Chronos[.]zip | Triage

Chronos.zip

.zip

Chronos/Chronos.exe

.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Chronos/Chronos.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.fingerprint

Chronos/Chronos.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.json

Chronos/Chronos.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/protocols.json

Chronos/Chronos.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-641468CB-2184.pma

Chronos/Chronos.exe.WebView2/EBWebView/CertificateRevocation/6498.2022.12.1/crl-set

Chronos/Chronos.exe.WebView2/EBWebView/CertificateRevocation/6498.2022.12.1/manifest.fingerprint

Chronos/Chronos.exe.WebView2/EBWebView/CertificateRevocation/6498.2022.12.1/manifest.json

Chronos/Chronos.exe.WebView2/EBWebView/Crashpad/settings.dat

Chronos/Chronos.exe.WebView2/EBWebView/Crashpad/throttle_store.dat

Chronos/Chronos.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0

Chronos/Chronos.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1

Chronos/Chronos.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2

Chronos/Chronos.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3

Chronos/Chronos.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000001

Chronos/Chronos.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000002

Chronos/Chronos.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000003

.gz

Chronos/Chronos.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000004

Chronos/Chronos.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000005

Chronos/Chronos.exe.WebView2/EBWebView/Default/Cache/Cache_Data/index

Chronos/Chronos.exe.WebView2/EBWebView/Default/Code Cache/js/index

Chronos/Chronos.exe.WebView2/EBWebView/Default/Code Cache/js/index-dir/the-real-index

Chronos/Chronos.exe.WebView2/EBWebView/Default/Code Cache/wasm/index

Chronos/Chronos.exe.WebView2/EBWebView/Default/Code Cache/wasm/index-dir/the-real-index

Chronos/Chronos.exe.WebView2/EBWebView/Default/DashTrackerDatabase

Chronos/Chronos.exe.WebView2/EBWebView/Default/DawnCache/data_0

Chronos/Chronos.exe.WebView2/EBWebView/Default/DawnCache/data_1

Chronos/Chronos.exe.WebView2/EBWebView/Default/DawnCache/data_2

Chronos/Chronos.exe.WebView2/EBWebView/Default/DawnCache/data_3

Chronos/Chronos.exe.WebView2/EBWebView/Default/DawnCache/index

Chronos/Chronos.exe.WebView2/EBWebView/Default/EdgeCoupons/coupons_data.db/000003.log

Chronos/Chronos.exe.WebView2/EBWebView/Default/EdgeCoupons/coupons_data.db/CURRENT

Chronos/Chronos.exe.WebView2/EBWebView/Default/EdgeCoupons/coupons_data.db/LOG

Chronos/Chronos.exe.WebView2/EBWebView/Default/EdgeCoupons/coupons_data.db/LOG.old

Chronos/Chronos.exe.WebView2/EBWebView/Default/EdgeCoupons/coupons_data.db/MANIFEST-000001

Chronos/Chronos.exe.WebView2/EBWebView/Default/EdgeEDrop/EdgeEDropSQLite.db

Chronos/Chronos.exe.WebView2/EBWebView/Default/EntityExtraction/EntityExtractionAssetStore.db/000003.log

Chronos/Chronos.exe.WebView2/EBWebView/Default/EntityExtraction/EntityExtractionAssetStore.db/CURRENT

Chronos/Chronos.exe.WebView2/EBWebView/Default/EntityExtraction/EntityExtractionAssetStore.db/LOG

Chronos/Chronos.exe.WebView2/EBWebView/Default/EntityExtraction/EntityExtractionAssetStore.db/MANIFEST-000001

Chronos/Chronos.exe.WebView2/EBWebView/Default/EntityExtraction/domains_config.json

Chronos/Chronos.exe.WebView2/EBWebView/Default/Extension Scripts/000003.log

Chronos/Chronos.exe.WebView2/EBWebView/Default/Extension Scripts/CURRENT

Chronos/Chronos.exe.WebView2/EBWebView/Default/Extension Scripts/LOG

Chronos/Chronos.exe.WebView2/EBWebView/Default/Extension Scripts/LOG.old

Chronos/Chronos.exe.WebView2/EBWebView/Default/Extension Scripts/MANIFEST-000001

Chronos/Chronos.exe.WebView2/EBWebView/Default/Extension State/000003.log

Chronos/Chronos.exe.WebView2/EBWebView/Default/Extension State/CURRENT

Chronos/Chronos.exe.WebView2/EBWebView/Default/Extension State/LOG

Chronos/Chronos.exe.WebView2/EBWebView/Default/Extension State/LOG.old

Chronos/Chronos.exe.WebView2/EBWebView/Default/Extension State/MANIFEST-000001

Chronos/Chronos.exe.WebView2/EBWebView/Default/ExtensionActivityComp

Chronos/Chronos.exe.WebView2/EBWebView/Default/ExtensionActivityEdge

Chronos/Chronos.exe.WebView2/EBWebView/Default/Favicons

Chronos/Chronos.exe.WebView2/EBWebView/Default/GPUCache/data_0

Chronos/Chronos.exe.WebView2/EBWebView/Default/GPUCache/data_1

Chronos/Chronos.exe.WebView2/EBWebView/Default/GPUCache/data_2

Chronos/Chronos.exe.WebView2/EBWebView/Default/GPUCache/data_3

Chronos/Chronos.exe.WebView2/EBWebView/Default/GPUCache/index

Chronos/Chronos.exe.WebView2/EBWebView/Default/History

Chronos/Chronos.exe.WebView2/EBWebView/Default/Local Storage/leveldb/CURRENT

Chronos/Chronos.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG

Chronos/Chronos.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG.old

Chronos/Chronos.exe.WebView2/EBWebView/Default/Local Storage/leveldb/MANIFEST-000001

Chronos/Chronos.exe.WebView2/EBWebView/Default/Login Data

Chronos/Chronos.exe.WebView2/EBWebView/Default/Network Action Predictor

Chronos/Chronos.exe.WebView2/EBWebView/Default/Network/Cookies

Chronos/Chronos.exe.WebView2/EBWebView/Default/Network/Network Persistent State

Chronos/Chronos.exe.WebView2/EBWebView/Default/Network/Reporting and NEL

Chronos/Chronos.exe.WebView2/EBWebView/Default/Network/SCT Auditing Pending Reports

Chronos/Chronos.exe.WebView2/EBWebView/Default/Network/TransportSecurity

Chronos/Chronos.exe.WebView2/EBWebView/Default/Preferences

Chronos/Chronos.exe.WebView2/EBWebView/Default/PreferredApps

Chronos/Chronos.exe.WebView2/EBWebView/Default/README

Chronos/Chronos.exe.WebView2/EBWebView/Default/Safe Browsing Network/Safe Browsing Cookies

Chronos/Chronos.exe.WebView2/EBWebView/Default/Secure Preferences

Chronos/Chronos.exe.WebView2/EBWebView/Default/Session Storage/000003.log

Chronos/Chronos.exe.WebView2/EBWebView/Default/Session Storage/CURRENT

Chronos/Chronos.exe.WebView2/EBWebView/Default/Session Storage/LOG

Chronos/Chronos.exe.WebView2/EBWebView/Default/Session Storage/LOG.old

Chronos/Chronos.exe.WebView2/EBWebView/Default/Session Storage/MANIFEST-000001

Chronos/Chronos.exe.WebView2/EBWebView/Default/Site Characteristics Database/000003.log

Chronos/Chronos.exe.WebView2/EBWebView/Default/Site Characteristics Database/CURRENT

Chronos/Chronos.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG

Chronos/Chronos.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG.old

Chronos/Chronos.exe.WebView2/EBWebView/Default/Site Characteristics Database/MANIFEST-000001

Chronos/Chronos.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/000003.log

Chronos/Chronos.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/CURRENT

Chronos/Chronos.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG

Chronos/Chronos.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG.old

Chronos/Chronos.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/MANIFEST-000001

Chronos/Chronos.exe.WebView2/EBWebView/Default/Top Sites

Chronos/Chronos.exe.WebView2/EBWebView/Default/Visited Links

Chronos/Chronos.exe.WebView2/EBWebView/Default/Vpn Tokens

Chronos/Chronos.exe.WebView2/EBWebView/Default/Web Data

Chronos/Chronos.exe.WebView2/EBWebView/Default/heavy_ad_intervention_opt_out.db

Chronos/Chronos.exe.WebView2/EBWebView/Default/shared_proto_db/000003.log

Chronos/Chronos.exe.WebView2/EBWebView/Default/shared_proto_db/CURRENT

Chronos/Chronos.exe.WebView2/EBWebView/Default/shared_proto_db/LOG

Chronos/Chronos.exe.WebView2/EBWebView/Default/shared_proto_db/LOG.old

Chronos/Chronos.exe.WebView2/EBWebView/Default/shared_proto_db/MANIFEST-000001

Chronos/Chronos.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/000003.log

Chronos/Chronos.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/CURRENT

Chronos/Chronos.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG

Chronos/Chronos.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG.old

Chronos/Chronos.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/MANIFEST-000001

Chronos/Chronos.exe.WebView2/EBWebView/GrShaderCache/data_0

Chronos/Chronos.exe.WebView2/EBWebView/GrShaderCache/data_1

Chronos/Chronos.exe.WebView2/EBWebView/GrShaderCache/data_2

Chronos/Chronos.exe.WebView2/EBWebView/GrShaderCache/data_3

Chronos/Chronos.exe.WebView2/EBWebView/GrShaderCache/f_000001

Chronos/Chronos.exe.WebView2/EBWebView/GrShaderCache/f_000002

Chronos/Chronos.exe.WebView2/EBWebView/GrShaderCache/index

Chronos/Chronos.exe.WebView2/EBWebView/Last Version

Chronos/Chronos.exe.WebView2/EBWebView/Local State

Chronos/Chronos.exe.WebView2/EBWebView/OriginTrials/0.0.1.4/manifest.fingerprint

Chronos/Chronos.exe.WebView2/EBWebView/OriginTrials/0.0.1.4/manifest.json

Chronos/Chronos.exe.WebView2/EBWebView/PKIMetadata/2.0.0.0/crs.pb

Chronos/Chronos.exe.WebView2/EBWebView/PKIMetadata/2.0.0.0/manifest.fingerprint

Chronos/Chronos.exe.WebView2/EBWebView/PKIMetadata/2.0.0.0/manifest.json

Chronos/Chronos.exe.WebView2/EBWebView/ShaderCache/data_0

Chronos/Chronos.exe.WebView2/EBWebView/ShaderCache/data_1

Chronos/Chronos.exe.WebView2/EBWebView/ShaderCache/data_2

Chronos/Chronos.exe.WebView2/EBWebView/ShaderCache/data_3

Chronos/Chronos.exe.WebView2/EBWebView/ShaderCache/index

Chronos/Chronos.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSynchronousLookupUris

Chronos/Chronos.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSynchronousLookupUris_0

Chronos/Chronos.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings

Chronos/Chronos.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings_2.0-0

Chronos/Chronos.exe.WebView2/EBWebView/SmartScreen/RemoteData/synchronousLookupUris

Chronos/Chronos.exe.WebView2/EBWebView/SmartScreen/RemoteData/synchronousLookupUris_636976985063396749.rel.v2

Chronos/Chronos.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll

.dll windows x64

f51f0d794c7fcc93503306a9cd9ba55d

Code Sign

33:00:00:01:88:af:52:d6:b9:92:6d:e8:f9:00:00:00:00:01:88
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:39

Not After

03/03/2021, 18:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:33

Not After

01/09/2022, 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d
Signer

Actual PE Digest

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

16/03/2023, 15:35
Valid: false

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d
Signer

Actual PE Digest

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

16/03/2023, 15:35
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

crypt32

CertFreeCertificateContext

CryptDecodeObjectEx

CryptStringToBinaryA

CertSetCertificateContextProperty

CertCreateCertificateContext

ws2_32

WSAStartup

WSAIoctl

recv

WSAGetLastError

freeaddrinfo

ioctlsocket

connect

closesocket

socket

getaddrinfo

send

secur32

EncryptMessage

AcquireCredentialsHandleA

DeleteSecurityContext

InitializeSecurityContextA

FreeCredentialsHandle

DecryptMessage

QueryContextAttributesA

advapi32

CryptAcquireContextA

EventRegister

EventSetInformation

EventWriteTransfer

CryptReleaseContext

CryptDestroyKey

EventUnregister

CryptImportKey

ncrypt

NCryptOpenStorageProvider

NCryptFreeObject

NCryptImportKey

dbghelp

SymFromAddr

SymInitialize

SymCleanup

kernel32

LeaveCriticalSection

InitializeCriticalSectionAndSpinCount

DeleteCriticalSection

InitializeSListHead

CreateEventW

GetModuleHandleW

RtlCaptureContext

GetSystemTime

GetModuleFileNameA

GetSystemTimeAsFileTime

GetCurrentThreadId

GetCurrentProcessId

InitOnceBeginInitialize

InitOnceComplete

AcquireSRWLockShared

AcquireSRWLockExclusive

ReleaseSRWLockShared

EnterCriticalSection

WaitForSingleObjectEx

QueryPerformanceCounter

IsDebuggerPresent

IsProcessorFeaturePresent

TerminateProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlVirtualUnwind

VerSetConditionMask

VerifyVersionInfoW

GetCurrentProcess

FormatMessageW

GetLastError

LoadLibraryA

GetProcAddress

WaitForMultipleObjects

WaitForSingleObject

Sleep

SetEvent

CloseHandle

CreateThread

ResetEvent

CreateEventExA

CreateEventA

LocalFree

FormatMessageA

GetModuleHandleA

RtlLookupFunctionEntry

ReleaseSRWLockExclusive

msvcp140

_Mtx_unlock

?_Xbad_alloc@std@@YAXXZ

?_Xbad_function_call@std@@YAXXZ

?_Xlength_error@std@@YAXPEBD@Z

?_Syserror_map@std@@YAPEBDH@Z

_Mtx_destroy_in_situ

_Mtx_init_in_situ

_Mtx_current_owns

_Query_perf_frequency

?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z

?_Throw_Cpp_error@std@@YAXH@Z

_Cnd_timedwait

_Query_perf_counter

_Xtime_get_ticks

?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z

?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A

??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z

??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ

??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z

?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z

?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z

?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ

?_Incref@facet@locale@std@@UEAAXXZ

??Bid@locale@std@@QEAA_KXZ

?_Xout_of_range@std@@YAXPEBD@Z

??1_Lockit@std@@QEAA@XZ

??0_Lockit@std@@QEAA@H@Z

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

?classic@locale@std@@SAAEBV12@XZ

?id@?$ctype@D@std@@2V0locale@2@A

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z

?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?toupper@?$ctype@D@std@@QEBADD@Z

?tolower@?$ctype@D@std@@QEBADD@Z

?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z

?uncaught_exception@std@@YA_NXZ

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z

?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?_Throw_C_error@std@@YAXH@Z

?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z

?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z

?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ

?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z

?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z

?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z

??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

?width@ios_base@std@@QEAA_J_J@Z

?width@ios_base@std@@QEBA_JXZ

?setf@ios_base@std@@QEAAHHH@Z

?flags@ios_base@std@@QEBAHXZ

?good@ios_base@std@@QEBA_NXZ

?_Xinvalid_argument@std@@YAXPEBD@Z

?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

_Thrd_id

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z

_Thrd_yield

?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z

_Thrd_join

?__ExceptionPtrDestroy@@YAXPEAX@Z

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

_Cnd_unregister_at_thread_exit

_Cnd_destroy_in_situ

_Cnd_broadcast

_Cnd_register_at_thread_exit

?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z

?__ExceptionPtrToBool@@YA_NPEBX@Z

_Cnd_wait

?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z

?__ExceptionPtrCreate@@YAXPEAX@Z

_Cnd_init_in_situ

?__ExceptionPtrAssign@@YAXPEAXPEBX@Z

_Cnd_do_broadcast_at_thread_exit

_Thrd_sleep

?__ExceptionPtrRethrow@@YAXPEBX@Z

?__ExceptionPtrCurrentException@@YAXPEAX@Z

?_ReportUnobservedException@details@Concurrency@@YAXXZ

?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ

?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ

??0task_continuation_context@Concurrency@@AEAA@XZ

?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ

?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z

?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z

?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z

?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ

?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z

?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

_Thrd_detach

?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z

?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ

?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z

?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ

?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z

?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ

?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z

?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ

?eof@ios_base@std@@QEBA_NXZ

??7ios_base@std@@QEBA_NXZ

??Bios_base@std@@QEBA_NXZ

?always_noconv@codecvt_base@std@@QEBA_NXZ

_Cnd_signal

??1_Locinfo@std@@QEAA@XZ

?c_str@?$_Yarn@D@std@@QEBAPEBDXZ

??0_Locinfo@std@@QEAA@PEBD@Z

??1facet@locale@std@@MEAA@XZ

??0facet@locale@std@@IEAA@_K@Z

?id@?$collate@D@std@@2V0locale@2@A

_Strxfrm

_Strcoll

?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ

?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z

?is@?$ctype@D@std@@QEBA_NFD@Z

?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z

_Mtx_lock

?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z

?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ

?_Xruntime_error@std@@YAXPEBD@Z

?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z

?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z

?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A

?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z

?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ

?getloc@ios_base@std@@QEBA?AVlocale@2@XZ

?fail@ios_base@std@@QEBA_NXZ

?_Getname@_Locinfo@std@@QEBAPEBDXZ

??0_Locinfo@std@@QEAA@HPEBD@Z

?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_destroy

__std_exception_copy

_CxxThrowException

strrchr

memmove

__std_type_info_compare

memset

_purecall

memcmp

memchr

strstr

strchr

__std_type_info_destroy_list

__C_specific_handler

__std_type_info_name

__current_exception_context

memcpy

__current_exception

__RTDynamicCast

api-ms-win-crt-string-l1-1-0

toupper

strncpy_s

isupper

tolower

_strnicmp

_stricmp

isspace

strnlen

strcmp

strncpy

strtok

strncmp

strcpy_s

strcpy

strtok_s

wcslen

strlen

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table

_crt_atexit

_initialize_onexit_table

_initterm

_initterm_e

_initialize_narrow_environment

_configure_narrow_argv

_register_onexit_function

_seh_filter_dll

_beginthreadex

_errno

terminate

abort

_cexit

_invalid_parameter_noinfo

_invalid_parameter_noinfo_noreturn

api-ms-win-crt-heap-l1-1-0

malloc

calloc

_callnewh

free

realloc

api-ms-win-crt-math-l1-1-0

pow

_dtest

sqrt

ceilf

_dsign

ceil

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func

__stdio_common_vfprintf

__stdio_common_vsprintf

__stdio_common_vsprintf_s

_get_stream_buffer_pointers

_fseeki64

fread

fflush

fclose

fopen_s

_fsopen

fputc

fgetc

fwrite

fgetpos

setvbuf

ungetc

fsetpos

api-ms-win-crt-convert-l1-1-0

strtoul

strtoll

strtoull

strtol

strtod

atoi

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-utility-l1-1-0

rand

llabs

api-ms-win-crt-time-l1-1-0

_ctime64

_time64

_mkgmtime64

_gmtime64_s

strftime

api-ms-win-crt-filesystem-l1-1-0

_lock_file

_unlock_file

ole32

CoCreateInstance

CoInitializeEx

CoUninitialize

PropVariantClear

rpcrt4

UuidToStringA

UuidCreate

RpcStringFreeA

Exports

CreateModuleObject

GetModuleObject

add_source_lang_config_to_auto_detect_source_lang_config

audio_config_create_audio_input_from_a_microphone

audio_config_create_audio_input_from_default_microphone

audio_config_create_audio_input_from_stream

audio_config_create_audio_input_from_wav_file_name

audio_config_create_audio_output_from_a_speaker

audio_config_create_audio_output_from_default_speaker

audio_config_create_audio_output_from_stream

audio_config_create_audio_output_from_wav_file_name

audio_config_create_pull_audio_input_stream

audio_config_create_push_audio_input_stream

audio_config_get_property_bag

audio_config_is_handle_valid

audio_config_release

audio_data_stream_can_read_data

audio_data_stream_can_read_data_from_position

audio_data_stream_create_from_file

audio_data_stream_create_from_keyword_result

audio_data_stream_create_from_result

audio_data_stream_detach_input

audio_data_stream_get_canceled_error_code

audio_data_stream_get_position

audio_data_stream_get_property_bag

audio_data_stream_get_reason_canceled

audio_data_stream_get_status

audio_data_stream_is_handle_valid

audio_data_stream_read

audio_data_stream_read_from_position

audio_data_stream_release

audio_data_stream_save_to_wave_file

audio_data_stream_set_position

audio_stream_create_pull_audio_input_stream

audio_stream_create_pull_audio_output_stream

audio_stream_create_push_audio_input_stream

audio_stream_create_push_audio_output_stream

audio_stream_format_create_from_compressed_format

audio_stream_format_create_from_default_input

audio_stream_format_create_from_default_output

audio_stream_format_create_from_waveformat_pcm

audio_stream_format_is_handle_valid

audio_stream_format_release

audio_stream_is_handle_valid

audio_stream_release

auto_detect_source_lang_config_get_property_bag

auto_detect_source_lang_config_is_handle_valid

auto_detect_source_lang_config_release

bot_framework_config_from_authorization_token

bot_framework_config_from_subscription

class_language_model_assign_class

class_language_model_from_storage_id

connection_async_handle_release

connection_close

connection_connected_set_callback

connection_disconnected_set_callback

connection_from_conversation_translator

connection_from_dialog_service_connector

connection_from_recognizer

connection_get_property_bag

connection_handle_is_valid

connection_handle_release

connection_message_get_data

connection_message_get_data_size

connection_message_get_property_bag

connection_message_handle_is_valid

connection_message_handle_release

connection_message_received_event_get_message

connection_message_received_event_handle_is_valid

connection_message_received_event_handle_release

connection_message_received_set_callback

connection_open

connection_send_message

connection_send_message_async

connection_send_message_data

connection_send_message_data_async

connection_send_message_wait_for

connection_set_message_property

conversation_create_from_config

conversation_delete_conversation

conversation_end_conversation

conversation_get_conversation_id

conversation_get_property_bag

conversation_lock_conversation

conversation_mute_all_participants

conversation_mute_participant

conversation_release_handle

conversation_start_conversation

conversation_transcription_result_get_user_id

conversation_transcription_result_get_utterance_id

conversation_translator_canceled_set_callback

conversation_translator_connection_connected_set_callback

conversation_translator_connection_disconnected_set_callback

conversation_translator_conversation_expiration_set_callback

conversation_translator_create_from_config

conversation_translator_event_get_expiration_time

conversation_translator_event_get_participant_changed_at_index

conversation_translator_event_get_participant_changed_reason

conversation_translator_event_handle_is_valid

conversation_translator_event_handle_release

conversation_translator_get_property_bag

conversation_translator_handle_is_valid

conversation_translator_handle_release

conversation_translator_join

conversation_translator_join_with_id

conversation_translator_leave

conversation_translator_participant_get_avatar

conversation_translator_participant_get_displayname

conversation_translator_participant_get_id

conversation_translator_participant_get_is_host

conversation_translator_participant_get_is_muted

conversation_translator_participant_get_is_using_tts

conversation_translator_participants_changed_set_callback

conversation_translator_result_get_original_lang

conversation_translator_send_text_message

conversation_translator_session_started_set_callback

conversation_translator_session_stopped_set_callback

conversation_translator_set_authorization_token

conversation_translator_start_transcribing

conversation_translator_stop_transcribing

conversation_translator_text_message_recevied_set_callback

conversation_translator_transcribed_set_callback

conversation_translator_transcribing_set_callback

conversation_unlock_conversation

conversation_unmute_all_participants

conversation_unmute_participant

conversation_update_participant

conversation_update_participant_by_user

conversation_update_participant_by_user_id

create_auto_detect_source_lang_config_from_languages

create_auto_detect_source_lang_config_from_open_range

create_auto_detect_source_lang_config_from_source_lang_config

create_pronunciation_assessment_config

create_pronunciation_assessment_config_from_json

create_voice_profile

create_voice_profile_client_from_config

create_voice_profile_from_id_and_type

custom_commands_config_from_authorization_token

custom_commands_config_from_subscription

delete_voice_profile

diagnostics_log_apply_properties

diagnostics_log_format_message

diagnostics_log_memory_dump

diagnostics_log_memory_dump_to_stderr

diagnostics_log_memory_get_line

diagnostics_log_memory_get_line_num_newest

diagnostics_log_memory_get_line_num_oldest

diagnostics_log_memory_start_logging

diagnostics_log_memory_stop_logging

diagnostics_log_start_logging

diagnostics_log_stop_logging

diagnostics_log_trace_message

diagnostics_log_trace_message2

diagnostics_log_trace_string

diagnostics_logmessage_set_callback

diagnostics_logmessage_set_filters

dialog_service_connector_activity_received_event_get_activity

dialog_service_connector_activity_received_event_get_activity_size

dialog_service_connector_activity_received_event_get_audio

dialog_service_connector_activity_received_event_handle_is_valid

dialog_service_connector_activity_received_event_has_audio

dialog_service_connector_activity_received_event_release

dialog_service_connector_activity_received_set_callback

dialog_service_connector_async_handle_is_valid

dialog_service_connector_async_handle_release

dialog_service_connector_async_reco_result_handle_is_valid

dialog_service_connector_async_reco_result_handle_release

dialog_service_connector_async_string_handle_is_valid

dialog_service_connector_async_string_handle_release

dialog_service_connector_async_void_handle_is_valid

dialog_service_connector_async_void_handle_release

dialog_service_connector_canceled_set_callback

dialog_service_connector_connect

dialog_service_connector_connect_async

dialog_service_connector_connect_async_wait_for

dialog_service_connector_create_dialog_service_connector_from_config

dialog_service_connector_disconnect

dialog_service_connector_disconnect_async

dialog_service_connector_disconnect_async_wait_for

dialog_service_connector_get_property_bag

dialog_service_connector_handle_is_valid

dialog_service_connector_handle_release

dialog_service_connector_listen_once

dialog_service_connector_listen_once_async

dialog_service_connector_listen_once_async_wait_for

dialog_service_connector_recognized_set_callback

dialog_service_connector_recognizing_set_callback

dialog_service_connector_send_activity

dialog_service_connector_send_activity_async

dialog_service_connector_send_activity_async_wait_for

dialog_service_connector_session_started_set_callback

dialog_service_connector_session_stopped_set_callback

dialog_service_connector_start_keyword_recognition

dialog_service_connector_start_keyword_recognition_async

dialog_service_connector_start_keyword_recognition_async_wait_for

dialog_service_connector_stop_keyword_recognition

dialog_service_connector_stop_keyword_recognition_async

dialog_service_connector_stop_keyword_recognition_async_wait_for

dialog_service_connector_stop_listening

dialog_service_connector_stop_listening_async

dialog_service_connector_synthesizing_audio_set_callback

dialog_service_connector_turn_status_received_get_conversation_id

dialog_service_connector_turn_status_received_get_conversation_id_size

dialog_service_connector_turn_status_received_get_interaction_id

dialog_service_connector_turn_status_received_get_interaction_id_size

dialog_service_connector_turn_status_received_get_status

dialog_service_connector_turn_status_received_handle_is_valid

dialog_service_connector_turn_status_received_release

dialog_service_connector_turn_status_received_set_callback

enroll_voice_profile

error_get_call_stack

error_get_error_code

error_get_message

error_release

get_voice_profiles

grammar_create_from_storage_id

grammar_handle_is_valid

grammar_handle_release

grammar_list_add_grammar

grammar_list_from_recognizer

grammar_list_set_recognition_factor

grammar_phrase_create_from_text

grammar_phrase_handle_is_valid

grammar_phrase_handle_release

intent_recognizer_add_intent

intent_result_get_intent_id

intent_trigger_create_from_language_understanding_model

intent_trigger_create_from_phrase

intent_trigger_handle_is_valid

intent_trigger_handle_release

keyword_recognition_model_create_from_file

keyword_recognition_model_handle_is_valid

keyword_recognition_model_handle_release

language_understanding_model__handle_release

language_understanding_model_create_from_app_id

language_understanding_model_create_from_subscription

language_understanding_model_create_from_uri

language_understanding_model_handle_is_valid

participant_create_handle

participant_get_property_bag

participant_release_handle

participant_set_preferred_langugage

participant_set_voice_signature

phrase_list_grammar_add_phrase

phrase_list_grammar_clear

phrase_list_grammar_from_recognizer_by_name

pronunciation_assessment_config_apply_to_recognizer

pronunciation_assessment_config_get_property_bag

pronunciation_assessment_config_is_handle_valid

pronunciation_assessment_config_release

pronunciation_assessment_config_to_json

property_bag_copy

property_bag_free_string

property_bag_get_string

property_bag_is_valid

property_bag_release

property_bag_set_string

pull_audio_input_stream_set_callbacks

pull_audio_input_stream_set_getproperty_callback

pull_audio_output_stream_read

push_audio_input_stream_close

push_audio_input_stream_set_property_by_id

push_audio_input_stream_set_property_by_name

push_audio_input_stream_write

push_audio_output_stream_set_callbacks

recognizer_async_handle_is_valid

recognizer_async_handle_release

recognizer_canceled_set_callback

recognizer_create_conversation_transcriber_from_config

recognizer_create_intent_recognizer_from_config

recognizer_create_keyword_recognizer_from_audio_config

recognizer_create_speaker_recognizer_from_config

recognizer_create_speech_recognizer_from_auto_detect_source_lang_config

recognizer_create_speech_recognizer_from_config

recognizer_create_speech_recognizer_from_source_lang_config

recognizer_create_translation_recognizer_from_config

recognizer_disable

recognizer_enable

recognizer_event_handle_is_valid

recognizer_event_handle_release

recognizer_get_property_bag

recognizer_handle_is_valid

recognizer_handle_release

recognizer_is_enabled

recognizer_join_conversation

recognizer_leave_conversation

recognizer_recognition_event_get_offset

recognizer_recognition_event_get_result

recognizer_recognize_keyword_once

recognizer_recognize_keyword_once_async

recognizer_recognize_keyword_once_async_wait_for

recognizer_recognize_once

recognizer_recognize_once_async

recognizer_recognize_once_async_wait_for

recognizer_recognized_set_callback

recognizer_recognizing_set_callback

recognizer_result_handle_is_valid

recognizer_result_handle_release

recognizer_session_event_get_session_id

recognizer_session_started_set_callback

recognizer_session_stopped_set_callback

recognizer_speech_end_detected_set_callback

recognizer_speech_start_detected_set_callback

recognizer_start_continuous_recognition

recognizer_start_continuous_recognition_async

recognizer_start_continuous_recognition_async_wait_for

recognizer_start_keyword_recognition

recognizer_start_keyword_recognition_async

recognizer_start_keyword_recognition_async_wait_for

recognizer_stop_continuous_recognition

recognizer_stop_continuous_recognition_async

recognizer_stop_continuous_recognition_async_wait_for

recognizer_stop_keyword_recognition

recognizer_stop_keyword_recognition_async

recognizer_stop_keyword_recognition_async_wait_for

reset_voice_profile

result_get_canceled_error_code

result_get_duration

result_get_no_match_reason

result_get_offset

result_get_property_bag

result_get_reason

result_get_reason_canceled

result_get_result_id

result_get_text

session_from_recognizer

session_get_property_bag

session_handle_is_valid

session_handle_release

source_lang_config_from_language

source_lang_config_from_language_and_endpointId

source_lang_config_get_property_bag

source_lang_config_is_handle_valid

source_lang_config_release

speaker_identification_model_add_profile

speaker_identification_model_create

speaker_identification_model_release_handle

speaker_recognizer_get_property_bag

speaker_recognizer_identify

speaker_recognizer_release_handle

speaker_recognizer_verify

speaker_verification_model_create

speaker_verification_model_release_handle

speech_config_from_authorization_token

speech_config_from_authorization_token_internal

speech_config_from_endpoint

speech_config_from_endpoint_internal

speech_config_from_host

speech_config_from_host_internal

speech_config_from_subscription

speech_config_from_subscription_internal

speech_config_get_property_bag

speech_config_is_handle_valid

speech_config_release

speech_config_set_audio_output_format

speech_config_set_profanity

speech_config_set_service_property

speech_translation_config_add_target_language

speech_translation_config_from_authorization_token

speech_translation_config_from_endpoint

speech_translation_config_from_host

speech_translation_config_from_subscription

speech_translation_config_remove_target_language

speechapi_async_handle_release

speechapi_async_wait_for

synth_result_get_audio_data

synth_result_get_audio_format

synth_result_get_audio_length

synth_result_get_canceled_error_code

synth_result_get_property_bag

synth_result_get_reason

synth_result_get_reason_canceled

synth_result_get_result_id

synthesizer_async_handle_is_valid

synthesizer_async_handle_release

synthesizer_canceled_set_callback

synthesizer_completed_set_callback

synthesizer_create_speech_synthesizer_from_auto_detect_source_lang_config

synthesizer_create_speech_synthesizer_from_config

synthesizer_disable

synthesizer_enable

synthesizer_event_handle_is_valid

synthesizer_event_handle_release

synthesizer_get_property_bag

synthesizer_handle_is_valid

synthesizer_handle_release

synthesizer_is_enabled

synthesizer_result_handle_is_valid

synthesizer_result_handle_release

synthesizer_speak_async_wait_for

synthesizer_speak_ssml

synthesizer_speak_ssml_async

synthesizer_speak_text

synthesizer_speak_text_async

synthesizer_start_speaking_ssml

synthesizer_start_speaking_ssml_async

synthesizer_start_speaking_text

synthesizer_start_speaking_text_async

synthesizer_started_set_callback

synthesizer_stop_speaking

synthesizer_stop_speaking_async

synthesizer_stop_speaking_async_wait_for

synthesizer_synthesis_event_get_result

synthesizer_synthesizing_set_callback

synthesizer_word_boundary_event_get_values

synthesizer_word_boundary_set_callback

translation_synthesis_result_get_audio_data

translation_text_result_get_translation_text_buffer_header

translator_add_target_language

translator_remove_target_language

translator_synthesizing_audio_set_callback

user_create_from_id

user_get_id

user_release_handle

voice_profile_client_get_property_bag

voice_profile_client_release_handle

voice_profile_get_id

voice_profile_release_handle

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 673KB - Virtual size: 673KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 171KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Chronos/Chronos.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/manifest.fingerprint

Chronos/Chronos.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/manifest.json

Chronos/Chronos.exe.WebView2/EBWebView/Subresource Filter/Indexed Rules/35/10.34.0.44/LICENSE

Chronos/Chronos.exe.WebView2/EBWebView/Subresource Filter/Indexed Rules/35/10.34.0.44/Ruleset Data

Chronos/Chronos.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.44/Filtering Rules

Chronos/Chronos.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.44/Filtering Rules-AA

Chronos/Chronos.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.44/LICENSE

Chronos/Chronos.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.44/Part-DE

Chronos/Chronos.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.44/Part-ES

Chronos/Chronos.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.44/Part-FR

Chronos/Chronos.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.44/Part-IT

Chronos/Chronos.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.44/Part-NL

Chronos/Chronos.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.44/Part-RU

Chronos/Chronos.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.44/Part-ZH

Chronos/Chronos.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.44/adblock_snippet.js

.js

Chronos/Chronos.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.44/manifest.fingerprint

Chronos/Chronos.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.44/manifest.json

Chronos/Chronos.exe.WebView2/EBWebView/Variations

Chronos/Chronos.exe.WebView2/EBWebView/ZxcvbnData/3.0.0.0/english_wikipedia.txt

.vbs

Chronos/Chronos.exe.WebView2/EBWebView/ZxcvbnData/3.0.0.0/female_names.txt

Chronos/Chronos.exe.WebView2/EBWebView/ZxcvbnData/3.0.0.0/male_names.txt

Chronos/Chronos.exe.WebView2/EBWebView/ZxcvbnData/3.0.0.0/manifest.fingerprint

Chronos/Chronos.exe.WebView2/EBWebView/ZxcvbnData/3.0.0.0/manifest.json

Chronos/Chronos.exe.WebView2/EBWebView/ZxcvbnData/3.0.0.0/passwords.txt

Chronos/Chronos.exe.WebView2/EBWebView/ZxcvbnData/3.0.0.0/surnames.txt

Chronos/Chronos.exe.WebView2/EBWebView/ZxcvbnData/3.0.0.0/us_tv_and_film.txt

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/_metadata/verified_contents.json

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-as.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-be.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-bg.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-bn.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-cu.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-cy.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-da.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-de-1901.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-de-1996.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-de-ch-1901.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-en-gb.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-en-us.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-es.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-et.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-eu.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-fr.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-ga.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-gu.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-hi.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-hr.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-hu.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-hy.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-kn.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-la.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-ml.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-mn-cyrl.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-mr.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-nb.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-nn.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-or.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-pa.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-pt.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-sl.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-ta.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-te.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-tk.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-und-ethi.hyb

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/manifest.fingerprint

Chronos/Chronos.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/manifest.json

Chronos/Chronos.exe.config

Chronos/DiscordRPC.dll

.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Chronos/KrnlAPI.dll

.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Chronos/Microsoft.Web.WebView2.Core.dll

.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:02:d0:e7:eb:7c:2e:f6:ce:23:e1:00:00:00:00:02:d0
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

69:5d:5e:54:5b:f5:94:6d:29:87:70:ec:97:87:8c:11:8c:50:6c:85:52:33:fc:e6:35:64:25:aa:dd:1e:0d:b4
Signer

Actual PE Digest

69:5d:5e:54:5b:f5:94:6d:29:87:70:ec:97:87:8c:11:8c:50:6c:85:52:33:fc:e6:35:64:25:aa:dd:1e:0d:b4

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

16/03/2023, 15:35
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 407KB - Virtual size: 406KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Chronos/Microsoft.Web.WebView2.Wpf.dll

.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:02:ce:78:d4:2c:89:f8:69:73:53:00:00:00:00:02:ce
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

3a:fa:ec:d3:a6:87:ad:34:1b:0f:71:72:83:d7:db:89:f8:98:d2:06:34:8b:b3:4d:28:13:b5:82:db:15:99:46
Signer

Actual PE Digest

3a:fa:ec:d3:a6:87:ad:34:1b:0f:71:72:83:d7:db:89:f8:98:d2:06:34:8b:b3:4d:28:13:b5:82:db:15:99:46

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

16/03/2023, 15:35
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Chronos/Newtonsoft.Json.dll

.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Certificate

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Not Before

15/01/2021, 00:00

Not After

14/01/2046, 23:59

Subject

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Certificate

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Not Before

15/07/2021, 00:00

Not After

14/07/2031, 23:59

Subject

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Not Before

13/08/2021, 00:00

Not After

29/10/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9b
Signer

Actual PE Digest

38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9b

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

08/03/2023, 07:09
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 681KB - Virtual size: 680KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Chronos/items/Extensions/FPS_Unlocker.exe

.exe windows x64

425d7c5209bd024f60a34a012e0490a7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

SetConsoleTextAttribute

GetStdHandle

GetProcessId

CreateMutexA

Sleep

GetLastError

CloseHandle

ReadProcessMemory

CheckRemoteDebuggerPresent

GetExitCodeProcess

Process32First

K32EnumProcessModulesEx

OpenProcess

CreateToolhelp32Snapshot

K32GetModuleFileNameExA

QueryFullProcessImageNameA

Process32Next

K32GetModuleInformation

IsWow64Process

VirtualQueryEx

GetCurrentProcess

SetConsoleTitleA

TerminateThread

FreeConsole

CreateThread

GetConsoleScreenBufferInfo

AllocConsole

WriteConsoleW

HeapSize

SetStdHandle

GetProcessHeap

FreeEnvironmentStringsW

GetEnvironmentStringsW

GetCommandLineW

GetCommandLineA

GetOEMCP

GetACP

IsValidCodePage

HeapReAlloc

ReadConsoleW

ReadFile

GetConsoleMode

GetConsoleOutputCP

FlushFileBuffers

SetFilePointerEx

GetFileSizeEx

GetFileType

EnumSystemLocalesW

GetUserDefaultLCID

GetConsoleWindow

WriteProcessMemory

IsValidLocale

GetLocaleInfoW

LCMapStringW

HeapFree

LocalFree

FormatMessageA

GetLocaleInfoEx

CreateFileW

FindClose

FindFirstFileExW

FindNextFileW

GetFileInformationByHandle

AreFileApisANSI

GetModuleHandleW

GetProcAddress

GetFileInformationByHandleEx

MultiByteToWideChar

WideCharToMultiByte

QueryPerformanceCounter

QueryPerformanceFrequency

FlsAlloc

FlsGetValue

FlsSetValue

FlsFree

InitializeCriticalSectionEx

GetSystemTimeAsFileTime

EnterCriticalSection

LeaveCriticalSection

DeleteCriticalSection

EncodePointer

DecodePointer

LCMapStringEx

CompareStringEx

GetCPInfo

GetStringTypeW

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

UnhandledExceptionFilter

SetUnhandledExceptionFilter

TerminateProcess

IsProcessorFeaturePresent

IsDebuggerPresent

GetStartupInfoW

GetCurrentProcessId

GetCurrentThreadId

InitializeSListHead

RtlUnwindEx

RtlPcToFileHeader

RaiseException

SetLastError

InitializeCriticalSectionAndSpinCount

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

FreeLibrary

LoadLibraryExW

RtlUnwind

ExitProcess

GetModuleHandleExW

GetModuleFileNameW

WriteFile

HeapAlloc

SetEndOfFile

user32

GetWindowTextA

MessageBoxA

EnumWindows

IsWindowVisible

GetSystemMenu

GetMessageA

CheckMenuRadioItem

DispatchMessageA

LoadCursorA

CreatePopupMenu

TrackPopupMenu

ShowWindow

DefWindowProcA

CreateWindowExA

TranslateMessage

LoadIconA

AppendMenuA

CheckMenuItem

PostQuitMessage

EnableMenuItem

RegisterClassExA

SetForegroundWindow

GetCursorPos

GetWindowThreadProcessId

gdi32

GetStockObject

shell32

ShellExecuteA

Shell_NotifyIconA

wininet

InternetOpenA

InternetCloseHandle

InternetReadFile

InternetOpenUrlA

Sections

.text
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Chronos/items/Extensions/Multiple_RBLX_Clients.exe

.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 399KB - Virtual size: 399KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Chronos/items/Monaco Editor/Monaco.html

.html .js

Chronos/items/Monaco Editor/vs/base/undefined/workerMain.js

.js

Chronos/items/Monaco Editor/vs/base/worker/workerMain.js

.js

Chronos/items/Monaco Editor/vs/basic-languages/bat/bat.js

Chronos/items/Monaco Editor/vs/basic-languages/coffee/coffee.js

Chronos/items/Monaco Editor/vs/basic-languages/cpp/cpp.js

Chronos/items/Monaco Editor/vs/basic-languages/csharp/csharp.js

Chronos/items/Monaco Editor/vs/basic-languages/csp/csp.js

Chronos/items/Monaco Editor/vs/basic-languages/css/css.js

Chronos/items/Monaco Editor/vs/basic-languages/dockerfile/dockerfile.js

Chronos/items/Monaco Editor/vs/basic-languages/fsharp/fsharp.js

Chronos/items/Monaco Editor/vs/basic-languages/go/go.js

Chronos/items/Monaco Editor/vs/basic-languages/handlebars/handlebars.js

.js

Chronos/items/Monaco Editor/vs/basic-languages/html/html.js

.js

Chronos/items/Monaco Editor/vs/basic-languages/ini/ini.js

Chronos/items/Monaco Editor/vs/basic-languages/java/java.js

Chronos/items/Monaco Editor/vs/basic-languages/less/less.js

Chronos/items/Monaco Editor/vs/basic-languages/lua/lua.js

Chronos/items/Monaco Editor/vs/basic-languages/markdown/markdown.js

.js

Chronos/items/Monaco Editor/vs/basic-languages/msdax/msdax.js

Chronos/items/Monaco Editor/vs/basic-languages/mysql/mysql.js

Chronos/items/Monaco Editor/vs/basic-languages/objective-c/objective-c.js

Chronos/items/Monaco Editor/vs/basic-languages/pgsql/pgsql.js

Chronos/items/Monaco Editor/vs/basic-languages/php/php.js

Chronos/items/Monaco Editor/vs/basic-languages/postiats/postiats.js

Chronos/items/Monaco Editor/vs/basic-languages/powershell/powershell.js

Chronos/items/Monaco Editor/vs/basic-languages/pug/pug.js

Chronos/items/Monaco Editor/vs/basic-languages/python/python.js

Chronos/items/Monaco Editor/vs/basic-languages/r/r.js

Chronos/items/Monaco Editor/vs/basic-languages/razor/razor.js

.js

Chronos/items/Monaco Editor/vs/basic-languages/redis/redis.js

Chronos/items/Monaco Editor/vs/basic-languages/redshift/redshift.js

Chronos/items/Monaco Editor/vs/basic-languages/ruby/ruby.js

Chronos/items/Monaco Editor/vs/basic-languages/rust/rust.js

Chronos/items/Monaco Editor/vs/basic-languages/sb/sb.js

Chronos/items/Monaco Editor/vs/basic-languages/scss/scss.js

Chronos/items/Monaco Editor/vs/basic-languages/solidity/solidity.js

Chronos/items/Monaco Editor/vs/basic-languages/sql/sql.js

Chronos/items/Monaco Editor/vs/basic-languages/st/st.js

Chronos/items/Monaco Editor/vs/basic-languages/swift/swift.js

Chronos/items/Monaco Editor/vs/basic-languages/vb/vb.js

Chronos/items/Monaco Editor/vs/basic-languages/xml/xml.js

Chronos/items/Monaco Editor/vs/basic-languages/yaml/yaml.js

Chronos/items/Monaco Editor/vs/editor/contrib/suggest/media/String_16x.svg

Chronos/items/Monaco Editor/vs/editor/contrib/suggest/media/String_inverse_16x.svg

Chronos/items/Monaco Editor/vs/editor/editor.main.css

Chronos/items/Monaco Editor/vs/editor/editor.main.js

.js

Chronos/items/Monaco Editor/vs/editor/editor.main.nls.de.js

Chronos/items/Monaco Editor/vs/editor/editor.main.nls.es.js

Chronos/items/Monaco Editor/vs/editor/editor.main.nls.fr.js

Chronos/items/Monaco Editor/vs/editor/editor.main.nls.it.js

Chronos/items/Monaco Editor/vs/editor/editor.main.nls.ja.js

Chronos/items/Monaco Editor/vs/editor/editor.main.nls.js

Chronos/items/Monaco Editor/vs/editor/editor.main.nls.ko.js

Chronos/items/Monaco Editor/vs/editor/editor.main.nls.ru.js

Chronos/items/Monaco Editor/vs/editor/editor.main.nls.zh-cn.js

Chronos/items/Monaco Editor/vs/editor/editor.main.nls.zh-tw.js

Chronos/items/Monaco Editor/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg

Chronos/items/Monaco Editor/vs/editor/undefined/browser/quickOpen/symbol-sprite.svg

Chronos/items/Monaco Editor/vs/editor/undefined/suggest/media/String_16x.svg

Chronos/items/Monaco Editor/vs/editor/undefined/suggest/media/String_inverse_16x.svg

Chronos/items/Monaco Editor/vs/language/css/cssMode.js

.js

Chronos/items/Monaco Editor/vs/language/css/cssWorker.js

.js

Chronos/items/Monaco Editor/vs/language/html/htmlMode.js

.js

Chronos/items/Monaco Editor/vs/language/html/htmlWorker.js

.js

Chronos/items/Monaco Editor/vs/language/json/jsonMode.js

.js

Chronos/items/Monaco Editor/vs/language/json/jsonWorker.js

.js

Chronos/items/Monaco Editor/vs/language/typescript/lib/typescriptServices.js

.js

Chronos/items/Monaco Editor/vs/language/typescript/tsMode.js

.js

Chronos/items/Monaco Editor/vs/language/typescript/tsWorker.js

.js

Chronos/items/Monaco Editor/vs/language/typescript/undefined/typescriptServices.js

.js

Chronos/items/Monaco Editor/vs/loader.js

.js

Chronos/items/Theme.json

Chronos/runtimes/win-arm64/native/WebView2Loader.dll

Chronos/runtimes/win-x64/native/WebView2Loader.dll

.dll windows x64

dc9fbafd0b96c0a640df70f088bfd2b0

Code Sign

33:00:00:02:d0:e7:eb:7c:2e:f6:ce:23:e1:00:00:00:00:02:d0
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

ba:d8:dc:f7:ee:d1:02:af:0e:53:d6:16:bf:63:56:e5:6e:25:cd:d6:17:35:2a:6a:83:1f:09:85:6d:20:1e:06
Signer

Actual PE Digest

ba:d8:dc:f7:ee:d1:02:af:0e:53:d6:16:bf:63:56:e5:6e:25:cd:d6:17:35:2a:6a:83:1f:09:85:6d:20:1e:06

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

16/03/2023, 15:35
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CloseHandle

CreateEventW

CreateFileW

DeleteCriticalSection

EncodePointer

EnterCriticalSection

ExitProcess

FindClose

FindFirstFileExW

FindNextFileW

FlsAlloc

FlsFree

FlsGetValue

FlsSetValue

FlushFileBuffers

FreeEnvironmentStringsW

FreeLibrary

GetACP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetConsoleMode

GetConsoleOutputCP

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

GetEnvironmentStringsW

GetEnvironmentVariableW

GetFileAttributesW

GetFileType

GetLastError

GetModuleFileNameW

GetModuleHandleExW

GetModuleHandleW

GetOEMCP

GetProcAddress

GetProcessHeap

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemInfo

GetSystemTimeAsFileTime

HeapAlloc

HeapFree

HeapReAlloc

HeapSize

InitializeCriticalSectionAndSpinCount

InitializeSListHead

InterlockedFlushSList

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

LCMapStringW

LeaveCriticalSection

LoadLibraryExA

LoadLibraryExW

LoadLibraryW

MultiByteToWideChar

OutputDebugStringA

OutputDebugStringW

QueryPerformanceCounter

RaiseException

ResetEvent

RtlCaptureContext

RtlLookupFunctionEntry

RtlPcToFileHeader

RtlUnwindEx

RtlVirtualUnwind

SetEvent

SetFilePointerEx

SetLastError

SetStdHandle

SetUnhandledExceptionFilter

TerminateProcess

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

UnhandledExceptionFilter

VirtualProtect

VirtualQuery

WaitForSingleObjectEx

WideCharToMultiByte

WriteConsoleW

WriteFile

Exports

CompareBrowserVersions

CreateCoreWebView2Environment

CreateCoreWebView2EnvironmentWithOptions

GetAvailableCoreWebView2BrowserVersionString

Sections

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gxfg
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 92B

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.voltbl
Size: 512B - Virtual size: 68B

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Chronos/runtimes/win-x86/native/WebView2Loader.dll

.dll windows x86

608537c42a46a95b31cc1ef01ab6eeb0

Code Sign

33:00:00:02:ce:78:d4:2c:89:f8:69:73:53:00:00:00:00:02:ce
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

ca:02:be:45:23:1a:4f:c5:9a:bd:e9:c0:64:b8:65:28:f9:1f:9e:45:9e:b9:55:0d:0f:c0:fb:3d:ec:41:42:40
Signer

Actual PE Digest

ca:02:be:45:23:1a:4f:c5:9a:bd:e9:c0:64:b8:65:28:f9:1f:9e:45:9e:b9:55:0d:0f:c0:fb:3d:ec:41:42:40

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

16/03/2023, 15:35
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle

CreateEventW

CreateFileW

DecodePointer

DeleteCriticalSection

EncodePointer

EnterCriticalSection

ExitProcess

FindClose

FindFirstFileExW

FindNextFileW

FlushFileBuffers

FreeEnvironmentStringsW

FreeLibrary

GetACP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetConsoleMode

GetConsoleOutputCP

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

GetEnvironmentStringsW

GetEnvironmentVariableW

GetFileAttributesW

GetFileType

GetLastError

GetModuleFileNameW

GetModuleHandleExW

GetModuleHandleW

GetOEMCP

GetProcAddress

GetProcessHeap

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemInfo

GetSystemTimeAsFileTime

HeapAlloc

HeapFree

HeapReAlloc

HeapSize

InitializeCriticalSectionAndSpinCount

InitializeSListHead

InterlockedFlushSList

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

LCMapStringW

LeaveCriticalSection

LoadLibraryExA

LoadLibraryExW

LoadLibraryW

MultiByteToWideChar

OutputDebugStringA

OutputDebugStringW

QueryPerformanceCounter

RaiseException

ResetEvent

RtlUnwind

SetEvent

SetFilePointerEx

SetLastError

SetStdHandle

SetUnhandledExceptionFilter

TerminateProcess

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

UnhandledExceptionFilter

VirtualProtect

VirtualQuery

WaitForSingleObjectEx

WideCharToMultiByte

WriteConsoleW

WriteFile

Exports

CompareBrowserVersions

CreateCoreWebView2Environment

CreateCoreWebView2EnvironmentWithOptions

GetAvailableCoreWebView2BrowserVersionString

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.voltbl
Size: 512B - Virtual size: 36B

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 512B - Virtual size: 12B

f51f0d794c7fcc93503306a9cd9ba55d

Code Sign

33:00:00:01:88:af:52:d6:b9:92:6d:e8:f9:00:00:00:00:01:88Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6dSigner

Signature Validations

Verification

16/03/2023, 15:35 Valid: false

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6dSigner

Signature Validations

Verification

16/03/2023, 15:35 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

crypt32

ws2_32

secur32

advapi32

ncrypt

dbghelp

kernel32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

ole32

rpcrt4

Exports

Exports

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 673KB - Virtual size: 673KB

.data Size: 171KB - Virtual size: 2.2MB

.pdata Size: 149KB - Virtual size: 148KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 21KB - Virtual size: 20KB

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 80KB - Virtual size: 79KB

.rsrc Size: 1024B - Virtual size: 916B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

.text
Size: 1.2MB - Virtual size: 1.2MB

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:01:88:af:52:d6:b9:92:6d:e8:f9:00:00:00:00:01:88
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d
Signer

16/03/2023, 15:35
Valid: false

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d
Signer

16/03/2023, 15:35
Valid: false

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 673KB - Virtual size: 673KB

.data
Size: 171KB - Virtual size: 2.2MB

.pdata
Size: 149KB - Virtual size: 148KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 21KB - Virtual size: 20KB

.text
Size: 80KB - Virtual size: 79KB

.rsrc
Size: 1024B - Virtual size: 916B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 14KB - Virtual size: 13KB

.rsrc
Size: 1024B - Virtual size: 672B

.reloc
Size: 512B - Virtual size: 12B

33:00:00:02:d0:e7:eb:7c:2e:f6:ce:23:e1:00:00:00:00:02:d0
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

69:5d:5e:54:5b:f5:94:6d:29:87:70:ec:97:87:8c:11:8c:50:6c:85:52:33:fc:e6:35:64:25:aa:dd:1e:0d:b4
Signer

16/03/2023, 15:35
Valid: false

.text
Size: 407KB - Virtual size: 406KB

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 12B

33:00:00:02:ce:78:d4:2c:89:f8:69:73:53:00:00:00:00:02:ce
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

3a:fa:ec:d3:a6:87:ad:34:1b:0f:71:72:83:d7:db:89:f8:98:d2:06:34:8b:b3:4d:28:13:b5:82:db:15:99:46
Signer

16/03/2023, 15:35
Valid: false

.text
Size: 31KB - Virtual size: 30KB

.rsrc
Size: 1024B - Virtual size: 984B

.reloc
Size: 512B - Virtual size: 12B

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Certificate

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Certificate

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9b
Signer

08/03/2023, 07:09
Valid: false