C:\agent\_work\6\s\x64\Release\OmenCap\OmenCap.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
074b66fb0d6ea7c36268cc4da9efc0b41b3617efda0764cb8c1331eaa7eb59b6N.exe
Resource
win7-20240704-en
windows7-x64
0 signatures
120 seconds
Behavioral task
behavioral2
Sample
074b66fb0d6ea7c36268cc4da9efc0b41b3617efda0764cb8c1331eaa7eb59b6N.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
120 seconds
General
-
Target
074b66fb0d6ea7c36268cc4da9efc0b41b3617efda0764cb8c1331eaa7eb59b6N
-
Size
1.3MB
-
MD5
04c89f145c0c43443432e1cab2eba9c0
-
SHA1
5c58b41f9b26f6d2e4955692fdb90a3ceec9e838
-
SHA256
074b66fb0d6ea7c36268cc4da9efc0b41b3617efda0764cb8c1331eaa7eb59b6
-
SHA512
6f545aaf2147f3a0825ef99c3b3b40a97ebb883bea4fc15f8a82c993128ba3f2cd57775cd045d589b7889f7f835a4592e7d84ce00bba97f90d6a66fd4f8af5fb
-
SSDEEP
24576:0HbUab5VXYh7F7jSfyUznmAXgQoI2AhSMXlbhOux20+7kgXe4i7ojhsP5Lgrk1Te:0Q85Vnzn6Tq2ne30jaNf1TWbdz
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 074b66fb0d6ea7c36268cc4da9efc0b41b3617efda0764cb8c1331eaa7eb59b6N
Files
-
074b66fb0d6ea7c36268cc4da9efc0b41b3617efda0764cb8c1331eaa7eb59b6N.exe windows:6 windows x64 arch:x64
559e07dee4ae0e39b6caae451df14092
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
api-ms-win-crt-runtime-l1-1-0
terminate
_crt_atexit
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_register_onexit_function
_initialize_onexit_table
_exit
exit
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
__p___wargv
_set_app_type
_seh_filter_exe
_invalid_parameter_noinfo
__p___argc
_beginthreadex
abort
_invalid_parameter_noinfo_noreturn
_errno
api-ms-win-crt-string-l1-1-0
wcscat_s
toupper
_wcsicmp
tolower
towlower
wcscpy_s
iswspace
strcpy_s
wcsnlen
wcsncmp
wcsncpy_s
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
_set_new_mode
realloc
vcruntime140_1
__CxxFrameHandler4
vcruntime140
_CxxThrowException
__C_specific_handler
__current_exception
__current_exception_context
memset
memmove
__std_type_info_compare
_purecall
__std_type_info_name
__std_exception_destroy
__std_exception_copy
__std_terminate
memchr
memcmp
memcpy
strchr
msvcp140
_Mtx_unlock
_Mtx_init_in_situ
_Mtx_lock
_Mtx_destroy_in_situ
?_Throw_C_error@std@@YAXH@Z
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z
??0task_continuation_context@Concurrency@@AEAA@XZ
_Cnd_init_in_situ
?is@?$ctype@_W@std@@QEBA_NF_W@Z
??Bid@locale@std@@QEAA_KXZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
_Mtx_current_owns
_Cnd_unregister_at_thread_exit
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?__ExceptionPtrCreate@@YAXPEAX@Z
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
_Query_perf_frequency
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
_Wcsxfrm
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
_Cnd_timedwait
?__ExceptionPtrToBool@@YA_NPEBX@Z
?id@?$collate@_W@std@@2V0locale@2@A
?_Xout_of_range@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Cnd_register_at_thread_exit
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
_Query_perf_counter
?id@?$ctype@_W@std@@2V0locale@2@A
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
_Xtime_get_ticks
_Cnd_broadcast
??0_Lockit@std@@QEAA@H@Z
?_Syserror_map@std@@YAPEBDH@Z
??1_Lockit@std@@QEAA@XZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
_Cnd_wait
_Wcscoll
_Cnd_destroy_in_situ
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
??1facet@locale@std@@MEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
_Thrd_detach
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
_Cnd_signal
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Xbad_alloc@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?_Xlength_error@std@@YAXPEBD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?exceptions@ios_base@std@@QEAAXH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?_Incref@facet@locale@std@@UEAAXXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Winerror_map@std@@YAHH@Z
?_Xbad_function_call@std@@YAXXZ
?uncaught_exception@std@@YA_NXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
logging
?LogModuleAccess@HpManifestLogger@Logging@Bridge@Hp@@SAXV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@00_N@Z
?LogCapabilityAccess@HpManifestLogger@Logging@Bridge@Hp@@SAXV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0_N@Z
?LogInfo@TraceLogger@Logging@Bridge@Hp@@QEAAXPEB_WZZ
?LogCommandAccess@HpManifestLogger@Logging@Bridge@Hp@@SAXV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0I_N0@Z
?LogProblematicArgument@HpManifestLogger@Logging@Bridge@Hp@@SAXV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@00@Z
?LogWarning@TraceLogger@Logging@Bridge@Hp@@QEAAXULoggingData@234@ZZ
?LogError@TraceLogger@Logging@Bridge@Hp@@QEAAXPEBDZZ
?LogWarning@TraceLogger@Logging@Bridge@Hp@@QEAAXPEB_WZZ
?LogCommandStart@RequestLogger@Logging@Bridge@Hp@@SAXU_GUID@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@1I@Z
?LogLastError@TraceLogger@Logging@Bridge@Hp@@QEAAXPEB_WK@Z
?LogCommandEnd@RequestLogger@Logging@Bridge@Hp@@SAXU_GUID@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@1IH@Z
?LogInfo@TraceLogger@Logging@Bridge@Hp@@QEAAXULoggingData@234@ZZ
?LogError@TraceLogger@Logging@Bridge@Hp@@QEAAXULoggingData@234@ZZ
?LogStatus@TraceLogger@Logging@Bridge@Hp@@QEAAXPEB_WK@Z
?SetProvider@LogManager@Logging@Bridge@Hp@@SAPEAVTraceLogger@234@PEBD@Z
?LogError@TraceLogger@Logging@Bridge@Hp@@QEAAXPEB_WZZ
?GetLogger@LogManager@Logging@Bridge@Hp@@SAPEAVTraceLogger@234@XZ
kernel32
InitializeSListHead
IsDebuggerPresent
GetModuleHandleW
CreateEventW
GetLastError
SetEvent
CloseHandle
TerminateProcess
GetModuleFileNameW
GetCurrentProcess
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
FormatMessageA
WaitForSingleObjectEx
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
InitOnceBeginInitialize
EnterCriticalSection
GetModuleHandleA
GetVersion
InterlockedPushEntrySList
InitOnceComplete
FreeLibrary
GetProcAddress
LoadLibraryW
WideCharToMultiByte
GetSystemTime
GetTickCount64
MultiByteToWideChar
GetFileInformationByHandleEx
WaitForSingleObject
ReleaseMutex
CreateMutexW
CreateDirectoryW
QueryPerformanceCounter
DuplicateHandle
K32GetModuleFileNameExW
GetPackageFamilyName
GetPackageId
FormatMessageW
IsProcessorFeaturePresent
CreateFileW
OpenProcess
GetFileAttributesExW
ExpandEnvironmentStringsW
GetFullPathNameW
LocalFree
AreFileApisANSI
ResetEvent
RegisterWaitUntilOOBECompleted
UnregisterWaitUntilOOBECompleted
SubmitThreadpoolWork
OOBEComplete
CreateThreadpoolWork
OpenPackageInfoByFullName
GetProcessHeap
WTSGetActiveConsoleSessionId
HeapAlloc
DeleteProcThreadAttributeList
GetPackagePathByFullName
UpdateProcThreadAttribute
GetPackageInfo
LeaveCriticalSection
InitializeProcThreadAttributeList
FindPackagesByPackageFamily
HeapFree
ClosePackageInfo
advapi32
DuplicateTokenEx
ImpersonateLoggedOnUser
RevertToSelf
RegisterServiceCtrlHandlerExW
RegCloseKey
SetServiceStatus
ChangeServiceConfig2W
StartServiceCtrlDispatcherW
RegOpenKeyW
RegQueryValueExW
OpenProcessToken
LookupAccountSidW
InitializeSecurityDescriptor
SetEntriesInAclW
AllocateAndInitializeSid
SetSecurityDescriptorDacl
FreeSid
RegOpenKeyExW
CreateProcessAsUserW
GetTokenInformation
GetUserNameW
ConvertStringSidToSidW
CreateServiceW
QueryServiceStatus
CloseServiceHandle
OpenSCManagerW
DeleteService
ControlService
OpenServiceW
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
__acrt_iob_func
__stdio_common_vfwprintf
__stdio_common_vswprintf_s
fgetc
fclose
_get_stream_buffer_pointers
fread
fwrite
fgetpos
_fseeki64
fsetpos
setvbuf
fflush
_set_fmode
ungetc
fputc
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
_configthreadlocale
api-ms-win-power-setting-l1-1-0
PowerSettingRegisterNotification
shlwapi
PathFileExistsW
PathFindFileNameW
userenv
ExpandEnvironmentStringsForUserW
CreateEnvironmentBlock
DestroyEnvironmentBlock
api-ms-win-appmodel-runtime-l1-1-1
GetPackageFullNameFromToken
GetStagedPackageOrigin
wtsapi32
WTSQueryUserToken
shell32
CommandLineToArgvW
rpcrt4
RpcRevertToSelf
RpcImpersonateClient
RpcServerInqCallAttributesW
UuidCreate
UuidToStringW
RpcStringFreeW
NdrServerCall2
NdrServerCallAll
NdrClientCall3
RpcBindingVectorFree
RpcMgmtStopServerListening
RpcServerListen
RpcMgmtWaitServerListen
RpcServerRegisterIf3
RpcServerUnregisterIf
RpcServerUseProtseqEpW
crypt32
CryptProtectData
CryptUnprotectData
CertNameToStrW
wintrust
CryptCATCatalogInfoFromContext
CryptCATAdminReleaseContext
CryptCATAdminAcquireContext2
WTHelperGetProvCertFromChain
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
CryptCATAdminReleaseCatalogContext
WinVerifyTrust
CryptCATAdminEnumCatalogFromHash
CryptCATAdminCalcHashFromFileHandle2
api-ms-win-core-path-l1-1-0
PathCchRemoveFileSpec
PathCchRemoveExtension
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
api-ms-win-security-base-l1-2-2
DeriveCapabilitySidsFromName
ole32
CoCreateFreeThreadedMarshaler
CoIncrementMTAUsage
CoCreateGuid
ntdll
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
RtlInitAnsiString
api-ms-win-crt-convert-l1-1-0
strtol
wcstol
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-time-l1-1-0
_difftime64
_localtime64_s
_mktime64
_time64
wcsftime
rpcclient.native
?CloseConnection@RpcClient@Core@Client@Bridge@Hp@@QEAAHXZ
?OpenConnection@RpcClient@Core@Client@Bridge@Hp@@QEAAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?ExecuteCommand@RpcClient@Core@Client@Bridge@Hp@@QEAAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@I0AEAV67@@Z
?GetClientForEndpoint@RpcClient@Native@Client@Bridge@Hp@@SA?AV?$shared_ptr@VRpcClient@Native@Client@Bridge@Hp@@@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@7@@Z
api-ms-win-core-winrt-string-l1-1-0
WindowsCreateStringReference
WindowsDeleteStringBuffer
WindowsDeleteString
WindowsPromoteStringBuffer
WindowsCreateString
WindowsGetStringLen
WindowsDuplicateString
WindowsPreallocateStringBuffer
WindowsGetStringRawBuffer
oleaut32
SysStringLen
GetErrorInfo
SysFreeString
api-ms-win-core-winrt-error-l1-1-1
RoOriginateLanguageException
api-ms-win-core-winrt-error-l1-1-0
GetRestrictedErrorInfo
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
RoInitialize
Exports
Exports
??0BridgeAccessManager@Security@Bridge@Hp@@QEAA@AEBV0123@@Z
??0BridgeAccessManager@Security@Bridge@Hp@@QEAA@XZ
??0IClientInformation@Server@Bridge@Hp@@QEAA@AEBU0123@@Z
??0IClientInformation@Server@Bridge@Hp@@QEAA@W4ClientType@123@@Z
??0IClientInformation@Server@Bridge@Hp@@QEAA@W4ClientType@123@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0IClientInformation@Server@Bridge@Hp@@QEAA@XZ
??0IClientWithNoHpManifestCheckCriteria@Security@Bridge@Hp@@QEAA@AEBV0123@@Z
??0IClientWithNoHpManifestCheckCriteria@Security@Bridge@Hp@@QEAA@XZ
??0Launcher@Services@Server@Bridge@Hp@@QEAA@AEBV01234@@Z
??0Launcher@Services@Server@Bridge@Hp@@QEAA@XZ
??0MatchingDescriptor@Security@Bridge@Hp@@QEAA@XZ
??0UwpInformation@Uwp@Server@Bridge@Hp@@QEAA@AEBU01234@@Z
??0UwpInformation@Uwp@Server@Bridge@Hp@@QEAA@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0GG@Z
??0UwpInformation@Uwp@Server@Bridge@Hp@@QEAA@XZ
??0UwpMatchingDescriptor@Security@Bridge@Hp@@QEAA@AEBV0123@@Z
??0UwpMatchingDescriptor@Security@Bridge@Hp@@QEAA@UUwpInformation@Uwp@Server@23@W4Operation@MatchingDescriptor@123@@Z
??0UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@QEAA@AEBV01234@@Z
??0UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@QEAA@XZ
??0UwpPackageModel@Uwp@Server@Bridge@Hp@@QEAA@$$QEAU01234@@Z
??0UwpPackageModel@Uwp@Server@Bridge@Hp@@QEAA@AEBU01234@@Z
??0UwpPackageModel@Uwp@Server@Bridge@Hp@@QEAA@XZ
??0UwpWithNoHPManifestExemptionWhiteList@Security@Bridge@Hp@@QEAA@XZ
??0UwpWithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@QEAA@AEBV0123@@Z
??0UwpWithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@QEAA@V?$shared_ptr@V?$vector@VUwpMatchingDescriptor@Security@Bridge@Hp@@V?$allocator@VUwpMatchingDescriptor@Security@Bridge@Hp@@@std@@@std@@@std@@V?$shared_ptr@UUwpInformation@Uwp@Server@Bridge@Hp@@@5@@Z
??0Win32Information@Win32@Server@Bridge@Hp@@QEAA@AEBU01234@@Z
??0Win32Information@Win32@Server@Bridge@Hp@@QEAA@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0GG@Z
??0Win32Information@Win32@Server@Bridge@Hp@@QEAA@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@GG@Z
??0Win32Information@Win32@Server@Bridge@Hp@@QEAA@XZ
??0Win32MatchingDescriptor@Security@Bridge@Hp@@QEAA@AEBV0123@@Z
??0Win32MatchingDescriptor@Security@Bridge@Hp@@QEAA@UWin32Information@Win32@Server@23@W4Operation@MatchingDescriptor@123@@Z
??0Win32WithNoHPManifestExemptionWhiteList@Security@Bridge@Hp@@QEAA@XZ
??0Win32WithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@QEAA@AEBV0123@@Z
??0Win32WithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@QEAA@V?$shared_ptr@V?$vector@VWin32MatchingDescriptor@Security@Bridge@Hp@@V?$allocator@VWin32MatchingDescriptor@Security@Bridge@Hp@@@std@@@std@@@std@@V?$shared_ptr@UWin32Information@Win32@Server@Bridge@Hp@@@5@@Z
??0bridge_access_exception@Security@Bridge@Hp@@QEAA@$$QEAV0123@@Z
??0bridge_access_exception@Security@Bridge@Hp@@QEAA@AEBV0123@@Z
??0bridge_access_exception@Security@Bridge@Hp@@QEAA@PEBD@Z
??1BridgeAccessManager@Security@Bridge@Hp@@QEAA@XZ
??1IClientInformation@Server@Bridge@Hp@@QEAA@XZ
??1IClientWithNoHpManifestCheckCriteria@Security@Bridge@Hp@@UEAA@XZ
??1Launcher@Services@Server@Bridge@Hp@@QEAA@XZ
??1UwpInformation@Uwp@Server@Bridge@Hp@@QEAA@XZ
??1UwpMatchingDescriptor@Security@Bridge@Hp@@QEAA@XZ
??1UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@UEAA@XZ
??1UwpPackageModel@Uwp@Server@Bridge@Hp@@QEAA@XZ
??1UwpWithNoHPManifestExemptionWhiteList@Security@Bridge@Hp@@QEAA@XZ
??1UwpWithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@UEAA@XZ
??1Win32Information@Win32@Server@Bridge@Hp@@QEAA@XZ
??1Win32MatchingDescriptor@Security@Bridge@Hp@@QEAA@XZ
??1Win32WithNoHPManifestExemptionWhiteList@Security@Bridge@Hp@@QEAA@XZ
??1Win32WithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@UEAA@XZ
??1bridge_access_exception@Security@Bridge@Hp@@UEAA@XZ
??4BridgeAccessManager@Security@Bridge@Hp@@QEAAAEAV0123@AEBV0123@@Z
??4IClientInformation@Server@Bridge@Hp@@QEAAAEAU0123@AEBU0123@@Z
??4IClientWithNoHpManifestCheckCriteria@Security@Bridge@Hp@@QEAAAEAV0123@AEBV0123@@Z
??4Launcher@Services@Server@Bridge@Hp@@QEAAAEAV01234@AEBV01234@@Z
??4MatchingDescriptor@Security@Bridge@Hp@@QEAAAEAV0123@$$QEAV0123@@Z
??4MatchingDescriptor@Security@Bridge@Hp@@QEAAAEAV0123@AEBV0123@@Z
??4StringUtils@Services@Server@Bridge@Hp@@QEAAAEAV01234@$$QEAV01234@@Z
??4StringUtils@Services@Server@Bridge@Hp@@QEAAAEAV01234@AEBV01234@@Z
??4UwpInformation@Uwp@Server@Bridge@Hp@@QEAAAEAU01234@AEBU01234@@Z
??4UwpMatchingDescriptor@Security@Bridge@Hp@@QEAAAEAV0123@AEBV0123@@Z
??4UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@QEAAAEAV01234@AEBV01234@@Z
??4UwpPackageModel@Uwp@Server@Bridge@Hp@@QEAAAEAU01234@$$QEAU01234@@Z
??4UwpPackageModel@Uwp@Server@Bridge@Hp@@QEAAAEAU01234@AEBU01234@@Z
??4UwpWithNoHPManifestExemptionWhiteList@Security@Bridge@Hp@@QEAAAEAV0123@AEBV0123@@Z
??4UwpWithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@QEAAAEAV0123@AEBV0123@@Z
??4Win32Information@Win32@Server@Bridge@Hp@@QEAAAEAU01234@AEBU01234@@Z
??4Win32MatchingDescriptor@Security@Bridge@Hp@@QEAAAEAV0123@AEBV0123@@Z
??4Win32WithNoHPManifestExemptionWhiteList@Security@Bridge@Hp@@QEAAAEAV0123@AEBV0123@@Z
??4Win32WithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@QEAAAEAV0123@AEBV0123@@Z
??4bridge_access_exception@Security@Bridge@Hp@@QEAAAEAV0123@$$QEAV0123@@Z
??4bridge_access_exception@Security@Bridge@Hp@@QEAAAEAV0123@AEBV0123@@Z
??_7IClientWithNoHpManifestCheckCriteria@Security@Bridge@Hp@@6B@
??_7UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@6B@
??_7UwpWithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@6B@
??_7Win32WithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@6B@
??_7bridge_access_exception@Security@Bridge@Hp@@6B@
?CREATE_FILE_EXTENDED_PATH@Launcher@Services@Server@Bridge@Hp@@0_KB
?FindPackages@UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@UEAA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?FromUtf16ToUtf8@StringUtils@Services@Server@Bridge@Hp@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEB_W@Z
?FromUtf8ToUtf16@StringUtils@Services@Server@Bridge@Hp@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEBD@Z
?GetAbsolutePathForUWPAlias@Launcher@Services@Server@Bridge@Hp@@QEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V67@@Z
?GetExemption@UwpWithNoHPManifestExemptionWhiteList@Security@Bridge@Hp@@QEAA?AV?$shared_ptr@V?$vector@VUwpMatchingDescriptor@Security@Bridge@Hp@@V?$allocator@VUwpMatchingDescriptor@Security@Bridge@Hp@@@std@@@std@@@std@@XZ
?GetExemption@Win32WithNoHPManifestExemptionWhiteList@Security@Bridge@Hp@@QEAA?AV?$shared_ptr@V?$vector@VWin32MatchingDescriptor@Security@Bridge@Hp@@V?$allocator@VWin32MatchingDescriptor@Security@Bridge@Hp@@@std@@@std@@@std@@XZ
?GetOriginAndVersionByFamilyName@Launcher@Services@Server@Bridge@Hp@@QEAA?AV?$tuple@H_K@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@7@@Z
?GetOriginAndVersionByFullName@Launcher@Services@Server@Bridge@Hp@@QEAA?AV?$tuple@H_K@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@7@@Z
?GetPackageFullName@UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@UEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V67@@Z
?GetPackageFullNameByFamilyName@Launcher@Services@Server@Bridge@Hp@@QEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V67@@Z
?GetPackageFullNameByFamilyName@Launcher@Services@Server@Bridge@Hp@@QEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V67@V?$shared_ptr@X@7@@Z
?GetPackageInstalledPathByFullName@Launcher@Services@Server@Bridge@Hp@@QEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V67@@Z
?GetPackageInstalledPathByFullName@Launcher@Services@Server@Bridge@Hp@@QEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V67@V?$shared_ptr@X@7@@Z
?GetPackagesPerUser@UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@UEAA?AV?$vector@UUwpPackageModel@Uwp@Server@Bridge@Hp@@V?$allocator@UUwpPackageModel@Uwp@Server@Bridge@Hp@@@std@@@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@7@@Z
?GetPathExpandedImpersonatedAsCurrentUser@Launcher@Services@Server@Bridge@Hp@@QEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V67@V?$shared_ptr@X@7@@Z
?GetUserTokenForCurrentUser@Launcher@Services@Server@Bridge@Hp@@QEAA?AV?$shared_ptr@X@std@@W4_TOKEN_TYPE@@@Z
?IsAnException@UwpWithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@UEAA_NXZ
?IsAnException@Win32WithNoHpManifestCheckBasedOnMajorAndMinorVersion@Security@Bridge@Hp@@UEAA_NXZ
?IsRealUserSession@Launcher@Services@Server@Bridge@Hp@@QEAA_NAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?IsRunningAsSystem@UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@AEBA_NXZ
?IsUwpExempt@BridgeAccessManager@Security@Bridge@Hp@@QEAA_NXZ
?IsWin32Exempt@BridgeAccessManager@Security@Bridge@Hp@@QEAA_NXZ
?RegisterPackage@UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@UEAA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?Run@Launcher@Services@Server@Bridge@Hp@@QEAA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@00@Z
?RunExeAsUser@Launcher@Services@Server@Bridge@Hp@@QEAA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0V?$shared_ptr@X@7@0@Z
?RunExeAsUser@Launcher@Services@Server@Bridge@Hp@@QEAA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0V?$shared_ptr@X@7@0AEAKV?$vector@PEAXV?$allocator@PEAX@std@@@7@@Z
?SetUwpChecker@BridgeAccessManager@Security@Bridge@Hp@@QEAAXV?$shared_ptr@VIClientWithNoHpManifestCheckCriteria@Security@Bridge@Hp@@@std@@@Z
?SetWin32Checker@BridgeAccessManager@Security@Bridge@Hp@@QEAAXV?$shared_ptr@VIClientWithNoHpManifestCheckCriteria@Security@Bridge@Hp@@@std@@@Z
?SidToAccountName@UwpPackageDataAccess@Uwp@Server@Bridge@Hp@@AEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV67@@Z
?Trim@StringUtils@Services@Server@Bridge@Hp@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V67@@Z
?_white_list@UwpWithNoHPManifestExemptionWhiteList@Security@Bridge@Hp@@0V?$vector@VUwpMatchingDescriptor@Security@Bridge@Hp@@V?$allocator@VUwpMatchingDescriptor@Security@Bridge@Hp@@@std@@@std@@A
?_white_list@Win32WithNoHPManifestExemptionWhiteList@Security@Bridge@Hp@@0V?$vector@VWin32MatchingDescriptor@Security@Bridge@Hp@@V?$allocator@VWin32MatchingDescriptor@Security@Bridge@Hp@@@std@@@std@@A
Sections
.text Size: 390KB - Virtual size: 389KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 568KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE