Microsoft.WidgetsPlatformRuntime_1.6.19.0_neutral_~_8wekyb3d8bbwe.Msixbundle
- SHA256 aeb670eef59c050f52e889f00e5f2f2de420b707b559a8d90098aa3447149268
Overview
overview
3Static
static
3WidgetsPla...4.appx
windows10-2004-x64
WidgetsPla...4.appx
windows11-ltsc_2024-x64
Microsoft....al.dll
windows10-2004-x64
1Microsoft....al.dll
windows11-ltsc_2024-x64
1Microsoft....ts.dll
windows10-2004-x64
1Microsoft....ts.dll
windows11-ltsc_2024-x64
1WidgetServ...al.dll
windows10-2004-x64
1WidgetServ...al.dll
windows11-ltsc_2024-x64
1WidgetServ...ts.dll
windows10-2004-x64
1WidgetServ...ts.dll
windows11-ltsc_2024-x64
1WidgetServ...ts.dll
windows10-2004-x64
1WidgetServ...ts.dll
windows11-ltsc_2024-x64
1WidgetServ...ce.exe
windows10-2004-x64
WidgetServ...ce.exe
windows11-ltsc_2024-x64
WidgetsPla...4.appx
windows10-2004-x64
WidgetsPla...4.appx
windows11-ltsc_2024-x64
Microsoft....al.dll
windows10-2004-x64
1Microsoft....al.dll
windows11-ltsc_2024-x64
1Microsoft....ts.dll
windows10-2004-x64
1Microsoft....ts.dll
windows11-ltsc_2024-x64
1WidgetServ...al.dll
windows10-2004-x64
1WidgetServ...al.dll
windows11-ltsc_2024-x64
1WidgetServ...ts.dll
windows10-2004-x64
1WidgetServ...ts.dll
windows11-ltsc_2024-x64
1WidgetServ...ts.dll
windows10-2004-x64
1WidgetServ...ts.dll
windows11-ltsc_2024-x64
1WidgetServ...ce.exe
windows10-2004-x64
1WidgetServ...ce.exe
windows11-ltsc_2024-x64
1WidgetsPla...6.appx
windows10-2004-x64
WidgetsPla...6.appx
windows11-ltsc_2024-x64
Microsoft....al.dll
windows10-2004-x64
1Microsoft....al.dll
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WidgetsPlatformRuntime-ARM64.appx
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
WidgetsPlatformRuntime-ARM64.appx
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Microsoft.Windows.Widgets.Internal.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Microsoft.Windows.Widgets.Internal.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Microsoft.Windows.Widgets.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Microsoft.Windows.Widgets.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
WidgetService/Microsoft.Windows.Widgets.Internal.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
WidgetService/Microsoft.Windows.Widgets.Internal.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
WidgetService/Microsoft.Windows.Widgets.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
WidgetService/Microsoft.Windows.Widgets.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
WidgetService/Microsoft.Windows.Widgets.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
WidgetService/Microsoft.Windows.Widgets.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
WidgetService/WidgetService.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
WidgetService/WidgetService.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
WidgetsPlatformRuntime-x64.appx
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
WidgetsPlatformRuntime-x64.appx
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
Microsoft.Windows.Widgets.Internal.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
Microsoft.Windows.Widgets.Internal.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
Microsoft.Windows.Widgets.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
Microsoft.Windows.Widgets.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
WidgetService/Microsoft.Windows.Widgets.Internal.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
WidgetService/Microsoft.Windows.Widgets.Internal.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
WidgetService/Microsoft.Windows.Widgets.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
WidgetService/Microsoft.Windows.Widgets.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
WidgetService/Microsoft.Windows.Widgets.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
WidgetService/Microsoft.Windows.Widgets.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
WidgetService/WidgetService.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
WidgetService/WidgetService.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
WidgetsPlatformRuntime-x86.appx
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
WidgetsPlatformRuntime-x86.appx
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
Microsoft.Windows.Widgets.Internal.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
Microsoft.Windows.Widgets.Internal.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target Microsoft.WidgetsPlatformRuntime_1.6.19.0_neutral_~_8wekyb3d8bbwe.Msixbundle
- Size 2.4MB
- Sample261102-pgcfjsvz6j
- SHA256 aeb670eef59c050f52e889f00e5f2f2de420b707b559a8d90098aa3447149268
- MD5 117234ac97eff8b0409549244a4c05e2
- SHA1 a3f03add5cbe11126d493dc347039dc698527209
- SHA512 b0c32187fb7debbdc8e4ef792e5245bc86b20093009d5c3c289661433035da30a8504abecab275fa72cce25f7d7bdb2556e85a18539d4b045e6d590512b19638
- SSDEEP 49152:7+elpvNPu8MLk8f/QN6QQNT9T7iD11uZzSyLNTPqeS33/Xap9jhRvA0sTEJtjlbs:6eldNPu8Uk8HQN6QcRSnqzSAPS33PaPK
- TLSH T147C533B4BFD46081E32CD0B425EB552B789105C37DE99921AFC9D83E9EAD3A001537EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 16 IoCs
Checks for missing Authenticode signature.
resource unpack002/Microsoft.Windows.Widgets.Internal.winmd unpack002/Microsoft.Windows.Widgets.winmd unpack002/WidgetService/Microsoft.Windows.Widgets.Internal.winmd unpack002/WidgetService/Microsoft.Windows.Widgets.winmd unpack003/Microsoft.Windows.Widgets.Internal.winmd unpack003/Microsoft.Windows.Widgets.winmd unpack003/WidgetService/Microsoft.Windows.Widgets.Internal.winmd unpack003/WidgetService/Microsoft.Windows.Widgets.dll unpack003/WidgetService/Microsoft.Windows.Widgets.winmd unpack003/WidgetService/WidgetService.exe unpack004/Microsoft.Windows.Widgets.Internal.winmd unpack004/Microsoft.Windows.Widgets.winmd unpack004/WidgetService/Microsoft.Windows.Widgets.Internal.winmd unpack004/WidgetService/Microsoft.Windows.Widgets.dll unpack004/WidgetService/Microsoft.Windows.Widgets.winmd unpack004/WidgetService/WidgetService.exe
File Explorer
-
Microsoft.WidgetsPlatformRuntime_1.6.19.0_neutral_~_8wekyb3d8bbwe.Msixbundle.zip 2.4MB
-
AppxBlockMap.xml.xml 422B
-
AppxMetadata/AppxBundleManifest.xml.xml 1KB
-
AppxSignature.p7x11KB
-
WidgetsPlatformRuntime-ARM64.msix.appx 862KB
-
AppxBlockMap.xml.xml 5KB
-
AppxManifest.xml10KB
-
AppxMetadata/CodeIntegrity.cat13KB
-
AppxSignature.p7x11KB
-
Images/LockScreenLogo.scale-200.png.png 1KB
-
Images/SplashScreen.scale-200.png.png 7KB
-
Images/Square150x150Logo.scale-200.png.png 2KB
-
Images/Square44x44Logo.scale-200.png.png 1KB
-
Images/Square44x44Logo.targetsize-24_altform-unplated.png.png 1KB
-
Images/StoreLogo.png.png 1KB
-
Images/Wide310x150Logo.scale-200.png.png 3KB
-
Microsoft.Windows.Widgets.Internal.winmd.dll 14KB
-
Microsoft.Windows.Widgets.winmd.dll 56KB
-
WidgetService/Microsoft.Windows.Widgets.Internal.winmd.dll 14KB
-
WidgetService/Microsoft.Windows.Widgets.dll2.6MB
-
WidgetService/Microsoft.Windows.Widgets.winmd.dll 56KB
-
WidgetService/WidgetService.exe214KB
-
[Content_Types].xml.xml 807B
-
resources.pri1KB
-
WidgetsPlatformRuntime-x64.msix.appx 839KB
-
AppxBlockMap.xml.xml 5KB
-
AppxManifest.xml10KB
-
AppxMetadata/CodeIntegrity.cat13KB
-
AppxSignature.p7x11KB
-
Images/LockScreenLogo.scale-200.png.png 1KB
-
Images/SplashScreen.scale-200.png.png 7KB
-
Images/Square150x150Logo.scale-200.png.png 2KB
-
Images/Square44x44Logo.scale-200.png.png 1KB
-
Images/Square44x44Logo.targetsize-24_altform-unplated.png.png 1KB
-
Images/StoreLogo.png.png 1KB
-
Images/Wide310x150Logo.scale-200.png.png 3KB
-
Microsoft.Windows.Widgets.Internal.winmd.dll 14KB
-
Microsoft.Windows.Widgets.winmd.dll 56KB
-
WidgetService/Microsoft.Windows.Widgets.Internal.winmd.dll 14KB
-
WidgetService/Microsoft.Windows.Widgets.dll.dll 2.3MB
-
WidgetService/Microsoft.Windows.Widgets.winmd.dll 56KB
-
WidgetService/WidgetService.exe.exe 213KB
-
[Content_Types].xml.xml 807B
-
resources.pri1KB
-
WidgetsPlatformRuntime-x86.msix.appx 766KB
-
AppxBlockMap.xml.xml 5KB
-
AppxManifest.xml10KB
-
AppxMetadata/CodeIntegrity.cat13KB
-
AppxSignature.p7x11KB
-
Images/LockScreenLogo.scale-200.png.png 1KB
-
Images/SplashScreen.scale-200.png.png 7KB
-
Images/Square150x150Logo.scale-200.png.png 2KB
-
Images/Square44x44Logo.scale-200.png.png 1KB
-
Images/Square44x44Logo.targetsize-24_altform-unplated.png.png 1KB
-
Images/StoreLogo.png.png 1KB
-
Images/Wide310x150Logo.scale-200.png.png 3KB
-
Microsoft.Windows.Widgets.Internal.winmd.dll 14KB
-
Microsoft.Windows.Widgets.winmd.dll 56KB
-
WidgetService/Microsoft.Windows.Widgets.Internal.winmd.dll 14KB
-
WidgetService/Microsoft.Windows.Widgets.dll.dll 2.1MB
-
WidgetService/Microsoft.Windows.Widgets.winmd.dll 56KB
-
WidgetService/WidgetService.exe.exe 177KB
-
[Content_Types].xml.xml 807B
-
resources.pri1KB
-
[Content_Types].xml.xml 469B
AppxBlockMap.xml
- SHA256 e8243b29fe638cce57558818d47427305262c49eb93a28985f5cc2aa4add9aad
- MD5 14ec8de25269a9b8ffab1ee4eed5f999
- SHA1 423fa5f4a32639d6e629493abe2e28fb50350c45
- SHA512 41097d281a4989a8a5831928a22f34c505e296c570db9fe9f4c47edd2995cc4128ce962945d5698aad0ecde9aefcb35fd48c25796d5dba084c6fee4f3ec2d9b5
- TLSH T126E0AB58C1A63C228165CF640BB8E1143856615B01AD84F9BCCDCD2A286E0C274023E5
- MD5 SHA1 SHA512 TLSH
AppxMetadata/AppxBundleManifest.xml
- SHA256 36f5951c57b6a674ecce27f33e9aa2f734b238d102be0aee3d3236c2b008513e
- MD5 d8169674b4da25dc09cf73cd23359d21
- SHA1 ecaad8dd4606912075faa596fdc3203e0cdca1cf
- SHA512 f68820da5707d19d2176244b0d2e41806d11c84476f79d8a7b6767c8968cfe3d35f38103bd6405feaed579ceb82c6a4d4198941db15103dbcb77b51296dc0498
- TLSH T15241E38BF09E3C348411060FB63129D7A37FAA69547C519CDAEE7D226F4B1C50641379
- MD5 SHA1 SHA512 TLSH
AppxSignature.p7x
- SHA256 84ff364948d4ed9453950295672188f64b29a313b071835059435af5a1d26ae1
- MD5 4c1b72a6c3b5957ff78acfd23b10ab6f
- SHA1 995a62b20bc89d1b3f026354bcbe3cd7e4579f06
- SHA512 bc301cc9fd4220046fa15be0184864ede8f0e2dff07837f8fa511fce30efba96ea06888ccb1808e0022a30fdbc7ec27d9daf596e3530889e4d05ebb0eaeac357
- SSDEEP 192:UCzQlp720IXPiJFg9F4XzVcPBubLzVJXVueTXflYBQXBnX01k9z3AYyLd/ni:U8QP2i3g9F4DVc5u7nXcUthXBnR9z1KM
- TLSH T160423BE28B7891C7CE8E7C8093E8DE9B7C3D47D71970946606B5F29818537CAAB1453C
- MD5 SHA1 SHA512 SSDEEP TLSH
WidgetsPlatformRuntime-ARM64.msix
- SHA256 bd2cf6f4d51b525c73640e7e8f0307eff25833bfc648cc1776ff8f3d876081c1
- MD5 5f2d759fcdbb0c96b810cc5b69c303a0
- SHA1 e07bddce222c867e91e2635094059b4e96fe91f7
- SHA512 08f46cef32e2a8d4752635e51f095340727bbb43d34912dc75a2e05174fb3fb6706da6e032c2c90bfb2d409383af69b54b77caaf4d0c21bc38d224580bdbf772
- SSDEEP 12288:NKc2W0ne8J3Kp8EFGpPVIDbm0dSuTgKgsMUZCh5qjMLoaLVgdPmBd/vV6nxXlxk6:Nn+e8oCgZdNPXeqjMLkFmf/MJrR6QQjG
- TLSH T1B01533F5EB40C5C1DB5C40B9116E65357D0104C36DDEEE296F8CA8779EEC3A20263BAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
N/A
Digest Algorithm
sha256
Digest Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 22, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Marketplace CA G 026,OU=EOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:63:5d:23:75:cf:a0:4b:a6:96:d1:ee:00:01:00:63:5d:23
Issuer
CN=Microsoft Marketplace CA G 026,OU=EOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageKeyEncipherment
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 22, 2026 - May 25, 2026
Subject
CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:12:44:a2:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 28, 2011 - Mar 28, 2031
Subject
CN=Microsoft Marketplace CA G 026,OU=EOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:5b:4e:9a:32:69:b8:ad:80:0d:00:00:00:00:00:5b
Issuer
CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 11, 2024 - Apr 11, 2029
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:6F1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:1c:09:55:15:d7:c3:59:07:d1:00:01:00:00:02:1c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
AppxBlockMap.xml
- SHA256 c103effa3c6fa3b7aca2948e9bc1d4da698e3283f7c0f37b1c6212eebea1ac41
- MD5 30813c86d7a63b890023d05f88a15f7b
- SHA1 3dfa483fd5f0947e890c254c6c18fc36e51157c6
- SHA512 c37f47e197d39c7836ca6d6c7676f0bca01c68ae8e4346bb9487189217e5fb2dbaf82ff22c8358fd7c03c13126625e6e53e223bdbd558f6822c42eff43ca2a0a
- SSDEEP 96:aLVTLHU6cXAlGYGVkmbc7JYeC9QGzJ8YZJ9/wGQKJWah3TEyQSXBxtcU6jr8OE2y:2HHU6cClikm+mdQ+JBVRQAWah3XBxtcu
- TLSH T192C1F8B4963DBD37812C4BBD9FA5F6002C6048371777292E9C9F81B21CBB5A61E631C9
- MD5 SHA1 SHA512 SSDEEP TLSH
AppxManifest.xml
- SHA256 d4d57008ed42e277d3070e6207612a8e9b7862342fe0a901f1fc6402a3133db6
- MD5 23c91addc32fa0c8f4d0cd05467f5c80
- SHA1 e764f98833107e4390eb3df04a1181ab1f62798a
- SHA512 8e9e9ed7a48ce5e5441f4e4c5dfe1ac488780480e00f5723482da1ab4e4453853a4cde2f5f80a6b824f7c57a3ace76bfae9a90073590d4731f09eacfe68ff00a
- SSDEEP 192:6EuoCaI4IiI2XIhIkhZkI93Wr43WfGj3WrQ23WrkZ3WrvH3WQAjLjYvaBCilCjCd:6Euo5qpDZN2RgZAX8vaBfSDuFuUu7uUS
- TLSH T19A323145A09C3EA293378213AD07FB46AF1552E7E0488A287D6D84237FE77D082177DB
- MD5 SHA1 SHA512 SSDEEP TLSH
AppxMetadata/CodeIntegrity.cat
- SHA256 d090f2ebd94ccc4ec410dc782d6688088390b52c3eb97e9ffd5acd8187a041aa
- MD5 7585d53134fa1e86b4fa023466467400
- SHA1 e58f6a9b8fe46efb4afde01c8386221ea2df3c24
- SHA512 9504e555b6a1a54e25eb67362d8731f59ba50cbf1e4e29e57ad4bf338c91904d499cd49f40f8494210e71bf27b94fa62b6925bb55f6ab6c123f6699b1a3e31fd
- SSDEEP 192:Ly/yFqzQlp720IXPiJFg9F4XzVcPBubLzAkVueTXflYBQXBnX01k9z3AY4qz:OQP2i3g9F4DVc5u7AkcUthXBnR9z1rz
- TLSH T1AA524BE5866840C3CE8B6DA052DCE9AF7C7E0BDF682095792676F28808533C5FB1952D
- MD5 SHA1 SHA512 SSDEEP TLSH
AppxSignature.p7x
- SHA256 8b9e3de20790f787d2c1e0f14525fa2ddd9ce5dcf2c93bb785349ccfc64c7bd2
- MD5 f8721f4451464fabec1ea684b6a42cfe
- SHA1 b1c47977780ebee2ce5b07583529598c65106f07
- SHA512 9d539d8ea61b8a60fc62b1e4a0436f02bc0dc6477471618a38112193fa12e6ec4267e0be3641bd51c20374af16c62e6a772e097de9ddf647634e6480de87606a
- SSDEEP 192:b9zQlp720IXPiJFg9F4XzVcPBubwizoi2WVueTXflYBQXBnX01k9z3AYr:b5QP2i3g9F4DVc5u3oocUthXBnR9z1r
- TLSH T195422BE68B7890C3DE8E7C8053ECDDAB7C3D4BCB6960A46506A1F5D818437CAEB1452C
- MD5 SHA1 SHA512 SSDEEP TLSH
Images/LockScreenLogo.scale-200.png
- SHA256 a41a053b3fc3b0c109720ccd437a19725ae9163ea75990222a12b596b9c7ca76
- MD5 4cb21539b4c1f49f8d2c7aaf03b37472
- SHA1 e820c9a3deb909197081b0bf3216c06e13905f0a
- SHA512 fc3944d9373a1a1197753a207ef795143fa69a705e47235cadb1d51ab9ebc1bcb7020abf65c49a0ce1a71a34b14b0e0e9b268176a600ca689ddb0239a475d11e
- TLSH T1D221961BFD506990955CD48135EA8077882709D086A5F226FCDDDA572A312F288AE9D3
- MD5 SHA1 SHA512 TLSH
Images/SplashScreen.scale-200.png
- SHA256 a3382b0b1b834e95b888f06d483dc2d78fa1b3855e0683d5cfbd5167be9731a6
- MD5 a85c1d7624b6902cf8cebd6f0200a826
- SHA1 cab70988ca71bebec7bfeb3b6dbafe17b9ab0b4a
- SHA512 e7d336b4e23d95762318edf01b8af26a96b9bad744339208827c77d2d562d53dacd49d9cb24b54ad1c3eba738211c69d5343b958e34d1babac38e40218120b2a
- SSDEEP 192:E8HlH/FY/sk9ey3MbUkfIEhoZDHjfZDS0ib9aCmk:bHl/F6H0guoZHfUD9X
- TLSH T112F1A745F3D7801BD36C3A36473B4F31665301C667D18C83AF9ED2AA8E6E2749C75A48
- MD5 SHA1 SHA512 SSDEEP TLSH
Images/Square150x150Logo.scale-200.png
- SHA256 7f3cb5738e8f05544445f79996a313f8b47dee22dbc9c7be859d2707710f0c73
- MD5 1abee8855977b56e9b5559951947dfd2
- SHA1 e17b40817db7a239fc239d83efcc951fb824e3ff
- SHA512 dc314c17541e1cefca3a8e65ea2a70b2bd88df9f8fa92fa5c144ca5c2fb8d625d234a9121e37dc552d52baca7ea6a167ad632f005d638185cb8085ac871d73a7
- TLSH T1EE51C8ABEE50AC1174D6C8CA20E9962B27DB09C2C893F353FD59E51F6674171244D4CE
- MD5 SHA1 SHA512 TLSH
Images/Square44x44Logo.scale-200.png
- SHA256 594492a25070951d7462c091d9f899a66f55ba992bb9b05d98d50f67cdfb2abe
- MD5 ba4903eb7b32a12ed1101f73f4a3035c
- SHA1 2f166237094dea94d952d10b9eeae81806844f1c
- SHA512 b31f52321a0c4dcf09a1628ac9005a5d64dfd5c9fb1e5e4279244011ae4eff63f3c5b9fdcd9d0ccdd700c4504c91ed08341d159fd67350cdb157881b92ada2ae
- TLSH T1F431C82EFC946891E645D1A212F6D02FC9260A80CEC4E17ADCCBC4976F312B54C3D6DA
- MD5 SHA1 SHA512 TLSH
Images/Square44x44Logo.targetsize-24_altform-unplated.png
- SHA256 48cf9c22156a0b3d77982641f972785e7861a7257f7bcf155be7d5a12e1aa3d8
- MD5 f8025aca886992b4f6dbae7d1fa05826
- SHA1 5f6a6d391b95a3061ccca6e6fdd6955ede63b4ed
- SHA512 369ccff4be4caf34e3dda4e4c7de45863212e67dc765466f902881d2997593c5ce11e2552fa7a2f3f69a11c5a3acccef1d1c0877bb60dada435c351b9df7b611
- TLSH T12D21513EFC80AC41D5ACE49324FA6027DC1A49C09AE4E061BCDED5472E741B689ADED7
- MD5 SHA1 SHA512 TLSH
Images/StoreLogo.png
- SHA256 ae95e99a96251abaf8de15c9cdaddb8cefb1b8b320b10a4f1f4e1dc3c25c1b1a
- MD5 3b0fd2d8bb385fdf5035d66be31076c6
- SHA1 0828b7257db74a4ecd5eeb6b7b4971f0fdc4d9d1
- SHA512 07bd0b93cfa40d0205d7271a1969f7df235619a47d2e15421b0e77da63ae3f27ebc8005d13043129169362c5d695eaefa0e184a45a6a077ef9b499f35b735811
- TLSH T1BA31991EFE501444E594D5D119F74167D92709C0C5A4F476BC8E8C1B1D305F7882C6DF
- MD5 SHA1 SHA512 TLSH
Images/Wide310x150Logo.scale-200.png
- SHA256 b5b7754832c08e58faacfe64ea4b9f8b59b52a658e4eea4aab3790cfb89faa03
- MD5 c34b2e6aee8ccd42e0955a6d5e623e1b
- SHA1 04ddefe5bc5f43ae12a7433f6f236ddab101ac42
- SHA512 5f91c3030ad4299ff937ad99590eaedf1f32bb26656bc50ce0a9630d9e285ff0a8d0a54debabf64dfe921f9f1d62f37650c4085e3e1424501eabba7a8253cdc9
- TLSH T1D96186A6D54024876AA0978B58A8F2B5CC520708EDE7AEE121F97D3EDB05AF100D5CDB
- MD5 SHA1 SHA512 TLSH
Microsoft.Windows.Widgets.Internal.winmd
- SHA256 e922916f9263c770fbf812ace09cecfb41e7b7d1c37720f3d5e84ad483835bb6
- MD5 3346bc4fcb2794d69d7484e4861b6338
- SHA1 9e26704280aa2507e11f7af8d43b489b5c168b43
- SHA512 fca7dacc62d6dc8045ed75d7caafe03bce131da691da203eef0758c6d6e957f6d906e4d05e37e707506c9e6140d2ba0020ec6d37fa031a6816e0e9da63f2ce3f
- SSDEEP 384:RvZB5OpfS5ro2O6vYz+dnqWS+KZ2qOimDc:9f5OpSMzQnqWS+G2qOimg
- TLSH T1E852846725AE8C27C61FA47FECA00F115632C95BB803EB281B4D06F5DCD71E916267E1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
generic
Microsoft.Windows.Widgets.winmd
- SHA256 e1c7a767d65b78f8d804d702edc2f756abc442340411de272093348794025e10
- MD5 4f530338bc5017398cb2642a8fcf649b
- SHA1 cc47881c2cfc380f4cfcbd2500a113c2dbb6b956
- SHA512 df7be65a53b6c901ea5f9bc20cf01180254afa040c60c456f11409726a97d94ad3d6c33898a2ba39c725e7f59731ee31f17683edf495a5b8b898e3a773e1bb58
- SSDEEP 768:4puTJ5i85vuNuR3+Lcak5aheYvLq2LqhtRYY9YihM/IhtRYY9YihMN2djVv0v5ET:N085P3+LbiYsDdj+5s1KYsXvm4yiG
- TLSH T18A43B44674AA8FB2CEDD157A2C665B51333BD6A7D6029B270F1C4C609CC3BC57A09BB0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
generic
WidgetService/Microsoft.Windows.Widgets.Internal.winmd
- SHA256 e922916f9263c770fbf812ace09cecfb41e7b7d1c37720f3d5e84ad483835bb6
- MD5 3346bc4fcb2794d69d7484e4861b6338
- SHA1 9e26704280aa2507e11f7af8d43b489b5c168b43
- SHA512 fca7dacc62d6dc8045ed75d7caafe03bce131da691da203eef0758c6d6e957f6d906e4d05e37e707506c9e6140d2ba0020ec6d37fa031a6816e0e9da63f2ce3f
- SSDEEP 384:RvZB5OpfS5ro2O6vYz+dnqWS+KZ2qOimDc:9f5OpSMzQnqWS+G2qOimg
- TLSH T1E852846725AE8C27C61FA47FECA00F115632C95BB803EB281B4D06F5DCD71E916267E1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
generic
WidgetService/Microsoft.Windows.Widgets.dll
- SHA256 1b10221583bcfcc2ccb706962c61bbd479f74ddef4a05ee7baf5424e83dd84d9
- MD5 403ff8fb380a58c600ad77d6f3093edb
- SHA1 fbfe205406012380b0908794a274c7f08083b841
- SHA512 770fc1f3dd10620b92d90350792fd1d8c02d8a9dd8dba4332c4adf045066592ca33f092fe8f96ff25d38ab8759c145bc39dba99c1a4ee43c58601818bbc772a4
- SSDEEP 12288:ws6d7Kpj5q4kgHC5ngN4YMjrX5jAouECnTsxSFC/COOv7/DofCPPq4RCWiLE+gXQ:ws6dip1uP4hwf8h0lhSMXlpICjoLk
- TLSH T129C53D90BA6C9951E7EF63385C579FAC3533A9B49C208357744A032EDDE33C2C6E6291
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
WidgetService/Microsoft.Windows.Widgets.winmd
- SHA256 e1c7a767d65b78f8d804d702edc2f756abc442340411de272093348794025e10
- MD5 4f530338bc5017398cb2642a8fcf649b
- SHA1 cc47881c2cfc380f4cfcbd2500a113c2dbb6b956
- SHA512 df7be65a53b6c901ea5f9bc20cf01180254afa040c60c456f11409726a97d94ad3d6c33898a2ba39c725e7f59731ee31f17683edf495a5b8b898e3a773e1bb58
- SSDEEP 768:4puTJ5i85vuNuR3+Lcak5aheYvLq2LqhtRYY9YihM/IhtRYY9YihMN2djVv0v5ET:N085P3+LbiYsDdj+5s1KYsXvm4yiG
- TLSH T18A43B44674AA8FB2CEDD157A2C665B51333BD6A7D6029B270F1C4C609CC3BC57A09BB0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
generic
WidgetService/WidgetService.exe
- SHA256 30e04930ce9d3a3b604f98ade387523b35e3175451221ef47187f04238629e67
- MD5 0c6cf8c3419810a2a49ff1cd4022af19
- SHA1 523b49648df7a729eab76e511cb8649d0583b4ed
- SHA512 cdf68e5a3e847b780c90cff3f6cbcf5f98d49b32f91e2f1b0bcf3fcfe5606a1191ae02219ad0893922565e87da1f06242c0fb964496637fa5b353eb7181ddf0f
- SSDEEP 3072:eAQu9PPDU9bqUXOxaDuMcmn0/5/nkw6BQEwpUP3n5S7ShRTorLzlcb/R:rQCPDU5/Ox2vn0/1kbP353MrLq/
- TLSH T1CB2408A16B8DA8D5E2C7A23C8D618764323BF5789B30C247B15B033FED9A5C6DED0152
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
[Content_Types].xml
- SHA256 675f93dbc4ea72bd69398d09b52a259557fbd00f04b1932561e90350fafc2b7f
- MD5 00770e512724bac9f10e68d2b1314f8f
- SHA1 c0e6e5b660ebaba081033c9062a05e2ac34dac41
- SHA512 d38435c8e9fffd397c274f7d6da918530c80248f82a2e949617a3f86f87e710f20661b77ee4e8de63ea44bef1979d0c794cd61b03b17a78fb21bdbfa87b7e794
- TLSH T15C014EE2703B9CB003A69DBFD966AD541272147DA4D47B0CBF99564E90E075B01713C8
- MD5 SHA1 SHA512 TLSH
resources.pri
- SHA256 80eb74c08546b7e5a65e8ac4848628604a4b1d46e8695ab159717aa224cf6b5a
- MD5 4b26a44a12468faab3ca1825d7c86215
- SHA1 3f3befd1104bc2cd24a2d55ea79d184184238741
- SHA512 4dff5845ab8fcebf1397412dea3375d43993fde220695c4ad1a4adcd2c84a649db7ada95df7775cf12ba82198e356d84150cb2bebe5ce45c21818d40035f1107
- TLSH T18B316777BB68AD02F17B6B39D4A343343634B907B763070A129C92315C507C4AE72B65
- MD5 SHA1 SHA512 TLSH
WidgetsPlatformRuntime-x64.msix
- SHA256 4dd3a29a440a60a1e6a176a434b1b3829ddd034b7b6bbaa61d0e884341c6d7eb
- MD5 83254844306daaf403086030f785931b
- SHA1 4c4d9e2db58ce977a1713c11953d4af859de5dc2
- SHA512 c471003547c0a9c7890fc5f065a3aa38a5c044b4f93e08b06a48d0b49cd83af95a969f9ee958723d3a01e8dff758bb183d991326b2429fa5259df735bfc024e6
- SSDEEP 24576:NvQA9QA4SspZlGST1Ny6W9Zz1nI3tkv5537NTPnqes4h:1T9T7iD11uZzSyLNTPqe5
- TLSH T10D0533047ED57162D768D8B02BEB2ECB35C94BC27EF09455EEC5C82E892E8D49052BCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
N/A
Digest Algorithm
sha256
Digest Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 22, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Marketplace CA G 026,OU=EOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:63:5d:23:75:cf:a0:4b:a6:96:d1:ee:00:01:00:63:5d:23
Issuer
CN=Microsoft Marketplace CA G 026,OU=EOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageKeyEncipherment
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 22, 2026 - May 25, 2026
Subject
CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:12:44:a2:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 28, 2011 - Mar 28, 2031
Subject
CN=Microsoft Marketplace CA G 026,OU=EOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:5b:4e:9a:32:69:b8:ad:80:0d:00:00:00:00:00:5b
Issuer
CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 11, 2024 - Apr 11, 2029
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:6F1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:1c:09:55:15:d7:c3:59:07:d1:00:01:00:00:02:1c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
AppxBlockMap.xml
- SHA256 a652dcd43cda239b177a0a5c9969f3a5f06950e9633dd5e41d77450939b84893
- MD5 13132f92b63cfb80e89a40ca47fda14b
- SHA1 75fbfc42fd1dda3652d22a7dc2c5270adc165ed2
- SHA512 e58fc4897c7af750c942733784f9d20d69896116f3687dd979a7432d8281792e8ac33600bf23d6a7e9de1c688bdc10b2732f31d37fa97bf6901b86a31f4b5ba9
- SSDEEP 96:aLVTLHUO73cXAlGYGVkmbuYZ/u69QeJ8YK/ux9/eJNDRhLB/oaf3nLgO0nv0JOHh:2HHU43cClikm7d9QeJBeK0NthL1PfX4P
- TLSH T13BB1FEE05A3CBD7A822C1ABD9F65F2141C60582717372D0E9C8FD1B64CBB4A61F631D5
- MD5 SHA1 SHA512 SSDEEP TLSH
AppxManifest.xml
- SHA256 1a0b6d558129d7eb715968be9c288b367f34e6bb1d96d4f94ab8d1fc7e6a561e
- MD5 e3e6d819ae273fb5f87bd8cf91f1f275
- SHA1 e23928b34e48bfeee273ec379f669c8c1616b53f
- SHA512 449463b7aef4f50a6e886943076b9c1aec59a864895a3e121cc28d0b058aeedd6a51787f167bc40b9dbe1c1ead286096c3757b23df0e276fc5c33d127df7dd8f
- SSDEEP 192:6EuodCaI4IiI2XIhIkhZkI93Wr43WfGj3WrQ23WrkZ3WrvH3WQAjLjYvaBCilCjA:6Euod5qpDZN2RgZAX8vaBfSDuFuUu7uP
- TLSH T10A323145A09C3EA293378213AD07FB46AF1552E7E0488A287D6D84237FE77D482177DB
- MD5 SHA1 SHA512 SSDEEP TLSH
AppxMetadata/CodeIntegrity.cat
- SHA256 367610c1466e03feb0c7ef8ffc65a146c416f6aa66ab124f45a1e7f338f2468c
- MD5 1b67847ccd6aefa8b24c460fd37bed4a
- SHA1 9a7f6eb897c0a36c53f3e611623f794f472c349e
- SHA512 3cf45bca1e3f18ee8a719ddd02c613dc63dd7e7994d7f002d68cceb363161fc6548007d237c5a6e2cde278eefd09b8a9d66d2cdee874041f90b5bf6ddf24a8d5
- SSDEEP 192:v2zQlp720IXPiJFg9F4XzVcPBubLzKVueTXflYBQXBnX01k9z3AYJ1X:v4QP2i3g9F4DVc5u7KcUthXBnR9z1Jt
- TLSH T183524CE18A2840C3DD8F7C9053DCDEAB7C7E4BDF586095392662F69808533C6EB2952D
- MD5 SHA1 SHA512 SSDEEP TLSH
AppxSignature.p7x
- SHA256 8b4fb199e0d7456a82a1085e9c112ef23460d06e2fe477acb3a6f6ec611920ec
- MD5 418a034b5d236a9afed06f9760072137
- SHA1 6c6042286e36ccabfebf7f175ac9ab2036c233d4
- SHA512 a493d0ae521ee16c9114ed517f427848c3894b109b53c01209d5757a47e3db11fcc175163ae7f5c97c0a8192d3f84db3584c311a38b77cf83e6124e665ffce29
- SSDEEP 192:bM7zQlp720IXPiJFg9F4XzVcPBubwizczEVueTXflYBQXBnX01k9z3AYwcA:bwQP2i3g9F4DVc5u3cocUthXBnR9z1jA
- TLSH T15F423AE64B7890C3DE8B7C8093D8DEA73C3C07C71960956506A5F59818937CAAB1453C
- MD5 SHA1 SHA512 SSDEEP TLSH
Images/LockScreenLogo.scale-200.png
- SHA256 a41a053b3fc3b0c109720ccd437a19725ae9163ea75990222a12b596b9c7ca76
- MD5 4cb21539b4c1f49f8d2c7aaf03b37472
- SHA1 e820c9a3deb909197081b0bf3216c06e13905f0a
- SHA512 fc3944d9373a1a1197753a207ef795143fa69a705e47235cadb1d51ab9ebc1bcb7020abf65c49a0ce1a71a34b14b0e0e9b268176a600ca689ddb0239a475d11e
- TLSH T1D221961BFD506990955CD48135EA8077882709D086A5F226FCDDDA572A312F288AE9D3
- MD5 SHA1 SHA512 TLSH
Images/SplashScreen.scale-200.png
- SHA256 a3382b0b1b834e95b888f06d483dc2d78fa1b3855e0683d5cfbd5167be9731a6
- MD5 a85c1d7624b6902cf8cebd6f0200a826
- SHA1 cab70988ca71bebec7bfeb3b6dbafe17b9ab0b4a
- SHA512 e7d336b4e23d95762318edf01b8af26a96b9bad744339208827c77d2d562d53dacd49d9cb24b54ad1c3eba738211c69d5343b958e34d1babac38e40218120b2a
- SSDEEP 192:E8HlH/FY/sk9ey3MbUkfIEhoZDHjfZDS0ib9aCmk:bHl/F6H0guoZHfUD9X
- TLSH T112F1A745F3D7801BD36C3A36473B4F31665301C667D18C83AF9ED2AA8E6E2749C75A48
- MD5 SHA1 SHA512 SSDEEP TLSH
Images/Square150x150Logo.scale-200.png
- SHA256 7f3cb5738e8f05544445f79996a313f8b47dee22dbc9c7be859d2707710f0c73
- MD5 1abee8855977b56e9b5559951947dfd2
- SHA1 e17b40817db7a239fc239d83efcc951fb824e3ff
- SHA512 dc314c17541e1cefca3a8e65ea2a70b2bd88df9f8fa92fa5c144ca5c2fb8d625d234a9121e37dc552d52baca7ea6a167ad632f005d638185cb8085ac871d73a7
- TLSH T1EE51C8ABEE50AC1174D6C8CA20E9962B27DB09C2C893F353FD59E51F6674171244D4CE
- MD5 SHA1 SHA512 TLSH
Images/Square44x44Logo.scale-200.png
- SHA256 594492a25070951d7462c091d9f899a66f55ba992bb9b05d98d50f67cdfb2abe
- MD5 ba4903eb7b32a12ed1101f73f4a3035c
- SHA1 2f166237094dea94d952d10b9eeae81806844f1c
- SHA512 b31f52321a0c4dcf09a1628ac9005a5d64dfd5c9fb1e5e4279244011ae4eff63f3c5b9fdcd9d0ccdd700c4504c91ed08341d159fd67350cdb157881b92ada2ae
- TLSH T1F431C82EFC946891E645D1A212F6D02FC9260A80CEC4E17ADCCBC4976F312B54C3D6DA
- MD5 SHA1 SHA512 TLSH
Images/Square44x44Logo.targetsize-24_altform-unplated.png
- SHA256 48cf9c22156a0b3d77982641f972785e7861a7257f7bcf155be7d5a12e1aa3d8
- MD5 f8025aca886992b4f6dbae7d1fa05826
- SHA1 5f6a6d391b95a3061ccca6e6fdd6955ede63b4ed
- SHA512 369ccff4be4caf34e3dda4e4c7de45863212e67dc765466f902881d2997593c5ce11e2552fa7a2f3f69a11c5a3acccef1d1c0877bb60dada435c351b9df7b611
- TLSH T12D21513EFC80AC41D5ACE49324FA6027DC1A49C09AE4E061BCDED5472E741B689ADED7
- MD5 SHA1 SHA512 TLSH
Images/StoreLogo.png
- SHA256 ae95e99a96251abaf8de15c9cdaddb8cefb1b8b320b10a4f1f4e1dc3c25c1b1a
- MD5 3b0fd2d8bb385fdf5035d66be31076c6
- SHA1 0828b7257db74a4ecd5eeb6b7b4971f0fdc4d9d1
- SHA512 07bd0b93cfa40d0205d7271a1969f7df235619a47d2e15421b0e77da63ae3f27ebc8005d13043129169362c5d695eaefa0e184a45a6a077ef9b499f35b735811
- TLSH T1BA31991EFE501444E594D5D119F74167D92709C0C5A4F476BC8E8C1B1D305F7882C6DF
- MD5 SHA1 SHA512 TLSH
Images/Wide310x150Logo.scale-200.png
- SHA256 b5b7754832c08e58faacfe64ea4b9f8b59b52a658e4eea4aab3790cfb89faa03
- MD5 c34b2e6aee8ccd42e0955a6d5e623e1b
- SHA1 04ddefe5bc5f43ae12a7433f6f236ddab101ac42
- SHA512 5f91c3030ad4299ff937ad99590eaedf1f32bb26656bc50ce0a9630d9e285ff0a8d0a54debabf64dfe921f9f1d62f37650c4085e3e1424501eabba7a8253cdc9
- TLSH T1D96186A6D54024876AA0978B58A8F2B5CC520708EDE7AEE121F97D3EDB05AF100D5CDB
- MD5 SHA1 SHA512 TLSH
Microsoft.Windows.Widgets.Internal.winmd
- SHA256 8c4bf1bbaaa804d3e418ca6c153213a82e918faa1a15cd9be1d445c2c2276f32
- MD5 d16f8ba343e01b3ba440272029250140
- SHA1 0101ece8657d1d5e9420450c9c0d6848d7a02bb1
- SHA512 7a33109d7c1c0fa98ee9030fc0f4afc83db7961ced2e756315ea3b06eaafc6b0e116aff18caaa55cefa62fca5f1b780e2ec6393e4baf92b5e1ced098d089425c
- SSDEEP 384:ivZB5OpfS5ro2O6vYz+OnqWS+KZ2qOimDc:if5OpSMzfnqWS+G2qOimg
- TLSH T13F52846725AE8C27C61FA47FECA00F215632C95BB803EB291B4D06F5DCC71E916267E1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
generic
Microsoft.Windows.Widgets.winmd
- SHA256 99b9e0a1fc8465f0c703ca1395ec9e24572f6bb62d814db834e9db8f100fa975
- MD5 4906ff46f2c556c879c366f1e57ca488
- SHA1 cc00061de22e5bdd6f834b7d82283a5433060781
- SHA512 ed4f61da127d58735dd3cc3e952d027951d893dc6452869bdc1a54e9291be877dec66d3390431aa6e6509c2294fb28018186e0215e966445e790c15ab1ff2493
- SSDEEP 768:zpuTJ5i85vuNuR3+Lcak5aheYvLq2LqhtRYY9YihM/IhtRYY9YihMN2djVv0v5El:0085P3+LbiYsDdj+5s1KYsXvU4yiG
- TLSH T1D043B44674AA8FB2CEDD157A2C665B51333BD6A7D6029B270F1C4C609CC3BC57A09BB0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
generic
WidgetService/Microsoft.Windows.Widgets.Internal.winmd
- SHA256 8c4bf1bbaaa804d3e418ca6c153213a82e918faa1a15cd9be1d445c2c2276f32
- MD5 d16f8ba343e01b3ba440272029250140
- SHA1 0101ece8657d1d5e9420450c9c0d6848d7a02bb1
- SHA512 7a33109d7c1c0fa98ee9030fc0f4afc83db7961ced2e756315ea3b06eaafc6b0e116aff18caaa55cefa62fca5f1b780e2ec6393e4baf92b5e1ced098d089425c
- SSDEEP 384:ivZB5OpfS5ro2O6vYz+OnqWS+KZ2qOimDc:if5OpSMzfnqWS+G2qOimg
- TLSH T13F52846725AE8C27C61FA47FECA00F215632C95BB803EB291B4D06F5DCC71E916267E1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
generic
WidgetService/Microsoft.Windows.Widgets.dll
- IMPHASH 4ff6017853641dcd2f294535f68e7561
- SHA256 e35a53256360a890026064bfafa07710c413d259ae9e93b3441e0b9a361ff39e
- MD5 673364709579f127be4dd890d89ecdd3
- SHA1 bdd761ba354e6d9ddd321efb60721ada2fad76b4
- SHA512 80a1cb6dac7ecc9e21a4aeae8a565236ffb0b6df23def003d694b937e032160f4aa3fc61525fbd8bb82d6ae72a13a283e3ed023b77577b7277ee17e66577d9b2
- SSDEEP 24576:jHlcR309rNpiFhoPJ89Cih0lhSMXlP/CyEV3Vtg:jHA30tYhoPJJ/m3
- TLSH T1DAB51B81B6BC41A2D67E52348C575F49BA3178A94F3093E72852132E4F777C2CAFA790
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
679040
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\__w\1\s\WidgetDeveloperPlatform\src\x64\Release\Microsoft.Windows.Widgets\Microsoft.Windows.Widgets.pdb
ole32
CoCreateFreeThreadedMarshaler
CoGetApartmentType
CoTaskMemAlloc
CoGetObjectContext
CoCreateInstance
RoGetAgileReference
CoTaskMemFree
CoImpersonateClient
CoRevertToSelf
kernel32
QueryPerformanceFrequency
InterlockedFlushSList
InterlockedPushEntrySList
OutputDebugStringW
GetCurrentThreadId
FormatMessageW
IsDebuggerPresent
GetUserDefaultGeoName
SetLastError
GetLastError
InitOnceBeginInitialize
InitOnceComplete
Sleep
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
DeleteCriticalSection
ReleaseSRWLockShared
AcquireSRWLockShared
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetUserDefaultLocaleName
CloseHandle
GetCurrentProcess
GetCurrentThread
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
ReleaseSemaphore
GetModuleHandleExW
WaitForSingleObject
ReleaseMutex
WaitForSingleObjectEx
OpenSemaphoreW
HeapAlloc
GetProcAddress
CreateMutexExW
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
FreeLibrary
WideCharToMultiByte
DebugBreak
RtlUnwindEx
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
LCMapStringEx
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
GetTickCount64
GetStringTypeW
CreateSymbolicLinkW
GetFileInformationByHandleEx
CopyFileW
DeviceIoControl
AreFileApisANSI
SetFileInformationByHandle
GetFileInformationByHandle
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
CreateFileW
CreateDirectoryW
GetLocaleInfoEx
LocalFree
GetExitCodeThread
SwitchToThread
MultiByteToWideChar
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimePreciseAsFileTime
TrySubmitThreadpoolCallback
CreateEventW
SetEvent
TryAcquireSRWLockExclusive
FormatMessageA
SleepConditionVariableSRW
WakeAllConditionVariable
RtlPcToFileHeader
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
api-ms-win-eventing-provider-l1-1-0
EventSetInformation
EventRegister
EventUnregister
EventWriteTransfer
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressSingle
api-ms-win-core-registry-l1-1-0
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
api-ms-win-core-processthreads-l1-1-0
OpenProcessToken
OpenThreadToken
api-ms-win-appmodel-runtime-l1-1-1
GetPackageFamilyNameFromToken
api-ms-win-core-winrt-error-l1-1-0
RoTransformError
SetRestrictedErrorInfo
GetRestrictedErrorInfo
RoFailFastWithErrorContext
oleaut32
SetErrorInfo
SysFreeString
SysStringLen
GetErrorInfo
rpcrt4
NdrCStdStubBuffer_Release
NdrStubForwardingFunction
IUnknown_AddRef_Proxy
NdrOleFree
IUnknown_Release_Proxy
NdrOleAllocate
NdrDllGetClassObject
NdrStubCall3
CStdStubBuffer_Invoke
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_CountRefs
CStdStubBuffer_QueryInterface
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Disconnect
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Connect
NdrCStdStubBuffer2_Release
NdrDllCanUnloadNow
IUnknown_QueryInterface_Proxy
api-ms-win-core-winrt-string-l1-1-0
HSTRING_UserFree64
HSTRING_UserUnmarshal
HSTRING_UserUnmarshal64
HSTRING_UserMarshal64
HSTRING_UserMarshal
HSTRING_UserFree
HSTRING_UserSize64
HSTRING_UserSize
api-ms-win-core-errorhandling-l1-1-0
RaiseException
api-ms-win-core-sysinfo-l1-1-0
GetSystemInfo
api-ms-win-core-memory-l1-1-0
VirtualQuery
VirtualProtect
api-ms-win-core-libraryloader-l1-2-0
LoadLibraryExA
api-ms-win-crt-runtime-l1-1-0
_invoke_watson
_errno
_configure_narrow_argv
_beginthreadex
terminate
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_invalid_parameter_noinfo
abort
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_seh_filter_dll
api-ms-win-crt-string-l1-1-0
iswspace
strlen
_wcsnicmp
wcsncmp
strncmp
toupper
wcsnlen
strcmp
_wcsdup
strcpy_s
api-ms-win-crt-stdio-l1-1-0
_wfsopen
__stdio_common_vsprintf
fsetpos
setvbuf
fflush
ungetwc
ungetc
_fseeki64
__stdio_common_vsprintf_s
fputwc
fgetwc
fgetpos
fwrite
fclose
__stdio_common_vswprintf
fseek
__stdio_common_vswprintf_s
fgetc
api-ms-win-crt-heap-l1-1-0
_callnewh
calloc
malloc
free
api-ms-win-crt-math-l1-1-0
_ldsign
_dsign
_ldclass
_fdsign
_fdclass
ceilf
_dclass
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
___mb_cur_max_func
setlocale
___lc_locale_name_func
_lock_locales
localeconv
__pctype_func
_unlock_locales
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-convert-l1-1-0
atol
wcstoll
api-ms-win-core-winrt-error-l1-1-1
RoOriginateLanguageException
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
Name
.text
Size
895KB
Virtual Size
895KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.orpc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
783KB
Virtual Size
782KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
637KB
Virtual Size
643KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=260, version=35207,
count=12, id=259, version=35207,
count=2, id=260, version=30795,
count=48, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=100, id=261, version=35207,
count=5, id=257, version=30795,
count=289, id=1, productName=Unmarked objects,
count=101, id=265, version=35215,
count=1, id=256, version=35215,
count=1, id=255, version=35215,
count=1, id=258, version=35215,
WidgetService/Microsoft.Windows.Widgets.winmd
- SHA256 99b9e0a1fc8465f0c703ca1395ec9e24572f6bb62d814db834e9db8f100fa975
- MD5 4906ff46f2c556c879c366f1e57ca488
- SHA1 cc00061de22e5bdd6f834b7d82283a5433060781
- SHA512 ed4f61da127d58735dd3cc3e952d027951d893dc6452869bdc1a54e9291be877dec66d3390431aa6e6509c2294fb28018186e0215e966445e790c15ab1ff2493
- SSDEEP 768:zpuTJ5i85vuNuR3+Lcak5aheYvLq2LqhtRYY9YihM/IhtRYY9YihMN2djVv0v5El:0085P3+LbiYsDdj+5s1KYsXvU4yiG
- TLSH T1D043B44674AA8FB2CEDD157A2C665B51333BD6A7D6029B270F1C4C609CC3BC57A09BB0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
generic
WidgetService/WidgetService.exe
- IMPHASH 723a53cd3ad3af1ab56edde1b7a5f7a9
- SHA256 c9ef9e2982d1816954fbb4a184eb509034f82bcc958bdd443075d80e35af04ba
- MD5 89808dbf1c929d686a6a70e5c58145c7
- SHA1 34eff1d8ba97e27d57817e7adecace0811d09852
- SHA512 9b134641bb1b26f53de11c705184e893ddd4e2ced959c31a0badc147f43fc861d86d0a4a117d19c3226200c817ec1f6592b9d0facb2c65fd46063a0e9d222a6f
- SSDEEP 3072:igaEjdYDsgUGAJ4wpvGKhzd+0QDQFLhl/L/n/LBlT2w5ErBnb8kIKOCyg:EsFGAyQnabjO
- TLSH T187245A26BAA950E1E16F9138C8424A45FB32787587A0E7CB2761077B1F63BD0BE7D740
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
94224
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
WidgetService.pdb
kernel32
InitOnceBeginInitialize
InitOnceComplete
OutputDebugStringW
GetCurrentThreadId
FormatMessageW
IsDebuggerPresent
GetLastError
SetLastError
Sleep
SetEvent
CloseHandle
CreateEventExW
AllocConsole
CreateFileW
SetStdHandle
LocalFree
OpenEventW
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
ReleaseSemaphore
GetModuleHandleExW
WaitForSingleObject
ReleaseMutex
WaitForSingleObjectEx
OpenSemaphoreW
HeapAlloc
GetProcAddress
CreateMutexExW
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
FreeLibrary
WideCharToMultiByte
DebugBreak
TrySubmitThreadpoolCallback
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedPushEntrySList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceCounter
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
LCMapStringEx
GetSystemTimeAsFileTime
api-ms-win-core-com-l1-1-0
CoInitializeEx
CoRevokeClassObject
CoWaitForMultipleObjects
CoResumeClassObjects
CoCreateFreeThreadedMarshaler
CoRegisterClassObject
api-ms-win-eventing-provider-l1-1-0
EventWriteTransfer
EventSetInformation
EventRegister
EventUnregister
api-ms-win-core-registry-l1-1-0
RegGetValueW
api-ms-win-shcore-obsolete-l1-1-0
CommandLineToArgvW
api-ms-win-core-winrt-error-l1-1-0
RoFailFastWithErrorContext
GetRestrictedErrorInfo
SetRestrictedErrorInfo
oleaut32
SysFreeString
SysStringLen
SetErrorInfo
GetErrorInfo
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_set_app_type
_seh_filter_exe
_cexit
abort
_register_thread_local_exe_atexit_callback
_crt_atexit
_initialize_wide_environment
_initialize_onexit_table
_invalid_parameter_noinfo
terminate
_errno
_get_wide_winmain_command_line
_initterm
_c_exit
_initterm_e
_exit
exit
_invoke_watson
_configure_wide_argv
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswprintf
freopen_s
_set_fmode
_get_stream_buffer_pointers
__stdio_common_vswprintf_s
fclose
fflush
fgetc
fgetpos
fputc
fread
fsetpos
_fseeki64
ungetwc
fputwc
fgetwc
fwrite
setvbuf
ungetc
__p__commode
__acrt_iob_func
api-ms-win-crt-string-l1-1-0
iswspace
strlen
wcsnlen
__strncnt
strcmp
islower
_wcsdup
wcsncmp
isupper
strcpy_s
api-ms-win-crt-heap-l1-1-0
calloc
malloc
_callnewh
free
_set_new_mode
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-locale-l1-1-0
___lc_locale_name_func
_lock_locales
setlocale
__pctype_func
___mb_cur_max_func
___lc_codepage_func
_unlock_locales
_configthreadlocale
api-ms-win-crt-math-l1-1-0
ceilf
__setusermatherr
api-ms-win-core-winrt-error-l1-1-1
RoOriginateLanguageException
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
Name
.text
Size
117KB
Virtual Size
116KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
67KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=12, id=260, version=35207,
count=91, id=261, version=35207,
count=34, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=33145,
count=207, id=1, productName=Unmarked objects,
count=4, id=265, version=35215,
count=1, id=255, version=35215,
count=1, id=151,
count=1, id=258, version=35215,
[Content_Types].xml
- SHA256 e4fdffc2a439d4bc946c1780bcd11b791b42c1efd2a16ccfe714b526942e605d
- MD5 95686387d0c930dd2610d6a8ce0732eb
- SHA1 432734ee6f85df3791a9b27e40513c8fb8ad8dfa
- SHA512 535d36c442143ff55e3d12f3e6f92fc65093146481c85a04c9af2248f845df38160487310b48dd06f009f905b14796bfd04ed61a8f31c421bcb29f92a9edcda3
- TLSH T1CB014EE2703B9CB003A69DBFD966AD541272147DA4D47B0CBF99564E90E075B01713C8
- MD5 SHA1 SHA512 TLSH
resources.pri
- SHA256 80eb74c08546b7e5a65e8ac4848628604a4b1d46e8695ab159717aa224cf6b5a
- MD5 4b26a44a12468faab3ca1825d7c86215
- SHA1 3f3befd1104bc2cd24a2d55ea79d184184238741
- SHA512 4dff5845ab8fcebf1397412dea3375d43993fde220695c4ad1a4adcd2c84a649db7ada95df7775cf12ba82198e356d84150cb2bebe5ce45c21818d40035f1107
- TLSH T18B316777BB68AD02F17B6B39D4A343343634B907B763070A129C92315C507C4AE72B65
- MD5 SHA1 SHA512 TLSH
WidgetsPlatformRuntime-x86.msix
- SHA256 e9da352bd791cefc8ac30f466518a9199080af7bd0196baeca00ff4645e237fa
- MD5 f3c83e67048895029c3882e7ffb6171e
- SHA1 c8fc1352510c2ec1e8fbd33326879f44e257e7e8
- SHA512 07782cbd3af4ed8f660bad6bd8063d526bd1fb8866f2b7deeee51ec01d5908869a71f6fab83502c9a92c77af0d52aeba56761cc1731413dd95295ad4af4c8a96
- SSDEEP 12288:UjdQqnP7QqnEmwlq2Xm/WW4ZgPV0T5BrvpgRgFjofTPODU96y0dOJsZiFXXaa9Eo:UxQCQ/mwLW/9GgPVwbvpg8jhA96y0AJH
- TLSH T151F423743FF15808F228E07E3192523FA4B101D17EB51AB19FCAEA394DA5371419B6AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
N/A
Digest Algorithm
sha256
Digest Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 22, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Marketplace CA G 026,OU=EOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:63:5d:23:75:cf:a0:4b:a6:96:d1:ee:00:01:00:63:5d:23
Issuer
CN=Microsoft Marketplace CA G 026,OU=EOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageKeyEncipherment
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 22, 2026 - May 25, 2026
Subject
CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:12:44:a2:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 28, 2011 - Mar 28, 2031
Subject
CN=Microsoft Marketplace CA G 026,OU=EOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:5b:4e:9a:32:69:b8:ad:80:0d:00:00:00:00:00:5b
Issuer
CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 11, 2024 - Apr 11, 2029
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:6F1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:1c:09:55:15:d7:c3:59:07:d1:00:01:00:00:02:1c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
AppxBlockMap.xml
- SHA256 1bbf18968d1882d15ab6c417752dca18aaae71eb5547cb93c8ab404c1e9ef7ef
- MD5 41f5574b3cd43cb6b4cf342aeb16d575
- SHA1 d184f06ae59a3eb5236a508b2dffb24cd2278386
- SHA512 ecd65b27dc487da3ee5b8c2d9c1e354c8a717191003f5c4fbf1f6f8bb6bce11bb784f54a18d7e2107e43b47f3f9056758275b7a470277abd327008709b44c4d3
- SSDEEP 96:aLVTLHU6P78XAlGYGVkmbuYAQ9QuJ8Ytv9/dQGipJJpRDTkmlPF9SaYPqiexiRrP:2HHU6T8Clikm7A2QuJBtlVQGGJD5lPup
- TLSH T152B1ECB0553CBC3A912C4AF98F69F6105C61482767372E2EAD8EC1B65C6B4AB0E631C5
- MD5 SHA1 SHA512 SSDEEP TLSH
AppxManifest.xml
- SHA256 68dbac0696c6d137a6029091bb1a72be7a57f749ebfa8e361df9676122183b70
- MD5 ae175e451d22b6eec43cb700d8611947
- SHA1 f5da61e094b02546b9ec5a37c9d9e7b28393a16a
- SHA512 46429abd539ac48ca92433018bf1d1d6bccd7e93920a466e5f21be6f5175f811c92c3e7e44bf20dc268c1dca45ed2f3ca66424c544d61a944e706d6f423e8f36
- SSDEEP 192:6EuoMaI4IiI2XIhIkhZkI93Wr43WfGj3WrQ23WrkZ3WrvH3WQAjLjYvaBCilCjCd:6EuofqpDZN2RgZAX8vaBfSDuFuUu7uUS
- TLSH T1D5323145A09C3EA293378213AD07FB46AF1552E7E0488A287D6D84237FE77D482177DB
- MD5 SHA1 SHA512 SSDEEP TLSH
AppxMetadata/CodeIntegrity.cat
- SHA256 a6b7bb8df0bc52f2c0b2d943bed40cf875114421eb8c7c9b68a7f7e9320c14e3
- MD5 d863db49b3607b59afd3a6448f774695
- SHA1 9c51c265c00d6e7112c5c319debd47f04d7c7e1f
- SHA512 d6366e6782260172f047880aa2a1869e753619b52ea1ed470eb9d3ee6cbec5a69deba561f2ca1f5ebb2d764054d11ec52e490d58dbf7875c8d08e905df811971
- SSDEEP 192:cBXzQlp720IXPiJFg9F4XzVcPBubLzjVueTXflYBQXBnX01k9z3AYUbaUG:cBDQP2i3g9F4DVc5u7jcUthXBnR9z17
- TLSH T1BE525CE54B7840C3D94F6C9092D8DEAF7C7E4BDB1920953926B2F6D808533C6EB1982D
- MD5 SHA1 SHA512 SSDEEP TLSH
AppxSignature.p7x
- SHA256 4f783d0cc0d88485729bb95a9c8d57451b242050252bc3be63e9a7d1cbe2fd1d
- MD5 4ef1a96899493e606892b086bf331db7
- SHA1 719c2ad5a3c2bcb16fe64d084c48dec8099b334a
- SHA512 b223f79faa96411b842ba4308bbd712e8e4f023843f8d49bbe62103b2107b7bea4303d3dc5667caa95be3387c8d821fb9e2e21bde9eeabc1e89ed6b9c27b1641
- SSDEEP 192:btnzQlp720IXPiJFg9F4XzVcPBubwizuVueTXflYBQXBnX01k9z3AYr+8:bBQP2i3g9F4DVc5u3ucUthXBnR9z1i8
- TLSH T1EA423BE58B789087CE8E6C80A3D8DE9B7C3D47CB1960A96506A5F5D818837CAEB1453C
- MD5 SHA1 SHA512 SSDEEP TLSH
Images/LockScreenLogo.scale-200.png
- SHA256 a41a053b3fc3b0c109720ccd437a19725ae9163ea75990222a12b596b9c7ca76
- MD5 4cb21539b4c1f49f8d2c7aaf03b37472
- SHA1 e820c9a3deb909197081b0bf3216c06e13905f0a
- SHA512 fc3944d9373a1a1197753a207ef795143fa69a705e47235cadb1d51ab9ebc1bcb7020abf65c49a0ce1a71a34b14b0e0e9b268176a600ca689ddb0239a475d11e
- TLSH T1D221961BFD506990955CD48135EA8077882709D086A5F226FCDDDA572A312F288AE9D3
- MD5 SHA1 SHA512 TLSH
Images/SplashScreen.scale-200.png
- SHA256 a3382b0b1b834e95b888f06d483dc2d78fa1b3855e0683d5cfbd5167be9731a6
- MD5 a85c1d7624b6902cf8cebd6f0200a826
- SHA1 cab70988ca71bebec7bfeb3b6dbafe17b9ab0b4a
- SHA512 e7d336b4e23d95762318edf01b8af26a96b9bad744339208827c77d2d562d53dacd49d9cb24b54ad1c3eba738211c69d5343b958e34d1babac38e40218120b2a
- SSDEEP 192:E8HlH/FY/sk9ey3MbUkfIEhoZDHjfZDS0ib9aCmk:bHl/F6H0guoZHfUD9X
- TLSH T112F1A745F3D7801BD36C3A36473B4F31665301C667D18C83AF9ED2AA8E6E2749C75A48
- MD5 SHA1 SHA512 SSDEEP TLSH
Images/Square150x150Logo.scale-200.png
- SHA256 7f3cb5738e8f05544445f79996a313f8b47dee22dbc9c7be859d2707710f0c73
- MD5 1abee8855977b56e9b5559951947dfd2
- SHA1 e17b40817db7a239fc239d83efcc951fb824e3ff
- SHA512 dc314c17541e1cefca3a8e65ea2a70b2bd88df9f8fa92fa5c144ca5c2fb8d625d234a9121e37dc552d52baca7ea6a167ad632f005d638185cb8085ac871d73a7
- TLSH T1EE51C8ABEE50AC1174D6C8CA20E9962B27DB09C2C893F353FD59E51F6674171244D4CE
- MD5 SHA1 SHA512 TLSH
Images/Square44x44Logo.scale-200.png
- SHA256 594492a25070951d7462c091d9f899a66f55ba992bb9b05d98d50f67cdfb2abe
- MD5 ba4903eb7b32a12ed1101f73f4a3035c
- SHA1 2f166237094dea94d952d10b9eeae81806844f1c
- SHA512 b31f52321a0c4dcf09a1628ac9005a5d64dfd5c9fb1e5e4279244011ae4eff63f3c5b9fdcd9d0ccdd700c4504c91ed08341d159fd67350cdb157881b92ada2ae
- TLSH T1F431C82EFC946891E645D1A212F6D02FC9260A80CEC4E17ADCCBC4976F312B54C3D6DA
- MD5 SHA1 SHA512 TLSH
Images/Square44x44Logo.targetsize-24_altform-unplated.png
- SHA256 48cf9c22156a0b3d77982641f972785e7861a7257f7bcf155be7d5a12e1aa3d8
- MD5 f8025aca886992b4f6dbae7d1fa05826
- SHA1 5f6a6d391b95a3061ccca6e6fdd6955ede63b4ed
- SHA512 369ccff4be4caf34e3dda4e4c7de45863212e67dc765466f902881d2997593c5ce11e2552fa7a2f3f69a11c5a3acccef1d1c0877bb60dada435c351b9df7b611
- TLSH T12D21513EFC80AC41D5ACE49324FA6027DC1A49C09AE4E061BCDED5472E741B689ADED7
- MD5 SHA1 SHA512 TLSH
Images/StoreLogo.png
- SHA256 ae95e99a96251abaf8de15c9cdaddb8cefb1b8b320b10a4f1f4e1dc3c25c1b1a
- MD5 3b0fd2d8bb385fdf5035d66be31076c6
- SHA1 0828b7257db74a4ecd5eeb6b7b4971f0fdc4d9d1
- SHA512 07bd0b93cfa40d0205d7271a1969f7df235619a47d2e15421b0e77da63ae3f27ebc8005d13043129169362c5d695eaefa0e184a45a6a077ef9b499f35b735811
- TLSH T1BA31991EFE501444E594D5D119F74167D92709C0C5A4F476BC8E8C1B1D305F7882C6DF
- MD5 SHA1 SHA512 TLSH
Images/Wide310x150Logo.scale-200.png
- SHA256 b5b7754832c08e58faacfe64ea4b9f8b59b52a658e4eea4aab3790cfb89faa03
- MD5 c34b2e6aee8ccd42e0955a6d5e623e1b
- SHA1 04ddefe5bc5f43ae12a7433f6f236ddab101ac42
- SHA512 5f91c3030ad4299ff937ad99590eaedf1f32bb26656bc50ce0a9630d9e285ff0a8d0a54debabf64dfe921f9f1d62f37650c4085e3e1424501eabba7a8253cdc9
- TLSH T1D96186A6D54024876AA0978B58A8F2B5CC520708EDE7AEE121F97D3EDB05AF100D5CDB
- MD5 SHA1 SHA512 TLSH
Microsoft.Windows.Widgets.Internal.winmd
- SHA256 77da72149c974ed6ba947f5d30330a9e06bb7a829ffbffdce8ccc97d8cd7e68d
- MD5 418a7b3092ec00a21b03ef7e8c546973
- SHA1 61db3a919fc14cdb633598db6b0bd3b876541cc5
- SHA512 db39a57bd66cb73a2bd495fe71591052d091471a3b7e47f2b210aab00c18e0a08f1568f50c312292f8d469aaa5799faa87082a5285bd0437a98f293e618521b5
- SSDEEP 384:yvZB5OpfS5ro2O6vYz+9nqWS+KZ2qOimDc:yf5OpSMzInqWS+G2qOimg
- TLSH T17552836725AE8C27C61FA47FECA00F215632C95BB803EB281B4D06F5DCD71E916267E1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
generic
Microsoft.Windows.Widgets.winmd
- SHA256 f313cac130f2bf9248562e07e9dfccd21a6c5c51a37bafc986c3d8337bdcc1a9
- MD5 a945cb5e23211522d450ee6f0c46edb5
- SHA1 7594fa389c8b180c68f36f06006b9b45f9b46e3b
- SHA512 7f159f9f8cc2cbfa105ee1153fb7db66d4df3073618909ab45ba7166b474c5e2982aa6a9a3b85b8c067fded4da89c1a3358f20fed67a46616fab16bd283ce68f
- SSDEEP 768:DpuTJ5i85vuNuR3+Lcak5aheYvLq2LqhtRYY9YihM/IhtRYY9YihMN2djVv0v5Ec:E085P3+LbiYsDdj+5s1KYsXvJ4yiG
- TLSH T12643B44674AA8FB2CEDD157A2C665B51333BD6A7D6029B270F1C4C609CC3BC57A09BB0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
generic
WidgetService/Microsoft.Windows.Widgets.Internal.winmd
- SHA256 77da72149c974ed6ba947f5d30330a9e06bb7a829ffbffdce8ccc97d8cd7e68d
- MD5 418a7b3092ec00a21b03ef7e8c546973
- SHA1 61db3a919fc14cdb633598db6b0bd3b876541cc5
- SHA512 db39a57bd66cb73a2bd495fe71591052d091471a3b7e47f2b210aab00c18e0a08f1568f50c312292f8d469aaa5799faa87082a5285bd0437a98f293e618521b5
- SSDEEP 384:yvZB5OpfS5ro2O6vYz+9nqWS+KZ2qOimDc:yf5OpSMzInqWS+G2qOimg
- TLSH T17552836725AE8C27C61FA47FECA00F215632C95BB803EB281B4D06F5DCD71E916267E1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
generic
WidgetService/Microsoft.Windows.Widgets.dll
- IMPHASH de113e36a7ea212274b4ac7fc6148c2c
- SHA256 f913ab62f2a96311557d1b74399379a64d88edea7ff9c252739135ad2e670fc2
- MD5 a8a6cefcf753051ff43ad715228ab09d
- SHA1 498914217fd5d29433923097c66f6fa79ce4e288
- SHA512 c813d83e4af629a70204c0584a703b1887fdbef1f244da4e10cabf7c17f4095daa85d83c6092a3d7f6632b8bdec6e5c715f25a5f74a7a3c213719bf8636b31de
- SSDEEP 24576:+WsaTOzRqBRWF7ZKdnHgYNsUZyh0lhSMXlE98A0ju6NusOa:+6ONKWp0sUZvGwK6NusOa
- TLSH T106A52A907AFDC242DA7E13311C19BFCD3938A4AA9F2042E73489576E99624C387B77D1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
656160
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\__w\1\s\WidgetDeveloperPlatform\src\Win32\Release\Microsoft.Windows.Widgets\Microsoft.Windows.Widgets.pdb
ole32
CoCreateFreeThreadedMarshaler
CoCreateInstance
CoTaskMemAlloc
CoGetObjectContext
CoGetApartmentType
RoGetAgileReference
CoTaskMemFree
CoImpersonateClient
CoRevertToSelf
kernel32
QueryPerformanceFrequency
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
OutputDebugStringW
GetCurrentThreadId
FormatMessageW
IsDebuggerPresent
GetUserDefaultGeoName
SetLastError
GetLastError
InitOnceBeginInitialize
InitOnceComplete
Sleep
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
DeleteCriticalSection
ReleaseSRWLockShared
AcquireSRWLockShared
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetUserDefaultLocaleName
CloseHandle
GetCurrentProcess
GetCurrentThread
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
ReleaseSemaphore
GetModuleHandleExW
WaitForSingleObject
ReleaseMutex
WaitForSingleObjectEx
OpenSemaphoreW
HeapAlloc
GetProcAddress
CreateMutexExW
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
FreeLibrary
WideCharToMultiByte
DebugBreak
InterlockedPushEntrySList
RtlUnwind
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
LCMapStringEx
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
GetTickCount64
GetStringTypeW
CreateSymbolicLinkW
GetFileInformationByHandleEx
CopyFileW
DeviceIoControl
AreFileApisANSI
SetFileInformationByHandle
GetFileInformationByHandle
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
CreateFileW
CreateDirectoryW
GetLocaleInfoEx
LocalFree
GetExitCodeThread
SwitchToThread
MultiByteToWideChar
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
IsProcessorFeaturePresent
GetSystemTimePreciseAsFileTime
TrySubmitThreadpoolCallback
CreateEventW
SetEvent
QueryPerformanceCounter
TryAcquireSRWLockExclusive
FormatMessageA
SleepConditionVariableSRW
WakeAllConditionVariable
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
TlsAlloc
api-ms-win-eventing-provider-l1-1-0
EventSetInformation
EventRegister
EventUnregister
EventWriteTransfer
api-ms-win-core-synch-l1-2-0
WakeByAddressSingle
WaitOnAddress
api-ms-win-core-registry-l1-1-0
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
api-ms-win-core-processthreads-l1-1-0
OpenProcessToken
OpenThreadToken
api-ms-win-appmodel-runtime-l1-1-1
GetPackageFamilyNameFromToken
api-ms-win-core-winrt-error-l1-1-0
SetRestrictedErrorInfo
RoFailFastWithErrorContext
GetRestrictedErrorInfo
RoTransformError
oleaut32
SysStringLen
SysFreeString
GetErrorInfo
SetErrorInfo
rpcrt4
NdrCStdStubBuffer_Release
NdrStubForwardingFunction
NdrStubCall2
IUnknown_AddRef_Proxy
NdrOleFree
IUnknown_Release_Proxy
NdrDllGetClassObject
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Invoke
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_CountRefs
CStdStubBuffer_QueryInterface
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Disconnect
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Connect
NdrCStdStubBuffer2_Release
NdrDllCanUnloadNow
NdrOleAllocate
api-ms-win-core-winrt-string-l1-1-0
HSTRING_UserSize
HSTRING_UserUnmarshal
HSTRING_UserMarshal
HSTRING_UserFree
api-ms-win-core-errorhandling-l1-1-0
RaiseException
api-ms-win-core-sysinfo-l1-1-0
GetSystemInfo
api-ms-win-core-memory-l1-1-0
VirtualQuery
VirtualProtect
api-ms-win-core-libraryloader-l1-2-0
LoadLibraryExA
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
abort
_initialize_narrow_environment
_beginthreadex
_initialize_onexit_table
_invoke_watson
_register_onexit_function
terminate
_initterm_e
_errno
_invalid_parameter_noinfo
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_seh_filter_dll
api-ms-win-crt-string-l1-1-0
strncmp
wcsncmp
toupper
iswspace
wcsnlen
_wcsdup
_wcsnicmp
strcpy_s
api-ms-win-crt-stdio-l1-1-0
_wfsopen
fsetpos
setvbuf
fflush
ungetwc
_fseeki64
__stdio_common_vsprintf_s
ungetc
__stdio_common_vswprintf_s
fgetpos
fwrite
fclose
__stdio_common_vswprintf
fputwc
__stdio_common_vsprintf
fseek
fgetc
fgetwc
api-ms-win-crt-heap-l1-1-0
malloc
free
calloc
_callnewh
api-ms-win-crt-math-l1-1-0
_ldclass
_ldsign
_dsign
_fdsign
_fdclass
ceil
_dclass
api-ms-win-crt-locale-l1-1-0
_lock_locales
__pctype_func
___lc_locale_name_func
___mb_cur_max_func
setlocale
___lc_codepage_func
localeconv
_unlock_locales
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-convert-l1-1-0
atol
wcstoll
api-ms-win-core-winrt-error-l1-1-1
RoOriginateLanguageException
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
Name
.text
Size
843KB
Virtual Size
843KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.orpc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
575KB
Virtual Size
575KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
594KB
Virtual Size
596KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didat
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
110KB
Virtual Size
110KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=15, id=260, version=35207,
count=23, id=259, version=35207,
count=2, id=260, version=30795,
count=48, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=97, id=261, version=35207,
count=5, id=257, version=30795,
count=279, id=1, productName=Unmarked objects,
count=101, id=265, version=35215,
count=1, id=256, version=35215,
count=1, id=255, version=35215,
count=1, id=258, version=35215,
WidgetService/Microsoft.Windows.Widgets.winmd
- SHA256 f313cac130f2bf9248562e07e9dfccd21a6c5c51a37bafc986c3d8337bdcc1a9
- MD5 a945cb5e23211522d450ee6f0c46edb5
- SHA1 7594fa389c8b180c68f36f06006b9b45f9b46e3b
- SHA512 7f159f9f8cc2cbfa105ee1153fb7db66d4df3073618909ab45ba7166b474c5e2982aa6a9a3b85b8c067fded4da89c1a3358f20fed67a46616fab16bd283ce68f
- SSDEEP 768:DpuTJ5i85vuNuR3+Lcak5aheYvLq2LqhtRYY9YihM/IhtRYY9YihMN2djVv0v5Ec:E085P3+LbiYsDdj+5s1KYsXvJ4yiG
- TLSH T12643B44674AA8FB2CEDD157A2C665B51333BD6A7D6029B270F1C4C609CC3BC57A09BB0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
generic
WidgetService/WidgetService.exe
- IMPHASH 8793252f62d968ab31ae99e8a024dc9a
- SHA256 2e423fecfe1b15b7ad4d45cc2a63bfa7c95f1ae2a4efdb578742e0713e658366
- MD5 0e018c0bf8c9985d7e09859ce63ba593
- SHA1 2c602e162655d6dc7925add5814ddda8bfc199af
- SHA512 9bfe0c32f2297d450f2f7ecc534872ecb040eb2ebdf0ae1adab0b4834d2038acc6e6a524934b315ab10bd1a71a85a746e2d5a9a3c71130fcc9256d73ee77057e
- SSDEEP 3072:d//x0mbIw2WOP8//M+gbWptQp0V2cFBnliIxBdJEKeDno9te:d3xDbILP8/OWpLkEkLo9I
- TLSH T14B045A31B9CAC6B3E91A0A704CE5EE79592DF97A8F6491C373540F6E19686C35F32103
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
87568
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
WidgetService.pdb
kernel32
InitOnceBeginInitialize
InitOnceComplete
OutputDebugStringW
GetCurrentThreadId
FormatMessageW
IsDebuggerPresent
GetLastError
SetLastError
Sleep
SetEvent
CloseHandle
CreateEventExW
AllocConsole
CreateFileW
SetStdHandle
LocalFree
OpenEventW
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
ReleaseSemaphore
GetModuleHandleExW
WaitForSingleObject
ReleaseMutex
WaitForSingleObjectEx
OpenSemaphoreW
HeapAlloc
GetProcAddress
CreateMutexExW
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
FreeLibrary
WideCharToMultiByte
DebugBreak
TrySubmitThreadpoolCallback
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedPushEntrySList
RaiseException
RtlUnwind
InitializeSListHead
GetStartupInfoW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
QueryPerformanceCounter
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
LCMapStringEx
api-ms-win-core-com-l1-1-0
CoRevokeClassObject
CoResumeClassObjects
CoRegisterClassObject
CoCreateFreeThreadedMarshaler
CoInitializeEx
CoWaitForMultipleObjects
api-ms-win-eventing-provider-l1-1-0
EventWriteTransfer
EventSetInformation
EventRegister
EventUnregister
api-ms-win-core-registry-l1-1-0
RegGetValueW
api-ms-win-shcore-obsolete-l1-1-0
CommandLineToArgvW
api-ms-win-core-winrt-error-l1-1-0
SetRestrictedErrorInfo
RoFailFastWithErrorContext
GetRestrictedErrorInfo
oleaut32
SysFreeString
SysStringLen
SetErrorInfo
GetErrorInfo
api-ms-win-crt-runtime-l1-1-0
_initterm
_get_wide_winmain_command_line
_controlfp_s
_initialize_wide_environment
_configure_wide_argv
_invalid_parameter_noinfo
_set_app_type
_seh_filter_exe
_cexit
exit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
abort
_register_thread_local_exe_atexit_callback
_errno
terminate
_exit
_c_exit
_invoke_watson
_initterm_e
api-ms-win-crt-stdio-l1-1-0
freopen_s
_get_stream_buffer_pointers
__acrt_iob_func
_set_fmode
__stdio_common_vswprintf_s
fclose
fflush
fgetc
fgetpos
fputc
fread
fsetpos
_fseeki64
fwrite
ungetwc
fputwc
fgetwc
__p__commode
setvbuf
ungetc
__stdio_common_vswprintf
api-ms-win-crt-string-l1-1-0
iswspace
wcsnlen
__strncnt
islower
_wcsdup
strcpy_s
isupper
wcsncmp
api-ms-win-crt-heap-l1-1-0
_set_new_mode
_callnewh
free
malloc
calloc
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-locale-l1-1-0
__pctype_func
_unlock_locales
_lock_locales
setlocale
___mb_cur_max_func
_configthreadlocale
___lc_codepage_func
___lc_locale_name_func
api-ms-win-crt-math-l1-1-0
ceil
__setusermatherr
api-ms-win-core-winrt-error-l1-1-1
RoOriginateLanguageException
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
Name
.text
Size
100KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
50KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
14KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=17, id=259, version=35207,
count=17, id=260, version=35207,
count=89, id=261, version=35207,
count=34, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=33145,
count=202, id=1, productName=Unmarked objects,
count=4, id=265, version=35215,
count=1, id=255, version=35215,
count=1, id=151,
count=1, id=258, version=35215,
[Content_Types].xml
- SHA256 675f93dbc4ea72bd69398d09b52a259557fbd00f04b1932561e90350fafc2b7f
- MD5 00770e512724bac9f10e68d2b1314f8f
- SHA1 c0e6e5b660ebaba081033c9062a05e2ac34dac41
- SHA512 d38435c8e9fffd397c274f7d6da918530c80248f82a2e949617a3f86f87e710f20661b77ee4e8de63ea44bef1979d0c794cd61b03b17a78fb21bdbfa87b7e794
- TLSH T15C014EE2703B9CB003A69DBFD966AD541272147DA4D47B0CBF99564E90E075B01713C8
- MD5 SHA1 SHA512 TLSH
resources.pri
- SHA256 80eb74c08546b7e5a65e8ac4848628604a4b1d46e8695ab159717aa224cf6b5a
- MD5 4b26a44a12468faab3ca1825d7c86215
- SHA1 3f3befd1104bc2cd24a2d55ea79d184184238741
- SHA512 4dff5845ab8fcebf1397412dea3375d43993fde220695c4ad1a4adcd2c84a649db7ada95df7775cf12ba82198e356d84150cb2bebe5ce45c21818d40035f1107
- TLSH T18B316777BB68AD02F17B6B39D4A343343634B907B763070A129C92315C507C4AE72B65
- MD5 SHA1 SHA512 TLSH
[Content_Types].xml
- SHA256 3054f940f18b3f9c0a1db7658cf7f200e7b81e06a10823bc282d19528b1496d1
- MD5 671f697929cb7be9d6cb4f138d1750d0
- SHA1 1173d78a57a1a795a92d404d4ccea2117f517467
- SHA512 a6758da07e0b58c2a1678ce9f4e95a3e4900eea36e469f238197e2d096a2cdfad290f860e8db8f41324d2d98c0227ca5eb0e9b5bb701e08996093d5509ab80a6
- TLSH T16BF05CD2B17A4C7003F68D7EDD23AA58127200BD54EE2749BFF65B4E11C465B12913D8
- MD5 SHA1 SHA512 TLSH