{ "schema_version": 2, "scope": "Observed named PE exports in exact architecture-specific ci.dll samples; not runtime or ABI certification", "source_hash_encoding": "Canonical JSON: UTF-8, sorted keys, comma/colon separators, ensure_ascii=false", "generated_from": { "corpus-index.json": "d2c6507794314ca38a2015c74f3b66e81a4bd82d982be0ed1911dcff1d79475a", "iso-corpus-index.json": "ba526a8548f3be100e8d13019aed57de9703a142615c509870720572bc636217", "manifest.json": "bd215ebd3deb480a39b5d71a6ed709dad20368cbe90879a52070b56b023284d4", "ci-26100.8328-evidence.json": "ea0f939df9d8b7abde40e3402c01b2ac398253728f329e8c2b7134de8df6305f" }, "apis": [ "CiCheckSignedFile", "CiFindPageHashesInCatalog", "CiFindPageHashesInSignedFile", "CiFreePolicyInfo", "CiGetCertPublisherName", "CiGetPEInformation", "CiInitialize", "CiSetTrustedOriginClaimId", "CiValidateFileObject", "CiVerifyHashInCatalog" ], "samples": [ { "label": "Windows 10 1507", "ci_file_version": "10.0.10240.16463", "architecture": "x64", "sha256": "e83d900f4675c6e6ffc3fb7dcd3074610876a1398e495796769988df810fd3bc", "source": "corpus-index.json", "named_exports": [ "CiCheckSignedFile", "CiFindPageHashesInCatalog", "CiFindPageHashesInSignedFile", "CiFreePolicyInfo", "CiGetPEInformation", "CiInitialize", "CiValidateFileObject", "CiVerifyHashInCatalog" ], "ordinal_only_export_count": 3, "api_presence": { "CiCheckSignedFile": true, "CiFindPageHashesInCatalog": true, "CiFindPageHashesInSignedFile": true, "CiFreePolicyInfo": true, "CiGetCertPublisherName": false, "CiGetPEInformation": true, "CiInitialize": true, "CiSetTrustedOriginClaimId": false, "CiValidateFileObject": true, "CiVerifyHashInCatalog": true } }, { "label": "Windows 10 1511", "ci_file_version": "10.0.10586.0", "architecture": "x64", "sha256": "f949bfa614addea6174b28c3818c56b327c9290fd41bd91dfc545414b3df6783", "source": "corpus-index.json", "named_exports": [ "CiCheckSignedFile", "CiFindPageHashesInCatalog", "CiFindPageHashesInSignedFile", "CiFreePolicyInfo", "CiGetPEInformation", "CiInitialize", "CiValidateFileObject", "CiVerifyHashInCatalog" ], "ordinal_only_export_count": 3, "api_presence": { "CiCheckSignedFile": true, "CiFindPageHashesInCatalog": true, "CiFindPageHashesInSignedFile": true, "CiFreePolicyInfo": true, "CiGetCertPublisherName": false, "CiGetPEInformation": true, "CiInitialize": true, "CiSetTrustedOriginClaimId": false, "CiValidateFileObject": true, "CiVerifyHashInCatalog": true } }, { "label": "Windows 10 1607", "ci_file_version": "10.0.14393.2189", "architecture": "x64", "sha256": "ef0c02ecbd0818e84be9f61421f919825f96a3c59199460cab08548eee2881df", "source": "corpus-index.json", "named_exports": [ "CiCheckSignedFile", "CiFindPageHashesInCatalog", "CiFindPageHashesInSignedFile", "CiFreePolicyInfo", "CiGetPEInformation", "CiInitialize", "CiValidateFileObject", "CiVerifyHashInCatalog" ], "ordinal_only_export_count": 3, "api_presence": { "CiCheckSignedFile": true, "CiFindPageHashesInCatalog": true, "CiFindPageHashesInSignedFile": true, "CiFreePolicyInfo": true, "CiGetCertPublisherName": false, "CiGetPEInformation": true, "CiInitialize": true, "CiSetTrustedOriginClaimId": false, "CiValidateFileObject": true, "CiVerifyHashInCatalog": true } }, { "label": "Windows 10 1703", "ci_file_version": "10.0.15063.0", "architecture": "x64", "sha256": "3705aaf408f05326e028621380aa5c96a1f3583a2de8a139b188da4b82577863", "source": "corpus-index.json", "named_exports": [ "CiCheckSignedFile", "CiFindPageHashesInCatalog", "CiFindPageHashesInSignedFile", "CiFreePolicyInfo", "CiGetPEInformation", "CiInitialize", "CiSetTrustedOriginClaimId", "CiValidateFileObject", "CiVerifyHashInCatalog" ], "ordinal_only_export_count": 3, "api_presence": { "CiCheckSignedFile": true, "CiFindPageHashesInCatalog": true, "CiFindPageHashesInSignedFile": true, "CiFreePolicyInfo": true, "CiGetCertPublisherName": false, "CiGetPEInformation": true, "CiInitialize": true, "CiSetTrustedOriginClaimId": true, "CiValidateFileObject": true, "CiVerifyHashInCatalog": true } }, { "label": "Windows 10 1709", "ci_file_version": "10.0.16299.125", "architecture": "x64", "sha256": "1db7ae5a08bd2361fc7fcdd373fb980e8d680035e67b02e5967095db0443effd", "source": "corpus-index.json", "named_exports": [ "CiCheckSignedFile", "CiFindPageHashesInCatalog", "CiFindPageHashesInSignedFile", "CiFreePolicyInfo", "CiGetPEInformation", "CiInitialize", "CiSetTrustedOriginClaimId", "CiValidateFileObject", "CiVerifyHashInCatalog" ], "ordinal_only_export_count": 3, "api_presence": { "CiCheckSignedFile": true, "CiFindPageHashesInCatalog": true, "CiFindPageHashesInSignedFile": true, "CiFreePolicyInfo": true, "CiGetCertPublisherName": false, "CiGetPEInformation": true, "CiInitialize": true, "CiSetTrustedOriginClaimId": true, "CiValidateFileObject": true, "CiVerifyHashInCatalog": true } }, { "label": "Windows 10 1803", "ci_file_version": "10.0.17134.1130", "architecture": "x64", "sha256": "8ce3b8fe38c23b699f30b045383640019a429d3a9d513285c655bffe03a796d9", "source": "corpus-index.json", "named_exports": [ "CiCheckSignedFile", "CiFindPageHashesInCatalog", "CiFindPageHashesInSignedFile", "CiFreePolicyInfo", "CiGetPEInformation", "CiInitialize", "CiSetTrustedOriginClaimId", "CiValidateFileObject", "CiVerifyHashInCatalog" ], "ordinal_only_export_count": 3, "api_presence": { "CiCheckSignedFile": true, "CiFindPageHashesInCatalog": true, "CiFindPageHashesInSignedFile": true, "CiFreePolicyInfo": true, "CiGetCertPublisherName": false, "CiGetPEInformation": true, "CiInitialize": true, "CiSetTrustedOriginClaimId": true, "CiValidateFileObject": true, "CiVerifyHashInCatalog": true } }, { "label": "Windows 10 1809 initial x64 ISO", "ci_file_version": "10.0.17763.1", "architecture": "x64", "sha256": "eb177481f2aea3cae0c2f97f7058e7447c0695e4489428406598f168d4dcc5e8", "source": "iso-corpus-index.json", "named_exports": [ "CiCheckSignedFile", "CiFindPageHashesInCatalog", "CiFindPageHashesInSignedFile", "CiFreePolicyInfo", "CiGetPEInformation", "CiInitialize", "CiSetTrustedOriginClaimId", "CiValidateFileObject", "CiVerifyHashInCatalog" ], "ordinal_only_export_count": 3, "api_presence": { "CiCheckSignedFile": true, "CiFindPageHashesInCatalog": true, "CiFindPageHashesInSignedFile": true, "CiFreePolicyInfo": true, "CiGetCertPublisherName": false, "CiGetPEInformation": true, "CiInitialize": true, "CiSetTrustedOriginClaimId": true, "CiValidateFileObject": true, "CiVerifyHashInCatalog": true } }, { "label": "Windows 10 1809 October v2 x64 ISO", "ci_file_version": "10.0.17763.348", "architecture": "x64", "sha256": "da8282173cbce7ea38f8fca64db0972c3d9614ddbca98f6b96d11a4cadde92ad", "source": "iso-corpus-index.json", "named_exports": [ "CiCheckSignedFile", "CiFindPageHashesInCatalog", "CiFindPageHashesInSignedFile", "CiFreePolicyInfo", "CiGetPEInformation", "CiInitialize", "CiSetTrustedOriginClaimId", "CiValidateFileObject", "CiVerifyHashInCatalog" ], "ordinal_only_export_count": 3, "api_presence": { "CiCheckSignedFile": true, "CiFindPageHashesInCatalog": true, "CiFindPageHashesInSignedFile": true, "CiFreePolicyInfo": true, "CiGetCertPublisherName": false, "CiGetPEInformation": true, "CiInitialize": true, "CiSetTrustedOriginClaimId": true, "CiValidateFileObject": true, "CiVerifyHashInCatalog": true } }, { "label": "Windows 10 1903 v1 x64 ISO", "ci_file_version": "10.0.18362.1", "architecture": "x64", "sha256": "5d01bb84fa516e23c25def8ea03fc6b696082ccc67a61575fd00d1fe7c273d72", "source": "iso-corpus-index.json", "named_exports": [ "CiCheckSignedFile", "CiFindPageHashesInCatalog", "CiFindPageHashesInSignedFile", "CiFreePolicyInfo", "CiGetPEInformation", "CiInitialize", "CiSetTrustedOriginClaimId", "CiValidateFileObject", "CiVerifyHashInCatalog" ], "ordinal_only_export_count": 3, "api_presence": { "CiCheckSignedFile": true, "CiFindPageHashesInCatalog": true, "CiFindPageHashesInSignedFile": true, "CiFreePolicyInfo": true, "CiGetCertPublisherName": false, "CiGetPEInformation": true, "CiInitialize": true, "CiSetTrustedOriginClaimId": true, "CiValidateFileObject": true, "CiVerifyHashInCatalog": true } }, { "label": "Windows 10 1903 v2 x64 ISO", "ci_file_version": "10.0.18362.329", "architecture": "x64", "sha256": "d12131f14f781f8c314a795384e02afc3c2902bf67da9c2e75d8163c891bdd89", "source": "iso-corpus-index.json", "named_exports": [ "CiCheckSignedFile", "CiFindPageHashesInCatalog", "CiFindPageHashesInSignedFile", "CiFreePolicyInfo", "CiGetPEInformation", "CiInitialize", "CiSetTrustedOriginClaimId", "CiValidateFileObject", "CiVerifyHashInCatalog" ], "ordinal_only_export_count": 3, "api_presence": { "CiCheckSignedFile": true, "CiFindPageHashesInCatalog": true, "CiFindPageHashesInSignedFile": true, "CiFreePolicyInfo": true, "CiGetCertPublisherName": false, "CiGetPEInformation": true, "CiInitialize": true, "CiSetTrustedOriginClaimId": true, "CiValidateFileObject": true, "CiVerifyHashInCatalog": true } }, { "label": "Windows 10 1909 x64 ISO", "ci_file_version": "10.0.18362.418", "architecture": "x64", "sha256": "c3c5d32da42fa69b0795cd0f8c57252670d673fb036685db5c7d6392ffee0293", "source": "iso-corpus-index.json", "named_exports": [ "CiCheckSignedFile", "CiFindPageHashesInCatalog", "CiFindPageHashesInSignedFile", "CiFreePolicyInfo", "CiGetPEInformation", "CiInitialize", "CiSetTrustedOriginClaimId", "CiValidateFileObject", "CiVerifyHashInCatalog" ], "ordinal_only_export_count": 3, "api_presence": { "CiCheckSignedFile": true, "CiFindPageHashesInCatalog": true, "CiFindPageHashesInSignedFile": true, "CiFreePolicyInfo": true, "CiGetCertPublisherName": false, "CiGetPEInformation": true, "CiInitialize": true, "CiSetTrustedOriginClaimId": true, "CiValidateFileObject": true, "CiVerifyHashInCatalog": true } }, { "label": "Windows 10 2004 ISO", "ci_file_version": "10.0.19041.1", "architecture": "x64", "sha256": "2955710d34db26e352e62b20861ba338f0216cc36b378d128057be955e184282", "source": "iso-corpus-index.json", "named_exports": [ "CiCheckSignedFile", "CiFindPageHashesInCatalog", "CiFindPageHashesInSignedFile", "CiFreePolicyInfo", "CiGetPEInformation", "CiInitialize", "CiSetTrustedOriginClaimId", "CiValidateFileObject", "CiVerifyHashInCatalog" ], "ordinal_only_export_count": 3, "api_presence": { "CiCheckSignedFile": true, "CiFindPageHashesInCatalog": true, "CiFindPageHashesInSignedFile": true, "CiFreePolicyInfo": true, "CiGetCertPublisherName": false, "CiGetPEInformation": true, "CiInitialize": true, "CiSetTrustedOriginClaimId": true, "CiValidateFileObject": true, "CiVerifyHashInCatalog": true } }, { "label": "Windows 10 22H2 consumer ISO", "ci_file_version": "10.0.19041.1865", "architecture": "x64", "sha256": "d0408a9f64eafb72e8aa1cf127d07d919f0cab38a6bdf2b406255909c85e3a8d", "source": "iso-corpus-index.json", "named_exports": [ "CiCheckSignedFile", "CiFindPageHashesInCatalog", "CiFindPageHashesInSignedFile", "CiFreePolicyInfo", "CiGetCertPublisherName", "CiGetPEInformation", "CiInitialize", "CiSetTrustedOriginClaimId", "CiValidateFileObject", "CiVerifyHashInCatalog" ], "ordinal_only_export_count": 3, "api_presence": { "CiCheckSignedFile": true, "CiFindPageHashesInCatalog": true, "CiFindPageHashesInSignedFile": true, "CiFreePolicyInfo": true, "CiGetCertPublisherName": true, "CiGetPEInformation": true, "CiInitialize": true, "CiSetTrustedOriginClaimId": true, "CiValidateFileObject": true, "CiVerifyHashInCatalog": true } }, { "label": "Windows 11 English x64 v1 ISO", "ci_file_version": "10.0.22000.318", "architecture": "x64", "sha256": "301ae49ac5b87cf1cbe07d9d3c6486a066d045b6bf55fc8eb392d52951ec69ff", "source": "iso-corpus-index.json", "named_exports": [ "CiCheckSignedFile", "CiFindPageHashesInCatalog", "CiFindPageHashesInSignedFile", "CiFreePolicyInfo", "CiGetCertPublisherName", "CiGetPEInformation", "CiInitialize", "CiSetTrustedOriginClaimId", "CiValidateFileObject", "CiVerifyHashInCatalog" ], "ordinal_only_export_count": 3, "api_presence": { "CiCheckSignedFile": true, "CiFindPageHashesInCatalog": true, "CiFindPageHashesInSignedFile": true, "CiFreePolicyInfo": true, "CiGetCertPublisherName": true, "CiGetPEInformation": true, "CiInitialize": true, "CiSetTrustedOriginClaimId": true, "CiValidateFileObject": true, "CiVerifyHashInCatalog": true } }, { "label": "Windows 11 23H2 English ISO", "ci_file_version": "10.0.22621.2792", "architecture": "x64", "sha256": "9ed77b8a53946ced8c3540edb26a765060dff908544634e7b069aa49f2b41559", "source": "iso-corpus-index.json", "named_exports": [ "CiCheckSignedFile", "CiFindPageHashesInCatalog", "CiFindPageHashesInSignedFile", "CiFreePolicyInfo", "CiGetCertPublisherName", "CiGetPEInformation", "CiInitialize", "CiSetTrustedOriginClaimId", "CiValidateFileObject", "CiVerifyHashInCatalog" ], "ordinal_only_export_count": 3, "api_presence": { "CiCheckSignedFile": true, "CiFindPageHashesInCatalog": true, "CiFindPageHashesInSignedFile": true, "CiFreePolicyInfo": true, "CiGetCertPublisherName": true, "CiGetPEInformation": true, "CiInitialize": true, "CiSetTrustedOriginClaimId": true, "CiValidateFileObject": true, "CiVerifyHashInCatalog": true } }, { "label": "Windows 11 24H2 sample", "ci_file_version": "10.0.26100.9444", "architecture": "x64", "sha256": "c7d23814f3202c51fb23e3ca3d4328855787383cee5d14c4a986a13ec2aeda0b", "source": "ci-26100.8328-evidence.json", "named_exports": [ "CiCheckSignedFile", "CiFindPageHashesInCatalog", "CiFindPageHashesInSignedFile", "CiFreePolicyInfo", "CiGetCertPublisherName", "CiGetPEInformation", "CiInitialize", "CiSetTrustedOriginClaimId", "CiValidateFileObject", "CiVerifyHashInCatalog" ], "ordinal_only_export_count": 3, "api_presence": { "CiCheckSignedFile": true, "CiFindPageHashesInCatalog": true, "CiFindPageHashesInSignedFile": true, "CiFreePolicyInfo": true, "CiGetCertPublisherName": true, "CiGetPEInformation": true, "CiInitialize": true, "CiSetTrustedOriginClaimId": true, "CiValidateFileObject": true, "CiVerifyHashInCatalog": true }, "display_file_version": "10.0.26100.8328" }, { "label": "Windows 10 21H2 ARM64 ISO (archive Raspberry Pi folder)", "ci_file_version": "10.0.19041.1566", "architecture": "ARM64", "sha256": "a35f651261691cc67acc9c8bfd00bba7a64dd9f16d2c4b6fe1d183e34aeead78", "source": "iso-corpus-index.json", "named_exports": [ "CiCheckSignedFile", "CiFindPageHashesInCatalog", "CiFindPageHashesInSignedFile", "CiFreePolicyInfo", "CiGetCertPublisherName", "CiGetPEInformation", "CiInitialize", "CiSetTrustedOriginClaimId", "CiValidateFileObject", "CiVerifyHashInCatalog" ], "ordinal_only_export_count": 3, "api_presence": { "CiCheckSignedFile": true, "CiFindPageHashesInCatalog": true, "CiFindPageHashesInSignedFile": true, "CiFreePolicyInfo": true, "CiGetCertPublisherName": true, "CiGetPEInformation": true, "CiInitialize": true, "CiSetTrustedOriginClaimId": true, "CiValidateFileObject": true, "CiVerifyHashInCatalog": true } }, { "label": "Windows 10 22H2.7 ARM64 ISO", "ci_file_version": "10.0.19041.2965", "architecture": "ARM64", "sha256": "33f2d1256f60392bbb84c4251d6435461dfa852a100e065376f83dc8a4dd2ec6", "source": "iso-corpus-index.json", "named_exports": [ "CiCheckSignedFile", "CiFindPageHashesInCatalog", "CiFindPageHashesInSignedFile", "CiFreePolicyInfo", "CiGetCertPublisherName", "CiGetPEInformation", "CiInitialize", "CiSetTrustedOriginClaimId", "CiValidateFileObject", "CiVerifyHashInCatalog" ], "ordinal_only_export_count": 3, "api_presence": { "CiCheckSignedFile": true, "CiFindPageHashesInCatalog": true, "CiFindPageHashesInSignedFile": true, "CiFreePolicyInfo": true, "CiGetCertPublisherName": true, "CiGetPEInformation": true, "CiInitialize": true, "CiSetTrustedOriginClaimId": true, "CiValidateFileObject": true, "CiVerifyHashInCatalog": true } }, { "label": "Windows 11 22H2.9 ARM64 ISO", "ci_file_version": "10.0.22621.1702", "architecture": "ARM64", "sha256": "4164ac08fd19628c5ab6cbca6234265ac2bf7f39d5149f57d3845646d8a8ad60", "source": "iso-corpus-index.json", "named_exports": [ "CiCheckSignedFile", "CiFindPageHashesInCatalog", "CiFindPageHashesInSignedFile", "CiFreePolicyInfo", "CiGetCertPublisherName", "CiGetPEInformation", "CiInitialize", "CiSetTrustedOriginClaimId", "CiValidateFileObject", "CiVerifyHashInCatalog" ], "ordinal_only_export_count": 3, "api_presence": { "CiCheckSignedFile": true, "CiFindPageHashesInCatalog": true, "CiFindPageHashesInSignedFile": true, "CiFreePolicyInfo": true, "CiGetCertPublisherName": true, "CiGetPEInformation": true, "CiInitialize": true, "CiSetTrustedOriginClaimId": true, "CiValidateFileObject": true, "CiVerifyHashInCatalog": true } }, { "label": "Windows 11 24H2 ARM64 ISO", "ci_file_version": "10.0.26100.1591", "architecture": "ARM64", "sha256": "a0eba64a9a3f2006d5832079412eca42cc1b9ed66d19b9b0adb7e59ea354415d", "source": "iso-corpus-index.json", "named_exports": [ "CiCheckSignedFile", "CiFindPageHashesInCatalog", "CiFindPageHashesInSignedFile", "CiFreePolicyInfo", "CiGetCertPublisherName", "CiGetPEInformation", "CiInitialize", "CiSetTrustedOriginClaimId", "CiValidateFileObject", "CiVerifyHashInCatalog" ], "ordinal_only_export_count": 3, "api_presence": { "CiCheckSignedFile": true, "CiFindPageHashesInCatalog": true, "CiFindPageHashesInSignedFile": true, "CiFreePolicyInfo": true, "CiGetCertPublisherName": true, "CiGetPEInformation": true, "CiInitialize": true, "CiSetTrustedOriginClaimId": true, "CiValidateFileObject": true, "CiVerifyHashInCatalog": true } } ] }