Teardowns
Real files, opened for real
Each teardown takes a binary that is already on your machine, or one you can download, and shows what is actually inside it. The finding leads, the screenshots are the evidence, and every piece names the exact build it was taken from so you can repeat it.
18 September 2026 · 19 min read
Where Rust actually is in Windows 11
Two Windows recovery and deployment DLLs were already shipping Rust in the original 24H2 build and are 96 percent Rust today by the linker's own accounting. I could find no previous write-up of either. A census of 13,988 live files and 44,889 more in the component store on one Windows 11 25H2 installation, measured with Microsoft's public symbol files rather than guessed from strings: DirectWrite's rewrite is 57.9 percent of DWriteCore by code bytes and absent from the System32 DLL, the kernel region driver is loaded and gated from the C++ side, 83 GPU driver matches are explained by LLVM rather than Rust, and one component was built by a toolchain channel named utc, in a package dated four months before Microsoft publicly described a backend of that name. Hashes, symbol tables, the full census and the reproduction recipe are attached.
Taken from: Windows 11 Home x64 25H2, build 26200.9168, scanned 2026-09-02 to 2026-09-04
Read the teardown
Try It Free for 30 Days
Every feature unlocked, no account required. Buy a license when you’re ready. One payment, yours to keep.