoosePixelFormat

GetICMProfileW

SetBkColor

SetAbortProc

EndDoc

StartDocW

CreateDCW

CancelDC

EndPage

StartPage

SelectClipRgn

GetRgnBox

EqualRgn

CreateRectRgnIndirect

GetFontData

EnumFontFamiliesExW

SetWorldTransform

GetWorldTransform

SetEnhMetaFileBits

PlayEnhMetaFileRecord

PlayEnhMetaFile

GetEnhMetaFileHeader

GetEnhMetaFileBits

StretchDIBits

SaveDC

RestoreDC

IntersectClipRect

GetStockObject

GdiAlphaBlend

SetDIBitsToDevice

GetTextFaceW

ModifyWorldTransform

EnumEnhMetaFile

SetRectRgn

SetMapMode

SetGraphicsMode

SetDIBits

CreateRectRgn

CreateFontW

CreateBitmap

CombineRgn

CreateDIBSection

StretchBlt

CreateDIBitmap

GdiFlush

GetDIBits

GetTextMetricsW

GetTextExtentPoint32W

SetTextColor

SetBkMode

SetStretchBltMode

BitBlt

CreateCompatibleBitmap

CreateCompatibleDC

GetDeviceCaps

DeleteDC

GetObjectW

SelectObject

CloseEnhMetaFile

CreateSolidBrush

SelectClipPath

CreateEnhMetaFileW

DeleteEnhMetaFile

ExtEscape

CreateFontIndirectW

ExtTextOutW

DeleteObject

SetDCPenColor

hid

HidD_GetProductString

HidD_FreePreparsedData

HidD_GetPreparsedData

HidD_GetAttributes

HidP_GetValueCaps

HidP_GetButtonCaps

HidP_GetCaps

HidD_GetSerialNumberString

usp10

ScriptStringAnalyse

ScriptStringOut

ScriptStringFree

ScriptFreeCache

ScriptItemize

ScriptShape

version

GetFileVersionInfoW

VerQueryValueW

GetFileVersionInfoSizeW

winspool.drv

DeviceCapabilitiesW

ClosePrinter

OpenPrinterW

GetPrinterDriverW

DocumentPropertiesW

GetPrinterW

EnumPrintersW

ord203

ncrypt

NCryptSignHash

NCryptFreeObject

dwrite

DWriteCreateFactory

msvcp140

?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@F@Z

?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z

??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

?sync_with_stdio@ios_base@std@@SA_N_N@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z

?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z

?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ

?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z

?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ

?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ

?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z

?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@

?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z

??Bid@locale@std@@QEAA_KXZ

?always_noconv@codecvt_base@std@@QEBA_NXZ

?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z

?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z

?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z

?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?write@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@PEB_W_J@Z

??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z

?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z

?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ

??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z

??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z

?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ

?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ

?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z

?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ

?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ

?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A

?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z

?_BADOFF@std@@3_JB

?_Xout_of_range@std@@YAXPEBD@Z

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

??0_Lockit@std@@QEAA@H@Z

??1_Lockit@std@@QEAA@XZ

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

??_7ios_base@std@@6B@

?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z

?uncaught_exception@std@@YA_NXZ

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ

?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z

?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z

?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z

?_Xlength_error@std@@YAXPEBD@Z

?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z

?_Xbad_alloc@std@@YAXXZ

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_N@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAG@Z

_FDtest

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

_Dtest

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z

?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z

?__ExceptionPtrCreate@@YAXPEAX@Z

?__ExceptionPtrDestroy@@YAXPEAX@Z

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

?__ExceptionPtrToBool@@YA_NPEBX@Z

?__ExceptionPtrRethrow@@YAXPEBX@Z

?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z

?_XGetLastError@std@@YAXXZ

?_Xbad_function_call@std@@YAXXZ

?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z

_Mtx_init_in_situ

_Mtx_destroy_in_situ

_Mtx_lock

_Mtx_unlock

?_Throw_C_error@std@@YAXH@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z

_Query_perf_frequency

_Query_perf_counter

?classic@locale@std@@SAAEBV12@XZ

kernel32

SystemTimeToTzSpecificLocalTime

VerifyVersionInfoW

lstrcmpiA

SystemTimeToFileTime

VerSetConditionMask

GetWindowsDirectoryW

SwitchToThread

FindResourceW

LoadResource

GetNativeSystemInfo

QueryPerformanceFrequency

LockResource

FileTimeToSystemTime

TzSpecificLocalTimeToSystemTime

GetModuleHandleExA

QueryThreadCycleTime

GetVersionExW

GetLocaleInfoW

GetSystemPowerStatus

GetProcessHeap

GetFileSize

LockFileEx

HeapCompact

HeapAlloc

HeapReAlloc

DeleteFileA

WaitForSingleObjectEx

CreateFileA

SetEnvironmentVariableW

GetEnvironmentVariableW

GetTempPathW

InitializeCriticalSectionAndSpinCount

lstrcmpiW

GlobalAlloc

GlobalSize

GlobalUnlock

GlobalLock

GlobalFree

VirtualProtectEx

WriteProcessMemory

RtlLookupFunctionEntry

GetUserDefaultUILanguage

RtlVirtualUnwind

ExpandEnvironmentStringsW

SizeofResource

FlushFileBuffers

CreateIoCompletionPort

FormatMessageA

SetFilePointerEx

UnlockFile

GetLocalTime

GetFileInformationByHandle

SetEndOfFile

LockFile

SetFileTime

OutputDebugStringA

GetFileSizeEx

TlsFree

TlsGetValue

GetThreadPriority

TlsAlloc

SetThreadPriority

TlsSetValue

SleepConditionVariableSRW

AcquireSRWLockExclusive

GetDiskFreeSpaceExW

PeekNamedPipe

InitializeConditionVariable

WakeConditionVariable

WakeAllConditionVariable

TryAcquireSRWLockExclusive

CancelIo

IsDebuggerPresent

QueryPerformanceCounter

MapViewOfFile

CreateFileMappingW

CopyFileW

ReplaceFileW

OutputDebugStringW

GetFileAttributesA

GetDiskFreeSpaceA

GetTempPathA

HeapSize

HeapValidate

UnlockFileEx

GetFullPathNameA

SetFilePointer

GetDiskFreeSpaceW

GetFullPathNameW

HeapFree

HeapCreate

AreFileApisANSI

TryEnterCriticalSection

GetFileType

FindFirstFileW

GetProcessHandleCount

GetProcessHeaps

SignalObjectAndWait

ClearCommBreak

ClearCommError

EscapeCommFunction

GetCommModemStatus

GetCommState

PurgeComm

SetCommBreak

SetCommMask

SetCommState

SetCommTimeouts

WaitCommEvent

GetCommandLineW

EnumSystemLocalesEx

VirtualAllocEx

VirtualFreeEx

CreateJobObjectW

CreateRemoteThread

GetThreadTimes

QueryUnbiasedInterruptTime

DebugBreak

SearchPathW

LocalAlloc

GetComputerNameExW

FindFirstFileExA

FindNextFileA

GetACP

GetSystemDirectoryA

GetWindowsDirectoryA

PowerCreateRequest

PowerSetRequest

PowerClearRequest

IsProcessInJob

QueryInformationJobObject

DeviceIoControl

LocaleNameToLCID

GetTimeZoneInformation

SleepEx

QueueUserAPC

LoadLibraryExA

EncodePointer

InitializeSListHead

InterlockedPopEntrySList

InterlockedPushEntrySList

FlushInstructionCache

InitializeCriticalSectionEx

GetLastError

RaiseException

DecodePointer

LocalFree

DeleteCriticalSection

SetErrorMode

GetErrorMode

WaitForSingleObject

CreateEventW

CloseHandle

QueueUserWorkItem

Sleep

ReleaseSRWLockExclusive

HeapLock

HeapWalk

MoveFileW

HeapUnlock

GetPrivateProfileStringW

SetEvent

DeleteFileW

GetModuleHandleW

LoadLibraryW

GetProcAddress

VirtualProtect

GetCurrentProcess

TerminateProcess

RtlAddFunctionTable

RaiseFailFastException

RtlDeleteFunctionTable

GetQueuedCompletionStatus

PostQueuedCompletionStatus

SetLastError

OpenProcess

GetCurrentProcessId

CreateMutexW

CreateFileW

ReleaseMutex

FormatMessageW

lstrlenW

GetVolumeInformationW

GetSystemDirectoryW

GetModuleFileNameW

GetModuleHandleExW

GetTickCount

UnregisterWait

UnregisterWaitEx

ReadProcessMemory

GetSystemTimeAsFileTime

GetProcessTimes

ReadFile

EnterCriticalSection

WriteFile

RegisterWaitForSingleObject

CreateNamedPipeW

LeaveCriticalSection

InitializeCriticalSection

GetCurrentThreadId

DuplicateHandle

DisconnectNamedPipe

ResetEvent

GetOverlappedResult

ConnectNamedPipe

RtlCaptureContext

ReleaseSemaphore

GetProcessId

SuspendThread

ResumeThread

CreateThread

ExitProcess

InitializeSRWLock

ReleaseSRWLockShared

AcquireSRWLockShared

InitOnceExecuteOnce

ProcessIdToSessionId

TerminateJobObject

HeapDestroy

LoadLibraryA

GetUserDefaultLCID

FreeLibrary

CreateSemaphoreW

OpenThread

VirtualQueryEx

SetUnhandledExceptionFilter

SetNamedPipeHandleState

WaitForMultipleObjects

TransactNamedPipe

WaitNamedPipeW

GetSystemTime

MultiByteToWideChar

WideCharToMultiByte

SetInformationJobObject

SetHandleInformation

SetPriorityClass

VirtualFree

GetStdHandle

VirtualAlloc

AssignProcessToJobObject

CreateToolhelp32Snapshot

AttachConsole

Process32NextW

FlushViewOfFile

Process32FirstW

GetProcessIoCounters

GetSystemInfo

HeapSetInformation

GetPriorityClass

GlobalMemoryStatusEx

CreateProcessW

AllocConsole

VirtualQuery

LoadLibraryExW

GetExitCodeProcess

CreateDirectoryW

QueryDosDeviceW

FindFirstFileExW

FindNextFileW

GetLongPathNameW

UnhandledExceptionFilter

IsProcessorFeaturePresent

GetStartupInfoW

RemoveDirectoryW

SleepConditionVariableCS

FindClose

GetVolumePathNameW

GetFileAttributesW

UnmapViewOfFile

GetModuleHandleA

RtlCaptureStackBackTrace

FindFirstChangeNotificationW

SetFileAttributesW

GetFileAttributesExW

GetCurrentThread

FindCloseChangeNotification

GetCurrentDirectoryW

SetCurrentDirectoryW

MoveFileExW

GetThreadId

GetUserDefaultLangID

ole32

CoCreateFreeThreadedMarshaler

CLSIDFromString

OleDuplicateData

RegisterDragDrop

GetHGlobalFromStream

CreateStreamOnHGlobal

ReleaseStgMedium

OleUninitialize

OleInitialize

CoCreateGuid

RevokeDragDrop

CoTaskMemRealloc

CoInitializeEx

CoUninitialize

CoTaskMemAlloc

CoCreateInstance

PropVariantClear

CoTaskMemFree

DoDragDrop

oleaut32

LoadRegTypeLi

LoadTypeLi

VarUI4FromStr

SysStringLen

VariantClear

SysFreeString

SysAllocString

VariantInit

shlwapi

PathFindExtensionW

PathMatchSpecW

PathFindFileNameW

PathRemoveExtensionW

msimg32

AlphaBlend

uxtheme

IsAppThemed

vcruntime140

memchr

_set_purecall_handler

strstr

strchr

__std_exception_copy

__std_exception_destroy

_purecall

memmove

_CxxThrowException

__intrinsic_setjmp

memset

__C_specific_handler

memcpy

memcmp

wcsstr

__vcrt_InitializeCriticalSectionEx

__CxxFrameHandler3

__std_terminate

__std_type_info_compare

strrchr

longjmp

api-ms-win-crt-string-l1-1-0

iswspace

isspace

strspn

toupper

_strdup

isdigit

strcat_s

strcpy_s

_wcsicmp

_strnicmp

isalpha

isxdigit

iswcntrl

_wcsdup

wcscmp

wcsnlen

wcsncpy

_wcsnicmp

tolower

isupper

iswdigit

strncmp

_strupr

strncpy_s

_strlwr

isalnum

strcmp

_wcslwr

strncpy

wcspbrk

wcsncpy_s

isprint

strnlen

wcscpy_s

_stricmp

islower

wcsncmp

strcspn

api-ms-win-crt-environment-l1-1-0

getenv_s

getenv

api-ms-win-crt-heap-l1-1-0

_aligned_malloc

_set_new_mode

realloc

_aligned_free

malloc

free

calloc

_get_heap_handle

_callnewh

_msize

_recalloc

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table

_register_onexit_function

_crt_atexit

_cexit

_seh_filter_exe

_configure_wide_argv

_initialize_wide_environment

_get_wide_winmain_command_line

_initterm

_initterm_e

signal

_c_exit

_register_thread_local_exe_atexit_callback

_beginthreadex

_set_app_type

_beginthread

_endthread

_controlfp_s

strerror

_invalid_parameter_noinfo_noreturn

_set_invalid_parameter_handler

_invalid_parameter_noinfo

_errno

terminate

abort

exit

_set_abort_behavior

_set_new_handler

_exit

__fpe_flt_rounds

api-ms-win-crt-stdio-l1-1-0

fflush

__stdio_common_vsprintf_s

fclose

fputwc

ungetwc

fgetc

fgetwc

fwrite

fgetpos

setvbuf

ungetc

fsetpos

_fseeki64

_get_stream_buffer_pointers

_close

_set_fmode

_open_osfhandle

__p__commode

__stdio_common_vswprintf_s

__acrt_iob_func

__stdio_common_vfprintf

__stdio_common_vsnwprintf_s

_wfopen_s

fgets

fseek

__stdio_common_vsscanf

fputs

__stdio_common_vfscanf

fputc

_getcwd

freopen

fopen

_get_osfhandle

_fileno

_dup2

_fsopen

ftell

_ftelli64

_wfopen

_wfsopen

__stdio_common_vswprintf

__stdio_common_vsnprintf_s

ferror

fread

__stdio_common_vsprintf

api-ms-win-crt-convert-l1-1-0

atof

_itoa

strtoll

strtod

_strtoui64

strtoul

strtol

atoi

wcstol

_i64tow_s

_wtoi

_fcvt

_itoa_s

api-ms-win-crt-filesystem-l1-1-0

_mkdir

_wfullpath

_stat64i32

_unlock_file

_lock_file

_wstat64i32

remove

api-ms-win-crt-math-l1-1-0

ceilf

expf

floor

floorf

fmod

logf

pow

powf

sqrtf

lroundf

acosf

cos

sin

log

log10f

tan

_nextafter

fmaxf

ceil

sqrt

acos

nextafterf

tanf

_fdtest

exp

_set_FMA3_enable

log10

_hypotf

roundf

log2f

tanhf

fminf

exp2f

copysign

truncf

_fdsign

atan2f

modff

acoshf

asinhf

_dtest

_dclass

atanhf

coshf

sinhf

copysignf

_finite

fmodf

cbrtf

round

_fdclass

frexp

lround

_fdopen

ldexp

log2

modf

cosf

hypot

nanf

asinf

trunc

_dsign

fmin

__setusermatherr

sinf

cbrt

atan2

_j0

atanf

tanh

asin

llroundf

expm1

llround

nan

api-ms-win-crt-utility-l1-1-0

qsort

bsearch

rand

rand_s

srand

api-ms-win-crt-time-l1-1-0

_time64

_localtime64

wcsftime

_ftime64

_mktime64

_gmtime64_s

_localtime64_s

_gmtime64

_get_timezone

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

setlocale

imm32

ImmSetCandidateWindow

ImmReleaseContext

ImmAssociateContextEx

ImmGetCompositionStringW

ImmGetConversionStatus

ImmSetOpenStatus

ImmNotifyIME

ImmSetCompositionWindow

ImmGetContext

oleacc

CreateStdAccessibleObject

LresultFromObject

AccessibleChildren

AccessibleObjectFromWindow

WindowFromAccessibleObject

winmm

midiInPrepareHeader

midiInClose

midiInOpen

midiInGetDevCapsW

midiInGetNumDevs

midiOutReset

midiOutLongMsg

midiOutShortMsg

midiOutUnprepareHeader

midiOutPrepareHeader

midiOutClose

midiOutOpen

midiOutGetDevCapsW

midiOutGetNumDevs

waveInGetNumDevs

waveOutGetNumDevs

timeBeginPeriod

timeGetTime

timeEndPeriod

midiInUnprepareHeader

midiInAddBuffer

midiInStart

midiInReset

waveOutOpen

waveOutClose

waveOutPrepareHeader

waveOutUnprepareHeader

waveOutWrite

waveOutPause

waveOutRestart

waveOutReset

propsys

InitPropVariantFromCLSID

Exports

GetHandleVerifier

IsSandboxedProcess

Sections

.text
Size: 52.1MB - Virtual size: 52.1MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

_text32
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 11.2MB - Virtual size: 11.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 783KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rodata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 565KB - Virtual size: 564KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

LICENSE.electron.txt

LICENSES.chromium.html

api-ms-win-core-console-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:ba:6a:36:de:1a:ad:bd:3c:1f:00:00:00:00:00:ba
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:F6FF-2DA7-BB75,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

e0:af:c2:ad:50:ee:77:d6:17:74:65:c1:f4:11:8a:98:56:a7:83:9a:0f:a1:63:83:98:99:52:99:de:e5:05:c0
Signer

Actual PE Digest

e0:af:c2:ad:50:ee:77:d6:17:74:65:c1:f4:11:8a:98:56:a7:83:9a:0f:a1:63:83:98:99:52:99:de:e5:05:c0

Digest Algorithm

sha256

PE Digest Matches

true

8a:0e:7c:31:b3:4e:cc:fc:33:0e:03:dd:22:c7:f4:0e:48:30:e3:aa
Signer

Actual PE Digest

8a:0e:7c:31:b3:4e:cc:fc:33:0e:03:dd:22:c7:f4:0e:48:30:e3:aa

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-console-l1-1-0.pdb

Exports

AllocConsole

GetConsoleCP

GetConsoleMode

GetConsoleOutputCP

GetNumberOfConsoleInputEvents

PeekConsoleInputA

ReadConsoleA

ReadConsoleInputA

ReadConsoleInputW

ReadConsoleW

SetConsoleCtrlHandler

SetConsoleMode

WriteConsoleA

WriteConsoleW

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-datetime-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bc:0b:2e:1a:7b:8a:b1:c7:91:00:00:00:00:00:bc
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12B4-2D5F-87D4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

cf:0d:78:07:2a:1d:db:8d:98:8c:d1:39:71:27:d5:83:69:64:7d:d3:06:f8:c2:e4:9b:58:b3:b1:ff:63:33:1e
Signer

Actual PE Digest

cf:0d:78:07:2a:1d:db:8d:98:8c:d1:39:71:27:d5:83:69:64:7d:d3:06:f8:c2:e4:9b:58:b3:b1:ff:63:33:1e

Digest Algorithm

sha256

PE Digest Matches

true

24:f9:b7:77:48:47:45:f8:b5:4c:59:2b:70:4f:03:ee:1c:ca:5e:b3
Signer

Actual PE Digest

24:f9:b7:77:48:47:45:f8:b5:4c:59:2b:70:4f:03:ee:1c:ca:5e:b3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-datetime-l1-1-0.pdb

Exports

GetDateFormatA

GetDateFormatW

GetTimeFormatA

GetTimeFormatW

Sections

.rdata
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-debug-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:be:a4:0f:f5:c9:a5:0e:e1:30:00:00:00:00:00:be
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:843D-37F6-F104,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

05:08:3a:bc:1e:7e:e1:8b:54:77:37:fa:af:5a:20:e1:a3:cc:ac:33:2d:af:ce:05:3e:be:8a:78:c1:ac:6a:98
Signer

Actual PE Digest

05:08:3a:bc:1e:7e:e1:8b:54:77:37:fa:af:5a:20:e1:a3:cc:ac:33:2d:af:ce:05:3e:be:8a:78:c1:ac:6a:98

Digest Algorithm

sha256

PE Digest Matches

true

36:b1:f0:16:2a:70:46:3d:22:7d:ba:7a:81:24:69:a7:45:64:49:83
Signer

Actual PE Digest

36:b1:f0:16:2a:70:46:3d:22:7d:ba:7a:81:24:69:a7:45:64:49:83

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-debug-l1-1-0.pdb

Exports

DebugBreak

IsDebuggerPresent

OutputDebugStringA

OutputDebugStringW

Sections

.rdata
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-errorhandling-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:c1:09:f8:02:41:bb:4d:aa:dc:00:00:00:00:00:c1
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12E7-3064-6112,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:b6:42:2e:00:bb:be:d2:c2:57:0b:b0:31:80:ef:51:b6:59:df:ef:39:78:31:2e:7b:93:05:e0:af:3f:07:3c
Signer

Actual PE Digest

61:b6:42:2e:00:bb:be:d2:c2:57:0b:b0:31:80:ef:51:b6:59:df:ef:39:78:31:2e:7b:93:05:e0:af:3f:07:3c

Digest Algorithm

sha256

PE Digest Matches

true

3b:ef:4d:16:46:06:3c:5c:68:ed:8c:f9:a8:d3:ad:3c:58:a4:31:c0
Signer

Actual PE Digest

3b:ef:4d:16:46:06:3c:5c:68:ed:8c:f9:a8:d3:ad:3c:58:a4:31:c0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-errorhandling-l1-1-0.pdb

Exports

GetErrorMode

GetLastError

RaiseException

SetErrorMode

SetLastError

SetUnhandledExceptionFilter

UnhandledExceptionFilter

Sections

.rdata
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-file-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:c3:3b:b8:10:d6:ab:75:9c:84:00:00:00:00:00:c3
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:D236-37DA-9761,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

de:b8:f7:dc:ac:02:f4:81:7f:af:52:73:26:2f:3a:d1:d3:db:68:cb:7f:db:11:75:df:a2:c4:0a:26:8a:82:f3
Signer

Actual PE Digest

de:b8:f7:dc:ac:02:f4:81:7f:af:52:73:26:2f:3a:d1:d3:db:68:cb:7f:db:11:75:df:a2:c4:0a:26:8a:82:f3

Digest Algorithm

sha256

PE Digest Matches

true

e9:2a:aa:42:fc:13:f3:8d:2c:7c:e8:dc:cc:25:80:17:a6:fb:1d:3d
Signer

Actual PE Digest

e9:2a:aa:42:fc:13:f3:8d:2c:7c:e8:dc:cc:25:80:17:a6:fb:1d:3d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-file-l1-1-0.pdb

Exports

CompareFileTime

CreateDirectoryA

CreateDirectoryW

CreateFileA

CreateFileW

DefineDosDeviceW

DeleteFileA

DeleteFileW

DeleteVolumeMountPointW

FileTimeToLocalFileTime

FindClose

FindCloseChangeNotification

FindFirstChangeNotificationA

FindFirstChangeNotificationW

FindFirstFileA

FindFirstFileExA

FindFirstFileExW

FindFirstFileW

FindFirstVolumeW

FindNextChangeNotification

FindNextFileA

FindNextFileW

FindNextVolumeW

FindVolumeClose

FlushFileBuffers

GetDiskFreeSpaceA

GetDiskFreeSpaceExA

GetDiskFreeSpaceExW

GetDiskFreeSpaceW

GetDriveTypeA

GetDriveTypeW

GetFileAttributesA

GetFileAttributesExA

GetFileAttributesExW

GetFileAttributesW

GetFileInformationByHandle

GetFileSize

GetFileSizeEx

GetFileTime

GetFileType

GetFinalPathNameByHandleA

GetFinalPathNameByHandleW

GetFullPathNameA

GetFullPathNameW

GetLogicalDriveStringsW

GetLogicalDrives

GetLongPathNameA

GetLongPathNameW

GetShortPathNameW

GetTempFileNameW

GetVolumeInformationByHandleW

GetVolumeInformationW

GetVolumePathNameW

LocalFileTimeToFileTime

LockFile

LockFileEx

QueryDosDeviceW

ReadFile

ReadFileEx

ReadFileScatter

RemoveDirectoryA

RemoveDirectoryW

SetEndOfFile

SetFileAttributesA

SetFileAttributesW

SetFileInformationByHandle

SetFilePointer

SetFilePointerEx

SetFileTime

SetFileValidData

UnlockFile

UnlockFileEx

WriteFile

WriteFileEx

WriteFileGather

Sections

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-file-l1-2-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:d7:78:5e:7e:ac:3f:2a:41:8b:00:00:00:00:00:d7
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-10-2017 22:57

Not After

02-01-2019 22:57

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:96FF-4BC5-A7DC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

ae:83:7f:09:11:c7:68:8b:00:30:17:21:66:e2:2e:54:f5:42:ff:ce:09:2d:52:96:fc:a0:4f:87:4e:4e:e5:b9
Signer

Actual PE Digest

ae:83:7f:09:11:c7:68:8b:00:30:17:21:66:e2:2e:54:f5:42:ff:ce:09:2d:52:96:fc:a0:4f:87:4e:4e:e5:b9

Digest Algorithm

sha256

PE Digest Matches

true

26:05:01:7b:ae:7b:4c:3c:e3:ea:db:92:e6:e0:f5:80:d4:66:da:44
Signer

Actual PE Digest

26:05:01:7b:ae:7b:4c:3c:e3:ea:db:92:e6:e0:f5:80:d4:66:da:44

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-file-l1-2-0.pdb

Exports

CreateFile2

GetTempPathW

GetVolumeNameForVolumeMountPointW

GetVolumePathNamesForVolumeNameW

Sections

.rdata
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-file-l2-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

f2:f2:14:69:e5:7b:f1:7b:c0:b7:5f:f3:3e:7a:29:4f:26:99:a5:67:88:5b:0e:b7:23:32:64:05:08:04:7a:27
Signer

Actual PE Digest

f2:f2:14:69:e5:7b:f1:7b:c0:b7:5f:f3:3e:7a:29:4f:26:99:a5:67:88:5b:0e:b7:23:32:64:05:08:04:7a:27

Digest Algorithm

sha256

PE Digest Matches

true

88:a0:11:a8:1d:0a:9f:26:6a:71:2e:af:50:f6:b7:7f:66:70:fb:e0
Signer

Actual PE Digest

88:a0:11:a8:1d:0a:9f:26:6a:71:2e:af:50:f6:b7:7f:66:70:fb:e0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-file-l2-1-0.pdb

Exports

CopyFile2

CopyFileExW

CreateDirectoryExW

CreateHardLinkW

CreateSymbolicLinkW

GetFileInformationByHandleEx

MoveFileExW

MoveFileWithProgressW

ReOpenFile

ReadDirectoryChangesW

ReplaceFileW

Sections

.rdata
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-handle-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:d7:78:5e:7e:ac:3f:2a:41:8b:00:00:00:00:00:d7
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-10-2017 22:57

Not After

02-01-2019 22:57

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:96FF-4BC5-A7DC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

aa:8b:dc:15:aa:0c:d1:a4:97:96:fd:36:04:0d:40:1f:b4:0f:e6:4e:24:1a:bd:b9:da:5d:26:bb:aa:9d:a5:92
Signer

Actual PE Digest

aa:8b:dc:15:aa:0c:d1:a4:97:96:fd:36:04:0d:40:1f:b4:0f:e6:4e:24:1a:bd:b9:da:5d:26:bb:aa:9d:a5:92

Digest Algorithm

sha256

PE Digest Matches

true

02:c3:de:db:aa:e2:00:8f:d9:53:9f:91:c9:fc:97:c2:f1:b0:7c:94
Signer

Actual PE Digest

02:c3:de:db:aa:e2:00:8f:d9:53:9f:91:c9:fc:97:c2:f1:b0:7c:94

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-handle-l1-1-0.pdb

Exports

CloseHandle

CompareObjectHandles

DuplicateHandle

GetHandleInformation

SetHandleInformation

Sections

.rdata
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-heap-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bb:b6:77:24:71:4a:20:00:20:00:00:00:00:00:bb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:0DE8-2DC5-3CA9,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

40:3a:e6:a5:a2:2d:07:35:a3:7d:28:75:c9:17:65:d6:b4:32:eb:4f:d8:28:74:2b:69:91:bc:97:62:bc:24:3e
Signer

Actual PE Digest

40:3a:e6:a5:a2:2d:07:35:a3:7d:28:75:c9:17:65:d6:b4:32:eb:4f:d8:28:74:2b:69:91:bc:97:62:bc:24:3e

Digest Algorithm

sha256

PE Digest Matches

true

3d:1f:2f:73:17:6c:38:8f:f5:11:00:2e:78:0c:05:40:07:b6:62:7f
Signer

Actual PE Digest

3d:1f:2f:73:17:6c:38:8f:f5:11:00:2e:78:0c:05:40:07:b6:62:7f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-heap-l1-1-0.pdb

Exports

GetProcessHeap

GetProcessHeaps

HeapAlloc

HeapCompact

HeapCreate

HeapDestroy

HeapFree

HeapLock

HeapQueryInformation

HeapReAlloc

HeapSetInformation

HeapSize

HeapSummary

HeapUnlock

HeapValidate

HeapWalk

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-interlocked-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:c1:09:f8:02:41:bb:4d:aa:dc:00:00:00:00:00:c1
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12E7-3064-6112,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

e4:5b:bc:4f:02:20:a4:76:ce:5f:b7:72:c6:35:0a:6c:21:a6:c3:e3:cd:06:9e:62:6a:d2:06:02:3e:8b:04:db
Signer

Actual PE Digest

e4:5b:bc:4f:02:20:a4:76:ce:5f:b7:72:c6:35:0a:6c:21:a6:c3:e3:cd:06:9e:62:6a:d2:06:02:3e:8b:04:db

Digest Algorithm

sha256

PE Digest Matches

true

cd:22:38:46:ed:c8:d9:5c:63:03:89:43:4a:8b:38:9d:8f:23:16:34
Signer

Actual PE Digest

cd:22:38:46:ed:c8:d9:5c:63:03:89:43:4a:8b:38:9d:8f:23:16:34

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-interlocked-l1-1-0.pdb

Exports

InitializeSListHead

InterlockedFlushSList

InterlockedPopEntrySList

InterlockedPushEntrySList

QueryDepthSList

Sections

.rdata
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-libraryloader-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:d7:78:5e:7e:ac:3f:2a:41:8b:00:00:00:00:00:d7
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-10-2017 22:57

Not After

02-01-2019 22:57

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:96FF-4BC5-A7DC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

07:07:76:ef:ff:4b:a9:87:67:85:a7:1b:26:30:e8:5c:63:f1:dc:36:8f:ca:de:2e:4f:8d:c9:ea:5e:49:1d:40
Signer

Actual PE Digest

07:07:76:ef:ff:4b:a9:87:67:85:a7:1b:26:30:e8:5c:63:f1:dc:36:8f:ca:de:2e:4f:8d:c9:ea:5e:49:1d:40

Digest Algorithm

sha256

PE Digest Matches

true

de:c4:ba:e1:9e:e3:6e:a3:29:d7:7d:c6:8b:34:6e:7b:92:82:f0:bb
Signer

Actual PE Digest

de:c4:ba:e1:9e:e3:6e:a3:29:d7:7d:c6:8b:34:6e:7b:92:82:f0:bb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-libraryloader-l1-1-0.pdb

Exports

AddDllDirectory

DisableThreadLibraryCalls

FindResourceExW

FindStringOrdinal

FreeLibrary

FreeLibraryAndExitThread

FreeResource

GetModuleFileNameA

GetModuleFileNameW

GetModuleHandleA

GetModuleHandleExA

GetModuleHandleExW

GetModuleHandleW

GetProcAddress

LoadLibraryExA

LoadLibraryExW

LoadResource

LoadStringA

LoadStringW

LockResource

RemoveDllDirectory

SetDefaultDllDirectories

SizeofResource

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-localization-l1-2-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:d7:78:5e:7e:ac:3f:2a:41:8b:00:00:00:00:00:d7
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-10-2017 22:57

Not After

02-01-2019 22:57

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:96FF-4BC5-A7DC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

78:7d:ce:85:47:31:1f:63:45:08:39:51:aa:c7:af:c0:18:57:b8:ed:e2:0f:50:f6:a7:b8:6a:35:4e:2d:97:8b
Signer

Actual PE Digest

78:7d:ce:85:47:31:1f:63:45:08:39:51:aa:c7:af:c0:18:57:b8:ed:e2:0f:50:f6:a7:b8:6a:35:4e:2d:97:8b

Digest Algorithm

sha256

PE Digest Matches

true

67:31:36:e3:bc:69:6c:20:6c:44:32:48:f6:c7:20:2c:a0:8b:5e:7b
Signer

Actual PE Digest

67:31:36:e3:bc:69:6c:20:6c:44:32:48:f6:c7:20:2c:a0:8b:5e:7b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-localization-l1-2-0.pdb

Exports

ConvertDefaultLocale

EnumSystemGeoID

EnumSystemLocalesA

EnumSystemLocalesW

FindNLSString

FindNLSStringEx

FormatMessageA

FormatMessageW

GetACP

GetCPInfo

GetCPInfoExW

GetCalendarInfoEx

GetCalendarInfoW

GetFileMUIInfo

GetFileMUIPath

GetGeoInfoW

GetLocaleInfoA

GetLocaleInfoEx

GetLocaleInfoW

GetNLSVersion

GetNLSVersionEx

GetOEMCP

GetProcessPreferredUILanguages

GetSystemDefaultLCID

GetSystemDefaultLangID

GetSystemPreferredUILanguages

GetThreadLocale

GetThreadPreferredUILanguages

GetThreadUILanguage

GetUILanguageInfo

GetUserDefaultLCID

GetUserDefaultLangID

GetUserDefaultLocaleName

GetUserGeoID

GetUserPreferredUILanguages

IdnToAscii

IdnToUnicode

IsDBCSLeadByte

IsDBCSLeadByteEx

IsNLSDefinedString

IsValidCodePage

IsValidLanguageGroup

IsValidLocale

IsValidLocaleName

IsValidNLSVersion

LCMapStringA

LCMapStringEx

LCMapStringW

LocaleNameToLCID

ResolveLocaleName

SetCalendarInfoW

SetLocaleInfoW

SetProcessPreferredUILanguages

SetThreadLocale

SetThreadPreferredUILanguages

SetThreadUILanguage

SetUserGeoID

VerLanguageNameA

VerLanguageNameW

Sections

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-memory-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:be:a4:0f:f5:c9:a5:0e:e1:30:00:00:00:00:00:be
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:843D-37F6-F104,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

64:88:b0:8a:23:2e:4b:2c:55:07:76:96:83:d2:e5:a6:d1:35:81:bc:08:1d:54:c7:06:a6:1c:7b:d4:c7:20:01
Signer

Actual PE Digest

64:88:b0:8a:23:2e:4b:2c:55:07:76:96:83:d2:e5:a6:d1:35:81:bc:08:1d:54:c7:06:a6:1c:7b:d4:c7:20:01

Digest Algorithm

sha256

PE Digest Matches

true

7a:4b:79:30:06:76:52:35:f0:21:54:17:03:ed:7d:81:a6:b8:06:a4
Signer

Actual PE Digest

7a:4b:79:30:06:76:52:35:f0:21:54:17:03:ed:7d:81:a6:b8:06:a4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-memory-l1-1-0.pdb

Exports

CreateFileMappingW

FlushViewOfFile

MapViewOfFile

MapViewOfFileEx

OpenFileMappingW

ReadProcessMemory

UnmapViewOfFile

VirtualAlloc

VirtualAllocEx

VirtualFree

VirtualFreeEx

VirtualProtect

VirtualProtectEx

VirtualQuery

VirtualQueryEx

WriteProcessMemory

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-namedpipe-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:d7:78:5e:7e:ac:3f:2a:41:8b:00:00:00:00:00:d7
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-10-2017 22:57

Not After

02-01-2019 22:57

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:96FF-4BC5-A7DC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

e5:dd:e6:00:4c:e4:e4:68:91:3c:ef:93:f3:cb:bf:cd:84:84:40:65:39:e5:29:a2:39:5b:3b:24:7c:45:c0:d2
Signer

Actual PE Digest

e5:dd:e6:00:4c:e4:e4:68:91:3c:ef:93:f3:cb:bf:cd:84:84:40:65:39:e5:29:a2:39:5b:3b:24:7c:45:c0:d2

Digest Algorithm

sha256

PE Digest Matches

true

2a:81:bf:96:44:dd:68:65:a7:6f:5f:ff:c5:26:8d:f0:b1:f6:d6:6f
Signer

Actual PE Digest

2a:81:bf:96:44:dd:68:65:a7:6f:5f:ff:c5:26:8d:f0:b1:f6:d6:6f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-namedpipe-l1-1-0.pdb

Exports

ConnectNamedPipe

CreateNamedPipeW

CreatePipe

DisconnectNamedPipe

GetNamedPipeClientComputerNameW

ImpersonateNamedPipeClient

PeekNamedPipe

SetNamedPipeHandleState

TransactNamedPipe

WaitNamedPipeW

Sections

.rdata
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-processenvironment-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:ba:6a:36:de:1a:ad:bd:3c:1f:00:00:00:00:00:ba
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:F6FF-2DA7-BB75,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

93:34:92:8b:45:51:e7:fa:46:2e:88:5f:99:5e:6e:9b:9c:dc:87:ef:25:8e:30:94:1c:f1:29:34:62:ad:70:27
Signer

Actual PE Digest

93:34:92:8b:45:51:e7:fa:46:2e:88:5f:99:5e:6e:9b:9c:dc:87:ef:25:8e:30:94:1c:f1:29:34:62:ad:70:27

Digest Algorithm

sha256

PE Digest Matches

true

6c:dc:90:0b:66:41:4e:06:f2:0b:c3:3d:ef:34:5e:42:b1:b6:dc:d8
Signer

Actual PE Digest

6c:dc:90:0b:66:41:4e:06:f2:0b:c3:3d:ef:34:5e:42:b1:b6:dc:d8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-processenvironment-l1-1-0.pdb

Exports

ExpandEnvironmentStringsA

ExpandEnvironmentStringsW

FreeEnvironmentStringsA

FreeEnvironmentStringsW

GetCommandLineA

GetCommandLineW

GetCurrentDirectoryA

GetCurrentDirectoryW

GetEnvironmentStrings

GetEnvironmentStringsW

GetEnvironmentVariableA

GetEnvironmentVariableW

GetStdHandle

SearchPathW

SetCurrentDirectoryA

SetCurrentDirectoryW

SetEnvironmentStringsW

SetEnvironmentVariableA

SetEnvironmentVariableW

SetStdHandle

SetStdHandleEx

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-processthreads-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:c1:09:f8:02:41:bb:4d:aa:dc:00:00:00:00:00:c1
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12E7-3064-6112,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

f7:6b:c0:e5:62:58:24:fe:18:d8:c1:c5:d3:bf:27:eb:b8:51:e3:6a:ee:6f:b7:f4:92:e6:9c:40:85:7c:cb:dc
Signer

Actual PE Digest

f7:6b:c0:e5:62:58:24:fe:18:d8:c1:c5:d3:bf:27:eb:b8:51:e3:6a:ee:6f:b7:f4:92:e6:9c:40:85:7c:cb:dc

Digest Algorithm

sha256

PE Digest Matches

true

77:37:44:a5:b8:4a:18:1a:ac:55:3f:05:7f:58:99:44:d3:08:e9:d8
Signer

Actual PE Digest

77:37:44:a5:b8:4a:18:1a:ac:55:3f:05:7f:58:99:44:d3:08:e9:d8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-processthreads-l1-1-0.pdb

Exports

CreateProcessA

CreateProcessAsUserW

CreateProcessW

CreateRemoteThread

CreateRemoteThreadEx

CreateThread

DeleteProcThreadAttributeList

ExitProcess

ExitThread

FlushProcessWriteBuffers

GetCurrentProcess

GetCurrentProcessId

GetCurrentThread

GetCurrentThreadId

GetExitCodeProcess

GetExitCodeThread

GetPriorityClass

GetProcessId

GetProcessIdOfThread

GetProcessTimes

GetProcessVersion

GetStartupInfoW

GetThreadId

GetThreadPriority

GetThreadPriorityBoost

InitializeProcThreadAttributeList

OpenProcessToken

OpenThread

OpenThreadToken

ProcessIdToSessionId

QueryProcessAffinityUpdateMode

QueueUserAPC

ResumeThread

SetPriorityClass

SetProcessAffinityUpdateMode

SetProcessShutdownParameters

SetThreadPriority

SetThreadPriorityBoost

SetThreadStackGuarantee

SetThreadToken

SuspendThread

SwitchToThread

TerminateProcess

TerminateThread

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

UpdateProcThreadAttribute

Sections

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-processthreads-l1-1-1.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:d7:78:5e:7e:ac:3f:2a:41:8b:00:00:00:00:00:d7
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-10-2017 22:57

Not After

02-01-2019 22:57

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:96FF-4BC5-A7DC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

1b:d2:1d:73:2b:1e:d0:88:eb:aa:d9:ae:a7:bf:52:c1:70:37:7c:18:99:d0:e1:a6:06:b8:fd:46:0d:e7:8d:66
Signer

Actual PE Digest

1b:d2:1d:73:2b:1e:d0:88:eb:aa:d9:ae:a7:bf:52:c1:70:37:7c:18:99:d0:e1:a6:06:b8:fd:46:0d:e7:8d:66

Digest Algorithm

sha256

PE Digest Matches

true

51:6a:10:45:68:bc:71:7c:4e:c6:9f:88:1a:8e:31:06:8a:5c:12:b3
Signer

Actual PE Digest

51:6a:10:45:68:bc:71:7c:4e:c6:9f:88:1a:8e:31:06:8a:5c:12:b3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-processthreads-l1-1-1.pdb

Exports

FlushInstructionCache

GetCurrentProcessorNumber

GetCurrentProcessorNumberEx

GetCurrentThreadStackLimits

GetProcessHandleCount

GetProcessMitigationPolicy

GetThreadContext

GetThreadIdealProcessorEx

GetThreadTimes

IsProcessorFeaturePresent

OpenProcess

SetProcessMitigationPolicy

SetThreadContext

SetThreadIdealProcessorEx

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-profile-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

e9:f3:c6:a5:ac:1b:ea:d8:1e:d4:d1:41:f4:3f:04:94:02:a9:b0:fe:31:d0:52:b5:76:73:02:41:3e:2c:6c:5e
Signer

Actual PE Digest

e9:f3:c6:a5:ac:1b:ea:d8:1e:d4:d1:41:f4:3f:04:94:02:a9:b0:fe:31:d0:52:b5:76:73:02:41:3e:2c:6c:5e

Digest Algorithm

sha256

PE Digest Matches

true

79:83:77:b8:00:60:5b:e6:ff:a1:87:92:67:30:ab:19:a3:2b:8a:1d
Signer

Actual PE Digest

79:83:77:b8:00:60:5b:e6:ff:a1:87:92:67:30:ab:19:a3:2b:8a:1d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-profile-l1-1-0.pdb

Exports

QueryPerformanceCounter

QueryPerformanceFrequency

Sections

.rdata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-rtlsupport-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:c0:de:2c:3d:07:94:e4:49:79:00:00:00:00:00:c0
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:7AB5-2DF2-DA3F,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

82:b1:7b:ce:3d:28:4b:66:10:5c:27:14:09:5c:03:7c:9b:6f:e2:30:84:a4:77:37:3b:53:29:28:cb:56:5b:87
Signer

Actual PE Digest

82:b1:7b:ce:3d:28:4b:66:10:5c:27:14:09:5c:03:7c:9b:6f:e2:30:84:a4:77:37:3b:53:29:28:cb:56:5b:87

Digest Algorithm

sha256

PE Digest Matches

true

68:f0:18:74:02:45:a1:fe:1a:05:b7:31:59:5b:8f:b2:74:19:da:26
Signer

Actual PE Digest

68:f0:18:74:02:45:a1:fe:1a:05:b7:31:59:5b:8f:b2:74:19:da:26

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-rtlsupport-l1-1-0.pdb

Exports

RtlAddFunctionTable

RtlCaptureContext

RtlCaptureStackBackTrace

RtlCompareMemory

RtlDeleteFunctionTable

RtlInstallFunctionTableCallback

RtlLookupFunctionEntry

RtlPcToFileHeader

RtlRaiseException

RtlRestoreContext

RtlUnwind

RtlUnwindEx

RtlVirtualUnwind

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-string-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:d8:e4:75:f9:45:6f:48:f7:ae:00:00:00:00:00:d8
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-10-2017 22:57

Not After

02-01-2019 22:57

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:70DD-4B5B-4568,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

f0:15:86:61:91:66:13:0e:86:aa:c8:bc:bb:02:84:d3:ca:1b:0e:96:d8:1c:b3:a6:68:5a:9a:b7:67:1e:8f:32
Signer

Actual PE Digest

f0:15:86:61:91:66:13:0e:86:aa:c8:bc:bb:02:84:d3:ca:1b:0e:96:d8:1c:b3:a6:68:5a:9a:b7:67:1e:8f:32

Digest Algorithm

sha256

PE Digest Matches

true

08:a7:a7:c7:89:59:3d:d3:0a:60:a7:d8:2e:33:15:a8:52:d8:15:0d
Signer

Actual PE Digest

08:a7:a7:c7:89:59:3d:d3:0a:60:a7:d8:2e:33:15:a8:52:d8:15:0d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-string-l1-1-0.pdb

Exports

CompareStringEx

CompareStringOrdinal

CompareStringW

FoldStringW

GetStringTypeExW

GetStringTypeW

MultiByteToWideChar

WideCharToMultiByte

Sections

.rdata
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-synch-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:d7:78:5e:7e:ac:3f:2a:41:8b:00:00:00:00:00:d7
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-10-2017 22:57

Not After

02-01-2019 22:57

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:96FF-4BC5-A7DC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

b1:95:fa:5c:97:db:9e:76:f9:98:2f:7b:62:67:02:9a:4a:78:69:59:59:ec:40:d2:12:44:30:98:e6:85:78:c4
Signer

Actual PE Digest

b1:95:fa:5c:97:db:9e:76:f9:98:2f:7b:62:67:02:9a:4a:78:69:59:59:ec:40:d2:12:44:30:98:e6:85:78:c4

Digest Algorithm

sha256

PE Digest Matches

true

89:c7:44:35:fb:c8:fe:ab:8b:b7:75:39:01:32:f0:a4:db:9d:16:7e
Signer

Actual PE Digest

89:c7:44:35:fb:c8:fe:ab:8b:b7:75:39:01:32:f0:a4:db:9d:16:7e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-synch-l1-1-0.pdb

Exports

AcquireSRWLockExclusive

AcquireSRWLockShared

CancelWaitableTimer

CreateEventA

CreateEventExA

CreateEventExW

CreateEventW

CreateMutexA

CreateMutexExA

CreateMutexExW

CreateMutexW

CreateSemaphoreExW

CreateWaitableTimerExW

DeleteCriticalSection

EnterCriticalSection

InitializeCriticalSection

InitializeCriticalSectionAndSpinCount

InitializeCriticalSectionEx

InitializeSRWLock

LeaveCriticalSection

OpenEventA

OpenEventW

OpenMutexW

OpenSemaphoreW

OpenWaitableTimerW

ReleaseMutex

ReleaseSRWLockExclusive

ReleaseSRWLockShared

ReleaseSemaphore

ResetEvent

SetCriticalSectionSpinCount

SetEvent

SetWaitableTimer

SetWaitableTimerEx

SleepEx

TryAcquireSRWLockExclusive

TryAcquireSRWLockShared

TryEnterCriticalSection

WaitForMultipleObjectsEx

WaitForSingleObject

WaitForSingleObjectEx

Sections

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-synch-l1-2-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bb:b6:77:24:71:4a:20:00:20:00:00:00:00:00:bb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:0DE8-2DC5-3CA9,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

ac:00:d7:54:37:a6:21:f3:4c:87:16:c4:1d:61:a7:01:70:53:b1:fa:3a:78:f0:e5:0b:62:38:64:31:e7:16:b4
Signer

Actual PE Digest

ac:00:d7:54:37:a6:21:f3:4c:87:16:c4:1d:61:a7:01:70:53:b1:fa:3a:78:f0:e5:0b:62:38:64:31:e7:16:b4

Digest Algorithm

sha256

PE Digest Matches

true

35:a9:a6:7f:4f:dc:f3:5b:9a:4f:4c:0a:14:a2:93:54:84:59:83:88
Signer

Actual PE Digest

35:a9:a6:7f:4f:dc:f3:5b:9a:4f:4c:0a:14:a2:93:54:84:59:83:88

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-synch-l1-2-0.pdb

Exports

DeleteSynchronizationBarrier

EnterSynchronizationBarrier

InitOnceBeginInitialize

InitOnceComplete

InitOnceExecuteOnce

InitOnceInitialize

InitializeConditionVariable

InitializeSynchronizationBarrier

SignalObjectAndWait

Sleep

SleepConditionVariableCS

SleepConditionVariableSRW

WaitOnAddress

WakeAllConditionVariable

WakeByAddressAll

WakeByAddressSingle

WakeConditionVariable

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-sysinfo-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bf:91:6c:fb:7c:1a:24:e0:22:00:00:00:00:00:bf
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

60:92:ad:52:85:ae:29:d1:03:2d:3f:52:11:cd:f3:3f:94:75:a1:bc:36:64:2f:1f:f5:b8:ea:a8:5c:11:a7:01
Signer

Actual PE Digest

60:92:ad:52:85:ae:29:d1:03:2d:3f:52:11:cd:f3:3f:94:75:a1:bc:36:64:2f:1f:f5:b8:ea:a8:5c:11:a7:01

Digest Algorithm

sha256

PE Digest Matches

true

37:82:86:2c:c1:91:52:14:b9:cb:26:95:78:cf:27:80:15:9f:8e:bb
Signer

Actual PE Digest

37:82:86:2c:c1:91:52:14:b9:cb:26:95:78:cf:27:80:15:9f:8e:bb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-sysinfo-l1-1-0.pdb

Exports

GetComputerNameExA

GetComputerNameExW

GetLocalTime

GetLogicalProcessorInformation

GetLogicalProcessorInformationEx

GetSystemDirectoryA

GetSystemDirectoryW

GetSystemInfo

GetSystemTime

GetSystemTimeAdjustment

GetSystemTimeAsFileTime

GetSystemWindowsDirectoryA

GetSystemWindowsDirectoryW

GetTickCount

GetTickCount64

GetVersion

GetVersionExA

GetVersionExW

GetWindowsDirectoryA

GetWindowsDirectoryW

GlobalMemoryStatusEx

SetLocalTime

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-timezone-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bf:91:6c:fb:7c:1a:24:e0:22:00:00:00:00:00:bf
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

50:c5:33:76:92:62:44:cd:84:5e:4e:08:a3:dc:4e:60:9b:6c:cc:57:05:33:75:95:51:91:e6:93:c7:a8:e7:31
Signer

Actual PE Digest

50:c5:33:76:92:62:44:cd:84:5e:4e:08:a3:dc:4e:60:9b:6c:cc:57:05:33:75:95:51:91:e6:93:c7:a8:e7:31

Digest Algorithm

sha256

PE Digest Matches

true

ec:25:db:b9:c6:b8:ed:25:bf:d2:2d:b4:8c:7a:f3:59:d2:8a:b1:1d
Signer

Actual PE Digest

ec:25:db:b9:c6:b8:ed:25:bf:d2:2d:b4:8c:7a:f3:59:d2:8a:b1:1d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-timezone-l1-1-0.pdb

Exports

EnumDynamicTimeZoneInformation

FileTimeToSystemTime

GetDynamicTimeZoneInformation

GetDynamicTimeZoneInformationEffectiveYears

GetTimeZoneInformation

GetTimeZoneInformationForYear

SetDynamicTimeZoneInformation

SetTimeZoneInformation

SystemTimeToFileTime

SystemTimeToTzSpecificLocalTime

SystemTimeToTzSpecificLocalTimeEx

TzSpecificLocalTimeToSystemTime

TzSpecificLocalTimeToSystemTimeEx

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-core-util-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bf:91:6c:fb:7c:1a:24:e0:22:00:00:00:00:00:bf
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

9f:2b:b7:da:6b:c1:c0:05:a9:ae:f1:85:40:bc:0d:91:8a:dc:39:31:f9:50:37:5b:60:88:78:aa:93:0a:ab:00
Signer

Actual PE Digest

9f:2b:b7:da:6b:c1:c0:05:a9:ae:f1:85:40:bc:0d:91:8a:dc:39:31:f9:50:37:5b:60:88:78:aa:93:0a:ab:00

Digest Algorithm

sha256

PE Digest Matches

true

fc:c8:95:06:6b:b7:42:bd:1f:24:dd:db:ce:72:fc:07:3e:9a:06:27
Signer

Actual PE Digest

fc:c8:95:06:6b:b7:42:bd:1f:24:dd:db:ce:72:fc:07:3e:9a:06:27

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-util-l1-1-0.pdb

Exports

Beep

DecodePointer

DecodeSystemPointer

EncodePointer

EncodeSystemPointer

Sections

.rdata
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-crt-conio-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:d7:78:5e:7e:ac:3f:2a:41:8b:00:00:00:00:00:d7
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-10-2017 22:57

Not After

02-01-2019 22:57

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:96FF-4BC5-A7DC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

51:a4:89:e4:fa:ea:27:83:7c:dc:09:93:aa:e8:37:0f:e8:8d:b5:0d:5c:ca:f3:12:79:d2:93:7d:f7:78:18:ea
Signer

Actual PE Digest

51:a4:89:e4:fa:ea:27:83:7c:dc:09:93:aa:e8:37:0f:e8:8d:b5:0d:5c:ca:f3:12:79:d2:93:7d:f7:78:18:ea

Digest Algorithm

sha256

PE Digest Matches

true

d2:e7:7d:d9:08:bb:19:ba:ea:08:be:f4:d8:9f:f8:47:34:fd:04:f5
Signer

Actual PE Digest

d2:e7:7d:d9:08:bb:19:ba:ea:08:be:f4:d8:9f:f8:47:34:fd:04:f5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-conio-l1-1-0.pdb

Exports

__conio_common_vcprintf

__conio_common_vcprintf_p

__conio_common_vcprintf_s

__conio_common_vcscanf

__conio_common_vcwprintf

__conio_common_vcwprintf_p

__conio_common_vcwprintf_s

__conio_common_vcwscanf

_cgets

_cgets_s

_cgetws

_cgetws_s

_cputs

_cputws

_getch

_getch_nolock

_getche

_getche_nolock

_getwch

_getwch_nolock

_getwche

_getwche_nolock

_putch

_putch_nolock

_putwch

_putwch_nolock

_ungetch

_ungetch_nolock

_ungetwch

_ungetwch_nolock

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-crt-convert-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:d8:e4:75:f9:45:6f:48:f7:ae:00:00:00:00:00:d8
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-10-2017 22:57

Not After

02-01-2019 22:57

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:70DD-4B5B-4568,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

bb:c6:80:df:2b:5a:9d:2b:f3:83:49:5f:6a:d9:ff:83:c4:6b:6a:aa:a7:0b:dd:ae:bd:fd:cb:24:06:b1:cb:5b
Signer

Actual PE Digest

bb:c6:80:df:2b:5a:9d:2b:f3:83:49:5f:6a:d9:ff:83:c4:6b:6a:aa:a7:0b:dd:ae:bd:fd:cb:24:06:b1:cb:5b

Digest Algorithm

sha256

PE Digest Matches

true

1f:59:97:64:ce:d1:33:b5:fd:25:93:4a:85:0a:ab:9f:78:2e:f6:9d
Signer

Actual PE Digest

1f:59:97:64:ce:d1:33:b5:fd:25:93:4a:85:0a:ab:9f:78:2e:f6:9d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-convert-l1-1-0.pdb

Exports

__toascii

_atodbl

_atodbl_l

_atof_l

_atoflt

_atoflt_l

_atoi64

_atoi64_l

_atoi_l

_atol_l

_atoldbl

_atoldbl_l

_atoll_l

_ecvt

_ecvt_s

_fcvt

_fcvt_s

_gcvt

_gcvt_s

_i64toa

_i64toa_s

_i64tow

_i64tow_s

_itoa

_itoa_s

_itow

_itow_s

_ltoa

_ltoa_s

_ltow

_ltow_s

_strtod_l

_strtof_l

_strtoi64

_strtoi64_l

_strtoimax_l

_strtol_l

_strtold_l

_strtoll_l

_strtoui64

_strtoui64_l

_strtoul_l

_strtoull_l

_strtoumax_l

_ui64toa

_ui64toa_s

_ui64tow

_ui64tow_s

_ultoa

_ultoa_s

_ultow

_ultow_s

_wcstod_l

_wcstof_l

_wcstoi64

_wcstoi64_l

_wcstoimax_l

_wcstol_l

_wcstold_l

_wcstoll_l

_wcstombs_l

_wcstombs_s_l

_wcstoui64

_wcstoui64_l

_wcstoul_l

_wcstoull_l

_wcstoumax_l

_wctomb_l

_wctomb_s_l

_wtof

_wtof_l

_wtoi

_wtoi64

_wtoi64_l

_wtoi_l

_wtol

_wtol_l

_wtoll

_wtoll_l

atof

atoi

atol

atoll

btowc

c16rtomb

c32rtomb

mbrtoc16

mbrtoc32

mbrtowc

mbsrtowcs

mbsrtowcs_s

mbstowcs

mbstowcs_s

mbtowc

strtod

strtof

strtoimax

strtol

strtold

strtoll

strtoul

strtoull

strtoumax

wcrtomb

wcrtomb_s

wcsrtombs

wcsrtombs_s

wcstod

wcstof

wcstoimax

wcstol

wcstold

wcstoll

wcstombs

wcstombs_s

wcstoul

wcstoull

wcstoumax

wctob

wctomb

wctomb_s

wctrans

Sections

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-crt-environment-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:be:a4:0f:f5:c9:a5:0e:e1:30:00:00:00:00:00:be
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:843D-37F6-F104,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

a8:e6:04:c1:88:9b:b6:0c:a2:a0:42:dc:1a:dc:5a:88:7f:05:60:91:a5:da:80:20:d4:5a:97:81:d9:d1:3c:d4
Signer

Actual PE Digest

a8:e6:04:c1:88:9b:b6:0c:a2:a0:42:dc:1a:dc:5a:88:7f:05:60:91:a5:da:80:20:d4:5a:97:81:d9:d1:3c:d4

Digest Algorithm

sha256

PE Digest Matches

true

bb:ae:67:59:95:3c:40:3f:4a:a4:70:d8:8a:a2:a5:1f:a0:6c:06:3b
Signer

Actual PE Digest

bb:ae:67:59:95:3c:40:3f:4a:a4:70:d8:8a:a2:a5:1f:a0:6c:06:3b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-environment-l1-1-0.pdb

Exports

__p__environ

__p__wenviron

_dupenv_s

_putenv

_putenv_s

_searchenv

_searchenv_s

_wdupenv_s

_wgetcwd

_wgetdcwd

_wgetenv

_wgetenv_s

_wputenv

_wputenv_s

_wsearchenv

_wsearchenv_s

getenv

getenv_s

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-crt-filesystem-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bf:91:6c:fb:7c:1a:24:e0:22:00:00:00:00:00:bf
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0d:e5:d5:bc:9a:f2:2c:b6:62:7a:86:50:a1:c2:70:28:e6:15:40:2a:e8:87:88:eb:93:d4:c2:30:94:54:24:74
Signer

Actual PE Digest

0d:e5:d5:bc:9a:f2:2c:b6:62:7a:86:50:a1:c2:70:28:e6:15:40:2a:e8:87:88:eb:93:d4:c2:30:94:54:24:74

Digest Algorithm

sha256

PE Digest Matches

true

2a:b9:79:30:78:16:8d:f2:23:1c:5c:4b:4a:fd:c6:a9:e2:ad:de:36
Signer

Actual PE Digest

2a:b9:79:30:78:16:8d:f2:23:1c:5c:4b:4a:fd:c6:a9:e2:ad:de:36

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-filesystem-l1-1-0.pdb

Exports

_access

_access_s

_chdir

_chdrive

_chmod

_findclose

_findfirst32

_findfirst32i64

_findfirst64

_findfirst64i32

_findnext32

_findnext32i64

_findnext64

_findnext64i32

_fstat32

_fstat32i64

_fstat64

_fstat64i32

_fullpath

_getdiskfree

_getdrive

_getdrives

_lock_file

_makepath

_makepath_s

_mkdir

_rmdir

_splitpath

_splitpath_s

_stat32

_stat32i64

_stat64

_stat64i32

_umask

_umask_s

_unlink

_unlock_file

_waccess

_waccess_s

_wchdir

_wchmod

_wfindfirst32

_wfindfirst32i64

_wfindfirst64

_wfindfirst64i32

_wfindnext32

_wfindnext32i64

_wfindnext64

_wfindnext64i32

_wfullpath

_wmakepath

_wmakepath_s

_wmkdir

_wremove

_wrename

_wrmdir

_wsplitpath

_wsplitpath_s

_wstat32

_wstat32i64

_wstat64

_wstat64i32

_wunlink

remove

rename

Sections

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-crt-heap-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:c1:09:f8:02:41:bb:4d:aa:dc:00:00:00:00:00:c1
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12E7-3064-6112,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

ba:87:87:da:b1:b6:08:6b:65:1a:73:b1:32:95:5c:90:c0:db:70:9d:b1:4f:01:73:10:56:91:e8:55:b1:c6:20
Signer

Actual PE Digest

ba:87:87:da:b1:b6:08:6b:65:1a:73:b1:32:95:5c:90:c0:db:70:9d:b1:4f:01:73:10:56:91:e8:55:b1:c6:20

Digest Algorithm

sha256

PE Digest Matches

true

c5:33:50:c1:33:8b:c0:28:50:28:6a:3d:93:28:e1:ae:e7:7a:24:c3
Signer

Actual PE Digest

c5:33:50:c1:33:8b:c0:28:50:28:6a:3d:93:28:e1:ae:e7:7a:24:c3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-heap-l1-1-0.pdb

Exports

_aligned_free

_aligned_malloc

_aligned_msize

_aligned_offset_malloc

_aligned_offset_realloc

_aligned_offset_recalloc

_aligned_realloc

_aligned_recalloc

_callnewh

_calloc_base

_expand

_free_base

_get_heap_handle

_heapchk

_heapmin

_heapwalk

_malloc_base

_msize

_query_new_handler

_query_new_mode

_realloc_base

_recalloc

_set_new_mode

calloc

free

malloc

realloc

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-crt-locale-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bb:b6:77:24:71:4a:20:00:20:00:00:00:00:00:bb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:0DE8-2DC5-3CA9,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

41:43:82:0e:83:d6:34:b8:2e:a5:73:67:ad:24:3d:0d:aa:97:83:3d:66:d6:26:71:74:69:f2:44:e0:b4:23:36
Signer

Actual PE Digest

41:43:82:0e:83:d6:34:b8:2e:a5:73:67:ad:24:3d:0d:aa:97:83:3d:66:d6:26:71:74:69:f2:44:e0:b4:23:36

Digest Algorithm

sha256

PE Digest Matches

true

6c:e8:fa:8e:52:db:1c:de:00:36:29:08:e7:3d:6c:bc:9b:a3:44:a7
Signer

Actual PE Digest

6c:e8:fa:8e:52:db:1c:de:00:36:29:08:e7:3d:6c:bc:9b:a3:44:a7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-locale-l1-1-0.pdb

Exports

___lc_codepage_func

___lc_collate_cp_func

___lc_locale_name_func

___mb_cur_max_func

___mb_cur_max_l_func

__initialize_lconv_for_unsigned_char

__pctype_func

__pwctype_func

_configthreadlocale

_create_locale

_free_locale

_get_current_locale

_getmbcp

_lock_locales

_setmbcp

_unlock_locales

_wcreate_locale

_wsetlocale

localeconv

setlocale

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-crt-math-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:c1:09:f8:02:41:bb:4d:aa:dc:00:00:00:00:00:c1
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12E7-3064-6112,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0d:33:86:14:38:ea:e8:75:1b:d2:9c:77:5c:4e:28:58:3d:4d:85:6a:4a:65:ac:5e:5d:12:0b:0d:9e:84:4f:e8
Signer

Actual PE Digest

0d:33:86:14:38:ea:e8:75:1b:d2:9c:77:5c:4e:28:58:3d:4d:85:6a:4a:65:ac:5e:5d:12:0b:0d:9e:84:4f:e8

Digest Algorithm

sha256

PE Digest Matches

true

77:8f:1b:10:07:06:57:39:2f:aa:0e:8c:31:7e:9a:46:a7:05:67:b4
Signer

Actual PE Digest

77:8f:1b:10:07:06:57:39:2f:aa:0e:8c:31:7e:9a:46:a7:05:67:b4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-math-l1-1-0.pdb

Exports

_Cbuild

_Cmulcc

_Cmulcr

_FCbuild

_FCmulcc

_FCmulcr

_LCbuild

_LCmulcc

_LCmulcr

__setusermatherr

_cabs

_chgsign

_chgsignf

_copysign

_copysignf

_d_int

_dclass

_dexp

_dlog

_dnorm

_dpcomp

_dpoly

_dscale

_dsign

_dsin

_dtest

_dunscale

_except1

_fd_int

_fdclass

_fdexp

_fdlog

_fdnorm

_fdopen

_fdpcomp

_fdpoly

_fdscale

_fdsign

_fdsin

_fdtest

_fdunscale

_finite

_finitef

_fpclass

_fpclassf

_get_FMA3_enable

_hypot

_hypotf

_isnan

_isnanf

_j0

_j1

_jn

_ld_int

_ldclass

_ldexp

_ldlog

_ldpcomp

_ldpoly

_ldscale

_ldsign

_ldsin

_ldtest

_ldunscale

_logb

_logbf

_nextafter

_nextafterf

_scalb

_scalbf

_set_FMA3_enable

_y0

_y1

_yn

acos

acosf

acosh

acoshf

acoshl

asin

asinf

asinh

asinhf

asinhl

atan

atan2

atan2f

atanf

atanh

atanhf

atanhl

cabs

cabsf

cabsl

cacos

cacosf

cacosh

cacoshf

cacoshl

cacosl

carg

cargf

cargl

casin

casinf

casinh

casinhf

casinhl

casinl

catan

catanf

catanh

catanhf

catanhl

catanl

cbrt

cbrtf

cbrtl

ccos

ccosf

ccosh

ccoshf

ccoshl

ccosl

ceil

ceilf

cexp

cexpf

cexpl

cimag

cimagf

cimagl

clog

clog10

clog10f

clog10l

clogf

clogl

conj

conjf

conjl

copysign

copysignf

copysignl

cos

cosf

cosh

coshf

cpow

cpowf

cpowl

cproj

cprojf

cprojl

creal

crealf

creall

csin

csinf

csinh

csinhf

csinhl

csinl

csqrt

csqrtf

csqrtl

ctan

ctanf

ctanh

ctanhf

ctanhl

ctanl

erf

erfc

erfcf

erfcl

erff

erfl

exp

exp2

exp2f

exp2l

expf

expm1

expm1f

expm1l

fabs

fdim

fdimf

fdiml

floor

floorf

fma

fmaf

fmal

fmax

fmaxf

fmaxl

fmin

fminf

fminl

fmod

fmodf

frexp

hypot

ilogb

ilogbf

ilogbl

ldexp

lgamma

lgammaf

lgammal

llrint

llrintf

llrintl

llround

llroundf

llroundl

log

log10

log10f

log1p

log1pf

log1pl

log2

log2f

log2l

logb

logbf

logbl

logf

lrint

lrintf

lrintl

lround

lroundf

lroundl

modf

modff

nan

nanf

nanl

nearbyint

nearbyintf

nearbyintl

nextafter

nextafterf

nextafterl

nexttoward

nexttowardf

nexttowardl

norm

normf

norml

pow

powf

remainder

remainderf

remainderl

remquo

remquof

remquol

rint

rintf

rintl

round

roundf

roundl

scalbln

scalblnf

scalblnl

scalbn

scalbnf

scalbnl

sin

sinf

sinh

sinhf

sqrt

sqrtf

tan

tanf

tanh

tanhf

tgamma

tgammaf

tgammal

trunc

truncf

truncl

Sections

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-crt-multibyte-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:be:a4:0f:f5:c9:a5:0e:e1:30:00:00:00:00:00:be
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:843D-37F6-F104,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

95:2d:11:73:7e:91:62:03:38:45:d7:82:78:e9:37:5a:80:1b:6f:c4:53:ce:39:60:61:0c:b2:a7:a5:e9:bf:59
Signer

Actual PE Digest

95:2d:11:73:7e:91:62:03:38:45:d7:82:78:e9:37:5a:80:1b:6f:c4:53:ce:39:60:61:0c:b2:a7:a5:e9:bf:59

Digest Algorithm

sha256

PE Digest Matches

true

74:c2:62:93:02:ab:52:77:98:af:3b:6e:ab:27:e5:44:67:55:9e:4f
Signer

Actual PE Digest

74:c2:62:93:02:ab:52:77:98:af:3b:6e:ab:27:e5:44:67:55:9e:4f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-multibyte-l1-1-0.pdb

Exports

__p__mbcasemap

__p__mbctype

_ismbbalnum

_ismbbalnum_l

_ismbbalpha

_ismbbalpha_l

_ismbbblank

_ismbbblank_l

_ismbbgraph

_ismbbgraph_l

_ismbbkalnum

_ismbbkalnum_l

_ismbbkana

_ismbbkana_l

_ismbbkprint

_ismbbkprint_l

_ismbbkpunct

_ismbbkpunct_l

_ismbblead

_ismbblead_l

_ismbbprint

_ismbbprint_l

_ismbbpunct

_ismbbpunct_l

_ismbbtrail

_ismbbtrail_l

_ismbcalnum

_ismbcalnum_l

_ismbcalpha

_ismbcalpha_l

_ismbcblank

_ismbcblank_l

_ismbcdigit

_ismbcdigit_l

_ismbcgraph

_ismbcgraph_l

_ismbchira

_ismbchira_l

_ismbckata

_ismbckata_l

_ismbcl0

_ismbcl0_l

_ismbcl1

_ismbcl1_l

_ismbcl2

_ismbcl2_l

_ismbclegal

_ismbclegal_l

_ismbclower

_ismbclower_l

_ismbcprint

_ismbcprint_l

_ismbcpunct

_ismbcpunct_l

_ismbcspace

_ismbcspace_l

_ismbcsymbol

_ismbcsymbol_l

_ismbcupper

_ismbcupper_l

_ismbslead

_ismbslead_l

_ismbstrail

_ismbstrail_l

_mbbtombc

_mbbtombc_l

_mbbtype

_mbbtype_l

_mbcasemap

_mbccpy

_mbccpy_l

_mbccpy_s

_mbccpy_s_l

_mbcjistojms

_mbcjistojms_l

_mbcjmstojis

_mbcjmstojis_l

_mbclen

_mbclen_l

_mbctohira

_mbctohira_l

_mbctokata

_mbctokata_l

_mbctolower

_mbctolower_l

_mbctombb

_mbctombb_l

_mbctoupper

_mbctoupper_l

_mblen_l

_mbsbtype

_mbsbtype_l

_mbscat_s

_mbscat_s_l

_mbschr

_mbschr_l

_mbscmp

_mbscmp_l

_mbscoll

_mbscoll_l

_mbscpy_s

_mbscpy_s_l

_mbscspn

_mbscspn_l

_mbsdec

_mbsdec_l

_mbsdup

_mbsicmp

_mbsicmp_l

_mbsicoll

_mbsicoll_l

_mbsinc

_mbsinc_l

_mbslen

_mbslen_l

_mbslwr

_mbslwr_l

_mbslwr_s

_mbslwr_s_l

_mbsnbcat

_mbsnbcat_l

_mbsnbcat_s

_mbsnbcat_s_l

_mbsnbcmp

_mbsnbcmp_l

_mbsnbcnt

_mbsnbcnt_l

_mbsnbcoll

_mbsnbcoll_l

_mbsnbcpy

_mbsnbcpy_l

_mbsnbcpy_s

_mbsnbcpy_s_l

_mbsnbicmp

_mbsnbicmp_l

_mbsnbicoll

_mbsnbicoll_l

_mbsnbset

_mbsnbset_l

_mbsnbset_s

_mbsnbset_s_l

_mbsncat

_mbsncat_l

_mbsncat_s

_mbsncat_s_l

_mbsnccnt

_mbsnccnt_l

_mbsncmp

_mbsncmp_l

_mbsncoll

_mbsncoll_l

_mbsncpy

_mbsncpy_l

_mbsncpy_s

_mbsncpy_s_l

_mbsnextc

_mbsnextc_l

_mbsnicmp

_mbsnicmp_l

_mbsnicoll

_mbsnicoll_l

_mbsninc

_mbsninc_l

_mbsnlen

_mbsnlen_l

_mbsnset

_mbsnset_l

_mbsnset_s

_mbsnset_s_l

_mbspbrk

_mbspbrk_l

_mbsrchr

_mbsrchr_l

_mbsrev

_mbsrev_l

_mbsset

_mbsset_l

_mbsset_s

_mbsset_s_l

_mbsspn

_mbsspn_l

_mbsspnp

_mbsspnp_l

_mbsstr

_mbsstr_l

_mbstok

_mbstok_l

_mbstok_s

_mbstok_s_l

_mbstowcs_l

_mbstowcs_s_l

_mbstrlen

_mbstrlen_l

_mbstrnlen

_mbstrnlen_l

_mbsupr

_mbsupr_l

_mbsupr_s

_mbsupr_s_l

_mbtowc_l

Sections

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-crt-private-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:c4:6e:76:d0:4d:3d:fe:a9:65:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:2137-37A0-4AAA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

98:7e:40:e1:b6:08:15:16:c1:09:b0:c2:d3:bf:2e:f5:70:d1:94:f9:87:06:7d:89:10:ad:f2:9c:52:11:aa:57
Signer

Actual PE Digest

98:7e:40:e1:b6:08:15:16:c1:09:b0:c2:d3:bf:2e:f5:70:d1:94:f9:87:06:7d:89:10:ad:f2:9c:52:11:aa:57

Digest Algorithm

sha256

PE Digest Matches

true

2c:65:05:04:09:ca:25:af:0d:4e:81:c3:bf:3d:f5:ab:ab:15:8a:fc
Signer

Actual PE Digest

2c:65:05:04:09:ca:25:af:0d:4e:81:c3:bf:3d:f5:ab:ab:15:8a:fc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-private-l1-1-0.pdb

Exports

_CreateFrameInfo

_CxxThrowException

_FindAndUnlinkFrame

_GetImageBase

_GetThrowImageBase

_IsExceptionObjectToBeDestroyed

_SetImageBase

_SetThrowImageBase

_SetWinRTOutOfMemoryExceptionCallback

__AdjustPointer

__BuildCatchObject

__BuildCatchObjectHelper

__C_specific_handler

__C_specific_handler_noexcept

__CxxDetectRethrow

__CxxExceptionFilter

__CxxFrameHandler

__CxxFrameHandler2

__CxxFrameHandler3

__CxxQueryExceptionSize

__CxxRegisterExceptionObject

__CxxUnregisterExceptionObject

__DestructExceptionObject

__FrameUnwindFilter

__GetPlatformExceptionInfo

__NLG_Dispatch2

__NLG_Return2

__RTCastToVoid

__RTDynamicCast

__RTtypeid

__TypeMatch

__current_exception

__current_exception_context

__dcrt_get_wide_environment_from_os

__dcrt_initial_narrow_environment

__intrinsic_setjmp

__intrinsic_setjmpex

__processing_throw

__report_gsfailure

__std_exception_copy

__std_exception_destroy

__std_terminate

__std_type_info_compare

__std_type_info_destroy_list

__std_type_info_hash

__std_type_info_name

__unDName

__unDNameEx

__uncaught_exception

__uncaught_exceptions

_get_purecall_handler

_get_unexpected

_is_exception_typeof

_local_unwind

_o__Getdays

_o__Getmonths

_o__Gettnames

_o__Strftime

_o__W_Getdays

_o__W_Getmonths

_o__W_Gettnames

_o__Wcsftime

_o____lc_codepage_func

_o____lc_collate_cp_func

_o____lc_locale_name_func

_o____mb_cur_max_func

_o___acrt_iob_func

_o___conio_common_vcprintf

_o___conio_common_vcprintf_p

_o___conio_common_vcprintf_s

_o___conio_common_vcscanf

_o___conio_common_vcwprintf

_o___conio_common_vcwprintf_p

_o___conio_common_vcwprintf_s

_o___conio_common_vcwscanf

_o___daylight

_o___dstbias

_o___fpe_flt_rounds

_o___p___argc

_o___p___argv

_o___p___wargv

_o___p__acmdln

_o___p__commode

_o___p__environ

_o___p__fmode

_o___p__mbcasemap

_o___p__mbctype

_o___p__pgmptr

_o___p__wcmdln

_o___p__wenviron

_o___p__wpgmptr

_o___pctype_func

_o___pwctype_func

_o___std_exception_copy

_o___std_exception_destroy

_o___std_type_info_destroy_list

_o___std_type_info_name

_o___stdio_common_vfprintf

_o___stdio_common_vfprintf_p

_o___stdio_common_vfprintf_s

_o___stdio_common_vfscanf

_o___stdio_common_vfwprintf

_o___stdio_common_vfwprintf_p

_o___stdio_common_vfwprintf_s

_o___stdio_common_vfwscanf

_o___stdio_common_vsnprintf_s

_o___stdio_common_vsnwprintf_s

_o___stdio_common_vsprintf

_o___stdio_common_vsprintf_p

_o___stdio_common_vsprintf_s

_o___stdio_common_vsscanf

_o___stdio_common_vswprintf

_o___stdio_common_vswprintf_p

_o___stdio_common_vswprintf_s

_o___stdio_common_vswscanf

_o___timezone

_o___tzname

_o___wcserror

_o__access

_o__access_s

_o__aligned_free

_o__aligned_malloc

_o__aligned_msize

_o__aligned_offset_malloc

_o__aligned_offset_realloc

_o__aligned_offset_recalloc

_o__aligned_realloc

_o__aligned_recalloc

_o__atodbl

_o__atodbl_l

_o__atof_l

_o__atoflt

_o__atoflt_l

_o__atoi64

_o__atoi64_l

_o__atoi_l

_o__atol_l

_o__atoldbl

_o__atoldbl_l

_o__atoll_l

_o__beep

_o__beginthread

_o__beginthreadex

_o__cabs

_o__callnewh

_o__calloc_base

_o__cexit

_o__cgets

_o__cgets_s

_o__cgetws

_o__cgetws_s

_o__chdir

_o__chdrive

_o__chmod

_o__chsize

_o__chsize_s

_o__close

_o__commit

_o__configthreadlocale

_o__configure_narrow_argv

_o__configure_wide_argv

_o__controlfp_s

_o__cputs

_o__cputws

_o__creat

_o__create_locale

_o__crt_atexit

_o__ctime32_s

_o__ctime64_s

_o__cwait

_o__d_int

_o__dclass

_o__difftime32

_o__difftime64

_o__dlog

_o__dnorm

_o__dpcomp

_o__dpoly

_o__dscale

_o__dsign

_o__dsin

_o__dtest

_o__dunscale

_o__dup

_o__dup2

_o__dupenv_s

_o__ecvt

_o__ecvt_s

_o__endthread

_o__endthreadex

_o__eof

_o__errno

_o__except1

_o__execute_onexit_table

_o__execv

_o__execve

_o__execvp

_o__execvpe

_o__exit

_o__expand

_o__fclose_nolock

_o__fcloseall

_o__fcvt

_o__fcvt_s

_o__fd_int

_o__fdclass

_o__fdexp

_o__fdlog

_o__fdopen

_o__fdpcomp

_o__fdpoly

_o__fdscale

_o__fdsign

_o__fdsin

_o__fflush_nolock

_o__fgetc_nolock

_o__fgetchar

_o__fgetwc_nolock

_o__fgetwchar

_o__filelength

_o__filelengthi64

_o__fileno

_o__findclose

_o__findfirst32

_o__findfirst32i64

_o__findfirst64

_o__findfirst64i32

_o__findnext32

_o__findnext32i64

_o__findnext64

_o__findnext64i32

_o__flushall

_o__fpclass

_o__fpclassf

_o__fputc_nolock

_o__fputchar

_o__fputwc_nolock

_o__fputwchar

_o__fread_nolock

_o__fread_nolock_s

_o__free_base

_o__free_locale

_o__fseek_nolock

_o__fseeki64

_o__fseeki64_nolock

_o__fsopen

_o__fstat32

_o__fstat32i64

_o__fstat64

_o__fstat64i32

_o__ftell_nolock

_o__ftelli64

_o__ftelli64_nolock

_o__ftime32

_o__ftime32_s

_o__ftime64

_o__ftime64_s

_o__fullpath

_o__futime32

_o__futime64

_o__fwrite_nolock

_o__gcvt

_o__gcvt_s

_o__get_daylight

_o__get_doserrno

_o__get_dstbias

_o__get_errno

_o__get_fmode

_o__get_heap_handle

_o__get_initial_narrow_environment

_o__get_initial_wide_environment

_o__get_invalid_parameter_handler

_o__get_narrow_winmain_command_line

_o__get_osfhandle

_o__get_pgmptr

_o__get_stream_buffer_pointers

_o__get_terminate

_o__get_thread_local_invalid_parameter_handler

_o__get_timezone

_o__get_tzname

_o__get_wide_winmain_command_line

_o__get_wpgmptr

_o__getc_nolock

_o__getch

_o__getch_nolock

_o__getche

_o__getche_nolock

_o__getcwd

_o__getdcwd

_o__getdiskfree

_o__getdllprocaddr

_o__getdrive

_o__getdrives

_o__getmbcp

_o__getsystime

_o__getw

_o__getwc_nolock

_o__getwch

_o__getwch_nolock

_o__getwche

_o__getwche_nolock

_o__getws

_o__getws_s

_o__gmtime32

_o__gmtime32_s

_o__gmtime64

_o__gmtime64_s

_o__heapchk

_o__heapmin

_o__hypot

_o__hypotf

_o__i64toa

_o__i64toa_s

_o__i64tow

_o__i64tow_s

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__initialize_wide_environment

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__isatty

_o__isctype

_o__isctype_l

_o__isleadbyte_l

_o__ismbbalnum

_o__ismbbalnum_l

_o__ismbbalpha

_o__ismbbalpha_l

_o__ismbbblank

_o__ismbbblank_l

_o__ismbbgraph

_o__ismbbgraph_l

_o__ismbbkalnum

_o__ismbbkalnum_l

_o__ismbbkana

_o__ismbbkana_l

_o__ismbbkprint

_o__ismbbkprint_l

_o__ismbbkpunct

_o__ismbbkpunct_l

_o__ismbblead

_o__ismbblead_l

_o__ismbbprint

_o__ismbbprint_l

_o__ismbbpunct

_o__ismbbpunct_l

_o__ismbbtrail

_o__ismbbtrail_l

_o__ismbcalnum

_o__ismbcalnum_l

_o__ismbcalpha

_o__ismbcalpha_l

_o__ismbcblank

_o__ismbcblank_l

_o__ismbcdigit

_o__ismbcdigit_l

_o__ismbcgraph

_o__ismbcgraph_l

_o__ismbchira

_o__ismbchira_l

_o__ismbckata

_o__ismbckata_l

_o__ismbcl0

_o__ismbcl0_l

_o__ismbcl1

_o__ismbcl1_l

_o__ismbcl2

_o__ismbcl2_l

_o__ismbclegal

_o__ismbclegal_l

_o__ismbclower

_o__ismbclower_l

_o__ismbcprint

_o__ismbcprint_l

_o__ismbcpunct

_o__ismbcpunct_l

_o__ismbcspace

_o__ismbcspace_l

_o__ismbcsymbol

_o__ismbcsymbol_l

_o__ismbcupper

_o__ismbcupper_l

_o__ismbslead

_o__ismbslead_l

_o__ismbstrail

_o__ismbstrail_l

_o__iswctype_l

_o__itoa

_o__itoa_s

_o__itow

_o__itow_s

_o__j0

_o__j1

_o__jn

_o__kbhit

_o__ld_int

_o__ldclass

_o__ldexp

_o__ldlog

_o__ldpcomp

_o__ldpoly

_o__ldscale

_o__ldsign

_o__ldsin

_o__ldtest

_o__ldunscale

_o__lfind

_o__lfind_s

_o__loaddll

_o__localtime32

_o__localtime32_s

_o__localtime64

_o__localtime64_s

_o__lock_file

_o__locking

_o__logb

_o__logbf

_o__lsearch

_o__lsearch_s

_o__lseek

_o__lseeki64

_o__ltoa

_o__ltoa_s

_o__ltow

_o__ltow_s

_o__makepath

_o__makepath_s

_o__malloc_base

_o__mbbtombc

_o__mbbtombc_l

_o__mbbtype

_o__mbbtype_l

_o__mbccpy

_o__mbccpy_l

_o__mbccpy_s

_o__mbccpy_s_l

_o__mbcjistojms

_o__mbcjistojms_l

_o__mbcjmstojis

_o__mbcjmstojis_l

_o__mbclen

_o__mbclen_l

_o__mbctohira

_o__mbctohira_l

_o__mbctokata

_o__mbctokata_l

_o__mbctolower

_o__mbctolower_l

_o__mbctombb

_o__mbctombb_l

_o__mbctoupper

_o__mbctoupper_l

_o__mblen_l

_o__mbsbtype

_o__mbsbtype_l

_o__mbscat_s

_o__mbscat_s_l

_o__mbschr

_o__mbschr_l

_o__mbscmp

_o__mbscmp_l

_o__mbscoll

_o__mbscoll_l

_o__mbscpy_s

_o__mbscpy_s_l

_o__mbscspn

_o__mbscspn_l

_o__mbsdec

_o__mbsdec_l

_o__mbsicmp

_o__mbsicmp_l

_o__mbsicoll

_o__mbsicoll_l

_o__mbsinc

_o__mbsinc_l

_o__mbslen

_o__mbslen_l

_o__mbslwr

_o__mbslwr_l

_o__mbslwr_s

_o__mbslwr_s_l

_o__mbsnbcat

_o__mbsnbcat_l

_o__mbsnbcat_s

_o__mbsnbcat_s_l

_o__mbsnbcmp

_o__mbsnbcmp_l

_o__mbsnbcnt

_o__mbsnbcnt_l

_o__mbsnbcoll

_o__mbsnbcoll_l

_o__mbsnbcpy

_o__mbsnbcpy_l

_o__mbsnbcpy_s

_o__mbsnbcpy_s_l

_o__mbsnbicmp

_o__mbsnbicmp_l

_o__mbsnbicoll

_o__mbsnbicoll_l

_o__mbsnbset

Sections

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-crt-process-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bc:0b:2e:1a:7b:8a:b1:c7:91:00:00:00:00:00:bc
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12B4-2D5F-87D4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

e9:86:6f:4a:7a:df:4d:f0:bf:34:0d:45:2a:a9:4b:06:e2:64:12:82:d7:9d:05:98:4d:25:ab:c0:c6:05:16:99
Signer

Actual PE Digest

e9:86:6f:4a:7a:df:4d:f0:bf:34:0d:45:2a:a9:4b:06:e2:64:12:82:d7:9d:05:98:4d:25:ab:c0:c6:05:16:99

Digest Algorithm

sha256

PE Digest Matches

true

8d:0e:87:3b:14:1c:93:dc:ac:3a:91:9d:0c:85:0e:10:5c:25:6e:c5
Signer

Actual PE Digest

8d:0e:87:3b:14:1c:93:dc:ac:3a:91:9d:0c:85:0e:10:5c:25:6e:c5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-process-l1-1-0.pdb

Exports

_beep

_cwait

_execl

_execle

_execlp

_execlpe

_execv

_execve

_execvp

_execvpe

_loaddll

_spawnl

_spawnle

_spawnlp

_spawnlpe

_spawnv

_spawnve

_spawnvp

_spawnvpe

_unloaddll

_wexecl

_wexecle

_wexeclp

_wexeclpe

_wexecv

_wexecve

_wexecvp

_wexecvpe

_wspawnl

_wspawnle

_wspawnlp

_wspawnlpe

_wspawnv

_wspawnve

_wspawnvp

_wspawnvpe

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-crt-runtime-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:be:a4:0f:f5:c9:a5:0e:e1:30:00:00:00:00:00:be
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:843D-37F6-F104,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

35:61:0f:11:97:12:b1:60:9a:83:96:ba:2b:a8:d7:c1:d3:83:6e:dc:fd:bc:4f:9f:cc:ea:30:a6:f6:c0:62:13
Signer

Actual PE Digest

35:61:0f:11:97:12:b1:60:9a:83:96:ba:2b:a8:d7:c1:d3:83:6e:dc:fd:bc:4f:9f:cc:ea:30:a6:f6:c0:62:13

Digest Algorithm

sha256

PE Digest Matches

true

73:17:37:1b:15:ff:cc:53:80:c8:03:e7:d3:a8:1b:24:f5:48:10:6c
Signer

Actual PE Digest

73:17:37:1b:15:ff:cc:53:80:c8:03:e7:d3:a8:1b:24:f5:48:10:6c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-runtime-l1-1-0.pdb

Exports

_Exit

__doserrno

__fpe_flt_rounds

__fpecode

__p___argc

__p___argv

__p___wargv

__p__acmdln

__p__pgmptr

__p__wcmdln

__p__wpgmptr

__pxcptinfoptrs

__sys_errlist

__sys_nerr

__threadhandle

__threadid

__wcserror

__wcserror_s

_assert

_beginthread

_beginthreadex

_c_exit

_cexit

_clearfp

_configure_narrow_argv

_configure_wide_argv

_control87

_controlfp

_controlfp_s

_crt_at_quick_exit

_crt_atexit

_endthread

_endthreadex

_errno

_execute_onexit_table

_exit

_fpieee_flt

_fpreset

_get_doserrno

_get_errno

_get_initial_narrow_environment

_get_initial_wide_environment

_get_invalid_parameter_handler

_get_narrow_winmain_command_line

_get_pgmptr

_get_terminate

_get_thread_local_invalid_parameter_handler

_get_wide_winmain_command_line

_get_wpgmptr

_getdllprocaddr

_getpid

_initialize_narrow_environment

_initialize_onexit_table

_initialize_wide_environment

_initterm

_initterm_e

_invalid_parameter_noinfo

_invalid_parameter_noinfo_noreturn

_invoke_watson

_query_app_type

_register_onexit_function

_register_thread_local_exe_atexit_callback

_resetstkoflw

_seh_filter_dll

_seh_filter_exe

_set_abort_behavior

_set_app_type

_set_controlfp

_set_doserrno

_set_errno

_set_error_mode

_set_invalid_parameter_handler

_set_new_handler

_set_thread_local_invalid_parameter_handler

_seterrormode

_sleep

_statusfp

_strerror

_strerror_s

_wassert

_wcserror

_wcserror_s

_wperror

_wsystem

abort

exit

feclearexcept

fegetenv

fegetexceptflag

fegetround

feholdexcept

fesetenv

fesetexceptflag

fesetround

fetestexcept

perror

quick_exit

raise

set_terminate

signal

strerror

strerror_s

system

terminate

Sections

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-crt-stdio-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bf:91:6c:fb:7c:1a:24:e0:22:00:00:00:00:00:bf
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

45:4f:c8:5c:1c:8b:f0:7a:a2:4b:52:4e:de:56:92:fe:86:0f:5b:e1:ac:bd:f5:28:88:40:f5:57:cd:2e:c0:67
Signer

Actual PE Digest

45:4f:c8:5c:1c:8b:f0:7a:a2:4b:52:4e:de:56:92:fe:86:0f:5b:e1:ac:bd:f5:28:88:40:f5:57:cd:2e:c0:67

Digest Algorithm

sha256

PE Digest Matches

true

2d:34:b9:8c:2d:57:f8:ba:77:14:dc:90:d1:f0:dc:24:70:99:c2:8f
Signer

Actual PE Digest

2d:34:b9:8c:2d:57:f8:ba:77:14:dc:90:d1:f0:dc:24:70:99:c2:8f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-stdio-l1-1-0.pdb

Exports

__acrt_iob_func

__p__commode

__p__fmode

__stdio_common_vfprintf

__stdio_common_vfprintf_p

__stdio_common_vfprintf_s

__stdio_common_vfscanf

__stdio_common_vfwprintf

__stdio_common_vfwprintf_p

__stdio_common_vfwprintf_s

__stdio_common_vfwscanf

__stdio_common_vsnprintf_s

__stdio_common_vsnwprintf_s

__stdio_common_vsprintf

__stdio_common_vsprintf_p

__stdio_common_vsprintf_s

__stdio_common_vsscanf

__stdio_common_vswprintf

__stdio_common_vswprintf_p

__stdio_common_vswprintf_s

__stdio_common_vswscanf

_chsize

_chsize_s

_close

_commit

_creat

_dup

_dup2

_eof

_fclose_nolock

_fcloseall

_fflush_nolock

_fgetc_nolock

_fgetchar

_fgetwc_nolock

_fgetwchar

_filelength

_filelengthi64

_fileno

_flushall

_fputc_nolock

_fputchar

_fputwc_nolock

_fputwchar

_fread_nolock

_fread_nolock_s

_fseek_nolock

_fseeki64

_fseeki64_nolock

_fsopen

_ftell_nolock

_ftelli64

_ftelli64_nolock

_fwrite_nolock

_get_fmode

_get_osfhandle

_get_printf_count_output

_get_stream_buffer_pointers

_getc_nolock

_getcwd

_getdcwd

_getmaxstdio

_getw

_getwc_nolock

_getws

_getws_s

_isatty

_kbhit

_locking

_lseek

_lseeki64

_mktemp

_mktemp_s

_open

_open_osfhandle

_pclose

_pipe

_popen

_putc_nolock

_putw

_putwc_nolock

_putws

_read

_rmtmp

_set_fmode

_set_printf_count_output

_setmaxstdio

_setmode

_sopen

_sopen_dispatch

_sopen_s

_tell

_telli64

_tempnam

_ungetc_nolock

_ungetwc_nolock

_wcreat

_wfdopen

_wfopen

_wfopen_s

_wfreopen

_wfreopen_s

_wfsopen

_wmktemp

_wmktemp_s

_wopen

_wpopen

_write

_wsopen

_wsopen_dispatch

_wsopen_s

_wtempnam

_wtmpnam

_wtmpnam_s

clearerr

clearerr_s

fclose

feof

ferror

fflush

fgetc

fgetpos

fgets

fgetwc

fgetws

fopen

fopen_s

fputc

fputs

fputwc

fputws

fread

fread_s

freopen

freopen_s

fseek

fsetpos

ftell

fwrite

getc

getchar

gets

gets_s

getwc

getwchar

putc

putchar

puts

putwc

putwchar

rewind

setbuf

setvbuf

tmpfile

tmpfile_s

tmpnam

tmpnam_s

ungetc

ungetwc

Sections

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-crt-string-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bb:b6:77:24:71:4a:20:00:20:00:00:00:00:00:bb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:0DE8-2DC5-3CA9,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

d5:77:ed:87:c7:09:27:96:9b:cd:95:6d:eb:85:f3:7a:b8:61:6c:71:8f:44:7d:9f:9d:7d:04:9d:b4:fe:fb:51
Signer

Actual PE Digest

d5:77:ed:87:c7:09:27:96:9b:cd:95:6d:eb:85:f3:7a:b8:61:6c:71:8f:44:7d:9f:9d:7d:04:9d:b4:fe:fb:51

Digest Algorithm

sha256

PE Digest Matches

true

34:be:99:40:1b:2c:e8:c4:d3:16:1a:8d:9d:91:76:14:b8:c8:a2:b1
Signer

Actual PE Digest

34:be:99:40:1b:2c:e8:c4:d3:16:1a:8d:9d:91:76:14:b8:c8:a2:b1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-string-l1-1-0.pdb

Exports

__isascii

__iscsym

__iscsymf

__iswcsym

__iswcsymf

__strncnt

__wcsncnt

_isalnum_l

_isalpha_l

_isblank_l

_iscntrl_l

_isctype

_isctype_l

_isdigit_l

_isgraph_l

_isleadbyte_l

_islower_l

_isprint_l

_ispunct_l

_isspace_l

_isupper_l

_iswalnum_l

_iswalpha_l

_iswblank_l

_iswcntrl_l

_iswcsym_l

_iswcsymf_l

_iswctype_l

_iswdigit_l

_iswgraph_l

_iswlower_l

_iswprint_l

_iswpunct_l

_iswspace_l

_iswupper_l

_iswxdigit_l

_isxdigit_l

_memccpy

_memicmp

_memicmp_l

_strcoll_l

_strdup

_stricmp

_stricmp_l

_stricoll

_stricoll_l

_strlwr

_strlwr_l

_strlwr_s

_strlwr_s_l

_strncoll

_strncoll_l

_strnicmp

_strnicmp_l

_strnicoll

_strnicoll_l

_strnset

_strnset_s

_strrev

_strset

_strset_s

_strupr

_strupr_l

_strupr_s

_strupr_s_l

_strxfrm_l

_tolower

_tolower_l

_toupper

_toupper_l

_towlower_l

_towupper_l

_wcscoll_l

_wcsdup

_wcsicmp

_wcsicmp_l

_wcsicoll

_wcsicoll_l

_wcslwr

_wcslwr_l

_wcslwr_s

_wcslwr_s_l

_wcsncoll

_wcsncoll_l

_wcsnicmp

_wcsnicmp_l

_wcsnicoll

_wcsnicoll_l

_wcsnset

_wcsnset_s

_wcsrev

_wcsset

_wcsset_s

_wcsupr

_wcsupr_l

_wcsupr_s

_wcsupr_s_l

_wcsxfrm_l

_wctype

is_wctype

isalnum

isalpha

isblank

iscntrl

isdigit

isgraph

isleadbyte

islower

isprint

ispunct

isspace

isupper

iswalnum

iswalpha

iswascii

iswblank

iswcntrl

iswctype

iswdigit

iswgraph

iswlower

iswprint

iswpunct

iswspace

iswupper

iswxdigit

isxdigit

mblen

mbrlen

memcpy_s

memmove_s

memset

strcat

strcat_s

strcmp

strcoll

strcpy

strcpy_s

strcspn

strlen

strncat

strncat_s

strncmp

strncpy

strncpy_s

strnlen

strpbrk

strspn

strtok

strtok_s

strxfrm

tolower

toupper

towctrans

towlower

towupper

wcscat

wcscat_s

wcscmp

wcscoll

wcscpy

wcscpy_s

wcscspn

wcslen

wcsncat

wcsncat_s

wcsncmp

wcsncpy

wcsncpy_s

wcsnlen

wcspbrk

wcsspn

wcstok

wcstok_s

wcsxfrm

wctype

wmemcpy_s

wmemmove_s

Sections

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-crt-time-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:d8:e4:75:f9:45:6f:48:f7:ae:00:00:00:00:00:d8
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-10-2017 22:57

Not After

02-01-2019 22:57

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:70DD-4B5B-4568,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

83:cd:3b:2f:fa:c2:51:d4:5a:98:46:2d:5f:ca:3c:63:c4:8b:e5:16:42:e7:7c:fd:f8:ce:63:16:1e:df:f1:15
Signer

Actual PE Digest

83:cd:3b:2f:fa:c2:51:d4:5a:98:46:2d:5f:ca:3c:63:c4:8b:e5:16:42:e7:7c:fd:f8:ce:63:16:1e:df:f1:15

Digest Algorithm

sha256

PE Digest Matches

true

9d:e6:03:a4:b8:cf:31:73:af:24:3a:f8:33:c6:4f:17:bf:48:c9:1b
Signer

Actual PE Digest

9d:e6:03:a4:b8:cf:31:73:af:24:3a:f8:33:c6:4f:17:bf:48:c9:1b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-time-l1-1-0.pdb

Exports

_Getdays

_Getmonths

_Gettnames

_Strftime

_W_Getdays

_W_Getmonths

_W_Gettnames

_Wcsftime

__daylight

__dstbias

__timezone

__tzname

_ctime32

_ctime32_s

_ctime64

_ctime64_s

_difftime32

_difftime64

_ftime32

_ftime32_s

_ftime64

_ftime64_s

_futime32

_futime64

_get_daylight

_get_dstbias

_get_timezone

_get_tzname

_getsystime

_gmtime32

_gmtime32_s

_gmtime64

_gmtime64_s

_localtime32

_localtime32_s

_localtime64

_localtime64_s

_mkgmtime32

_mkgmtime64

_mktime32

_mktime64

_setsystime

_strdate

_strdate_s

_strftime_l

_strtime

_strtime_s

_time32

_time64

_timespec32_get

_timespec64_get

_tzset

_utime32

_utime64

_wasctime

_wasctime_s

_wcsftime_l

_wctime32

_wctime32_s

_wctime64

_wctime64_s

_wstrdate

_wstrdate_s

_wstrtime

_wstrtime_s

_wutime32

_wutime64

asctime

asctime_s

clock

strftime

wcsftime

Sections

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

api-ms-win-crt-utility-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:c0:de:2c:3d:07:94:e4:49:79:00:00:00:00:00:c0
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:7AB5-2DF2-DA3F,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-09-2017 18:07

Not After

12-09-2018 18:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

80:a3:1e:78:23:ac:16:fd:54:d1:96:49:68:f9:35:d6:f1:46:03:0d:4a:bb:1b:c4:cc:45:8a:34:cc:b3:56:ae
Signer

Actual PE Digest

80:a3:1e:78:23:ac:16:fd:54:d1:96:49:68:f9:35:d6:f1:46:03:0d:4a:bb:1b:c4:cc:45:8a:34:cc:b3:56:ae

Digest Algorithm

sha256

PE Digest Matches

true

98:67:94:73:e5:51:57:a3:2f:c5:5f:39:06:82:c6:8f:02:e2:62:24
Signer

Actual PE Digest

98:67:94:73:e5:51:57:a3:2f:c5:5f:39:06:82:c6:8f:02:e2:62:24

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-utility-l1-1-0.pdb

Exports

_abs64

_byteswap_uint64

_byteswap_ulong

_byteswap_ushort

_lfind

_lfind_s

_lrotl

_lrotr

_lsearch

_lsearch_s

_rotl

_rotl64

_rotr

_rotr64

_swab

abs

bsearch

bsearch_s

div

imaxabs

imaxdiv

labs

ldiv

llabs

lldiv

qsort

qsort_s

rand

rand_s

srand

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

blink_image_resources_200_percent.pak

content_resources_200_percent.pak

content_shell.pak

.js

d3dcompiler_47.dll

.dll windows:6 windows x64 arch:x64

2ce80dc262aecd9b9f45ee13d6b30c08

Code Sign

33:00:00:00:34:24:31:40:c9:a0:c1:79:8d:00:00:00:00:00:34
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

27-03-2013 20:08

Not After

27-06-2014 20:08

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24-01-2013 22:33

Not After

24-04-2014 22:33

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:00:16:11:04:b4:88:38:8c:be:c3:00:00:00:00:00:16
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

30-08-2012 17:49

Not After

30-11-2013 17:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

08:ab:03:c2:89:51:77:ec:8e:32:be:09:f8:2b:0a:85:88:db:5f:d4:2a:86:a6:ad:00:10:29:d8:39:4f:b2:07
Signer

Actual PE Digest

08:ab:03:c2:89:51:77:ec:8e:32:be:09:f8:2b:0a:85:88:db:5f:d4:2a:86:a6:ad:00:10:29:d8:39:4f:b2:07

Digest Algorithm

sha256

PE Digest Matches

true

31:17:9e:ab:c5:82:ed:f0:dc:03:42:34:e2:18:08:28:16:db:fd:78
Signer

Actual PE Digest

31:17:9e:ab:c5:82:ed:f0:dc:03:42:34:e2:18:08:28:16:db:fd:78

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D3DCompiler_47.pdb

Imports

msvcrt

__dllonexit

_unlock

_lock

?terminate@@YAXXZ

??1type_info@@UEAA@XZ

__C_specific_handler

_initterm

_amsg_exit

_XcptFilter

_strtoui64

sscanf

_isnan

strtoul

_vsnprintf

isxdigit

atof

setlocale

_strdup

_mbstrlen

_vsnwprintf

strnlen

modf

strrchr

strncpy_s

memcpy_s

isalnum

_finite

_clearfp

_controlfp

strcpy_s

malloc

_strnicmp

_fpclass

strncmp

isspace

strstr

strchr

free

sprintf_s

_stricmp

_purecall

memmove

qsort

isalpha

toupper

atoi

isdigit

_onexit

??2@YAPEAX_K@Z

getenv

??3@YAXPEAX@Z

wcsncmp

wcsncpy_s

_wcsicmp

memcpy

memset

fclose

strcat_s

bsearch

_CxxThrowException

memcmp

_snwprintf_s

wcschr

iswdigit

__unDName

fread

fseek

_wfsopen

vsprintf_s

wcstol

_wcsnicmp

_wsplitpath_s

towlower

wcscpy_s

??_U@YAPEAX_K@Z

??_V@YAXPEAX@Z

swprintf_s

wcsncat_s

wcsrchr

_wfullpath

_wmakepath_s

_time64

_chsize

_close

_read

_write

_lseeki64

_get_osfhandle

_open_osfhandle

_wcsdup

wcscat_s

ftell

_mbscmp

_memicmp

_wgetenv

tolower

_wsopen

__CxxFrameHandler3

acos

asin

atan

atan2

ceil

cos

cosh

exp

floor

floorf

fmod

log

pow

sin

sinh

sqrt

strcmp

tan

tanh

advapi32

CryptDestroyHash

CryptHashData

CryptCreateHash

CryptGetHashParam

CryptReleaseContext

CryptAcquireContextW

RegOpenKeyExW

RegQueryValueExA

RegEnumKeyExA

RegOpenKeyExA

RegCloseKey

RegQueryValueExW

kernel32

LocalFree

LocalAlloc

GetVersion

GetTickCount

GetSystemTimeAsFileTime

GetCurrentThreadId

GetCurrentProcessId

TerminateProcess

GetCurrentProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

SetLastError

CreateFileMappingW

UnmapViewOfFile

GetFileSize

CreateFileA

GetSystemInfo

VirtualAlloc

VirtualFree

GetProcAddress

LoadLibraryExW

GetEnvironmentVariableA

GetFullPathNameA

GetFullPathNameW

TlsFree

TlsGetValue

TlsSetValue

TlsAlloc

Sleep

LCMapStringW

GetFileAttributesW

SetFileAttributesW

CopyFileExW

DeleteFileW

GetFileType

DeviceIoControl

ExpandEnvironmentStringsW

InitializeCriticalSectionAndSpinCount

SetFilePointer

FlushViewOfFile

MapViewOfFileEx

GetModuleFileNameA

MapViewOfFile

DisableThreadLibraryCalls

CreateFileW

GetLastError

GetFileSizeEx

ReadFile

CloseHandle

WriteFile

WideCharToMultiByte

FreeLibrary

lstrcmpiA

MultiByteToWideChar

OutputDebugStringA

QueryPerformanceCounter

HeapCreate

HeapDestroy

InitializeCriticalSection

DeleteCriticalSection

EnterCriticalSection

LeaveCriticalSection

HeapAlloc

GetProcessHeap

HeapFree

rpcrt4

UuidCreate

Exports

D3DAssemble

D3DCompile

D3DCompile2

D3DCompileFromFile

D3DCompressShaders

D3DCreateBlob

D3DCreateFunctionLinkingGraph

D3DCreateLinker

D3DDecompressShaders

D3DDisassemble

D3DDisassemble10Effect

D3DDisassemble11Trace

D3DDisassembleRegion

D3DGetBlobPart

D3DGetDebugInfo

D3DGetInputAndOutputSignatureBlob

D3DGetInputSignatureBlob

D3DGetOutputSignatureBlob

D3DGetTraceInstructionOffsets

D3DLoadModule

D3DPreprocess

D3DReadFileToBlob

D3DReflect

D3DReflectLibrary

D3DReturnFailure1

D3DSetBlobPart

D3DStripShader

D3DWriteBlobToFile

DebugSetMute

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

ffmpeg.dll

.dll windows:5 windows x64 arch:x64

b3281c3a4eaa73fa98ab5f53a72d182e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

C:\projects\libchromiumcontent\src\out-x64\static_library\ffmpeg.dll.pdb

Imports

advapi32

CryptReleaseContext

CryptGenRandom

CryptAcquireContextW

kernel32

InitOnceBeginInitialize

InitOnceComplete

ReleaseSRWLockExclusive

AcquireSRWLockExclusive

CloseHandle

InitializeSRWLock

InitializeConditionVariable

WakeConditionVariable

WakeAllConditionVariable

SleepConditionVariableSRW

WaitForSingleObjectEx

GetCurrentProcess

GetProcessAffinityMask

Sleep

GetSystemTimeAsFileTime

IsDebuggerPresent

InitializeSListHead

DisableThreadLibraryCalls

GetCurrentThreadId

GetCurrentProcessId

QueryPerformanceCounter

IsProcessorFeaturePresent

TerminateProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

vcruntime140

memmove

memcpy

memset

strstr

strchr

__std_type_info_destroy_list

strrchr

memcmp

memchr

__C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_errno

_initterm

_initterm_e

_seh_filter_dll

_configure_narrow_argv

_initialize_narrow_environment

_initialize_onexit_table

_execute_onexit_table

_cexit

abort

_beginthreadex

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

__stdio_common_vsscanf

api-ms-win-crt-math-l1-1-0

ldexp

hypot

atan

round

log

pow

sin

acos

asin

cosh

fabs

sinh

tanh

_dclass

tan

trunc

ceil

exp

atan2

llrint

frexp

floor

lrintf

lrint

cbrtf

cos

sqrt

cbrt

exp2

atan2f

atanf

cosf

sinf

sqrtf

log2f

powf

api-ms-win-crt-convert-l1-1-0

strtol

strtod

strtoul

atoi

strtoll

api-ms-win-crt-string-l1-1-0

strncmp

strspn

strcmp

api-ms-win-crt-time-l1-1-0

strftime

clock

_mktime64

_localtime64

_gmtime64

api-ms-win-crt-heap-l1-1-0

free

_aligned_realloc

_aligned_malloc

malloc

_aligned_free

api-ms-win-crt-utility-l1-1-0

bsearch

Exports

av_buffer_create

av_buffer_get_opaque

av_dict_free

av_dict_get

av_dict_set

av_frame_alloc

av_frame_clone

av_frame_free

av_frame_unref

av_free

av_get_bytes_per_sample

av_get_cpu_flags

av_image_check_size

av_init_packet

av_log_set_level

av_malloc

av_max_alloc

av_new_packet

av_packet_copy_props

av_packet_get_side_data

av_packet_unref

av_rdft_calc

av_rdft_end

av_rdft_init

av_read_frame

av_register_all

av_rescale_q

av_samples_get_buffer_size

av_seek_frame

av_strerror

avcodec_align_dimensions

avcodec_alloc_context3

avcodec_decode_video2

avcodec_descriptor_get

avcodec_descriptor_next

avcodec_find_decoder

avcodec_flush_buffers

avcodec_free_context

avcodec_get_name

avcodec_open2

avcodec_parameters_to_context

avcodec_receive_frame

avcodec_send_packet

avformat_alloc_context

avformat_close_input

avformat_find_stream_info

avformat_free_context

avformat_open_input

avio_alloc_context

avio_close

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

icudtl.dat

libEGL.dll

.dll windows:5 windows x64 arch:x64

dbb429f8e1cf1e6cd2425b2176626211

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

C:\projects\libchromiumcontent\src\out-x64\static_library\libEGL.dll.pdb

Imports

libglesv2

?GetCurrentContext@egl@@YAPEAXXZ

?CreateSync@egl@@YAPEAXPEAXIPEB_J@Z

?DestroySync@egl@@YAIPEAX0@Z

?ClientWaitSync@egl@@YAHPEAX0H_K@Z

?GetSyncAttrib@egl@@YAIPEAX0HPEA_J@Z

?CreateImage@egl@@YAPEAXPEAX0I0PEB_J@Z

?DestroyImage@egl@@YAIPEAX0@Z

?GetPlatformDisplay@egl@@YAPEAXIPEAXPEB_J@Z

?CreatePlatformWindowSurface@egl@@YAPEAXPEAX00PEB_J@Z

?CreatePlatformPixmapSurface@egl@@YAPEAXPEAX00PEB_J@Z

?WaitSync@egl@@YAIPEAX0H@Z

?QuerySurfacePointerANGLE@egl@@YAIPEAX0HPEAPEAX@Z

?PostSubBufferNV@egl@@YAIPEAX0HHHH@Z

?GetPlatformDisplayEXT@egl@@YAPEAXIPEAXPEBH@Z

?QueryDisplayAttribEXT@egl@@YAIPEAXHPEA_J@Z

?QueryDeviceAttribEXT@egl@@YAIPEAXHPEA_J@Z

?QueryDeviceStringEXT@egl@@YAPEBDPEAXH@Z

?CreateImageKHR@egl@@YAPEAXPEAX0I0PEBH@Z

?Initialize@egl@@YAIPEAXPEAH1@Z

?WaitClient@egl@@YAIXZ

?ReleaseDeviceANGLE@egl@@YAIPEAX@Z

?CreateStreamKHR@egl@@YAPEAXPEAXPEBH@Z

?DestroyStreamKHR@egl@@YAIPEAX0@Z

?StreamAttribKHR@egl@@YAIPEAX0IH@Z

?QueryStreamKHR@egl@@YAIPEAX0IPEAH@Z

?QueryStreamu64KHR@egl@@YAIPEAX0IPEA_K@Z

?StreamConsumerGLTextureExternalKHR@egl@@YAIPEAX0@Z

?StreamConsumerAcquireKHR@egl@@YAIPEAX0@Z

?StreamConsumerReleaseKHR@egl@@YAIPEAX0@Z

?StreamConsumerGLTextureExternalAttribsNV@egl@@YAIPEAX0PEB_J@Z

?CreateStreamProducerD3DTextureANGLE@egl@@YAIPEAX0PEB_J@Z

?StreamPostD3DTextureANGLE@egl@@YAIPEAX00PEB_J@Z

?GetSyncValuesCHROMIUM@egl@@YAIPEAX0PEA_K11@Z

?SwapBuffersWithDamageEXT@egl@@YAIPEAX0PEAHH@Z

?ProgramCacheGetAttribANGLE@egl@@YAHPEAXI@Z

?ProgramCacheQueryANGLE@egl@@YAXPEAXH0PEAH01@Z

?ProgramCachePopulateANGLE@egl@@YAXPEAXPEBXH1H@Z

?ProgramCacheResizeANGLE@egl@@YAHPEAXHI@Z

?GetProcAddress@egl@@YAP6AXXZPEBD@Z

?ReleaseThread@egl@@YAIXZ

?CreatePbufferFromClientBuffer@egl@@YAPEAXPEAXI00PEBH@Z

?QueryAPI@egl@@YAIXZ

?BindAPI@egl@@YAII@Z

?SwapInterval@egl@@YAIPEAXH@Z

?SurfaceAttrib@egl@@YAIPEAX0HH@Z

?ReleaseTexImage@egl@@YAIPEAX0H@Z

?BindTexImage@egl@@YAIPEAX0H@Z

?WaitNative@egl@@YAIH@Z

?WaitGL@egl@@YAIXZ

?Terminate@egl@@YAIPEAX@Z

?SwapBuffers@egl@@YAIPEAX0@Z

?QuerySurface@egl@@YAIPEAX0HPEAH@Z

?QueryString@egl@@YAPEBDPEAXH@Z

?QueryContext@egl@@YAIPEAX0HPEAH@Z

?CreateDeviceANGLE@egl@@YAPEAXHPEAXPEB_J@Z

?MakeCurrent@egl@@YAIPEAX000@Z

?GetError@egl@@YAHXZ

?GetDisplay@egl@@YAPEAXPEAUHDC__@@@Z

?GetCurrentSurface@egl@@YAPEAXH@Z

?GetCurrentDisplay@egl@@YAPEAXXZ

?GetConfigs@egl@@YAIPEAXPEAPEAXHPEAH@Z

?GetConfigAttrib@egl@@YAIPEAX0HPEAH@Z

?DestroySurface@egl@@YAIPEAX0@Z

?DestroyContext@egl@@YAIPEAX0@Z

?CreateWindowSurface@egl@@YAPEAXPEAX0PEAUHWND__@@PEBH@Z

?CreatePixmapSurface@egl@@YAPEAXPEAX0PEAUHBITMAP__@@PEBH@Z

?CreatePbufferSurface@egl@@YAPEAXPEAX0PEBH@Z

?CreateContext@egl@@YAPEAXPEAX00PEBH@Z

?CopyBuffers@egl@@YAIPEAX0PEAUHBITMAP__@@@Z

?DestroyImageKHR@egl@@YAIPEAX0@Z

?ChooseConfig@egl@@YAIPEAXPEBHPEAPEAXHPEAH@Z

vcruntime140

__C_specific_handler

memset

__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table

_initialize_onexit_table

_configure_narrow_argv

_seh_filter_dll

_initterm_e

_initterm

_cexit

_initialize_narrow_environment

kernel32

IsProcessorFeaturePresent

SetUnhandledExceptionFilter

UnhandledExceptionFilter

IsDebuggerPresent

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

InitializeSListHead

DisableThreadLibraryCalls

GetSystemTimeAsFileTime

GetCurrentThreadId

GetCurrentProcessId

QueryPerformanceCounter

Exports

eglBindAPI

eglBindTexImage

eglChooseConfig

eglClientWaitSync

eglCopyBuffers

eglCreateContext

eglCreateDeviceANGLE

eglCreateImage

eglCreateImageKHR

eglCreatePbufferFromClientBuffer

eglCreatePbufferSurface

eglCreatePixmapSurface

eglCreatePlatformPixmapSurface

eglCreatePlatformWindowSurface

eglCreateStreamKHR

eglCreateStreamProducerD3DTextureANGLE

eglCreateSync

eglCreateWindowSurface

eglDestroyContext

eglDestroyImage

eglDestroyImageKHR

eglDestroyStreamKHR

eglDestroySurface

eglDestroySync

eglGetConfigAttrib

eglGetConfigs

eglGetCurrentContext

eglGetCurrentDisplay

eglGetCurrentSurface

eglGetDisplay

eglGetError

eglGetPlatformDisplay

eglGetPlatformDisplayEXT

eglGetProcAddress

eglGetSyncAttrib

eglGetSyncValuesCHROMIUM

eglInitialize

eglMakeCurrent

eglPostSubBufferNV

eglProgramCacheGetAttribANGLE

eglProgramCachePopulateANGLE

eglProgramCacheQueryANGLE

eglProgramCacheResizeANGLE

eglQueryAPI

eglQueryContext

eglQueryDeviceAttribEXT

eglQueryDeviceStringEXT

eglQueryDisplayAttribEXT

eglQueryStreamKHR

eglQueryStreamu64KHR

eglQueryString

eglQuerySurface

eglQuerySurfacePointerANGLE

eglReleaseDeviceANGLE

eglReleaseTexImage

eglReleaseThread

eglStreamAttribKHR

eglStreamConsumerAcquireKHR

eglStreamConsumerGLTextureExternalAttribsNV

eglStreamConsumerGLTextureExternalKHR

eglStreamConsumerReleaseKHR

eglStreamPostD3DTextureANGLE

eglSurfaceAttrib

eglSwapBuffers

eglSwapBuffersWithDamageEXT

eglSwapInterval

eglTerminate

eglWaitClient

eglWaitGL

eglWaitNative

eglWaitSync

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

libGLESv2.dll

.dll windows:5 windows x64 arch:x64

07e3770ea0589092d08cdffcdda08a1c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

C:\projects\libchromiumcontent\src\out-x64\static_library\libGLESv2.dll.pdb

Imports

msvcp140

?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z

?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ

?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z

?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ

?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ

??0task_continuation_context@Concurrency@@AEAA@XZ

?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z

?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z

?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z

?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA

?_Xoverflow_error@std@@YAXPEBD@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z

?_Throw_C_error@std@@YAXH@Z

?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ

?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ

?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z

?classic@locale@std@@SAAEBV12@XZ

?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z

_Cnd_unregister_at_thread_exit

_Cnd_register_at_thread_exit

_Cnd_broadcast

_Cnd_wait

_Cnd_destroy_in_situ

_Cnd_init_in_situ

_Mtx_unlock

_Mtx_lock

_Mtx_destroy_in_situ

_Mtx_init_in_situ

?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z

?_Syserror_map@std@@YAPEBDH@Z

?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z

?__ExceptionPtrToBool@@YA_NPEBX@Z

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

?__ExceptionPtrDestroy@@YAXPEAX@Z

?__ExceptionPtrCreate@@YAXPEAX@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z

?_Xbad_function_call@std@@YAXXZ

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z

?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z

?in_avail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JXZ