filenameWindows.Networking.Proximity.dll
size325632 (0x4f800)
md577c0a1e1cabf2d7a02a1133e1549f720
typePE32 executable (DLL) (console) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
1473072946
205655013
207655012
2066550116
2036550115
10148
202655011
2116550122
201655011
204655011

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x54503b5e
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion11.0
SizeOfCode0x48c00
SizeOfInitializedData0x6c00
SizeOfUninitializedData0
AddressOfEntryPoint0x48e10
BaseOfCode0x1000
BaseOfData0x4a000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.3
ImageVersion6.3
SubsystemVersion6.3
Reserved10
SizeOfImage0x54000
SizeOfHeaders0x400
CheckSum0x532c2
Subsystem3
DllCharacteristics0x4140
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x48ba30x48c00R-X CODE
.data0x4a0000x68c0x400RW- IDATA
.idata0x4b0000x16880x1800R-- IDATA
.didat0x4d00080x200RW- IDATA
.rsrc0x4e0000x5780x600R-- IDATA
.reloc0x4f0000x42780x4400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x49b000xa3
IMPORT0x4b2bc0x26c
RESOURCE0x4e0000x578
EXCEPTION00
SECURITY00
BASERELOC0x4f0000x4278
DEBUG0x1b900x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x87700x5c
Bound_IAT00
IAT0x4b0000x2b8
Delay_IAT0x49a880x40
CLR_Header00
typenamesizecp
MUI#12000
VERSION#110200
module_namehintordfunction_name
ProximityRtapiPal.dllPAL_App2DeviceFindAllPeers
ProximityRtapiPal.dll2PAL_CheckForBluetoothSupport
ProximityRtapiPal.dll1PAL_CheckForApp2DeviceAlternateId
ProximityRtapiPal.dll5PAL_SetCurrentProcessExplicitAppUserModelID
ProximityRtapiPal.dll3PAL_GetCurrentProcessExplicitAppUserModelID
msvcrt.dll1295memset
msvcrt.dll424_ftol2
msvcrt.dll1290memcmp
msvcrt.dll1291memcpy
msvcrt.dll364_except_handler4_common
msvcrt.dll123__CxxFrameHandler3
msvcrt.dll779_onexit
msvcrt.dll159__dllonexit
msvcrt.dll1332strchr
msvcrt.dll966_unlock
msvcrt.dll610_lock
msvcrt.dll490_initterm
msvcrt.dll275_amsg_exit
msvcrt.dll113_XcptFilter
msvcrt.dll1006_vsnwprintf
msvcrt.dll18void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

msvcrt.dll1312realloc
msvcrt.dll1294memmove_s
msvcrt.dll1279malloc
msvcrt.dll1223free
msvcrt.dll796_purecall
msvcrt.dll1420wcstoul
msvcrt.dll1064_wcstoui64
msvcrt.dll1049_wcsnicmp
msvcrt.dll43void __cdecl operator delete[](void *)

??_V@YAXPAX@Z

msvcrt.dll20void __cdecl operator delete(void *)

??3@YAXPAX@Z

api-ms-win-eventing-classicprovider-l1-1-0.dll1GetTraceEnableLevel
api-ms-win-eventing-classicprovider-l1-1-0.dllGetTraceEnableFlags
api-ms-win-eventing-classicprovider-l1-1-0.dll3RegisterTraceGuidsW
api-ms-win-eventing-classicprovider-l1-1-0.dll5TraceMessage
api-ms-win-eventing-classicprovider-l1-1-0.dll7UnregisterTraceGuids
api-ms-win-eventing-classicprovider-l1-1-0.dll2GetTraceLoggerHandle
api-ms-win-eventing-provider-l1-1-0.dll5EventUnregister
api-ms-win-eventing-provider-l1-1-0.dll3EventRegister
api-ms-win-eventing-provider-l1-1-0.dll6EventWrite
api-ms-win-core-processthreads-l1-1-2.dll70TlsSetValue
api-ms-win-core-processthreads-l1-1-2.dll69TlsGetValue
api-ms-win-core-processthreads-l1-1-2.dll12GetCurrentProcessId
api-ms-win-core-processthreads-l1-1-2.dll67TlsAlloc
api-ms-win-core-processthreads-l1-1-2.dll68TlsFree
api-ms-win-core-processthreads-l1-1-2.dll11GetCurrentProcess
api-ms-win-core-processthreads-l1-1-2.dll16GetCurrentThreadId
api-ms-win-core-processthreads-l1-1-2.dll65TerminateProcess
api-ms-win-core-util-l1-1-0.dll3EncodePointer
api-ms-win-core-util-l1-1-0.dll1DecodePointer
api-ms-win-core-synch-l1-2-0.dll39SetEvent
api-ms-win-core-synch-l1-2-0.dll37ResetEvent
api-ms-win-core-synch-l1-2-0.dll15EnterCriticalSection
api-ms-win-core-synch-l1-2-0.dll27LeaveCriticalSection
api-ms-win-core-synch-l1-2-0.dll5CreateEventExW
api-ms-win-core-synch-l1-2-0.dll6CreateEventW
api-ms-win-core-synch-l1-2-0.dll24InitializeCriticalSectionEx
api-ms-win-core-synch-l1-2-0.dll51WaitForSingleObject
api-ms-win-core-synch-l1-2-0.dll13DeleteCriticalSection
api-ms-win-core-synch-l1-2-0.dll25InitializeSRWLock
api-ms-win-core-synch-l1-2-0.dll1AcquireSRWLockShared
api-ms-win-core-synch-l1-2-0.dllAcquireSRWLockExclusive
api-ms-win-core-synch-l1-2-0.dll34ReleaseSRWLockExclusive
api-ms-win-core-synch-l1-2-0.dll19InitOnceExecuteOnce
api-ms-win-core-synch-l1-2-0.dll43Sleep
api-ms-win-core-synch-l1-2-0.dll35ReleaseSRWLockShared
api-ms-win-core-synch-l1-2-0.dll47TryAcquireSRWLockExclusive
api-ms-win-core-winrt-error-l1-1-1.dll12RoReportFailedDelegate
api-ms-win-core-winrt-error-l1-1-1.dll9RoOriginateError
api-ms-win-core-winrt-error-l1-1-1.dll6RoGetMatchingRestrictedErrorInfo
api-ms-win-core-winrt-error-l1-1-1.dll10RoOriginateErrorW
api-ms-win-core-winrt-error-l1-1-1.dll1IsErrorPropagationEnabled
api-ms-win-core-winrt-error-l1-1-1.dllGetRestrictedErrorInfo
api-ms-win-core-winrt-error-l1-1-1.dll16RoTransformError
api-ms-win-core-winrt-error-l1-1-1.dll18SetRestrictedErrorInfo
api-ms-win-core-winrt-string-l1-1-0.dll8WindowsDeleteString
api-ms-win-core-winrt-string-l1-1-0.dll10WindowsDuplicateString
api-ms-win-core-winrt-string-l1-1-0.dll12WindowsGetStringRawBuffer
api-ms-win-core-winrt-string-l1-1-0.dll11WindowsGetStringLen
api-ms-win-core-winrt-string-l1-1-0.dll6WindowsCreateString
api-ms-win-core-winrt-string-l1-1-0.dll18WindowsStringHasEmbeddedNull
api-ms-win-core-winrt-string-l1-1-0.dll14WindowsIsStringEmpty
api-ms-win-core-winrt-string-l1-1-0.dll7WindowsCreateStringReference
api-ms-win-core-errorhandling-l1-1-1.dll4RaiseException
api-ms-win-core-errorhandling-l1-1-1.dll10SetUnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll11UnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll3GetLastError
api-ms-win-core-errorhandling-l1-1-1.dll9SetLastError
api-ms-win-core-winrt-l1-1-0.dll3RoInitialize
api-ms-win-core-winrt-l1-1-0.dll1RoGetActivationFactory
api-ms-win-core-winrt-l1-1-0.dll7RoUninitialize
api-ms-win-core-com-l1-1-1.dll64CoTaskMemRealloc
api-ms-win-core-com-l1-1-1.dll63CoTaskMemFree
api-ms-win-core-com-l1-1-1.dll62CoTaskMemAlloc
api-ms-win-core-com-l1-1-1.dll6CoCreateFreeThreadedMarshaler
api-ms-win-core-com-l1-1-1.dll29CoGetMalloc
api-ms-win-core-com-l1-1-1.dll69CoWaitForMultipleHandles
api-ms-win-core-com-l1-1-1.dll8CoCreateInstance
api-ms-win-core-libraryloader-l1-2-0.dll19GetProcAddress
api-ms-win-core-libraryloader-l1-2-0.dll24LoadStringW
api-ms-win-core-libraryloader-l1-2-0.dll14GetModuleFileNameW
api-ms-win-core-libraryloader-l1-2-0.dll17GetModuleHandleExW
api-ms-win-core-localization-l1-2-1.dll8FormatMessageW
WS2_32.dll9
api-ms-win-core-string-l1-1-0.dll7WideCharToMultiByte
api-ms-win-core-string-l1-1-0.dll1CompareStringOrdinal
api-ms-win-core-handle-l1-1-0.dllCloseHandle
api-ms-win-core-threadpool-l1-2-0.dll31SubmitThreadpoolWork
api-ms-win-core-threadpool-l1-2-0.dll16FreeLibraryWhenCallbackReturns
api-ms-win-core-threadpool-l1-2-0.dll14CreateThreadpoolWork
api-ms-win-core-threadpool-l1-2-0.dll8CloseThreadpoolWork
api-ms-win-core-sysinfo-l1-2-1.dll22GetTickCount64
api-ms-win-core-sysinfo-l1-2-1.dll3GetComputerNameExW
api-ms-win-core-sysinfo-l1-2-1.dll17GetSystemTimeAsFileTime
api-ms-win-core-sysinfo-l1-2-1.dll21GetTickCount
api-ms-win-core-profile-l1-1-0.dllQueryPerformanceCounter
DEVOBJ.dll6DevObjCreateDeviceInfoList
DEVOBJ.dll19DevObjGetClassDevs
DEVOBJ.dll17DevObjEnumDeviceInterfaces
DEVOBJ.dll15DevObjDestroyDeviceInfoList
ntdll.dll1134RtlNtStatusToDosError
ntdll.dll1516WinSqmAddToStreamEx
ntdll.dll1531WinSqmIncrementDWORD
api-ms-win-core-winrt-robuffer-l1-1-0.dllRoGetBufferMarshaler
ProximityCommon.dll27
ProximityCommon.dll28
ProximityCommon.dll22
ProximityCommon.dll21
ProximityCommon.dll24
ProximityCommon.dll25
ProximityCommon.dll20
ProximityCommonPal.dll2PAL_GetAppPlatformQualifier
ProximityCommonPal.dll3PAL_GetSupportedBrowseTypes
ProximityCommonPal.dllPAL_AppHasPackage
ProximityCommonPal.dll4PAL_HoldReferenceUntilAppExit
Windows.Networking.dll1
api-ms-win-core-heap-l1-2-0.dll6HeapFree
api-ms-win-core-heap-l1-2-0.dllGetProcessHeap
api-ms-win-core-heap-l1-2-0.dll2HeapAlloc
api-ms-win-core-apiquery-l1-1-0.dllApiSetQueryApiSetPresence
api-ms-win-core-delayload-l1-1-1.dll1ResolveDelayLoadedAPI
api-ms-win-core-delayload-l1-1-1.dllDelayLoadFailureHook
api-ms-win-core-heap-obsolete-l1-1-0.dll8LocalAlloc
api-ms-win-core-heap-obsolete-l1-1-0.dll10LocalFree
ordentry_vafunction_name
10x8aa0ProximityConnect
20x8960DllCanUnloadNow
30x8920DllGetActivationFactory
40x8940DllGetClassObject
module_namedll.dll
flags0
timestamp2014-10-28 23:42:26
version0.0
ordinal_base1
nFunctions4
nNames4
Names(4)0x49b38
Functions(4)0x49b28
NameOrdinals(4)0x49b48

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionWindows Runtime Proximity API DLL
FileVersion6.3.9600.17415 (winblue_r4.141028-1500)
InternalNameWindows Runtime Proximity API DLL
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameWindows.Devices.Proximity.dll
ProductNameMicrosoft® Windows® Operating System
ProductVersion6.3.9600.17415

VS_FIXEDFILEINFO

FileVersion6.3.9600.17415
ProductVersion6.3.9600.17415
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType2
FileSubtype0
offsetsizetypecomment
0325632DLL10/29/2014 00:57:02#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK