[SOLVED] Single user no startmenu and no tasklist

lfb6 · Aug 1, 2022

First post here, so hoping this is the right forum!

Win 10 21H2- lost startmenu and tasklist and all XAML-based(?) items for a single user (local account, normal user) after a crash 27.08.22.

User profile loads, but explorer can't start. Loading explorer from taskmanager doesn't work, but except for all new (xaml-based?) dialogues, startmenu and tasklist the system and all programs do work as expected.

Eventlog shows error 1000 seems to be a rights problem with mstscax.dll which is a dll used for remote desktop connections in iexplore?

Chkdsk showed a missing index entry in the user profile ....\edge\user data\default\code cache\js\.... and recovered two orphaned files

SFC / scannow "Windows Resource Protection did not find any integrity violations."

DISM /Online /Cleanup-Image /RestoreHealth: The restore operation completed successfully. The operation completed successfully.

Restored NtUser.dat and UsrClass.dat from an 2 days old backup, no effect
Restored the complete user profile in c:\users\LF from a (that day) 2 days old backup, no effect
Created a new user which is working properly like all other existing users (1 admin, 1 user)

Compared user group-policies for a fresh user and the existing user, they're identical

Get-AppXPackage -User LF |Where-Object {$_.InstallLocation -like "*SystemApps*"} | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"} - no errors
Get-AppXPackage -AllUsers |Where-Object {$_.InstallLocation -like "*SystemApps*"} | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"}- 3 errors for the logged in admin account

Removed 'Microsoft RDP Client Control (redistributable) - version 7' (the dll that's mentioned in the dump) from the list of addons ('internet options'-'programs'-'manage addons') for the not working user (unclear why it was in this list at all)

So there's not much left that's just linked to this user account. I'd appreciate any kind of help and suggestions that would help me to solve this problem (and to spare me restoring the complete c:- partition from backup... Thanks in advance!

Faulting application name: Explorer.EXE, version: 10.0.19041.1806, time stamp: 0xa02987c8
Faulting module name: mstscax.dll, version: 10.0.19041.1826, time stamp: 0x7c7933a7
Exception code: 0xc0000005
Fault offset: 0x00000000004c6353
Faulting process id: 0x1ab8
Faulting application start time: 0x01d8a52e02445ebe
Faulting application path: C:\Windows\Explorer.EXE
Faulting module path: C:\Windows\system32\mstscax.dll
Report Id: 24618b58-f9f0-4271-9f39-1c705e25508d
Faulting package full name:
Faulting package-relative application ID:

Microsoft (R) Windows Debugger Version 10.0.22621.1 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Users\LF\AppData\Local\CrashDumps\explorer.exe.6840.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available

Symbol search path is: srv*
Executable search path is:
Windows 10 Version 19044 MP (12 procs) Free x64
Product: WinNt, suite: SingleUserTS
Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Debug session time: Mon Aug 1 00:36:44.000 2022 (UTC + 2:00)
System Uptime: not available
Process Uptime: 0 days 0:00:01.000
................................................................
................................................................
................
Loading unloaded module list
.
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(1ab8.2020): Access violation - code c0000005 (first/second chance not available)
For analysis of this file, run !analyze -v
ntdll!NtWaitForMultipleObjects+0x14:
00007ffc`3c86da94 c3 ret
0:015> !analyze -v
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************

KEY_VALUES_STRING: 1

Key : AV.Fault
Value: Read

Key : Analysis.CPU.mSec
Value: 3530

Key : Analysis.DebugAnalysisManager
Value: Create

Key : Analysis.Elapsed.mSec
Value: 4243

Key : Analysis.Init.CPU.mSec
Value: 2015

Key : Analysis.Init.Elapsed.mSec
Value: 22633

Key : Analysis.Memory.CommitPeak.Mb
Value: 250

Key : Timeline.Process.Start.DeltaSec
Value: 1

Key : WER.OS.Branch
Value: vb_release

Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z

Key : WER.OS.Version
Value: 10.0.19041.1

Key : WER.Process.Version
Value: 10.0.19041.1806

FILE_IN_CAB: explorer.exe.6840.dmp

NTGLOBALFLAG: 0

APPLICATION_VERIFIER_FLAGS: 0

CONTEXT: (.ecxr)
rax=00002be3e361e194 rbx=0000000000000000 rcx=000000001f178ee0
rdx=000000000a0100dd rsi=000000000001011c rdi=000000001f178ee0
rip=00007ffc0e556353 rsp=000000aa3f97ee80 rbp=000000000a0100dd
r8=0000000000000000 r9=0000000000000000 r10=00000fff81caad34
r11=0010410000000140 r12=0000000000000000 r13=0000000000000014
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010246
mstscax!CDeskBandWin::OnEraseBackground+0x23:
00007ffc`0e556353 488b4940 mov rcx,qword ptr [rcx+40h] ds:00000000`1f178f20=????????????????
Resetting default scope

EXCEPTION_RECORD: (.exr -1)
ExceptionAddress: 00007ffc0e556353 (mstscax!CDeskBandWin::OnEraseBackground+0x0000000000000023)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: 000000001f178f20
Attempt to read from address 000000001f178f20

PROCESS_NAME: explorer.exe

READ_ADDRESS: 000000001f178f20

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.

EXCEPTION_CODE_STR: c0000005

EXCEPTION_PARAMETER1: 0000000000000000

EXCEPTION_PARAMETER2: 000000001f178f20

ADDITIONAL_DEBUG_TEXT: Followup set based on attribute [LocalContainsFunctionPtr] from Frame:[0] on thread:[2020] ; Followup set based on attribute [Is_ChosenCrashFollowupThread] from Frame:[0] on thread:[PSEUDO_THREAD]

STACK_TEXT:
00000000`00000000 00000000`00000000 mstscax!CDeskBandWin::OnEraseBackground+0x0

STACK_COMMAND: .ecxr ; ~~[0x2020]s ; .frame 0 ; ** Pseudo Context ** ManagedPseudo ** Value: ffffffff ** ; kb

SYMBOL_NAME: mstscax!CDeskBandWin::OnEraseBackground+0

MODULE_NAME: mstscax

IMAGE_NAME: mstscax.dll

FAILURE_BUCKET_ID: INVALID_POINTER_READ_WINDOW_HOOK_c0000005_mstscax.dll!CDeskBandWin::OnEraseBackground

OS_VERSION: 10.0.19041.1

BUILDLAB_STR: vb_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

IMAGE_VERSION: 10.0.19041.1826

FAILURE_ID_HASH: {c7de4f58-a567-d0ff-19d4-db7606b0882f}

Followup: MachineOwner
---------

Microsoft (R) Windows Debugger Version 10.0.22621.1 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Users\LF\AppData\Local\CrashDumps\explorer.exe.6840.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available

Symbol search path is: srv*
Executable search path is:
Windows 10 Version 19044 MP (12 procs) Free x64
Product: WinNt, suite: SingleUserTS
Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Debug session time: Mon Aug 1 00:36:44.000 2022 (UTC + 2:00)
System Uptime: not available
Process Uptime: 0 days 0:00:01.000
................................................................
................................................................
................
Loading unloaded module list
.
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(1ab8.2020): Access violation - code c0000005 (first/second chance not available)
For analysis of this file, run !analyze -v
ntdll!NtWaitForMultipleObjects+0x14:
00007ffc`3c86da94 c3 ret
0:015> !analyze -v
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************

KEY_VALUES_STRING: 1

Key : AV.Fault
Value: Read

Key : Analysis.CPU.mSec
Value: 3530

Key : Analysis.DebugAnalysisManager
Value: Create

Key : Analysis.Elapsed.mSec
Value: 4243

Key : Analysis.Init.CPU.mSec
Value: 2015

Key : Analysis.Init.Elapsed.mSec
Value: 22633

Key : Analysis.Memory.CommitPeak.Mb
Value: 250

Key : Timeline.Process.Start.DeltaSec
Value: 1

Key : WER.OS.Branch
Value: vb_release

Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z

Key : WER.OS.Version
Value: 10.0.19041.1

Key : WER.Process.Version
Value: 10.0.19041.1806

FILE_IN_CAB: explorer.exe.6840.dmp

NTGLOBALFLAG: 0

APPLICATION_VERIFIER_FLAGS: 0

CONTEXT: (.ecxr)
rax=00002be3e361e194 rbx=0000000000000000 rcx=000000001f178ee0
rdx=000000000a0100dd rsi=000000000001011c rdi=000000001f178ee0
rip=00007ffc0e556353 rsp=000000aa3f97ee80 rbp=000000000a0100dd
r8=0000000000000000 r9=0000000000000000 r10=00000fff81caad34
r11=0010410000000140 r12=0000000000000000 r13=0000000000000014
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010246
mstscax!CDeskBandWin::OnEraseBackground+0x23:
00007ffc`0e556353 488b4940 mov rcx,qword ptr [rcx+40h] ds:00000000`1f178f20=????????????????
Resetting default scope

EXCEPTION_RECORD: (.exr -1)
ExceptionAddress: 00007ffc0e556353 (mstscax!CDeskBandWin::OnEraseBackground+0x0000000000000023)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: 000000001f178f20
Attempt to read from address 000000001f178f20

PROCESS_NAME: explorer.exe

READ_ADDRESS: 000000001f178f20

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.

EXCEPTION_CODE_STR: c0000005

EXCEPTION_PARAMETER1: 0000000000000000

EXCEPTION_PARAMETER2: 000000001f178f20

ADDITIONAL_DEBUG_TEXT: Followup set based on attribute [LocalContainsFunctionPtr] from Frame:[0] on thread:[2020] ; Followup set based on attribute [Is_ChosenCrashFollowupThread] from Frame:[0] on thread:[PSEUDO_THREAD]

STACK_TEXT:
00000000`00000000 00000000`00000000 mstscax!CDeskBandWin::OnEraseBackground+0x0

STACK_COMMAND: .ecxr ; ~~[0x2020]s ; .frame 0 ; ** Pseudo Context ** ManagedPseudo ** Value: ffffffff ** ; kb

SYMBOL_NAME: mstscax!CDeskBandWin::OnEraseBackground+0

MODULE_NAME: mstscax

IMAGE_NAME: mstscax.dll

FAILURE_BUCKET_ID: INVALID_POINTER_READ_WINDOW_HOOK_c0000005_mstscax.dll!CDeskBandWin::OnEraseBackground

OS_VERSION: 10.0.19041.1

BUILDLAB_STR: vb_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

IMAGE_VERSION: 10.0.19041.1826

FAILURE_ID_HASH: {c7de4f58-a567-d0ff-19d4-db7606b0882f}

Followup: MachineOwner
---------

0:015> .exr -1
ExceptionAddress: 00007ffc0e556353 (mstscax!CDeskBandWin::OnEraseBackground+0x0000000000000023)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: 000000001f178f20
Attempt to read from address 000000001f178f20
0:015> .exr -1
ExceptionAddress: 00007ffc0e556353 (mstscax!CDeskBandWin::OnEraseBackground+0x0000000000000023)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: 000000001f178f20
Attempt to read from address 000000001f178f20
0:015> .ecxr
rax=00002be3e361e194 rbx=0000000000000000 rcx=000000001f178ee0
rdx=000000000a0100dd rsi=000000000001011c rdi=000000001f178ee0
rip=00007ffc0e556353 rsp=000000aa3f97ee80 rbp=000000000a0100dd
r8=0000000000000000 r9=0000000000000000 r10=00000fff81caad34
r11=0010410000000140 r12=0000000000000000 r13=0000000000000014
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010246
mstscax!CDeskBandWin::OnEraseBackground+0x23:
00007ffc`0e556353 488b4940 mov rcx,qword ptr [rcx+40h] ds:00000000`1f178f20=????????????????
0:015> lmvm mstscax
Browse full module list
start end module name
00007ffc`0e090000 00007ffc`0e87d000 mstscax (pdb symbols) C:\ProgramData\dbg\sym\mstscax.pdb\9F680B064DD9D3F0D52DEA63190E9F831\mstscax.pdb
Loaded symbol image file: mstscax.dll
Mapped memory image file: C:\ProgramData\dbg\sym\mstscax.dll\7C7933A77ed000\mstscax.dll
Image path: C:\Windows\System32\mstscax.dll
Image name: mstscax.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7C7933A7 (This is a reproducible build file hash, not a timestamp)
CheckSum: 007EDCD4
ImageSize: 007ED000
File version: 10.0.19041.1826
Product version: 10.0.19041.1826
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mstscax.dll
OriginalFilename: mstscax.dll
ProductVersion: 10.0.19041.1826
FileVersion: 10.0.19041.1826 (WinBuild.160101.0800)
FileDescription: Remote Desktop Services ActiveX Client
LegalCopyright: © Microsoft Corporation. All rights reserved.
0:015> lmDv
start end module name
00007ff6`67b80000 00007ff6`6805f000 explorer (pdb symbols) C:\ProgramData\dbg\sym\explorer.pdb\31DDE342A76E78D3E4648E4940F31C7F1\explorer.pdb
Loaded symbol image file: explorer.exe
Mapped memory image file: C:\ProgramData\dbg\sym\explorer.exe\A02987C84df000\explorer.exe
Image path: C:\Windows\explorer.exe
Image name: explorer.exe
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A02987C8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 004F338B
ImageSize: 004DF000
File version: 10.0.19041.1806
Product version: 10.0.19041.1806
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: explorer
OriginalFilename: EXPLORER.EXE
ProductVersion: 10.0.19041.1806
FileVersion: 10.0.19041.1806 (WinBuild.160101.0800)
FileDescription: Windows Explorer
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`0d6e0000 00007ffc`0db6e000 mfcore (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\mfcore.dll\A7ACE6A648e000\mfcore.dll
Image path: C:\Windows\System32\mfcore.dll
Image name: mfcore.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A7ACE6A6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 004958DD
ImageSize: 0048E000
File version: 10.0.19041.1826
Product version: 10.0.19041.1826
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Media Foundation Core DLL
OriginalFilename: mfcore.dll
ProductVersion: 10.0.19041.1826
FileVersion: 10.0.19041.1826 (WinBuild.160101.0800)
FileDescription: Media Foundation Core DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`0db70000 00007ffc`0dc7a000 Mfreadwrite (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\Mfreadwrite.dll\EAE55EFC10a000\Mfreadwrite.dll
Image path: C:\Windows\System32\Mfreadwrite.dll
Image name: Mfreadwrite.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: EAE55EFC (This is a reproducible build file hash, not a timestamp)
CheckSum: 00116FF3
ImageSize: 0010A000
File version: 10.0.19041.746
Product version: 10.0.19041.746
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Media Foundation ReadWrite DLL
OriginalFilename: mfreadwrite.dll
ProductVersion: 10.0.19041.746
FileVersion: 10.0.19041.746 (WinBuild.160101.0800)
FileDescription: Media Foundation ReadWrite DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`0dc80000 00007ffc`0dd04000 mf (deferred)
Mapped memory image file: C:\Windows\System32\mf.dll
Image path: C:\Windows\System32\mf.dll
Image name: mf.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 50EB79A6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0008A2D5
ImageSize: 00084000
File version: 10.0.19041.1806
Product version: 10.0.19041.1806
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Media Foundation DLL
OriginalFilename: mf.dll
ProductVersion: 10.0.19041.1806
FileVersion: 10.0.19041.1806 (WinBuild.160101.0800)
FileDescription: Media Foundation DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`0dd10000 00007ffc`0e005000 UIAutomationCore (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\UIAutomationCore.DLL\D9E68C912f5000\UIAutomationCore.DLL
Image path: C:\Windows\System32\UIAutomationCore.DLL
Image name: UIAutomationCore.DLL
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D9E68C91 (This is a reproducible build file hash, not a timestamp)
CheckSum: 002EFCBF
ImageSize: 002F5000
File version: 7.2.19041.1741
Product version: 10.0.19041.1741
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: UIAutomationCore.dll
OriginalFilename: UIAutomationCore.dll
ProductVersion: 10.0.19041.1741
FileVersion: 7.2.19041.1741 (WinBuild.160101.0800)
FileDescription: Microsoft UI Automation Core
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`0e010000 00007ffc`0e036000 winmmbase (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\winmmbase.dll\B00FF49226000\winmmbase.dll
Image path: C:\Windows\System32\winmmbase.dll
Image name: winmmbase.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B00FF492 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002F7BE
ImageSize: 00026000
File version: 10.0.19041.1
Product version: 10.0.19041.1
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: winmmbase.dll
OriginalFilename: WINMMbase.DLL
ProductVersion: 10.0.19041.1001
FileVersion: 10.0.19041.1001 (WinBuild.160101.0800)
FileDescription: Base Multimedia Extension API DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`0e040000 00007ffc`0e089000 pdh (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\pdh.dll\9AD82E9149000\pdh.dll
Image path: C:\Windows\System32\pdh.dll
Image name: pdh.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9AD82E91 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0004F105
ImageSize: 00049000
File version: 10.0.19041.1202
Product version: 10.0.19041.1202
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: PDH.DLL
OriginalFilename: PDH.DLL
ProductVersion: 10.0.19041.1202
FileVersion: 10.0.19041.1202 (WinBuild.160101.0800)
FileDescription: Windows Performance Data Helper DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`0e090000 00007ffc`0e87d000 mstscax (pdb symbols) C:\ProgramData\dbg\sym\mstscax.pdb\9F680B064DD9D3F0D52DEA63190E9F831\mstscax.pdb
Loaded symbol image file: mstscax.dll
Mapped memory image file: C:\ProgramData\dbg\sym\mstscax.dll\7C7933A77ed000\mstscax.dll
Image path: C:\Windows\System32\mstscax.dll
Image name: mstscax.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7C7933A7 (This is a reproducible build file hash, not a timestamp)
CheckSum: 007EDCD4
ImageSize: 007ED000
File version: 10.0.19041.1826
Product version: 10.0.19041.1826
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mstscax.dll
OriginalFilename: mstscax.dll
ProductVersion: 10.0.19041.1826
FileVersion: 10.0.19041.1826 (WinBuild.160101.0800)
FileDescription: Remote Desktop Services ActiveX Client
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`0e880000 00007ffc`0e93e000 windows_immersiveshell_serviceprovider (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\windows.immersiveshell.serviceprovider.dll\ABA51A4Fbe000\windows.immersiveshell.serviceprovider.dll
Image path: C:\Windows\System32\windows.immersiveshell.serviceprovider.dll
Image name: windows.immersiveshell.serviceprovider.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: ABA51A4F (This is a reproducible build file hash, not a timestamp)
CheckSum: 000B8DE6
ImageSize: 000BE000
File version: 10.0.19041.1806
Product version: 10.0.19041.1806
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ImmersiveShellServiceProvider
OriginalFilename: Windows.ImmersiveShell.ServiceProvider.dll
ProductVersion: 10.0.19041.1806
FileVersion: 10.0.19041.1806 (WinBuild.160101.0800)
FileDescription: Windows.ImmersiveShell.ServiceProvider
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`0e940000 00007ffc`0e9a6000 thumbcache (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\thumbcache.dll\58E914A666000\thumbcache.dll
Image path: C:\Windows\System32\thumbcache.dll
Image name: thumbcache.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 58E914A6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00063395
ImageSize: 00066000
File version: 10.0.19041.1741
Product version: 10.0.19041.1741
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: thumbcache.dll
OriginalFilename: thumbcache.dll
ProductVersion: 10.0.19041.1767
FileVersion: 10.0.19041.1767 (WinBuild.160101.0800)
FileDescription: Microsoft Thumbnail Cache
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`0e9b0000 00007ffc`0ebd0000 explorerframe (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\explorerframe.dll\00D83FBE220000\explorerframe.dll
Image path: C:\Windows\System32\explorerframe.dll
Image name: explorerframe.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 00D83FBE (This is a reproducible build file hash, not a timestamp)
CheckSum: 002270DF
ImageSize: 00220000
File version: 10.0.19041.1023
Product version: 10.0.19041.1023
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ExplorerFrame
OriginalFilename: ExplorerFrame.dll
ProductVersion: 10.0.19041.1023
FileVersion: 10.0.19041.1023 (WinBuild.160101.0800)
FileDescription: ExplorerFrame
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`0f5f0000 00007ffc`0fb74000 StartTileData (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\StartTileData.dll\D1EF9C91584000\StartTileData.dll
Image path: C:\Windows\System32\StartTileData.dll
Image name: StartTileData.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D1EF9C91 (This is a reproducible build file hash, not a timestamp)
CheckSum: 005863B8
ImageSize: 00584000
File version: 10.0.19041.1741
Product version: 10.0.19041.1741
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: StartTileData.dll
OriginalFilename: StartTileData.dll
ProductVersion: 10.0.19041.1767
FileVersion: 10.0.19041.1767 (WinBuild.160101.0800)
FileDescription: Start Tile Data InProc Server
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`0fb80000 00007ffc`0fba4000 edputil (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\edputil.dll\BE35735724000\edputil.dll
Image path: C:\Windows\System32\edputil.dll
Image name: edputil.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: BE357357 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00025AD7
ImageSize: 00024000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: EDPUTIL.DLL
OriginalFilename: EDPUTIL.DLL
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: EDP util
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`0fbb0000 00007ffc`0fbd2000 cldapi (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\cldapi.dll\D5A10F5E22000\cldapi.dll
Image path: C:\Windows\System32\cldapi.dll
Image name: cldapi.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D5A10F5E (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002AE3C
ImageSize: 00022000
File version: 10.0.19041.1682
Product version: 10.0.19041.1682
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cldapi.dll
OriginalFilename: cldapi.dll
ProductVersion: 10.0.19041.1682
FileVersion: 10.0.19041.1682 (WinBuild.160101.0800)
FileDescription: Cloud API user mode API
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`0fe10000 00007ffc`0fe60000 SndVolSSO (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\SndVolSSO.DLL\0210F5EB50000\SndVolSSO.DLL
Image path: C:\Windows\System32\SndVolSSO.DLL
Image name: SndVolSSO.DLL
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0210F5EB (This is a reproducible build file hash, not a timestamp)
CheckSum: 000533C1
ImageSize: 00050000
File version: 10.0.19041.1741
Product version: 10.0.19041.1741
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SCA Volume
OriginalFilename: SndVolSSO.dll
ProductVersion: 10.0.19041.1741
FileVersion: 10.0.19041.1741 (WinBuild.160101.0800)
FileDescription: SCA Volume
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`10020000 00007ffc`10086000 oleacc (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\oleacc.dll\24CDD50966000\oleacc.dll
Image path: C:\Windows\System32\oleacc.dll
Image name: oleacc.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 24CDD509 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0006CB24
ImageSize: 00066000
File version: 7.2.19041.746
Product version: 10.0.19041.746
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: OLEACC
OriginalFilename: OLEACC.DLL
ProductVersion: 10.0.19041.746
FileVersion: 7.2.19041.746 (WinBuild.160101.0800)
FileDescription: Active Accessibility Core Component
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`101d0000 00007ffc`10279000 twinapi (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\twinapi.dll\ABC488EBa9000\twinapi.dll
Image path: C:\Windows\System32\twinapi.dll
Image name: twinapi.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: ABC488EB (This is a reproducible build file hash, not a timestamp)
CheckSum: 000AE38F
ImageSize: 000A9000
File version: 10.0.19041.1741
Product version: 10.0.19041.1741
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: twinapi
OriginalFilename: twinapi.dll
ProductVersion: 10.0.19041.1741
FileVersion: 10.0.19041.1741 (WinBuild.160101.0800)
FileDescription: twinapi
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`10280000 00007ffc`10312000 aepic (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\aepic.dll\018825C992000\aepic.dll
Image path: C:\Windows\System32\aepic.dll
Image name: aepic.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 018825C9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00095815
ImageSize: 00092000
File version: 10.0.19645.1046
Product version: 10.0.19645.1046
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: aepic.dll
OriginalFilename: aepic.dll
ProductVersion: 10.0.19645.1046
FileVersion: 10.0.19645.1046 (WinBuild.160101.0800)
FileDescription: Application Experience Program Cache
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`10320000 00007ffc`10948000 twinui_pcshell (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\twinui.pcshell.dll\6084FF2F628000\twinui.pcshell.dll
Image path: C:\Windows\System32\twinui.pcshell.dll
Image name: twinui.pcshell.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6084FF2F (This is a reproducible build file hash, not a timestamp)
CheckSum: 00627932
ImageSize: 00628000
File version: 10.0.19041.1806
Product version: 10.0.19041.1806
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Twinui.PCShell.dll
OriginalFilename: Twinui.PCShell.dll
ProductVersion: 10.0.19041.1806
FileVersion: 10.0.19041.1806 (WinBuild.160101.0800)
FileDescription: Twinui.PCShell
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`10cc0000 00007ffc`10da7000 Windows_CloudStore_Schema_Shell (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\Windows.CloudStore.Schema.Shell.dll\B26EDA41e7000\Windows.CloudStore.Schema.Shell.dll
Image path: C:\Windows\System32\Windows.CloudStore.Schema.Shell.dll
Image name: Windows.CloudStore.Schema.Shell.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B26EDA41 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000D0A1C
ImageSize: 000E7000
File version: 10.0.19041.1620
Product version: 10.0.19041.1620
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Windows.CloudStore.Schema.Shell
OriginalFilename: Windows.CloudStore.Schema.Shell.dll
ProductVersion: 10.0.19041.1620
FileVersion: 10.0.19041.1620 (WinBuild.160101.0800)
FileDescription: Shell Schema for Cloud Data Store
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`10de0000 00007ffc`10e17000 AppExtension (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\AppExtension.dll\20D9E97E37000\AppExtension.dll
Image path: C:\Windows\System32\AppExtension.dll
Image name: AppExtension.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 20D9E97E (This is a reproducible build file hash, not a timestamp)
CheckSum: 00041BD8
ImageSize: 00037000
File version: 10.0.19041.746
Product version: 10.0.19041.746
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: AppExtension API
OriginalFilename: AppExtension.dll
ProductVersion: 10.0.19041.746
FileVersion: 10.0.19041.746 (WinBuild.160101.0800)
FileDescription: AppExtension API
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`117d0000 00007ffc`1187a000 wlidprov (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\wlidprov.dll\64D63504aa000\wlidprov.dll
Image path: C:\Windows\System32\wlidprov.dll
Image name: wlidprov.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 64D63504 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A3D0B
ImageSize: 000AA000
File version: 10.0.19041.746
Product version: 10.0.19041.746
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WlidProv.dll
OriginalFilename: WlidProv.dll
ProductVersion: 10.0.19041.746
FileVersion: 10.0.19041.746 (WinBuild.160101.0800)
FileDescription: Microsoft® Account Provider
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`11da0000 00007ffc`11e3a000 TileDataRepository (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\TileDataRepository.dll\6ADF76399a000\TileDataRepository.dll
Image path: C:\Windows\System32\TileDataRepository.dll
Image name: TileDataRepository.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6ADF7639 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00098211
ImageSize: 0009A000
File version: 10.0.19041.1566
Product version: 10.0.19041.1566
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: TileDataRepository
OriginalFilename: TileDataRepository.dll
ProductVersion: 10.0.19041.1566
FileVersion: 10.0.19041.1566 (WinBuild.160101.0800)
FileDescription: Tile Data Repository
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`12190000 00007ffc`121ae000 msacm32 (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\msacm32.dll\7EEAE7551e000\msacm32.dll
Image path: C:\Windows\System32\msacm32.dll
Image name: msacm32.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7EEAE755 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001D930
ImageSize: 0001E000
File version: 10.0.19041.1
Product version: 10.0.19041.1
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.8 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Microsoft ACM Audio Filter
OriginalFilename: msfltr32.acm
ProductVersion: 10.0.19041.1001
FileVersion: 10.0.19041.1001 (WinBuild.160101.0800)
FileDescription: Microsoft ACM Audio Filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`121b0000 00007ffc`121ee000 dataexchange (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\dataexchange.dll\49F7AA8E3e000\dataexchange.dll
Image path: C:\Windows\System32\dataexchange.dll
Image name: dataexchange.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 49F7AA8E (This is a reproducible build file hash, not a timestamp)
CheckSum: 000461FE
ImageSize: 0003E000
File version: 10.0.19041.1387
Product version: 10.0.19041.1387
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: DataExchange
OriginalFilename: DataExchange.dll
ProductVersion: 10.0.19041.1387
FileVersion: 10.0.19041.1387 (WinBuild.160101.0800)
FileDescription: Data exchange
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`129a0000 00007ffc`12a30000 appresolver (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\appresolver.dll\56E73C3090000\appresolver.dll
Image path: C:\Windows\System32\appresolver.dll
Image name: appresolver.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 56E73C30 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00095744
ImageSize: 00090000
File version: 10.0.19041.1620
Product version: 10.0.19041.1620
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: AppResolver.dll
OriginalFilename: AppResolver.dll
ProductVersion: 10.0.19041.1620
FileVersion: 10.0.19041.1620 (WinBuild.160101.0800)
FileDescription: App Resolver
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`14fb0000 00007ffc`14fb9000 ksuser (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\ksuser.dll\3B4663569000\ksuser.dll
Image path: C:\Windows\System32\ksuser.dll
Image name: ksuser.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3B466356 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00013A90
ImageSize: 00009000
File version: 10.0.19041.1
Product version: 10.0.19041.1
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ksuser.dll
OriginalFilename: ksuser.dll
ProductVersion: 10.0.19041.1001
FileVersion: 10.0.19041.1001 (WinBuild.160101.0800)
FileDescription: User CSA Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`15030000 00007ffc`15070000 Windows_StateRepositoryClient (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\Windows.StateRepositoryClient.dll\37536DB140000\Windows.StateRepositoryClient.dll
Image path: C:\Windows\System32\Windows.StateRepositoryClient.dll
Image name: Windows.StateRepositoryClient.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 37536DB1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0004B709
ImageSize: 00040000
File version: 10.0.19041.1466
Product version: 10.0.19041.1466
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Windows StateRepository Client API
OriginalFilename: Windows.StateRepositoryClient.dll
ProductVersion: 10.0.19041.1466
FileVersion: 10.0.19041.1466 (WinBuild.160101.0800)
FileDescription: Windows StateRepository Client API
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`151a0000 00007ffc`1566b000 cdp (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\cdp.dll\E5DDBD744cb000\cdp.dll
Image path: C:\Windows\System32\cdp.dll
Image name: cdp.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E5DDBD74 (This is a reproducible build file hash, not a timestamp)
CheckSum: 004CB5AD
ImageSize: 004CB000
File version: 10.0.19041.1826
Product version: 10.0.19041.1826
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: CDP.dll
OriginalFilename: CDP.dll
ProductVersion: 10.0.19041.1826
FileVersion: 10.0.19041.1826 (WinBuild.160101.0800)
FileDescription: Microsoft (R) CDP Client API
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`17b10000 00007ffc`17c56000 Windows_StateRepositoryPS (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\Windows.StateRepositoryPS.dll\E5339651146000\Windows.StateRepositoryPS.dll
Image path: C:\Windows\System32\Windows.StateRepositoryPS.dll
Image name: Windows.StateRepositoryPS.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E5339651 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00154030
ImageSize: 00146000
File version: 10.0.19041.1466
Product version: 10.0.19041.1466
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Windows StateRepository Proxy/Stub Server
OriginalFilename: Windows.StateRepositoryPS.dll
ProductVersion: 10.0.19041.1466
FileVersion: 10.0.19041.1466 (WinBuild.160101.0800)
FileDescription: Windows StateRepository Proxy/Stub Server
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`18f20000 00007ffc`190dc000 mfplat (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\mfplat.dll\FD3FB2F71bc000\mfplat.dll
Image path: C:\Windows\System32\mfplat.dll
Image name: mfplat.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: FD3FB2F7 (This is a reproducible build file hash, not a timestamp)
CheckSum: 001C6DF9
ImageSize: 001BC000
File version: 10.0.19041.746
Product version: 10.0.19041.746
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Media Foundation Platform DLL
OriginalFilename: mfplat.dll
ProductVersion: 10.0.19041.746
FileVersion: 10.0.19041.746 (WinBuild.160101.0800)
FileDescription: Media Foundation Platform DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`1e5f0000 00007ffc`1e624000 RTWorkQ (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\RTWorkQ.dll\C0E68B6E34000\RTWorkQ.dll
Image path: C:\Windows\System32\RTWorkQ.dll
Image name: RTWorkQ.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C0E68B6E (This is a reproducible build file hash, not a timestamp)
CheckSum: 00032CFC
ImageSize: 00034000
File version: 10.0.19041.1741
Product version: 10.0.19041.1741
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Realtime WorkQueue DLL
OriginalFilename: RTWorkQ.dll
ProductVersion: 10.0.19041.1865
FileVersion: 10.0.19041.1865 (WinBuild.160101.0800)
FileDescription: Realtime WorkQueue DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`1ea90000 00007ffc`1eaa1000 windows_staterepositorycore (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\windows.staterepositorycore.dll\BAF38B6D11000\windows.staterepositorycore.dll
Image path: C:\Windows\System32\windows.staterepositorycore.dll
Image name: windows.staterepositorycore.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: BAF38B6D (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000FA5E
ImageSize: 00011000
File version: 10.0.19041.1466
Product version: 10.0.19041.1466
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Windows StateRepository API core
OriginalFilename: Windows.StateRepositoryCore.dll
ProductVersion: 10.0.19041.1466
FileVersion: 10.0.19041.1466 (WinBuild.160101.0800)
FileDescription: Windows StateRepository API Core
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`1ebd0000 00007ffc`1ee6a000 comctl32 (pdb symbols) C:\ProgramData\dbg\sym\comctl32.pdb\829A1D6FC7F0C20F8489775F10E933451\comctl32.pdb
Loaded symbol image file: comctl32.dll
Mapped memory image file: C:\ProgramData\dbg\sym\comctl32.dll\DB2B08EF29a000\comctl32.dll
Image path: C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e\comctl32.dll
Image name: comctl32.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: DB2B08EF (This is a reproducible build file hash, not a timestamp)
CheckSum: 0029FA3C
ImageSize: 0029A000
File version: 6.10.19041.1110
Product version: 10.0.19041.1110
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: comctl32
OriginalFilename: comctl32.DLL
ProductVersion: 10.0.19041.1110
FileVersion: 6.10 (WinBuild.160101.0800)
FileDescription: User Experience Controls Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`1f9b0000 00007ffc`1fe86000 wininet (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\wininet.dll\C7FEC4704d6000\wininet.dll
Image path: C:\Windows\System32\wininet.dll
Image name: wininet.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C7FEC470 (This is a reproducible build file hash, not a timestamp)
CheckSum: 004DC527
ImageSize: 004D6000
File version: 11.0.19041.1566
Product version: 11.0.19041.1566
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Internet Explorer
InternalName: wininet.dll
OriginalFilename: wininet.dll
ProductVersion: 11.00.19041.1566
FileVersion: 11.00.19041.1566 (WinBuild.160101.0800)
FileDescription: Internet Extensions for Win32
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`20320000 00007ffc`2032b000 fltLib (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\fltLib.dll\2EA9F33Db000\fltLib.dll
Image path: C:\Windows\System32\fltLib.dll
Image name: fltLib.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2EA9F33D (This is a reproducible build file hash, not a timestamp)
CheckSum: 00013A5D
ImageSize: 0000B000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: filterLib.dll
OriginalFilename: filterLib.dll
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: Filter Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`21020000 00007ffc`21223000 Windows_CloudStore (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\Windows.CloudStore.dll\AC32163E203000\Windows.CloudStore.dll
Image path: C:\Windows\System32\Windows.CloudStore.dll
Image name: Windows.CloudStore.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: AC32163E (This is a reproducible build file hash, not a timestamp)
CheckSum: 001F9400
ImageSize: 00203000
File version: 10.0.19041.1806
Product version: 10.0.19041.1806
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Windows.CloudStore
OriginalFilename: Windows.CloudStore.dll
ProductVersion: 10.0.19041.1826
FileVersion: 10.0.19041.1826 (WinBuild.160101.0800)
FileDescription: Cloud Data Store
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`219c0000 00007ffc`219eb000 IDStore (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\IDStore.dll\695DBA182b000\IDStore.dll
Image path: C:\Windows\System32\IDStore.dll
Image name: IDStore.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 695DBA18 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002E7AF
ImageSize: 0002B000
File version: 10.0.19041.746
Product version: 10.0.19041.746
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: IdStore
OriginalFilename: IdStore.dll
ProductVersion: 10.0.19041.746
FileVersion: 10.0.19041.746 (WinBuild.160101.0800)
FileDescription: Identity Store
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`22cd0000 00007ffc`22d81000 StateRepository_Core (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\StateRepository.Core.dll\C4DFD07Db1000\StateRepository.Core.dll
Image path: C:\Windows\System32\StateRepository.Core.dll
Image name: StateRepository.Core.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C4DFD07D (This is a reproducible build file hash, not a timestamp)
CheckSum: 000B1CFE
ImageSize: 000B1000
File version: 10.0.19041.1466
Product version: 10.0.19041.1466
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: StateRepository Core
OriginalFilename: StateRepository.Core.dll
ProductVersion: 10.0.19041.1466
FileVersion: 10.0.19041.1466 (WinBuild.160101.0800)
FileDescription: StateRepository Core
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`22d90000 00007ffc`2331d000 Windows_StateRepository (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\Windows.StateRepository.dll\91B511AC58d000\Windows.StateRepository.dll
Image path: C:\Windows\System32\Windows.StateRepository.dll
Image name: Windows.StateRepository.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 91B511AC (This is a reproducible build file hash, not a timestamp)
CheckSum: 00596B88
ImageSize: 0058D000
File version: 10.0.19041.1466
Product version: 10.0.19041.1466
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Windows StateRepository API Server
OriginalFilename: Windows.StateRepository.dll
ProductVersion: 10.0.19041.1466
FileVersion: 10.0.19041.1466 (WinBuild.160101.0800)
FileDescription: Windows StateRepository API Server
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`24000000 00007ffc`240e6000 Windows_ApplicationModel (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\Windows.ApplicationModel.dll\08F909A4e6000\Windows.ApplicationModel.dll
Image path: C:\Windows\System32\Windows.ApplicationModel.dll
Image name: Windows.ApplicationModel.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 08F909A4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000F2B53
ImageSize: 000E6000
File version: 10.0.19041.1806
Product version: 10.0.19041.1806
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Windows ApplicationModel API Server
OriginalFilename: Windows.ApplicationModel.dll
ProductVersion: 10.0.19041.1806
FileVersion: 10.0.19041.1806 (WinBuild.160101.0800)
FileDescription: Windows ApplicationModel API Server
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`244d0000 00007ffc`24555000 MMDevAPI (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\MMDevAPI.dll\00C1FFE285000\MMDevAPI.dll
Image path: C:\Windows\System32\MMDevAPI.dll
Image name: MMDevAPI.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 00C1FFE2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0008F953
ImageSize: 00085000
File version: 10.0.19041.1503
Product version: 10.0.19041.1503
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MMDeviceAPI
OriginalFilename: MMDevAPI.Dll
ProductVersion: 10.0.19041.1503
FileVersion: 10.0.19041.1503 (WinBuild.160101.0800)
FileDescription: MMDevice API
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`24870000 00007ffc`2491c000 TextShaping (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\TextShaping.dll\63A36C45ac000\TextShaping.dll
Image path: C:\Windows\System32\TextShaping.dll
Image name: TextShaping.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 63A36C45 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000AE8FC
ImageSize: 000AC000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
00007ffc`25490000 00007ffc`28c24000 igc64 (deferred)
Mapped memory image file: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a63b95fe6e6a1712\igc64.dll
Image path: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a63b95fe6e6a1712\igc64.dll
Image name: igc64.dll
Browse all global symbols functions data
Timestamp: Tue Jul 19 10:20:27 2022 (62D6694B)
CheckSum: 03858A9F
ImageSize: 03794000
File version: 31.0.101.2111
Product version: 31.0.101.2111
File flags: 0 (Mask 3F)
File OS: 10004 DOS Win32
File type: 2.8 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Intel Corporation
ProductName: Intel HD Graphics Drivers for Windows(R)
InternalName: IGC
OriginalFilename: igc64.dll
ProductVersion: 31.0.101.2111
FileVersion: 31.0.101.2111
FileDescription: Intel Graphics Shader Compiler for Intel(R) Graphics Accelerator
LegalCopyright: Copyright (c) 1998-2018 Intel Corporation.
00007ffc`28c30000 00007ffc`28eaf000 DWrite (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\DWrite.dll\29A9E8AD27f000\DWrite.dll
Image path: C:\Windows\System32\DWrite.dll
Image name: DWrite.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 29A9E8AD (This is a reproducible build file hash, not a timestamp)
CheckSum: 00281C48
ImageSize: 0027F000
File version: 10.0.19041.1566
Product version: 10.0.19041.1566
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: DWrite
OriginalFilename: DWrite
ProductVersion: 10.0.19041.1566
FileVersion: 10.0.19041.1566 (WinBuild.160101.0800)
FileDescription: Microsoft DirectX Typography Services
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`28eb0000 00007ffc`292b9000 igdgmm64 (deferred)
Mapped memory image file: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a63b95fe6e6a1712\igdgmm64.dll
Image path: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a63b95fe6e6a1712\igdgmm64.dll
Image name: igdgmm64.dll
Browse all global symbols functions data
Timestamp: Tue Jul 19 10:00:24 2022 (62D66498)
CheckSum: 00421FBA
ImageSize: 00409000
File version: 31.0.101.2111
Product version: 31.0.101.2111
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.8 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Intel Corporation
ProductName: Intel HD Graphics Drivers for Windows(R)
InternalName: igdgmm64.dll
OriginalFilename: igdgmm64.dll
ProductVersion: 31.0.101.2111
FileVersion: 31.0.101.2111
FileDescription: User Mode Driver for Intel(R) Graphics Technology
LegalCopyright: Copyright (c) 1998-2018 Intel Corporation.
00007ffc`292c0000 00007ffc`292fb000 DXCore (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\DXCore.dll\B2F5FD5A3b000\DXCore.dll
Image path: C:\Windows\System32\DXCore.dll
Image name: DXCore.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B2F5FD5A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00035B60
ImageSize: 0003B000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: DXCore
OriginalFilename: DXCore.DLL
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: DXCore
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`29300000 00007ffc`29a13000 igd10um64gen11 (deferred)
Mapped memory image file: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a63b95fe6e6a1712\igd10um64gen11.DLL
Image path: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a63b95fe6e6a1712\igd10um64gen11.DLL
Image name: igd10um64gen11.DLL
Browse all global symbols functions data
Timestamp: Tue Jul 19 10:12:22 2022 (62D66766)
CheckSum: 00730D0F
ImageSize: 00713000
File version: 31.0.101.2111
Product version: 31.0.101.2111
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.8 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Intel Corporation
ProductName: Intel HD Graphics Drivers for Windows(R)
InternalName: igd10um64gen11.dll
OriginalFilename: igd10um64gen11.dll
ProductVersion: 31.0.101.2111
FileVersion: 31.0.101.2111
FileDescription: User Mode Driver for Intel(R) Graphics Technology
LegalCopyright: Copyright (c) 1998-2018 Intel Corporation.
00007ffc`29a20000 00007ffc`29ac5000 igd10iumd64 (deferred)
Mapped memory image file: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a63b95fe6e6a1712\igd10iumd64.dll
Image path: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a63b95fe6e6a1712\igd10iumd64.dll
Image name: igd10iumd64.dll
Browse all global symbols functions data
Timestamp: Tue Jul 19 10:07:42 2022 (62D6664E)
CheckSum: 000B7004
ImageSize: 000A5000
File version: 31.0.101.2111
Product version: 31.0.101.2111
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.8 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Intel Corporation
ProductName: Intel HD Graphics Drivers for Windows(R)
InternalName: igd10iumd64.dll
OriginalFilename: igd10iumd64.dll
ProductVersion: 31.0.101.2111
FileVersion: 31.0.101.2111
FileDescription: User Mode Driver for Intel(R) Graphics Technology
LegalCopyright: Copyright (c) 1998-2018 Intel Corporation.
00007ffc`2a1d0000 00007ffc`2a999000 OneCoreUAPCommonProxyStub (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\OneCoreUAPCommonProxyStub.dll\92CD6F797c9000\OneCoreUAPCommonProxyStub.dll
Image path: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
Image name: OneCoreUAPCommonProxyStub.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 92CD6F79 (This is a reproducible build file hash, not a timestamp)
CheckSum: 007E255F
ImageSize: 007C9000
File version: 10.0.19041.1806
Product version: 10.0.19041.1806
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: OneCoreUAPCommonProxyStub.dll
OriginalFilename: OneCoreUAPCommonProxyStub.dll
ProductVersion: 10.0.19041.1806
FileVersion: 10.0.19041.1806 (WinBuild.160101.0800)
FileDescription: OneCoreUAP Common Proxy Stub
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`2a9a0000 00007ffc`2a9c8000 srvcli (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\srvcli.dll\58A8EC8128000\srvcli.dll
Image path: C:\Windows\System32\srvcli.dll
Image name: srvcli.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 58A8EC81 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00024BD7
ImageSize: 00028000
File version: 10.0.19041.1645
Product version: 10.0.19041.1645
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SRVCLI.DLL
OriginalFilename: SRVCLI.DLL
ProductVersion: 10.0.19041.1645
FileVersion: 10.0.19041.1645 (WinBuild.160101.0800)
FileDescription: Server Service Client DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`2ad90000 00007ffc`2b041000 iertutil (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\iertutil.dll\023D135B2b1000\iertutil.dll
Image path: C:\Windows\System32\iertutil.dll
Image name: iertutil.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 023D135B (This is a reproducible build file hash, not a timestamp)
CheckSum: 002B10DB
ImageSize: 002B1000
File version: 11.0.19041.1806
Product version: 11.0.19041.1806
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Internet Explorer
InternalName: IeRtUtil.dll
OriginalFilename: IeRtUtil.dll
ProductVersion: 11.00.19041.1806
FileVersion: 11.00.19041.1806 (WinBuild.160101.0800)
FileDescription: Run time utility for Internet Explorer
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`2c2a0000 00007ffc`2c2cd000 BCP47mrm (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\BCP47mrm.dll\51A466982d000\BCP47mrm.dll
Image path: C:\Windows\System32\BCP47mrm.dll
Image name: BCP47mrm.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 51A46698 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000369DA
ImageSize: 0002D000
File version: 10.0.19041.1503
Product version: 10.0.19041.1503
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: BCP47mrm.dll
OriginalFilename: BCP47mrm.dll
ProductVersion: 10.0.19041.1503
FileVersion: 10.0.19041.1503 (WinBuild.160101.0800)
FileDescription: BCP47 Language Classes for Resource Management
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`2c320000 00007ffc`2c34d000 languageoverlayutil (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\languageoverlayutil.dll\F25494F42d000\languageoverlayutil.dll
Image path: C:\Windows\System32\languageoverlayutil.dll
Image name: languageoverlayutil.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F25494F4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00037911
ImageSize: 0002D000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: LanguageOverlayUtil
OriginalFilename: LanguageOverlayUtil.dll
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: Provides helper APIs for managing overlaid localized Windows resources.
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`2c350000 00007ffc`2c504000 windowscodecs (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\windowscodecs.dll\1FCF100D1b4000\windowscodecs.dll
Image path: C:\Windows\System32\windowscodecs.dll
Image name: windowscodecs.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1FCF100D (This is a reproducible build file hash, not a timestamp)
CheckSum: 001C2EA2
ImageSize: 001B4000
File version: 10.0.19041.1706
Product version: 10.0.19041.1706
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WindowsCodecs
OriginalFilename: WindowsCodecs
ProductVersion: 10.0.19041.1706
FileVersion: 10.0.19041.1706 (WinBuild.160101.0800)
FileDescription: Microsoft Windows Codecs Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`2c510000 00007ffc`2c710000 twinapi_appcore # (pdb symbols) C:\ProgramData\dbg\sym\twinapi.appcore.pdb\F640821A166EC5AC958105B9F98ADDEE1\twinapi.appcore.pdb
Loaded symbol image file: twinapi.appcore.dll
Mapped memory image file: C:\ProgramData\dbg\sym\twinapi.appcore.dll\33D99790200000\twinapi.appcore.dll
Image path: C:\Windows\System32\twinapi.appcore.dll
Image name: twinapi.appcore.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 33D99790 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00201CFB
ImageSize: 00200000
File version: 10.0.19041.1806
Product version: 10.0.19041.1806
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: twinapi.appcore
OriginalFilename: twinapi.appcore.dll
ProductVersion: 10.0.19041.1826
FileVersion: 10.0.19041.1826 (WinBuild.160101.0800)
FileDescription: twinapi.appcore
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`2c710000 00007ffc`2c862000 InputHost (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\InputHost.dll\A51CB89A152000\InputHost.dll
Image path: C:\Windows\System32\InputHost.dll
Image name: InputHost.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A51CB89A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00156FB7
ImageSize: 00152000
File version: 10.0.19041.1741
Product version: 10.0.19041.1741
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: InputHost.dll
OriginalFilename: InputHost.dll
ProductVersion: 10.0.19041.1741
FileVersion: 10.0.19041.1741 (WinBuild.160101.0800)
FileDescription: InputHost
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`2c870000 00007ffc`2c969000 TextInputFramework (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\TextInputFramework.dll\BC44B30Ef9000\TextInputFramework.dll
Image path: C:\Windows\System32\TextInputFramework.dll
Image name: TextInputFramework.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: BC44B30E (This is a reproducible build file hash, not a timestamp)
CheckSum: 00103ED2
ImageSize: 000F9000
File version: 10.0.19041.1806
Product version: 10.0.19041.1806
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 0.0 Unknown
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: "TextInputFramework.DYNLINK"
OriginalFilename: "TextInputFramework.DYNLINK"
ProductVersion: 10.0.19041.1852
FileVersion: 10.0.19041.1852 (WinBuild.160101.0800)
FileDescription: "TextInputFramework.DYNLINK"
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`2c970000 00007ffc`2ca11000 WindowManagementAPI (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\WindowManagementAPI.dll\903E2645a1000\WindowManagementAPI.dll
Image path: C:\Windows\System32\WindowManagementAPI.dll
Image name: WindowManagementAPI.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 903E2645 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A50F8
ImageSize: 000A1000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
00007ffc`2ca20000 00007ffc`2ca8a000 ninput (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\ninput.dll\055464D26a000\ninput.dll
Image path: C:\Windows\System32\ninput.dll
Image name: ninput.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 055464D2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00072526
ImageSize: 0006A000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NINPUT.DLL
OriginalFilename: NINPUT.DLL
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: Microsoft Pen and Touch Input Component
LegalCopyright: Copyright (c) Microsoft Corp. All rights reserved
00007ffc`2ca90000 00007ffc`2cbd1000 Windows_UI (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\Windows.UI.dll\016F5668141000\Windows.UI.dll
Image path: C:\Windows\System32\Windows.UI.dll
Image name: Windows.UI.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 016F5668 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00146619
ImageSize: 00141000
File version: 10.0.19041.746
Product version: 10.0.19041.746
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Windows Runtime UI Foundation DLL
OriginalFilename: Windows.UI.dll
ProductVersion: 10.0.19041.746
FileVersion: 10.0.19041.746 (WinBuild.160101.0800)
FileDescription: Windows Runtime UI Foundation DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`2ce20000 00007ffc`2cf14000 MrmCoreR (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\MrmCoreR.dll\0B3246D4f4000\MrmCoreR.dll
Image path: C:\Windows\System32\MrmCoreR.dll
Image name: MrmCoreR.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0B3246D4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00100D0A
ImageSize: 000F4000
File version: 10.0.19041.1566
Product version: 10.0.19041.1566
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MrmCore
OriginalFilename: MrmCore.dll
ProductVersion: 10.0.19041.1566
FileVersion: 10.0.19041.1566 (WinBuild.160101.0800)
FileDescription: Microsoft Windows MRM
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`2cf60000 00007ffc`2cfbb000 Bcp47Langs (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\Bcp47Langs.dll\D24D94EC5b000\Bcp47Langs.dll
Image path: C:\Windows\System32\Bcp47Langs.dll
Image name: Bcp47Langs.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D24D94EC (This is a reproducible build file hash, not a timestamp)
CheckSum: 00067C85
ImageSize: 0005B000
File version: 10.0.19041.1566
Product version: 10.0.19041.1566
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: BCP47Lang.dll
OriginalFilename: BCP47Lang.dll
ProductVersion: 10.0.19041.1566
FileVersion: 10.0.19041.1566 (WinBuild.160101.0800)
FileDescription: BCP47 Language Classes
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`2cfc0000 00007ffc`2d02f000 wincorlib (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\wincorlib.DLL\4C5470BA6f000\wincorlib.DLL
Image path: C:\Windows\System32\wincorlib.DLL
Image name: wincorlib.DLL
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4C5470BA (This is a reproducible build file hash, not a timestamp)
CheckSum: 00076FD6
ImageSize: 0006F000
File version: 10.0.19041.1682
Product version: 10.0.19041.1682
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wincorlib.DLL
OriginalFilename: wincorlib.DLL
ProductVersion: 10.0.19041.1188
FileVersion: 10.0.19041.1188 (WinBuild.160101.0800)
FileDescription: Microsoft Windows ® WinRT core library
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`2d350000 00007ffc`2d377000 samlib (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\samlib.dll\346E5E8627000\samlib.dll
Image path: C:\Windows\System32\samlib.dll
Image name: samlib.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 346E5E86 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00024414
ImageSize: 00027000
File version: 10.0.19041.1826
Product version: 10.0.19041.1826
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SAMLib.DLL
OriginalFilename: SAMLib.DLL
ProductVersion: 10.0.19041.1865
FileVersion: 10.0.19041.1865 (WinBuild.160101.0800)
FileDescription: SAM Library DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`2d490000 00007ffc`2d5cd000 dsreg (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\dsreg.dll\B58D394713d000\dsreg.dll
Image path: C:\Windows\System32\dsreg.dll
Image name: dsreg.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B58D3947 (This is a reproducible build file hash, not a timestamp)
CheckSum: 001482AE
ImageSize: 0013D000
File version: 10.0.19041.1806
Product version: 10.0.19041.1806
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dsreg.dll
OriginalFilename: dsreg.dll
ProductVersion: 10.0.19041.1806
FileVersion: 10.0.19041.1806 (WinBuild.160101.0800)
FileDescription: AD/AAD User Device Registration
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`2d5f0000 00007ffc`2d7dc000 urlmon (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\urlmon.dll\FB52A2941ec000\urlmon.dll
Image path: C:\Windows\System32\urlmon.dll
Image name: urlmon.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: FB52A294 (This is a reproducible build file hash, not a timestamp)
CheckSum: 001E7394
ImageSize: 001EC000
File version: 11.0.19041.1806
Product version: 11.0.19041.1806
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Internet Explorer
InternalName: UrlMon.dll
OriginalFilename: UrlMon.dll
ProductVersion: 11.00.19041.1806
FileVersion: 11.00.19041.1806 (WinBuild.160101.0800)
FileDescription: OLE32 Extensions for Win32
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`2eb10000 00007ffc`2eb64000 usermgrproxy (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\usermgrproxy.dll\59D786ED54000\usermgrproxy.dll
Image path: C:\Windows\System32\usermgrproxy.dll
Image name: usermgrproxy.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 59D786ED (This is a reproducible build file hash, not a timestamp)
CheckSum: 00056814
ImageSize: 00054000
File version: 10.0.19041.1741
Product version: 10.0.19041.1741
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usermgrproxy.dll
OriginalFilename: usermgrproxy.dll
ProductVersion: 10.0.19041.1741
FileVersion: 10.0.19041.1741 (WinBuild.160101.0800)
FileDescription: UserMgrProxy
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`2eb70000 00007ffc`2ec67000 AppXDeploymentClient (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\AppXDeploymentClient.dll\DE5B961Af7000\AppXDeploymentClient.dll
Image path: C:\Windows\System32\AppXDeploymentClient.dll
Image name: AppXDeploymentClient.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: DE5B961A (This is a reproducible build file hash, not a timestamp)
CheckSum: 000FD2E7
ImageSize: 000F7000
File version: 10.0.19041.1620
Product version: 10.0.19041.1620
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: AppXDeploymentClient.dll
OriginalFilename: AppXDeploymentClient.dll
ProductVersion: 10.0.19041.1620
FileVersion: 10.0.19041.1620 (WinBuild.160101.0800)
FileDescription: AppX Deployment Client DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`2edb0000 00007ffc`2ede6000 xmllite (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\xmllite.dll\1BFB31AD36000\xmllite.dll
Image path: C:\Windows\System32\xmllite.dll
Image name: xmllite.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1BFB31AD (This is a reproducible build file hash, not a timestamp)
CheckSum: 00039720
ImageSize: 00036000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: XmlLite.dll
OriginalFilename: XmlLite.dll
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: Microsoft XmlLite Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`31a80000 00007ffc`31b76000 propsys (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\propsys.dll\3A69740Df6000\propsys.dll
Image path: C:\Windows\System32\propsys.dll
Image name: propsys.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3A69740D (This is a reproducible build file hash, not a timestamp)
CheckSum: 000FED9E
ImageSize: 000F6000
File version: 7.0.19041.1741
Product version: 7.0.19041.1741
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Windows® Search
InternalName: propsys.dll
OriginalFilename: propsys.dll
ProductVersion: 7.0.19041.1741
FileVersion: 7.0.19041.1741 (WinBuild.160101.0800)
FileDescription: Microsoft Property System
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`32a50000 00007ffc`32a66000 usermgrcli (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\usermgrcli.dll\F3DB7A8616000\usermgrcli.dll
Image path: C:\Windows\System32\usermgrcli.dll
Image name: usermgrcli.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F3DB7A86 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00017561
ImageSize: 00016000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usermgrcli.dll
OriginalFilename: usermgrcli.dll
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: UserMgr API DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`344f0000 00007ffc`34590000 policymanager (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\policymanager.dll\F63DD579a0000\policymanager.dll
Image path: C:\Windows\System32\policymanager.dll
Image name: policymanager.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F63DD579 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A12AF
ImageSize: 000A0000
File version: 10.0.19041.1806
Product version: 10.0.19041.1806
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: PolicyManager.dll
OriginalFilename: PolicyManager.dll
ProductVersion: 10.0.19041.1806
FileVersion: 10.0.19041.1806 (WinBuild.160101.0800)
FileDescription: Policy Manager DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`35c30000 00007ffc`35e93000 d3d11 (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\d3d11.dll\B856DAE4263000\d3d11.dll
Image path: C:\Windows\System32\d3d11.dll
Image name: d3d11.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B856DAE4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00263BEE
ImageSize: 00263000
File version: 10.0.19041.1741
Product version: 10.0.19041.1741
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: D3D11.dll
OriginalFilename: D3D11.dll
ProductVersion: 10.0.19041.1767
FileVersion: 10.0.19041.1767 (WinBuild.160101.0800)
FileDescription: Direct3D 11 Runtime
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`36300000 00007ffc`368c0000 d2d1 (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\d2d1.dll\DF04746A5c0000\d2d1.dll
Image path: C:\Windows\System32\d2d1.dll
Image name: d2d1.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: DF04746A (This is a reproducible build file hash, not a timestamp)
CheckSum: 005D0203
ImageSize: 005C0000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: d2d1
OriginalFilename: d2d1
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: Microsoft D2D Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`368d0000 00007ffc`36a24000 WinTypes (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\WinTypes.dll\75877130154000\WinTypes.dll
Image path: C:\Windows\System32\WinTypes.dll
Image name: WinTypes.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 75877130 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0016006E
ImageSize: 00154000
File version: 10.0.19041.1682
Product version: 10.0.19041.1682
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Windows Base Types DLL
OriginalFilename: WinTypes.dll
ProductVersion: 10.0.19041.1682
FileVersion: 10.0.19041.1682 (WinBuild.160101.0800)
FileDescription: Windows Base Types DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`36a60000 00007ffc`36c44000 dcomp (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\dcomp.dll\789038351e4000\dcomp.dll
Image path: C:\Windows\System32\dcomp.dll
Image name: dcomp.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 78903835 (This is a reproducible build file hash, not a timestamp)
CheckSum: 001F1317
ImageSize: 001E4000
File version: 10.0.19041.1741
Product version: 10.0.19041.1741
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dcomp.dll
OriginalFilename: dcomp.dll
ProductVersion: 10.0.19041.1741
FileVersion: 10.0.19041.1741 (WinBuild.160101.0800)
FileDescription: Microsoft DirectComposition Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`36fd0000 00007ffc`3732e000 CoreUIComponents (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\CoreUIComponents.dll\CE358DE335e000\CoreUIComponents.dll
Image path: C:\Windows\System32\CoreUIComponents.dll
Image name: CoreUIComponents.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: CE358DE3 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00363804
ImageSize: 0035E000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: CoreUIComponents.dll
OriginalFilename: CoreUIComponents.dll
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546
FileDescription: Microsoft Core UI Components Dll
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`37330000 00007ffc`37422000 CoreMessaging (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\CoreMessaging.dll\D3DFBBE6f2000\CoreMessaging.dll
Image path: C:\Windows\System32\CoreMessaging.dll
Image name: CoreMessaging.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D3DFBBE6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000F8399
ImageSize: 000F2000
File version: 10.0.19041.746
Product version: 10.0.19041.746
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: CoreMessaging.dll
OriginalFilename: CoreMessaging.dll
ProductVersion: 10.0.19041.746
FileVersion: 10.0.19041.746
FileDescription: Microsoft CoreMessaging Dll
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`375d0000 00007ffc`37660000 apphelp (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\apphelp.dll\723081CD90000\apphelp.dll
Image path: C:\Windows\System32\apphelp.dll
Image name: apphelp.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 723081CD (This is a reproducible build file hash, not a timestamp)
CheckSum: 00098286
ImageSize: 00090000
File version: 10.0.19041.1320
Product version: 10.0.19041.1320
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Apphelp
OriginalFilename: Apphelp
ProductVersion: 10.0.19041.1320
FileVersion: 10.0.19041.1320 (WinBuild.160101.0800)
FileDescription: Application Compatibility Client Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`37700000 00007ffc`3779e000 uxtheme (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\uxtheme.dll\A2992ABC9e000\uxtheme.dll
Image path: C:\Windows\System32\uxtheme.dll
Image name: uxtheme.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A2992ABC (This is a reproducible build file hash, not a timestamp)
CheckSum: 0009FDB6
ImageSize: 0009E000
File version: 10.0.19041.1620
Product version: 10.0.19041.1620
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: UxTheme.dll
OriginalFilename: UxTheme.dll
ProductVersion: 10.0.19041.1620
FileVersion: 10.0.19041.1620 (WinBuild.160101.0800)
FileDescription: Microsoft UxTheme Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`37a00000 00007ffc`37a2f000 dwmapi (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\dwmapi.dll\7ECC0A112f000\dwmapi.dll
Image path: C:\Windows\System32\dwmapi.dll
Image name: dwmapi.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7ECC0A11 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003836D
ImageSize: 0002F000
File version: 10.0.19041.746
Product version: 10.0.19041.746
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dwmapi.dll
OriginalFilename: dwmapi.dll
ProductVersion: 10.0.19041.746
FileVersion: 10.0.19041.746 (WinBuild.160101.0800)
FileDescription: Microsoft Desktop Window Manager API
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`37dc0000 00007ffc`37df1000 cryptnet (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\cryptnet.dll\F30FC47831000\cryptnet.dll
Image path: C:\Windows\System32\cryptnet.dll
Image name: cryptnet.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F30FC478 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003D44F
ImageSize: 00031000
File version: 10.0.19041.906
Product version: 10.0.19041.906
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: CRYPTNET.DLL
OriginalFilename: CRYPTNET.DLL
ProductVersion: 10.0.19041.906
FileVersion: 10.0.19041.906 (WinBuild.160101.0800)
FileDescription: Crypto Network Related API
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`37e00000 00007ffc`38594000 windows_storage (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\windows.storage.dll\037AE251794000\windows.storage.dll
Image path: C:\Windows\System32\windows.storage.dll
Image name: windows.storage.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 037AE251 (This is a reproducible build file hash, not a timestamp)
CheckSum: 007A37A5
ImageSize: 00794000
File version: 10.0.19041.1806
Product version: 10.0.19041.1806
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Windows.Storage
OriginalFilename: Windows.Storage.dll
ProductVersion: 10.0.19041.1806
FileVersion: 10.0.19041.1806 (WinBuild.160101.0800)
FileDescription: Microsoft WinRT Storage API
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`385b0000 00007ffc`385d3000 gpapi (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\gpapi.dll\5F1348B023000\gpapi.dll
Image path: C:\Windows\System32\gpapi.dll
Image name: gpapi.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5F1348B0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000246DF
ImageSize: 00023000
File version: 10.0.19041.1682
Product version: 10.0.19041.1682
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: gpapi.dll
OriginalFilename: gpapi.dll
ProductVersion: 10.0.19041.1188
FileVersion: 10.0.19041.1188 (WinBuild.160101.0800)
FileDescription: Group Policy Client API
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`385e0000 00007ffc`386d3000 dxgi (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\dxgi.dll\ABB9B7D6f3000\dxgi.dll
Image path: C:\Windows\System32\dxgi.dll
Image name: dxgi.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: ABB9B7D6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000EF8F3
ImageSize: 000F3000
File version: 10.0.19041.1806
Product version: 10.0.19041.1806
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dxgi.dll
OriginalFilename: dxgi.dll
ProductVersion: 10.0.19041.1852
FileVersion: 10.0.19041.1852 (WinBuild.160101.0800)
FileDescription: DirectX Graphics Infrastructure
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`38830000 00007ffc`38855000 sppc (deferred)
Mapped memory image file: C:\Windows\System32\sppc.dll
Image path: C:\Windows\System32\sppc.dll
Image name: sppc.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 74880A1B (This is a reproducible build file hash, not a timestamp)
CheckSum: 00025CA3
ImageSize: 00025000
File version: 10.0.19041.1682
Product version: 10.0.19041.1682
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: sppc.dll
OriginalFilename: sppc.dll
ProductVersion: 10.0.19041.1682
FileVersion: 10.0.19041.1682 (WinBuild.160101.0800)
FileDescription: Software Licensing Client Dll
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`388a0000 00007ffc`388c9000 slc (deferred)
Mapped memory image file: C:\Windows\System32\slc.dll
Image path: C:\Windows\System32\slc.dll
Image name: slc.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: EE013ABB (This is a reproducible build file hash, not a timestamp)
CheckSum: 00028A7E
ImageSize: 00029000
File version: 10.0.19041.1682
Product version: 10.0.19041.1682
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: slc.dll
OriginalFilename: slc.dll
ProductVersion: 10.0.19041.1682
FileVersion: 10.0.19041.1682 (WinBuild.160101.0800)
FileDescription: Software Licensing Client Dll
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`389e0000 00007ffc`38a13000 ntmarta (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\ntmarta.dll\3D60AD0433000\ntmarta.dll
Image path: C:\Windows\System32\ntmarta.dll
Image name: ntmarta.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3D60AD04 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00038797
ImageSize: 00033000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntmarta.dll
OriginalFilename: ntmarta.dll
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: Windows NT MARTA provider
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`38c70000 00007ffc`38c82000 kernel_appcore (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\kernel.appcore.dll\F0713FCD12000\kernel.appcore.dll
Image path: C:\Windows\System32\kernel.appcore.dll
Image name: kernel.appcore.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F0713FCD (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001A722
ImageSize: 00012000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: kernel.appcore.dll
OriginalFilename: kernel.appcore.dll
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: AppModel API Host
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`38c90000 00007ffc`38ca9000 samcli (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\samcli.dll\F185A82E19000\samcli.dll
Image path: C:\Windows\System32\samcli.dll
Image name: samcli.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F185A82E (This is a reproducible build file hash, not a timestamp)
CheckSum: 00020CF8
ImageSize: 00019000
File version: 10.0.19041.1466
Product version: 10.0.19041.1466
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SAMCLI.DLL
OriginalFilename: SAMCLI.DLL
ProductVersion: 10.0.19041.1466
FileVersion: 10.0.19041.1466 (WinBuild.160101.0800)
FileDescription: Security Accounts Manager Client DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`38cb0000 00007ffc`38cba000 version (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\version.dll\14531102a000\version.dll
Image path: C:\Windows\System32\version.dll
Image name: version.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 14531102 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000D776
ImageSize: 0000A000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: version
OriginalFilename: VERSION.DLL
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: Version Checking and File Installation Libraries
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`38cc0000 00007ffc`38ccc000 secur32 (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\secur32.dll\7AEC0E44c000\secur32.dll
Image path: C:\Windows\System32\secur32.dll
Image name: secur32.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7AEC0E44 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000C444
ImageSize: 0000C000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: secur32.dll
OriginalFilename: secur32.dll
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: Security Support Provider Interface
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`38cd0000 00007ffc`38cea000 netapi32 (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\netapi32.dll\6A87354C1a000\netapi32.dll
Image path: C:\Windows\System32\netapi32.dll
Image name: netapi32.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6A87354C (This is a reproducible build file hash, not a timestamp)
CheckSum: 00020760
ImageSize: 0001A000
File version: 10.0.19041.1682
Product version: 10.0.19041.1682
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NetApi32.DLL
OriginalFilename: NetApi32.DLL
ProductVersion: 10.0.19041.1865
FileVersion: 10.0.19041.1865 (WinBuild.160101.0800)
FileDescription: Net Win32 API DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`38cf0000 00007ffc`38d04000 wtsapi32 (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\wtsapi32.dll\5E1A2A6114000\wtsapi32.dll
Image path: C:\Windows\System32\wtsapi32.dll
Image name: wtsapi32.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5E1A2A61 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00010F40
ImageSize: 00014000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wtsapi32.dll
OriginalFilename: wtsapi32.dll
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: Windows Remote Desktop Session Host Server SDK APIs
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`38f20000 00007ffc`38f54000 rsaenh (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\rsaenh.dll\A9B3EF3B34000\rsaenh.dll
Image path: C:\Windows\System32\rsaenh.dll
Image name: rsaenh.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A9B3EF3B (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003CCDE
ImageSize: 00034000
File version: 10.0.19041.1052
Product version: 10.0.19041.1052
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rsaenh.dll
OriginalFilename: rsaenh.dll
ProductVersion: 10.0.19041.1052
FileVersion: 10.0.19041.1052 (WinBuild.160101.0800)
FileDescription: Microsoft Enhanced Cryptographic Provider
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`38fb0000 00007ffc`3903a000 msvcp110_win (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\msvcp110_win.dll\F390EAD18a000\msvcp110_win.dll
Image path: C:\Windows\System32\msvcp110_win.dll
Image name: msvcp110_win.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F390EAD1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00089BC9
ImageSize: 0008A000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: msvcp110_win.dll
OriginalFilename: msvcp110_win.dll
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: Microsoft® STL110 C++ Runtime Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`39040000 00007ffc`39059000 wkscli (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\wkscli.dll\89AE790419000\wkscli.dll
Image path: C:\Windows\System32\wkscli.dll
Image name: wkscli.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 89AE7904 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00017C06
ImageSize: 00019000
File version: 10.0.19041.1645
Product version: 10.0.19041.1645
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WKSCLI.DLL
OriginalFilename: WKSCLI.DLL
ProductVersion: 10.0.19041.1645
FileVersion: 10.0.19041.1645 (WinBuild.160101.0800)
FileDescription: Workstation Service Client DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`39290000 00007ffc`392cb000 IPHLPAPI (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\IPHLPAPI.DLL\CF9A121A3b000\IPHLPAPI.DLL
Image path: C:\Windows\System32\IPHLPAPI.DLL
Image name: IPHLPAPI.DLL
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: CF9A121A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003ECBD
ImageSize: 0003B000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: iphlpapi.dll
OriginalFilename: iphlpapi.dll
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: IP Helper API
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`393a0000 00007ffc`393ac000 netutils (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\netutils.dll\FCF57D1Bc000\netutils.dll
Image path: C:\Windows\System32\netutils.dll
Image name: netutils.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: FCF57D1B (This is a reproducible build file hash, not a timestamp)
CheckSum: 00012761
ImageSize: 0000C000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NETUTILS.DLL
OriginalFilename: NETUTILS.DLL
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: Net Win32 API Helpers DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`39790000 00007ffc`397c0000 wldp (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\wldp.dll\69DDAC4730000\wldp.dll
Image path: C:\Windows\System32\wldp.dll
Image name: wldp.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 69DDAC47 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00036CFD
ImageSize: 00030000
File version: 10.0.19041.1806
Product version: 10.0.19041.1806
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wldp.dll
OriginalFilename: wldp.dll
ProductVersion: 10.0.19041.1806
FileVersion: 10.0.19041.1806 (WinBuild.160101.0800)
FileDescription: Windows Lockdown Policy
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`397c0000 00007ffc`397cc000 CRYPTBASE (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\CRYPTBASE.DLL\28E89A43c000\CRYPTBASE.DLL
Image path: C:\Windows\System32\CRYPTBASE.DLL
Image name: CRYPTBASE.DLL
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 28E89A43 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00014A16
ImageSize: 0000C000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cryptbase.dll
OriginalFilename: cryptbase.dll
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: Base cryptographic API DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`397e0000 00007ffc`397f8000 cryptsp (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\cryptsp.dll\04D97AE618000\cryptsp.dll
Image path: C:\Windows\System32\cryptsp.dll
Image name: cryptsp.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 04D97AE6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001D2BE
ImageSize: 00018000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cryptsp.dll
OriginalFilename: cryptsp.dll
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: Cryptographic Service Provider API
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`398b0000 00007ffc`398eb000 ntasn1 (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\ntasn1.dll\1A7045F23b000\ntasn1.dll
Image path: C:\Windows\System32\ntasn1.dll
Image name: ntasn1.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1A7045F2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003C733
ImageSize: 0003B000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntasn1.dll
OriginalFilename: ntasn1.dll
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: Microsoft ASN.1 API
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`398f0000 00007ffc`39917000 ncrypt (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\ncrypt.dll\21EB655727000\ncrypt.dll
Image path: C:\Windows\System32\ncrypt.dll
Image name: ncrypt.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 21EB6557 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002D9BE
ImageSize: 00027000
File version: 10.0.19041.662
Product version: 10.0.19041.662
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ncrypt.dll
OriginalFilename: ncrypt.dll
ProductVersion: 10.0.19041.662
FileVersion: 10.0.19041.662 (WinBuild.160101.0800)
FileDescription: Windows NCrypt Router
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`39a10000 00007ffc`39a22000 msasn1 (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\msasn1.dll\9DCCEB6F12000\msasn1.dll
Image path: C:\Windows\System32\msasn1.dll
Image name: msasn1.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9DCCEB6F (This is a reproducible build file hash, not a timestamp)
CheckSum: 00013CA9
ImageSize: 00012000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: msasn1.dll
OriginalFilename: msasn1.dll
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: ASN.1 Runtime APIs
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`39bd0000 00007ffc`39c2a000 winsta (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\winsta.dll\C09C98C75a000\winsta.dll
Image path: C:\Windows\System32\winsta.dll
Image name: winsta.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C09C98C7 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0005FE0D
ImageSize: 0005A000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: winsta
OriginalFilename: winsta.dll
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: Winstation Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`39c30000 00007ffc`39c5c000 devobj (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\devobj.dll\0F7BA6AB2c000\devobj.dll
Image path: C:\Windows\System32\devobj.dll
Image name: devobj.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0F7BA6AB (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003168B
ImageSize: 0002C000
File version: 10.0.19041.1620
Product version: 10.0.19041.1620
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: devinfoset.dll
OriginalFilename: devinfoset.DLL
ProductVersion: 10.0.19041.1620
FileVersion: 10.0.19041.1620 (WinBuild.160101.0800)
FileDescription: Device Information Set DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`39c90000 00007ffc`39ca2000 umpdc (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\umpdc.dll\590B847612000\umpdc.dll
Image path: C:\Windows\System32\umpdc.dll
Image name: umpdc.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 590B8476 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001713F
ImageSize: 00012000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
00007ffc`39cb0000 00007ffc`39cfb000 powrprof (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\powrprof.dll\AB2F15B14b000\powrprof.dll
Image path: C:\Windows\System32\powrprof.dll
Image name: powrprof.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: AB2F15B1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0004ECF4
ImageSize: 0004B000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: POWRPROF
OriginalFilename: POWRPROF.DLL
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: Power Profile Helper DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`39db0000 00007ffc`39de2000 sspicli (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\sspicli.dll\D5F9860632000\sspicli.dll
Image path: C:\Windows\System32\sspicli.dll
Image name: sspicli.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D5F98606 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00038BB8
ImageSize: 00032000
File version: 10.0.19041.1586
Product version: 10.0.19041.1586
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: sspicli.dll
OriginalFilename: sspicli.dll
ProductVersion: 10.0.19041.1586
FileVersion: 10.0.19041.1586 (WinBuild.160101.0800)
FileDescription: Security Support Provider Interface
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`39df0000 00007ffc`39e1e000 userenv (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\userenv.dll\FA7866372e000\userenv.dll
Image path: C:\Windows\System32\userenv.dll
Image name: userenv.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: FA786637 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000362D0
ImageSize: 0002E000
File version: 10.0.19041.572
Product version: 10.0.19041.572
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: userenv
OriginalFilename: userenv.dll
ProductVersion: 10.0.19041.572
FileVersion: 10.0.19041.572 (WinBuild.160101.0800)
FileDescription: Userenv
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`39e30000 00007ffc`39e4f000 profapi (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\profapi.dll\793B05341f000\profapi.dll
Image path: C:\Windows\System32\profapi.dll
Image name: profapi.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 793B0534 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001FFFE
ImageSize: 0001F000
File version: 10.0.19041.844
Product version: 10.0.19041.844
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: PROFAPI.DLL
OriginalFilename: PROFAPI.DLL
ProductVersion: 10.0.19041.844
FileVersion: 10.0.19041.844 (WinBuild.160101.0800)
FileDescription: User Profile Basic API
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`39ef0000 00007ffc`39f57000 wintrust (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\wintrust.dll\C4C8266F67000\wintrust.dll
Image path: C:\Windows\System32\wintrust.dll
Image name: wintrust.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C4C8266F (This is a reproducible build file hash, not a timestamp)
CheckSum: 0006840A
ImageSize: 00067000
File version: 10.0.19041.1806
Product version: 10.0.19041.1806
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WINTRUST.DLL
OriginalFilename: WINTRUST.DLL
ProductVersion: 10.0.19041.1826
FileVersion: 10.0.19041.1826 (WinBuild.160101.0800)
FileDescription: Microsoft Trust Verification APIs
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`39f60000 00007ffc`39fae000 cfgmgr32 (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\cfgmgr32.dll\04ED58554e000\cfgmgr32.dll
Image path: C:\Windows\System32\cfgmgr32.dll
Image name: cfgmgr32.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 04ED5855 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00057F81
ImageSize: 0004E000
File version: 10.0.19041.1620
Product version: 10.0.19041.1620
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cfgmgr32.dll
OriginalFilename: CFGMGR32.DLL
ProductVersion: 10.0.19041.1620
FileVersion: 10.0.19041.1620 (WinBuild.160101.0800)
FileDescription: Configuration Manager DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`39fb0000 00007ffc`3a032000 bcryptPrimitives (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\bcryptPrimitives.dll\E9D3D41782000\bcryptPrimitives.dll
Image path: C:\Windows\System32\bcryptPrimitives.dll
Image name: bcryptPrimitives.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E9D3D417 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0008D6FE
ImageSize: 00082000
File version: 10.0.19041.1415
Product version: 10.0.19041.1415
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bcryptprimitives.dll
OriginalFilename: bcryptprimitives.dll
ProductVersion: 10.0.19041.1865
FileVersion: 10.0.19041.1865 (WinBuild.160101.0800)
FileDescription: Windows Cryptographic Primitives Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3a040000 00007ffc`3a30e000 KERNELBASE (pdb symbols) C:\ProgramData\dbg\sym\kernelbase.pdb\464250F2BF052A1D1D9DCE321151C5711\kernelbase.pdb
Loaded symbol image file: KERNELBASE.dll
Mapped memory image file: C:\ProgramData\dbg\sym\KERNELBASE.dll\299341E82ce000\KERNELBASE.dll
Image path: C:\Windows\System32\KERNELBASE.dll
Image name: KERNELBASE.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 299341E8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 002DB07F
ImageSize: 002CE000
File version: 10.0.19041.1826
Product version: 10.0.19041.1826
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Kernelbase.dll
OriginalFilename: Kernelbase.dll
ProductVersion: 10.0.19041.1826
FileVersion: 10.0.19041.1826 (WinBuild.160101.0800)
FileDescription: Windows NT BASE API Client DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3a310000 00007ffc`3a3ad000 msvcp_win (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\msvcp_win.dll\39255CCF9d000\msvcp_win.dll
Image path: C:\Windows\System32\msvcp_win.dll
Image name: msvcp_win.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 39255CCF (This is a reproducible build file hash, not a timestamp)
CheckSum: 0009B039
ImageSize: 0009D000
File version: 10.0.19041.789
Product version: 10.0.19041.789
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: msvcp_win.dll
OriginalFilename: msvcp_win.dll
ProductVersion: 10.0.19041.1188
FileVersion: 10.0.19041.1188 (WinBuild.160101.0800)
FileDescription: Microsoft® C Runtime Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3a3b0000 00007ffc`3a3d7000 bcrypt (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\bcrypt.dll\5ECCDEFC27000\bcrypt.dll
Image path: C:\Windows\System32\bcrypt.dll
Image name: bcrypt.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5ECCDEFC (This is a reproducible build file hash, not a timestamp)
CheckSum: 00029837
ImageSize: 00027000
File version: 10.0.19041.1023
Product version: 10.0.19041.1023
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bcrypt.dll
OriginalFilename: bcrypt.dll
ProductVersion: 10.0.19041.1023
FileVersion: 10.0.19041.1023 (WinBuild.160101.0800)
FileDescription: Windows Cryptographic Primitives Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3a3e0000 00007ffc`3a4e0000 ucrtbase (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\ucrtbase.dll\2BD748BF100000\ucrtbase.dll
Image path: C:\Windows\System32\ucrtbase.dll
Image name: ucrtbase.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2BD748BF (This is a reproducible build file hash, not a timestamp)
CheckSum: 00103E56
ImageSize: 00100000
File version: 10.0.19041.789
Product version: 10.0.19041.789
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ucrtbase.dll
OriginalFilename: ucrtbase.dll
ProductVersion: 10.0.19041.789
FileVersion: 10.0.19041.789 (WinBuild.160101.0800)
FileDescription: Microsoft® C Runtime Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3a4e0000 00007ffc`3a636000 crypt32 (pdb symbols) C:\ProgramData\dbg\sym\crypt32.pdb\771CB80508CC8918DB5892DC4F6F22381\crypt32.pdb
Loaded symbol image file: crypt32.dll
Mapped memory image file: C:\ProgramData\dbg\sym\crypt32.dll\6D85013F156000\crypt32.dll
Image path: C:\Windows\System32\crypt32.dll
Image name: crypt32.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6D85013F (This is a reproducible build file hash, not a timestamp)
CheckSum: 00154C12
ImageSize: 00156000
File version: 10.0.19041.1320
Product version: 10.0.19041.1320
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: CRYPT32.DLL
OriginalFilename: CRYPT32.DLL
ProductVersion: 10.0.19041.1320
FileVersion: 10.0.19041.1320 (WinBuild.160101.0800)
FileDescription: Crypto API32
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3a640000 00007ffc`3a662000 win32u # (pdb symbols) C:\ProgramData\dbg\sym\win32u.pdb\771C2E28AD611FA7EDEE8227DA66C9351\win32u.pdb
Loaded symbol image file: win32u.dll
Mapped memory image file: C:\ProgramData\dbg\sym\win32u.dll\0DCD021322000\win32u.dll
Image path: C:\Windows\System32\win32u.dll
Image name: win32u.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0DCD0213 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000271A6
ImageSize: 00022000
File version: 10.0.19041.1826
Product version: 10.0.19041.1826
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Win32u
OriginalFilename: Win32u.DLL
ProductVersion: 10.0.19041.1188
FileVersion: 10.0.19041.1188 (WinBuild.160101.0800)
FileDescription: Win32u
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3a670000 00007ffc`3a77b000 gdi32full (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\gdi32full.dll\9F9E8C9010b000\gdi32full.dll
Image path: C:\Windows\System32\gdi32full.dll
Image name: gdi32full.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9F9E8C90 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00107E46
ImageSize: 0010B000
File version: 10.0.19041.1706
Product version: 10.0.19041.1706
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: gdi32
OriginalFilename: gdi32
ProductVersion: 10.0.19041.1706
FileVersion: 10.0.19041.1706 (WinBuild.160101.0800)
FileDescription: GDI Client DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3a8c0000 00007ffc`3a9d5000 msctf (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\msctf.dll\A7D78EAF115000\msctf.dll
Image path: C:\Windows\System32\msctf.dll
Image name: msctf.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A7D78EAF (This is a reproducible build file hash, not a timestamp)
CheckSum: 0011619C
ImageSize: 00115000
File version: 10.0.19041.1806
Product version: 10.0.19041.1806
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MSCTF
OriginalFilename: MSCTF.DLL
ProductVersion: 10.0.19041.1806
FileVersion: 10.0.19041.1806 (WinBuild.160101.0800)
FileDescription: MSCTF Server DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3a9e0000 00007ffc`3ab80000 user32 (pdb symbols) C:\ProgramData\dbg\sym\user32.pdb\8A56AAA646F1C88AFA7CE1F46793099C1\user32.pdb
Loaded symbol image file: user32.dll
Mapped memory image file: C:\ProgramData\dbg\sym\user32.dll\E1C9E1A11a0000\user32.dll
Image path: C:\Windows\System32\user32.dll
Image name: user32.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E1C9E1A1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 001A9FBE
ImageSize: 001A0000
File version: 10.0.19041.1503
Product version: 10.0.19041.1503
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: user32
OriginalFilename: user32
ProductVersion: 10.0.19041.1503
FileVersion: 10.0.19041.1503 (WinBuild.160101.0800)
FileDescription: Multi-User Windows USER API Client DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3ab80000 00007ffc`3ac2e000 advapi32 (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\advapi32.dll\41386534ae000\advapi32.dll
Image path: C:\Windows\System32\advapi32.dll
Image name: advapi32.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 41386534 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000AD23F
ImageSize: 000AE000
File version: 10.0.19041.1682
Product version: 10.0.19041.1682
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: advapi32.dll
OriginalFilename: advapi32.dll
ProductVersion: 10.0.19041.1682
FileVersion: 10.0.19041.1682 (WinBuild.160101.0800)
FileDescription: Advanced Windows 32 Base API
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3ac30000 00007ffc`3ac60000 imm32 (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\imm32.dll\3A0E994430000\imm32.dll
Image path: C:\Windows\System32\imm32.dll
Image name: imm32.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3A0E9944 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00033D33
ImageSize: 00030000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: imm32
OriginalFilename: imm32
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: Multi-User Windows IMM32 API Client DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3ac60000 00007ffc`3ad09000 clbcatq (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\clbcatq.dll\DB9F728Aa9000\clbcatq.dll
Image path: C:\Windows\System32\clbcatq.dll
Image name: clbcatq.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: DB9F728A (This is a reproducible build file hash, not a timestamp)
CheckSum: 000AC808
ImageSize: 000A9000
File version: 2001.12.10941.16384
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: CLBCATQ.DLL
OriginalFilename: CLBCATQ.DLL
ProductVersion: 10.0.19041.546
FileVersion: 2001.12.10941.16384 (WinBuild.160101.0800)
FileDescription: COM+ Configuration Catalog
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3ad10000 00007ffc`3ad65000 shlwapi (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\shlwapi.dll\857F2E0055000\shlwapi.dll
Image path: C:\Windows\System32\shlwapi.dll
Image name: shlwapi.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 857F2E00 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00061F73
ImageSize: 00055000
File version: 10.0.19041.1706
Product version: 10.0.19041.1706
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SHLWAPI
OriginalFilename: SHLWAPI.DLL
ProductVersion: 10.0.19041.1706
FileVersion: 10.0.19041.1706 (WinBuild.160101.0800)
FileDescription: Shell Light-weight Utility Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3ad70000 00007ffc`3ae2d000 kernel32 # (pdb symbols) C:\ProgramData\dbg\sym\kernel32.pdb\9CF2BCBC4D0E03503C68E569FAA6DC931\kernel32.pdb
Loaded symbol image file: kernel32.dll
Mapped memory image file: C:\ProgramData\dbg\sym\kernel32.dll\4D6D72D1bd000\kernel32.dll
Image path: C:\Windows\System32\kernel32.dll
Image name: kernel32.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4D6D72D1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000C2DB4
ImageSize: 000BD000
File version: 10.0.19041.1806
Product version: 10.0.19041.1806
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: kernel32
OriginalFilename: kernel32
ProductVersion: 10.0.19041.1826
FileVersion: 10.0.19041.1826 (WinBuild.160101.0800)
FileDescription: Windows NT BASE API Client DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3ae30000 00007ffc`3ae4d000 imagehlp (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\imagehlp.dll\3D887AB81d000\imagehlp.dll
Image path: C:\Windows\System32\imagehlp.dll
Image name: imagehlp.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3D887AB8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00026D33
ImageSize: 0001D000
File version: 10.0.19041.1415
Product version: 10.0.19041.1415
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: IMAGEHLP.DLL
OriginalFilename: IMAGEHLP.DLL
ProductVersion: 10.0.19041.1415
FileVersion: 10.0.19041.1415 (WinBuild.160101.0800)
FileDescription: Windows NT Image Helper
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3ae50000 00007ffc`3aeee000 msvcrt (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\msvcrt.dll\564F9F399e000\msvcrt.dll
Image path: C:\Windows\System32\msvcrt.dll
Image name: msvcrt.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 564F9F39 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0009E85D
ImageSize: 0009E000
File version: 7.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: msvcrt.dll
OriginalFilename: msvcrt.dll
ProductVersion: 7.0.19041.546
FileVersion: 7.0.19041.546 (WinBuild.160101.0800)
FileDescription: Windows NT CRT DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3aef0000 00007ffc`3b634000 shell32 (pdb symbols) C:\ProgramData\dbg\sym\shell32.pdb\E519B73AA483C97EDDEF7C0867C2F57A1\shell32.pdb
Loaded symbol image file: shell32.dll
Mapped memory image file: C:\ProgramData\dbg\sym\shell32.dll\70C04167744000\shell32.dll
Image path: C:\Windows\System32\shell32.dll
Image name: shell32.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 70C04167 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00751267
ImageSize: 00744000
File version: 10.0.19041.1806
Product version: 10.0.19041.1806
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SHELL32
OriginalFilename: SHELL32.DLL
ProductVersion: 10.0.19041.1806
FileVersion: 10.0.19041.1806 (WinBuild.160101.0800)
FileDescription: Windows Shell Common Dll
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3b6b0000 00007ffc`3b71b000 ws2_32 (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\ws2_32.dll\AFF3315B6b000\ws2_32.dll
Image path: C:\Windows\System32\ws2_32.dll
Image name: ws2_32.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: AFF3315B (This is a reproducible build file hash, not a timestamp)
CheckSum: 0006CF4B
ImageSize: 0006B000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ws2_32.dll
OriginalFilename: ws2_32.dll
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: Windows Socket 2.0 32-Bit DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3b720000 00007ffc`3b74a000 gdi32 (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\gdi32.dll\AF7F8E802a000\gdi32.dll
Image path: C:\Windows\System32\gdi32.dll
Image name: gdi32.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: AF7F8E80 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00034A33
ImageSize: 0002A000
File version: 10.0.19041.1620
Product version: 10.0.19041.1620
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: gdi32
OriginalFilename: gdi32
ProductVersion: 10.0.19041.1865
FileVersion: 10.0.19041.1865 (WinBuild.160101.0800)
FileDescription: GDI Client DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3b750000 00007ffc`3b7fd000 SHCore # (pdb symbols) C:\ProgramData\dbg\sym\shcore.pdb\A8A83DF34BE93B8F7934D418523F88941\shcore.pdb
Loaded symbol image file: SHCore.dll
Mapped memory image file: C:\ProgramData\dbg\sym\SHCore.dll\ECD1AA15ad000\SHCore.dll
Image path: C:\Windows\System32\SHCore.dll
Image name: SHCore.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: ECD1AA15 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000B9451
ImageSize: 000AD000
File version: 10.0.19041.1741
Product version: 10.0.19041.1741
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SHCORE
OriginalFilename: SHCORE.dll
ProductVersion: 10.0.19041.1826
FileVersion: 10.0.19041.1826 (WinBuild.160101.0800)
FileDescription: SHCORE
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3b800000 00007ffc`3b92a000 ole32 (private pdb symbols) C:\ProgramData\dbg\sym\ole32.pdb\DBF2992B2E0D91DB414EEE95383B84181\ole32.pdb
Loaded symbol image file: ole32.dll
Mapped memory image file: C:\ProgramData\dbg\sym\ole32.dll\BC9E4CF112a000\ole32.dll
Image path: C:\Windows\System32\ole32.dll
Image name: ole32.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: BC9E4CF1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00134FAE
ImageSize: 0012A000
File version: 10.0.19041.1202
Product version: 10.0.19041.1202
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: OLE32.DLL
OriginalFilename: OLE32.DLL
ProductVersion: 10.0.19041.1202
FileVersion: 10.0.19041.1202 (WinBuild.160101.0800)
FileDescription: Microsoft OLE for Windows
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3b930000 00007ffc`3ba55000 rpcrt4 (pdb symbols) C:\ProgramData\dbg\sym\rpcrt4.pdb\F7FC4C3259BCA817CF946BAEF99724751\rpcrt4.pdb
Loaded symbol image file: rpcrt4.dll
Mapped memory image file: C:\ProgramData\dbg\sym\rpcrt4.dll\2150B8FF125000\rpcrt4.dll
Image path: C:\Windows\System32\rpcrt4.dll
Image name: rpcrt4.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2150B8FF (This is a reproducible build file hash, not a timestamp)
CheckSum: 0012497D
ImageSize: 00125000
File version: 10.0.19041.1806
Product version: 10.0.19041.1806
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rpcrt4.dll
OriginalFilename: rpcrt4.dll
ProductVersion: 10.0.19041.1806
FileVersion: 10.0.19041.1806 (WinBuild.160101.0800)
FileDescription: Remote Procedure Call Runtime
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3ba60000 00007ffc`3bafc000 sechost (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\sechost.dll\53D574219c000\sechost.dll
Image path: C:\Windows\System32\sechost.dll
Image name: sechost.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 53D57421 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0009EBC3
ImageSize: 0009C000
File version: 10.0.19041.1586
Product version: 10.0.19041.1586
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: sechost.dll
OriginalFilename: sechost.dll
ProductVersion: 10.0.19041.1586
FileVersion: 10.0.19041.1586 (WinBuild.160101.0800)
FileDescription: Host for SCM/SDDL/LSA Lookup APIs
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3bb10000 00007ffc`3bb89000 coml2 (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\coml2.dll\A2AE218979000\coml2.dll
Image path: C:\Windows\System32\coml2.dll
Image name: coml2.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A2AE2189 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00077533
ImageSize: 00079000
File version: 10.0.19041.546
Product version: 10.0.19041.546
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: COML2.DLL
OriginalFilename: COML2.DLL
ProductVersion: 10.0.19041.546
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
FileDescription: Microsoft COM for Windows
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3bc70000 00007ffc`3bfc4000 combase (private pdb symbols) C:\ProgramData\dbg\sym\combase.pdb\42AC0098ADB5E7968C0E161D2814780E1\combase.pdb
Loaded symbol image file: combase.dll
Mapped memory image file: C:\ProgramData\dbg\sym\combase.dll\AFBF9EF6354000\combase.dll
Image path: C:\Windows\System32\combase.dll
Image name: combase.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: AFBF9EF6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 003650A6
ImageSize: 00354000
File version: 10.0.19041.1741
Product version: 10.0.19041.1741
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: COMBASE.DLL
OriginalFilename: COMBASE.DLL
ProductVersion: 10.0.19041.1741
FileVersion: 10.0.19041.1741 (WinBuild.160101.0800)
FileDescription: Microsoft COM for Windows
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3bfd0000 00007ffc`3c09d000 oleaut32 (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\oleaut32.dll\61567B6Bcd000\oleaut32.dll
Image path: C:\Windows\System32\oleaut32.dll
Image name: oleaut32.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 61567B6B (This is a reproducible build file hash, not a timestamp)
CheckSum: 000D0679
ImageSize: 000CD000
File version: 10.0.19041.985
Product version: 10.0.19041.985
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: OLEAUT32.DLL
OriginalFilename: OLEAUT32.DLL
ProductVersion: 10.0.19041.985
FileVersion: 10.0.19041.985 (WinBuild.160101.0800)
FileDescription: OLEAUT32.DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3c2c0000 00007ffc`3c72f000 setupapi (deferred)
Mapped memory image file: C:\ProgramData\dbg\sym\setupapi.dll\D0F46D7146f000\setupapi.dll
Image path: C:\Windows\System32\setupapi.dll
Image name: setupapi.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D0F46D71 (This is a reproducible build file hash, not a timestamp)
CheckSum: 004805AF
ImageSize: 0046F000
File version: 10.0.19041.1741
Product version: 10.0.19041.1741
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SETUPAPI.DLL
OriginalFilename: SETUPAPI.DLL
ProductVersion: 10.0.19041.1741
FileVersion: 10.0.19041.1741 (WinBuild.160101.0800)
FileDescription: Windows Setup API
LegalCopyright: © Microsoft Corporation. All rights reserved.
00007ffc`3c7d0000 00007ffc`3c9c8000 ntdll # (pdb symbols) C:\ProgramData\dbg\sym\ntdll.pdb\CDE75D039306834203EBD8D4E7D503691\ntdll.pdb
Loaded symbol image file: ntdll.dll
Mapped memory image file: C:\ProgramData\dbg\sym\ntdll.dll\1000A5B91f8000\ntdll.dll
Image path: C:\Windows\System32\ntdll.dll
Image name: ntdll.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1000A5B9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 001F4727
ImageSize: 001F8000
File version: 10.0.19041.1806
Product version: 10.0.19041.1806
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntdll.dll
OriginalFilename: ntdll.dll
ProductVersion: 10.0.19041.1865
FileVersion: 10.0.19041.1865 (WinBuild.160101.0800)
FileDescription: NT Layer DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.

Unloaded modules:
00007ffc`377e0000 00007ffc`377f4000 resourcepolicyclient.dll
Timestamp: ***** Invalid (F50D3C05)
Checksum: 00013B14
ImageSize: 00014000

lfb6 · Aug 1, 2022

Added SFCFix.log (no corruption was found), zipped CBS logs and fragment found by scandisk (edit of original post seems to have a time limit- sorry for replying myself...)

SFCFix version 3.0.2.1 by niemiro.
Start time: 2022-08-01 11:44:17.674
Microsoft Windows 10 Build 19044 (Updates Deferred) - amd64
Not using a script file.

AutoAnalysis::
SUMMARY: No corruptions were detected.
AutoAnalysis:: directive completed successfully.

Successfully processed all directives.
SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 0 datablocks.
Finish time: 2022-08-01 12:59:29.432
----------------------EOF-----------------------

lfb6 · Aug 2, 2022

The list of loaded dlls differs at one point from where it tries to load mstscax.dll for the corrupt user (left). Middle and right are one standard user and an admin user- pretty much identical.

(Sorry, wasn't able to get the pic posted in better quality?)

lfb6 · Aug 2, 2022

Well, Windows learning itself? At least temporarily fixed for now...

"Blocked" loading mstscax.dll by renaming the guid that was used to find it - 2 locations in HKEY_CLASSES_ROOT\CLSID\ and HKEY_CLASSES_ROOT\Wow6432Node\CLSID- the corresponding 3 keys in HKLM\software are automatically renamed. (To find the guid the system is looking for one can use Sysinternals Process Monitor- Options Enable Boot Logging)

Logged inn and desktop, tasklist and some parts of the startmenu appeared again.

Logged out, renamed the guid to original name, logged in again / rebooted and everything works.

Still no idea how Windows decides which dll to open for a certain user and certain task (and where this configuration is stored)? I'd appreciate if anyone has a comment where / how to fix this manually

DR M · Aug 2, 2022

Thanks for sharing your attempts to the resolution of the issue.

lfb6 · Aug 4, 2022

Thanks for your answer.

- Do you have a comment regarding Windows autonomously changing dlls loaded for logon for one single user?
- Could you give me a hint where to search/ where Windows stores such information?

Thanks in advance!

DR M · Aug 4, 2022

I don't have a comment on that. Perhaps someone else can give a hint to your questions.

Search

Search

[SOLVED] Single user no startmenu and no tasklist

lfb6

Member

lfb6

Member

Attachments

lfb6

Member

lfb6

Member

DR M

Sysnative Staff, Security Analyst

lfb6

Member

DR M

Sysnative Staff, Security Analyst