2f9cf17acc4aae8aad11736bf90ddbc50d281d1c41d12a3d90e01d920d5a2494
- SHA256 2f9cf17acc4aae8aad11736bf90ddbc50d281d1c41d12a3d90e01d920d5a2494
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PO Pintout copies - 4513366240-pdf/PO Pintout copies - 4513366240-pdf.exe
Resource
win10v2004-20250619-en
windows10-2004-x64
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
PO Pintout copies - 4513366240-pdf/mscorlib.dll
Resource
win10v2004-20250619-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
PO Pintout copies - 4513366240-pdf/mscorlib.dll
Resource
win11-20250619-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
PO Pintout copies - 4513366240-pdf/msedge_elf.dll
Resource
win10v2004-20250502-en
windows10-2004-x64
12 signatures
150 seconds
Behavioral task
behavioral5
Sample
PO Pintout copies - 4513366240-pdf/msedge_elf.dll
Resource
win11-20250610-en
windows11-21h2-x64
12 signatures
150 seconds
General
- Target 2f9cf17acc4aae8aad11736bf90ddbc50d281d1c41d12a3d90e01d920d5a2494
- Size 1.7MB
- Sample250727-kmdtcaxtft
- SHA256 2f9cf17acc4aae8aad11736bf90ddbc50d281d1c41d12a3d90e01d920d5a2494
- MD5 95ee1173a179af9230ac68e60f5466b7
- SHA1 28c835ceaaec3ba3de34ad7252f9ffbd343f1465
- SHA512 a906d03d185c1e469e795e3539764bbc0180ce20b52b2d17afa29cff00c0ac1bb14e4a5b233a973642077c41b23df9c0bf060cd1e3ef0038630d0bb3b078de99
- SSDEEP 49152:zDrPXfCbdj7QzbvsJUADG9pZTZ6vva2iOOc:zfCGbUBDGrf6vziA
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PO Pintout copies - 4513366240-pdf/msedge_elf.dll
File Explorer
-
2f9cf17acc4aae8aad11736bf90ddbc50d281d1c41d12a3d90e01d920d5a2494.zip 1.7MB
-
PO Pintout copies - 4513366240-pdf/PO Pintout copies - 4513366240-pdf.exe.exe 1.4MB
-
PO Pintout copies - 4513366240-pdf/mscorlib.dll83KB
-
PO Pintout copies - 4513366240-pdf/msedge_elf.dll.dll 2.1MB
PO Pintout copies - 4513366240-pdf/PO Pintout copies - 4513366240-pdf.exe
- IMPHASH b13678f5b4c85bf73c2c579bea3575cc
- SHA256 940f687b5c7cbbf8003032f14964e177af647c377f091e326fc558c8915abaf3
- MD5 d3a68cde0b1523e8d5690eef6067c572
- SHA1 d97ec8e3ffd7a8f18357253bde10ca74a062456f
- SHA512 dc80257d8d0ef098962958871fa53cc238d8ec31628ef33546518b5fe1df64a83b32ba338541e263462b205d31e3f9b70ecf59930241abe6ca682630f18e8eb7
- SSDEEP 24576:Zm9W0V3SbGWtBKyhXRFHi7GKN78Kmsaw+PTWO6OopguBR7JnDus:ZmMI3jWSaNi7GQfm3LrV6OorBR71us
- MD5 SHA1 SHA512 SSDEEP
Digest
1e:b7:9d:e4:93:cc:99:30:03:61:4f:2b:b6:1c:49:a0:9d:c2:e7:80:da:15:3b:92:56:20:6c:e6:6d:65:41:f3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 25, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:fe:6b:ce:da:d6:c8:03:03:a3:00:00:00:00:03:fe
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2024 - Aug 20, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
10
Entry point
686832
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
identity_helper.exe.pdb
msedge_elf
GetInstallDetailsPayload
SignalInitializeCrashReporting
advapi32
BuildTrusteeWithSidW
ConvertStringSidToSidW
GetLengthSid
GetNamedSecurityInfoW
GetSecurityDescriptorControl
GetSecurityDescriptorDacl
GetSecurityDescriptorGroup
GetSecurityDescriptorOwner
GetSecurityDescriptorSacl
GetTokenInformation
IsValidAcl
IsValidSecurityDescriptor
IsValidSid
OpenProcessToken
RegCloseKey
RegGetValueW
RegOpenKeyExW
RegQueryValueExW
SetEntriesInAclW
SetNamedSecurityInfoW
SetSecurityInfo
dbghelp
SymCleanup
SymFromAddr
SymGetLineFromAddr64
SymGetSearchPathW
SymInitialize
SymSetOptions
SymSetSearchPathW
user32
CreateWindowExW
DefWindowProcW
DestroyWindow
DispatchMessageW
GetMessageW
PostQuitMessage
RegisterClassExW
ShowWindow
TranslateMessage
kernel32
AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateEventW
CreateFileMappingW
CreateFileW
CreateThread
DeleteCriticalSection
DuplicateHandle
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExpandEnvironmentStringsW
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetComputerNameExW
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDriveTypeW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileSizeEx
GetFileType
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoW
GetLogicalProcessorInformation
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNativeSystemInfo
GetOEMCP
GetProcAddress
GetProcessHeap
GetProductInfo
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemTimePreciseAsFileTime
GetTempPathW
GetThreadId
GetThreadPriority
GetTickCount
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExW
GetWindowsDirectoryW
GlobalMemoryStatusEx
InitOnceExecuteOnce
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
IsWow64Process
K32GetModuleInformation
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
MapViewOfFile
MultiByteToWideChar
OutputDebugStringA
PrefetchVirtualMemory
QueryPerformanceCounter
QueryPerformanceFrequency
QueryThreadCycleTime
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
RtlCaptureContext
RtlCaptureStackBackTrace
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetCurrentDirectoryW
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetProcessShutdownParameters
SetStdHandle
SetThreadInformation
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
api-ms-win-core-winrt-l1-1-0
RoInitialize
RoUninitialize
ole32
CoCreateInstance
CoInitializeEx
CoRegisterInitializeSpy
CoRevokeInitializeSpy
CoTaskMemFree
CoUninitialize
shell32
CommandLineToArgvW
ord680
SHGetFolderPathW
SHGetKnownFolderPath
oleaut32
SysAllocString
SysAllocStringLen
SysFreeString
VariantClear
winmm
timeBeginPeriod
timeEndPeriod
timeGetTime
GetHandleVerifier
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
184KB
Virtual Size
183KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
58KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gxfg
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
1024B
Virtual Size
521B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
PO Pintout copies - 4513366240-pdf/mscorlib.dll
- SHA256 b1519b301139ea396ce4c837ceb6ed2bf344afa18dd9d15a77a60d6a620008d1
- MD5 d272eff8b88389b857a2789497fad994
- SHA1 013de53d3306dd1797a15f5ec750788d61ed275d
- SHA512 2a6e44d1b36fbfcfd47dee0e606dbfd6a64dbcfb55b09d0c1e57f23ee821e1287517742e346fab87158e3ea4c8232b1d7d8e534ea86527af80338d2398afb10d
- SSDEEP 1536:Kr+CFhZUOX5CFey4MR82H8KWldwjWBPZtoPMJ1dbJLHQuMBOYKUEa6kz0KwIP7W/:Krn/ZpCFp4+9jWFZtoPMJ1fLwuMoYZ6H
- MD5 SHA1 SHA512 SSDEEP
PO Pintout copies - 4513366240-pdf/msedge_elf.dll
- IMPHASH 2d9eb1f07fccf61de60224f8f00b11b2
- SHA256 9c1de5f2d652d1e07adc5d9e0156dd9474e9adc6f17d210285c6945df549667d
- MD5 bf71f128816f7a5033d70d72e3077538
- SHA1 53958e188c8c35aadbd79825d350be2d1c6d4e7e
- SHA512 7fa7ef1195738c9028e304f7422ee9e3d2674e3ebaa06ca31442032789205db16a8826eeaf2325025a05fb2b9c2fc5cf5cf93c81f17c91c3ebfee606fb4e7bd2
- SSDEEP 49152:Edl4CoKynlu+KAo0MDmrxI674h3uD/qULf7Rv/T1MwWJd5:yTqj1v/en
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
441972
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Windows\Microsoft.VisualStudio.PerformanceTools.Detours\System.Device\0000\r\2.pdb
advapi32
RegQueryValueExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegEnumValueW
RegOpenKeyExW
bcrypt
BCryptCreateHash
BCryptFinishHash
BCryptGetProperty
BCryptHashData
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptGenRandom
kernel32
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
RaiseException
RtlPcToFileHeader
InterlockedFlushSList
SetLastError
FormatMessageW
GetLastError
GetConsoleMode
GetFileType
WriteFile
WriteConsoleW
GetConsoleOutputCP
GetStdHandle
MultiByteToWideChar
WideCharToMultiByte
K32EnumProcessModulesEx
CloseHandle
IsWow64Process
GetExitCodeProcess
TerminateProcess
OpenProcess
K32EnumProcesses
K32GetModuleInformation
K32GetModuleBaseNameW
K32GetModuleFileNameExW
GetProcessId
DuplicateHandle
GetCurrentProcess
CloseThreadpoolIo
GetCurrentProcessId
RaiseFailFastException
GetCalendarInfoEx
CompareStringOrdinal
CompareStringEx
FindNLSStringEx
GetLocaleInfoEx
ResolveLocaleName
FindStringOrdinal
GetTickCount64
GetCurrentThread
Sleep
DeleteCriticalSection
LocalFree
EnterCriticalSection
SleepConditionVariableCS
LeaveCriticalSection
WakeConditionVariable
QueryPerformanceCounter
InitializeCriticalSection
InitializeConditionVariable
WaitForMultipleObjectsEx
QueryPerformanceFrequency
GetFullPathNameW
GetLongPathNameW
LocalAlloc
GetProcAddress
LocaleNameToLCID
LCMapStringEx
EnumTimeFormatsEx
EnumCalendarInfoExEx
CreateDirectoryW
CreateFileW
CreateThreadpoolIo
StartThreadpoolIo
CancelThreadpoolIo
DeleteFileW
DeviceIoControl
ExpandEnvironmentStringsW
FindClose
FindFirstFileExW
FreeLibrary
GetFileAttributesExW
GetFileInformationByHandleEx
GetModuleFileNameW
GetOverlappedResult
LoadLibraryExW
ReadFile
SetFileInformationByHandle
SetThreadErrorMode
GetThreadPriority
SetThreadPriority
GetCurrentProcessorNumberEx
SetEvent
CreateEventExW
GetEnvironmentVariableW
LoadLibraryW
FreeConsole
FlushProcessWriteBuffers
WaitForSingleObjectEx
RtlVirtualUnwind
RtlCaptureContext
RtlRestoreContext
AddVectoredExceptionHandler
FlsAlloc
FlsGetValue
FlsSetValue
CreateEventW
SwitchToThread
CreateThread
GetCurrentThreadId
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualProtect
VirtualFree
QueryInformationJobObject
GetModuleHandleW
GetModuleHandleExW
GetProcessAffinityMask
InitializeContext
GetEnabledXStateFeatures
SetXStateFeaturesMask
VirtualQuery
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
ResetEvent
DebugBreak
WaitForSingleObject
SleepEx
GlobalMemoryStatusEx
GetSystemInfo
GetLogicalProcessorInformation
GetLogicalProcessorInformationEx
GetLargePageMinimum
VirtualUnlock
VirtualAllocExNuma
IsProcessInJob
GetNumaHighestNodeNumber
GetProcessGroupAffinity
K32GetProcessMemoryInfo
RtlUnwindEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlLookupFunctionEntry
InitializeSListHead
ole32
CoTaskMemAlloc
CoGetApartmentType
CoWaitForMultipleHandles
CoTaskMemFree
CoInitializeEx
CoUninitialize
secur32
GetUserNameExW
api-ms-win-crt-heap-l1-1-0
free
calloc
_callnewh
malloc
api-ms-win-crt-math-l1-1-0
ceil
api-ms-win-crt-string-l1-1-0
wcsncmp
strcpy_s
strncpy_s
_stricmp
strcmp
api-ms-win-crt-convert-l1-1-0
strtoull
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
_register_onexit_function
_initialize_onexit_table
_execute_onexit_table
_seh_filter_dll
_crt_atexit
abort
_initterm
_initterm_e
_cexit
_initialize_narrow_environment
terminate
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
__stdio_common_vfprintf
__stdio_common_vsscanf
__acrt_iob_func
??0PwaHelperImpl@edge_pwahelper@@QEAA@XZ
??1PwaHelperImpl@edge_pwahelper@@UEAA@XZ
??_7PwaHelperImpl@edge_pwahelper@@6B@
?AppendMojoServerBindingInfo@PwaHelperImpl@edge_pwahelper@@AEAAXPEAVCommandLine@base@@@Z
?BadgeNotification@PwaHelperImpl@edge_pwahelper@@UEAAXW4BadgeNotificationType@mojom@2@AEBV?$basic_string@DU?$char_traits@D@__Cr@std@@V?$allocator@D@23@@__Cr@std@@@Z
?BindWidgetManager@PwaHelperImpl@edge_pwahelper@@AEAAXV?$ScopedHandleBase@VMessagePipeHandle@mojo@@@mojo@@@Z
?DigitalGoodsAbortPaymentApp@PwaHelperImpl@edge_pwahelper@@UEAAXV?$OnceCallback@$$A6AX_N@Z@base@@@Z
?DigitalGoodsConsume@PwaHelperImpl@edge_pwahelper@@UEAAXAEBV?$basic_string@DU?$char_traits@D@__Cr@std@@V?$allocator@D@23@@__Cr@std@@V?$OnceCallback@$$A6AXW4BillingResponseCode@mojom@payments@@@Z@base@@@Z
?DigitalGoodsGetDetails@PwaHelperImpl@edge_pwahelper@@UEAAXAEBV?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@V?$allocator@D@23@@__Cr@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@V?$allocator@D@23@@__Cr@std@@@23@@__Cr@std@@V?$OnceCallback@$$A6AXW4BillingResponseCode@mojom@payments@@V?$vector@V?$StructPtr@VItemDetails@mojom@payments@@@mojo@@V?$allocator@V?$StructPtr@VItemDetails@mojom@payments@@@mojo@@@__Cr@std@@@__Cr@std@@@Z@base@@@Z
?DigitalGoodsInvokePaymentApp@PwaHelperImpl@edge_pwahelper@@UEAAXAEBV?$basic_string@DU?$char_traits@D@__Cr@std@@V?$allocator@D@23@@__Cr@std@@V?$OnceCallback@$$A6AXW4PurchaseResponseCode@mojom@edge_pwahelper@@@Z@base@@@Z
?DigitalGoodsListPurchaseHistory@PwaHelperImpl@edge_pwahelper@@UEAAXV?$OnceCallback@$$A6AXW4BillingResponseCode@mojom@payments@@V?$vector@V?$InlinedStructPtr@VPurchaseReference@mojom@payments@@@mojo@@V?$allocator@V?$InlinedStructPtr@VPurchaseReference@mojom@payments@@@mojo@@@__Cr@std@@@__Cr@std@@@Z@base@@@Z
?DigitalGoodsListPurchases@PwaHelperImpl@edge_pwahelper@@UEAAXV?$OnceCallback@$$A6AXW4BillingResponseCode@mojom@payments@@V?$vector@V?$InlinedStructPtr@VPurchaseReference@mojom@payments@@@mojo@@V?$allocator@V?$InlinedStructPtr@VPurchaseReference@mojom@payments@@@mojo@@@__Cr@std@@@__Cr@std@@@Z@base@@@Z
?GetAppAcquisitionDetail@PwaHelperImpl@edge_pwahelper@@UEAAXV?$OnceCallback@$$A6AXW4AcquisitionInfoResponseCode@mojom@edge_acquisition_info@@V?$InlinedStructPtr@VAcquisitionDetails@mojom@edge_acquisition_info@@@mojo@@@Z@base@@@Z
?GetAppLocalFolderPath@PwaHelperImpl@edge_pwahelper@@UEAAXV?$OnceCallback@$$A6AXAEBV?$basic_string@DU?$char_traits@D@__Cr@std@@V?$allocator@D@23@@__Cr@std@@W4LocalFolderResponseCode@mojom@edge_pwahelper@@@Z@base@@@Z
?InitMojo@PwaHelperImpl@edge_pwahelper@@AEAAXXZ
?InitializeAppUserModelIdForCurrentProcess@PwaHelperImpl@edge_pwahelper@@QEAA_NXZ
?IsCurrentAppPinnedToTaskbar@PwaHelperImpl@edge_pwahelper@@UEAAXV?$OnceCallback@$$A6AX_N@Z@base@@@Z
?OnClientConnected@PwaHelperImpl@edge_pwahelper@@AEAAXPEAVWaitableEvent@base@@@Z
?PinTileToStart@PwaHelperImpl@edge_pwahelper@@UEAAXXZ
?PinTileToTaskbar@PwaHelperImpl@edge_pwahelper@@UEAAXXZ
?SetPwaHwnd@PwaHelperImpl@edge_pwahelper@@UEAAX_K@Z
?SetSingletonProcessId@PwaHelperImpl@edge_pwahelper@@UEAAXI@Z
?Shutdown@PwaHelperImpl@edge_pwahelper@@AEAAXI@Z
?StartAppWithIncomingMojo@PwaHelperImpl@edge_pwahelper@@QEAAXVPlatformChannelEndpoint@mojo@@@Z
?StartAppWithPlatformChannel@PwaHelperImpl@edge_pwahelper@@QEAAXV?$unique_ptr@VCommandLine@base@@U?$default_delete@VCommandLine@base@@@__Cr@std@@@__Cr@std@@@Z
?StartProcessWithMojoIPC@PwaHelperImpl@edge_pwahelper@@QEAAKPEAXV?$unique_ptr@VCommandLine@base@@U?$default_delete@VCommandLine@base@@@__Cr@std@@@__Cr@std@@V?$unique_ptr@VScopedTempDir@base@@U?$default_delete@VScopedTempDir@base@@@__Cr@std@@@45@@Z
?TryActivateInstance@PwaHelperImpl@edge_pwahelper@@AEAAXPEAVCommandLine@base@@@Z
?ValidateHandShake@PwaHelperImpl@edge_pwahelper@@AEAAXXZ
?get_active_implementation@simdutf@@YAAEAV?$atomic_ptr@$$CBVimplementation@simdutf@@@internal@1@XZ
?get_available_implementations@simdutf@@YAAEBVavailable_implementation_list@internal@1@XZ
CachedCompletedInt32TaskFillScope
ClearReportsBetween_ExportThunk
CommonProgramFilesILGeneratorUnmanagedToManagedIn
CrashForException_ExportThunk
Crc32SetOnCountdownMresSourceException
CurrentCultureSplitsetUrlFormat
DisableHook
DrainLog
DumpHungProcessWithPtype_ExportThunk
DumpProcessWithoutCrash
EdgeGetEarlyFeatureTriggerHelperStatus
EdgeGetElfCommandLine
EdgeGetElfLoadThreadId
EdgeGetInjectionMitigationStatus
EdgeModuleIsEnumerated
EdgeModuleIsLoaded
GetApplyHookResult
GetBlockedModulesCount
GetBytesIODequeueInterpolatedStringHandlerAttribute
GetCrashReports_ExportThunk
GetCrashpadDatabasePath_ExportThunk
GetHandleVerifier
GetInstallDetailsPayload
GetProductInfo_ExportThunk
GetUniqueBlockedModulesCount
GetUploadConsent_ExportThunk
GetUserDataDirectoryThunk
InjectDumpForHungInput_ExportThunk
IsBrowserProcess
IsDynamicCodeSupportedAsyncCausalityOperationgetSignal
IsExtensionPointDisableSet
IsTemporaryUserDataDirectoryCreatedForHeadless
IsThirdPartyInitialized
LCIDConversionAttributeMemberNameEVENTACTIVITYCTRLGETSETID
MEMORYSTATUSEXgetUtf8SequenceLengthDisallowBindings
ObfuscationAttributeGetEnumeratord5bstrDescription
OpCodeValuesExpandPrimePublicMethods
PinvokeImplConsoleFallbackNamegetSByteView
ReadLineAsyncInternald63FromSerializedStringR4
RegisterLogNotification
RequestSingleCrashUpload_ExportThunk
SetMetricsClientId
SetTelemetryLevel_ExportThunk
SetUploadConsent_ExportThunk
ShortInlineIPropSetCharSetMask
SignalChromeElf
SignalInitializeCrashReporting
SingetItem2RuntimeMethodInfoStub
StartAppWithParameter
StateETWSwitch
countsEnableEventFixedBufferExtensions
Name
.text
Size
449KB
Virtual Size
448KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.managed
Size
841KB
Virtual Size
841KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
hydrated
Size
Virtual Size
353KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
725KB
Virtual Size
725KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
78KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
252B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=38, id=261, version=30034,
count=11, id=260, version=30034,
count=8, id=259, version=30034,
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=11, id=257, version=30795,
count=220, id=1, productName=Unmarked objects,
count=10, id=259, version=34435,
count=1, id=260, version=34435,
count=1, productName=Unmarked objects (old),
count=69, id=261, version=34435,
count=1, id=256, version=30158,
count=1, id=258, version=30158,