<reponame>dfirence/pe-compass-samples<gh_stars>1-10
{"pe_name":"taskschd.dll","pe_type":523,"pe_size":759488,"pe_subsystem":3,"pe_subsystem_caption":"The Windows character (Cosole UI) subsystem","pe_path":"c:\\Windows\\WinSxS\\amd64_microsoft-windows-taskscheduler-client_31bf3856ad364e35_10.0.18362.387_none_99a90a0630084f07\\taskschd.dll","pe_timedate_stamp":2271433924,"pe_timedate_human":"2041-12-23T17:52:04.000Z","ImageDLLImports":[{"name":"msvcrt.dll","imports":41,"functions":["??0exception@@QEAA@AEBQEBD@Z","??0exception@@QEAA@AEBQEBDH@Z","??0exception@@QEAA@AEBV0@@Z","??1exception@@UEAA@XZ","??1type_info@@UEAA@XZ","?terminate@@YAXXZ","?what@exception@@UEBAPEBDXZ","_CxxThrowException","_XcptFilter","__C_specific_handler","__CxxFrameHandler3","__dllonexit","_amsg_exit","_initterm","_lock","_onexit","_purecall","_unlock","_vsnwprintf","_wcsicmp","_wcsnicmp","_wcstoui64","_wtol","free","iswdigit","iswspace","malloc","memcmp","memcpy","memcpy_s","memmove","memmove_s","memset","realloc","wcscat_s","wcschr","wcscmp","wcscpy_s","wcsncmp","wcsncpy_s","wcsrchr"]},{"name":"oleaut32.dll","imports":0,"functions":[]},{"name":"api-ms-win-core-synch-l1-1-0.dll","imports":5,"functions":["DeleteCriticalSection","EnterCriticalSection","InitializeCriticalSection","InitializeCriticalSectionEx","LeaveCriticalSection"]},{"name":"api-ms-win-core-libraryloader-l1-2-0.dll","imports":8,"functions":["DisableThreadLibraryCalls","FreeLibrary","GetModuleFileNameW","GetModuleHandleExW","GetModuleHandleW","GetProcAddress","LoadLibraryExW","LoadStringW"]},{"name":"api-ms-win-core-localization-l1-2-0.dll","imports":3,"functions":["GetThreadLocale","GetThreadPreferredUILanguages","SetThreadLocale"]},{"name":"api-ms-win-core-errorhandling-l1-1-0.dll","imports":5,"functions":["GetLastError","RaiseException","SetLastError","SetUnhandledExceptionFilter","UnhandledExceptionFilter"]},{"name":"api-ms-win-core-string-l2-1-0.dll","imports":1,"functions":["CharNextW"]},{"name":"api-ms-win-core-registry-l1-1-0.dll","imports":4,"functions":["RegCloseKey","RegGetValueW","RegOpenKeyExW","RegQueryInfoKeyW"]},{"name":"api-ms-win-core-file-l1-1-0.dll","imports":3,"functions":["CompareFileTime","FileTimeToLocalFileTime","LocalFileTimeToFileTime"]},{"name":"api-ms-win-core-sysinfo-l1-1-0.dll","imports":3,"functions":["GetLocalTime","GetSystemTimeAsFileTime","GetTickCount"]},{"name":"api-ms-win-core-shlwapi-legacy-l1-1-0.dll","imports":1,"functions":["PathFindFileNameW"]},{"name":"ntdll.dll","imports":7,"functions":["EtwTraceMessage","RtlNtStatusToDosError","RtlSubscribeWnfStateChangeNotification","RtlUnsubscribeWnfNotificationWaitForCompletion","RtlUnsubscribeWnfStateChangeNotification","WinSqmAddToStream","WinSqmIsOptedIn"]},{"name":"api-ms-win-core-timezone-l1-1-0.dll","imports":4,"functions":["FileTimeToSystemTime","SystemTimeToFileTime","SystemTimeToTzSpecificLocalTime","TzSpecificLocalTimeToSystemTime"]},{"name":"api-ms-win-core-kernel32-legacy-l1-1-0.dll","imports":1,"functions":["GetComputerNameW"]},{"name":"api-ms-win-core-registry-l1-1-1.dll","imports":2,"functions":["RegDeleteKeyValueW","RegSetKeyValueW"]},{"name":"api-ms-win-core-heap-l2-1-0.dll","imports":2,"functions":["LocalAlloc","LocalFree"]},{"name":"api-ms-win-security-base-l1-1-0.dll","imports":8,"functions":["CopySid","EqualSid","GetLengthSid","GetSidIdentifierAuthority","GetSidSubAuthority","GetSidSubAuthorityCount","IsValidSid","IsWellKnownSid"]},{"name":"api-ms-win-core-heap-l1-1-0.dll","imports":6,"functions":["GetProcessHeap","HeapAlloc","HeapDestroy","HeapFree","HeapReAlloc","HeapSize"]},{"name":"api-ms-win-core-string-l1-1-0.dll","imports":1,"functions":["WideCharToMultiByte"]},{"name":"api-ms-win-core-processenvironment-l1-1-0.dll","imports":1,"functions":["ExpandEnvironmentStringsW"]},{"name":"api-ms-win-core-synch-l1-2-0.dll","imports":1,"functions":["Sleep"]},{"name":"api-ms-win-core-rtlsupport-l1-1-0.dll","imports":3,"functions":["RtlCaptureContext","RtlLookupFunctionEntry","RtlVirtualUnwind"]},{"name":"api-ms-win-core-processthreads-l1-1-0.dll","imports":4,"functions":["GetCurrentProcess","GetCurrentProcessId","GetCurrentThreadId","TerminateProcess"]},{"name":"api-ms-win-core-profile-l1-1-0.dll","imports":1,"functions":["QueryPerformanceCounter"]},{"name":"rpcrt4.dll","imports":7,"functions":["I_RpcExceptionFilter","NdrClientCall3","RpcBindingFree","RpcBindingFromStringBindingW","RpcBindingSetAuthInfoExW","RpcStringBindingComposeW","RpcStringFreeW"]},{"name":"api-ms-win-core-delayload-l1-1-1.dll","imports":1,"functions":["ResolveDelayLoadedAPI"]},{"name":"api-ms-win-core-delayload-l1-1-0.dll","imports":1,"functions":["DelayLoadFailureHook"]}],"ImageDLLExports":{"exports":4,"functions":["DllCanUnloadNow","DllGetClassObject","DllRegisterServer","DllUnregisterServer"]},"ImageHashSignatures":{"md5":"72ca36bbfeb739b71a7aed322aff26ff","sha2":"3951cc3510c4909c9f6d89a8d12828d9a6a8108fc2481852a4dcad49efea3308"}}