agenttesla | net8[.]0-windows[.]7z

resource	yara_rule
static1/unpack001/net8.0-windows/Guna.UI2.dll	family_agenttesla

resource
unpack001/net8.0-windows/FastColoredTextBox.dll
unpack001/net8.0-windows/nexarX.dll
unpack001/net8.0-windows/nexarX.exe

net8.0-windows.7z

.7z

net8.0-windows/FastColoredTextBox.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

C:\REPO\Private\FastColoredTextBox\FastColoredTextBox\obj\Release\net6.0-windows\FastColoredTextBox.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 299KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

net8.0-windows/Guna.UI2.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Certificate

Issuer

CN=Sobatdata Root CA

Not Before

23/10/2019, 05:22

Not After

22/10/2025, 17:00

Subject

CN=Sobatdata Software

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

5e:00:a7:1b:7e:46:57:12:de:98:da:e3:8d:91:ea:26:6d:ef:71:ee
Signer

Actual PE Digest

5e:00:a7:1b:7e:46:57:12:de:98:da:e3:8d:91:ea:26:6d:ef:71:ee

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

net8.0-windows/Microsoft.Web.WebView2.Core.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

54:d7:5f:3a:d9:aa:8d:e0:4f:8a:f5:b0:6d:04:ae:fc:b0:90:c8:c1:e1:3c:04:6d:fa:3c:72:92:9f:7c:a8:82
Signer

Actual PE Digest

54:d7:5f:3a:d9:aa:8d:e0:4f:8a:f5:b0:6d:04:ae:fc:b0:90:c8:c1:e1:3c:04:6d:fa:3c:72:92:9f:7c:a8:82

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\webview2_api_writer\dotNetAPIWrapper\Microsoft.Web.WebView2.Core\bin\ReleasePackage\Microsoft.Web.WebView2.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 545KB - Virtual size: 545KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

net8.0-windows/Microsoft.Web.WebView2.WinForms.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

b4:fb:3b:14:11:7a:84:e6:8a:1f:16:df:de:3b:b1:4a:c0:c4:b7:41:93:c2:a3:f9:67:49:e1:1b:7d:8a:f3:14
Signer

Actual PE Digest

b4:fb:3b:14:11:7a:84:e6:8a:1f:16:df:de:3b:b1:4a:c0:c4:b7:41:93:c2:a3:f9:67:49:e1:1b:7d:8a:f3:14

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\winforms_control\Microsoft.Web.WebView2.WinForms\obj\Release Stable APIs\netcoreapp3.0\Microsoft.Web.WebView2.WinForms.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

net8.0-windows/Microsoft.Web.WebView2.Wpf.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

f5:ad:ff:d7:e2:15:cd:26:7a:dc:58:65:69:5e:c6:a7:a4:bd:0e:fc:d0:3a:ee:82:af:5c:1f:05:ff:8a:2d:7f
Signer

Actual PE Digest

f5:ad:ff:d7:e2:15:cd:26:7a:dc:58:65:69:5e:c6:a7:a4:bd:0e:fc:d0:3a:ee:82:af:5c:1f:05:ff:8a:2d:7f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\wpf_control\Microsoft.Web.WebView2.Wpf\obj\Release Stable APIs\netcoreapp3.0\Microsoft.Web.WebView2.Wpf.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

net8.0-windows/Scripts/Nexar X FR.txt

net8.0-windows/Scripts/test.lua

net8.0-windows/System.Management.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:05:4d:62:0d:68:85:07:aa:33:00:00:00:00:03:05
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/08/2022, 20:23

Not After

03/08/2023, 20:23

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

21:dd:70:75:07:79:76:e9:4c:2e:f9:e2:e8:a9:c9:0c:99:41:ca:c8:0f:9f:d0:4f:af:43:ef:2a:ed:0a:ac:ff
Signer

Actual PE Digest

21:dd:70:75:07:79:76:e9:4c:2e:f9:e2:e8:a9:c9:0c:99:41:ca:c8:0f:9f:d0:4f:af:43:ef:2a:ed:0a:ac:ff

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/System.Management/Release/net7.0/System.Management.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

net8.0-windows/bin/index.html

.html .js polyglot

net8.0-windows/bin/vs/base/worker/workerMain.js

.js

net8.0-windows/bin/vs/basic-languages/bat/bat.js

net8.0-windows/bin/vs/basic-languages/coffee/coffee.js

net8.0-windows/bin/vs/basic-languages/cpp/cpp.js

net8.0-windows/bin/vs/basic-languages/csharp/csharp.js

net8.0-windows/bin/vs/basic-languages/csp/csp.js

net8.0-windows/bin/vs/basic-languages/css/css.js

net8.0-windows/bin/vs/basic-languages/dockerfile/dockerfile.js

net8.0-windows/bin/vs/basic-languages/fsharp/fsharp.js

net8.0-windows/bin/vs/basic-languages/go/go.js

net8.0-windows/bin/vs/basic-languages/handlebars/handlebars.js

.js

net8.0-windows/bin/vs/basic-languages/html/html.js

.js

net8.0-windows/bin/vs/basic-languages/ini/ini.js

net8.0-windows/bin/vs/basic-languages/java/java.js

net8.0-windows/bin/vs/basic-languages/less/less.js

net8.0-windows/bin/vs/basic-languages/lua/lua.js

net8.0-windows/bin/vs/basic-languages/markdown/markdown.js

.js

net8.0-windows/bin/vs/basic-languages/msdax/msdax.js

net8.0-windows/bin/vs/basic-languages/mysql/mysql.js

net8.0-windows/bin/vs/basic-languages/objective-c/objective-c.js

net8.0-windows/bin/vs/basic-languages/pgsql/pgsql.js

net8.0-windows/bin/vs/basic-languages/php/php.js

net8.0-windows/bin/vs/basic-languages/postiats/postiats.js

net8.0-windows/bin/vs/basic-languages/powershell/powershell.js

net8.0-windows/bin/vs/basic-languages/pug/pug.js

net8.0-windows/bin/vs/basic-languages/python/python.js

net8.0-windows/bin/vs/basic-languages/r/r.js

net8.0-windows/bin/vs/basic-languages/razor/razor.js

.js

net8.0-windows/bin/vs/basic-languages/redis/redis.js

net8.0-windows/bin/vs/basic-languages/redshift/redshift.js

net8.0-windows/bin/vs/basic-languages/ruby/ruby.js

net8.0-windows/bin/vs/basic-languages/rust/rust.js

net8.0-windows/bin/vs/basic-languages/sb/sb.js

net8.0-windows/bin/vs/basic-languages/scss/scss.js

net8.0-windows/bin/vs/basic-languages/solidity/solidity.js

net8.0-windows/bin/vs/basic-languages/sql/sql.js

net8.0-windows/bin/vs/basic-languages/st/st.js

net8.0-windows/bin/vs/basic-languages/swift/swift.js

net8.0-windows/bin/vs/basic-languages/vb/vb.js

net8.0-windows/bin/vs/basic-languages/xml/xml.js

net8.0-windows/bin/vs/basic-languages/yaml/yaml.js

net8.0-windows/bin/vs/editor/contrib/suggest/media/String_16x.svg

net8.0-windows/bin/vs/editor/contrib/suggest/media/String_inverse_16x.svg

net8.0-windows/bin/vs/editor/editor.main.css

net8.0-windows/bin/vs/editor/editor.main.js

.js

net8.0-windows/bin/vs/editor/editor.main.nls.de.js

net8.0-windows/bin/vs/editor/editor.main.nls.es.js

net8.0-windows/bin/vs/editor/editor.main.nls.fr.js

net8.0-windows/bin/vs/editor/editor.main.nls.it.js

net8.0-windows/bin/vs/editor/editor.main.nls.ja.js

net8.0-windows/bin/vs/editor/editor.main.nls.js

net8.0-windows/bin/vs/editor/editor.main.nls.ko.js

net8.0-windows/bin/vs/editor/editor.main.nls.ru.js

net8.0-windows/bin/vs/editor/editor.main.nls.zh-cn.js

net8.0-windows/bin/vs/editor/editor.main.nls.zh-tw.js

net8.0-windows/bin/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg

net8.0-windows/bin/vs/language/css/cssMode.js

.js

net8.0-windows/bin/vs/language/css/cssWorker.js

.js

net8.0-windows/bin/vs/language/html/htmlMode.js

.js

net8.0-windows/bin/vs/language/html/htmlWorker.js

.js

net8.0-windows/bin/vs/language/json/jsonMode.js

.js

net8.0-windows/bin/vs/language/json/jsonWorker.js

.js

net8.0-windows/bin/vs/language/typescript/lib/typescriptServices.js

.js

net8.0-windows/bin/vs/language/typescript/tsMode.js

.js

net8.0-windows/bin/vs/language/typescript/tsWorker.js

.js

net8.0-windows/bin/vs/loader.js

.js

net8.0-windows/nexarX.deps.json

net8.0-windows/nexarX.dll

.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\mostafa\Desktop\Main stuff for Nexar\nexar x perfect size\nexarX\obj\Debug\net8.0-windows\nexarX.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 289KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

net8.0-windows/nexarX.exe

.exe windows:6 windows x64 arch:x64

6a91eb82bfd19d2706c7d43c46f7064e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb

Imports

kernel32

FreeLibrary

LoadLibraryExW

OutputDebugStringW

FindFirstFileExW

EnterCriticalSection

GetFullPathNameW

FindNextFileW

GetCurrentProcess

GetModuleHandleExW

GetModuleFileNameW

LeaveCriticalSection

GetEnvironmentVariableW

GetModuleHandleW

MultiByteToWideChar

GetFileAttributesExW

LoadLibraryA

DeleteCriticalSection

WideCharToMultiByte

IsWow64Process

TlsFree

TlsSetValue

TlsGetValue

TlsAlloc

InitializeCriticalSectionAndSpinCount

GetProcAddress

GetWindowsDirectoryW

FindResourceW

GetLastError

ActivateActCtx

FindClose

CreateActCtxW

SetLastError

RaiseException

RtlPcToFileHeader

RtlUnwindEx

InitializeSListHead

GetCurrentProcessId

IsDebuggerPresent

IsProcessorFeaturePresent

TerminateProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

GetStringTypeW

SwitchToThread

GetCurrentThreadId

InitializeCriticalSectionEx

EncodePointer

DecodePointer

LCMapStringEx

QueryPerformanceCounter

GetSystemTimeAsFileTime

user32

MessageBoxW

shell32

ShellExecuteW

advapi32

RegOpenKeyExW

RegGetValueW

DeregisterEventSource

RegisterEventSourceW

ReportEventW

RegCloseKey

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn

_exit

exit

_initterm_e

_initterm

_get_initial_wide_environment

_initialize_wide_environment

_configure_wide_argv

_set_app_type

_seh_filter_exe

_cexit

_crt_atexit

_register_onexit_function

_initialize_onexit_table

_errno

abort

__p___wargv

_c_exit

_register_thread_local_exe_atexit_callback

terminate

__p___argc

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func

fputwc

__p__commode

_set_fmode

fputws

_wfsopen

fflush

__stdio_common_vfwprintf

__stdio_common_vsnwprintf_s

__stdio_common_vswprintf

setvbuf

api-ms-win-crt-heap-l1-1-0

calloc

_set_new_mode

free

_callnewh

malloc

api-ms-win-crt-string-l1-1-0

toupper

_wcsdup

wcsncmp

wcsnlen

strcpy_s

api-ms-win-crt-convert-l1-1-0

wcstoul

_wtoi

api-ms-win-crt-time-l1-1-0

_gmtime64_s

_time64

wcsftime

api-ms-win-crt-locale-l1-1-0

setlocale

___mb_cur_max_func

_configthreadlocale

___lc_codepage_func

___lc_locale_name_func

__pctype_func

_lock_locales

_unlock_locales

api-ms-win-crt-math-l1-1-0

__setusermatherr

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

net8.0-windows/nexarX.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.fingerprint

net8.0-windows/nexarX.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.json

net8.0-windows/nexarX.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/protocols.json

net8.0-windows/nexarX.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-66649EC6-2E58.pma

net8.0-windows/nexarX.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/crl-set

net8.0-windows/nexarX.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/manifest.fingerprint

net8.0-windows/nexarX.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/manifest.json

net8.0-windows/nexarX.exe.WebView2/EBWebView/Crashpad/settings.dat

net8.0-windows/nexarX.exe.WebView2/EBWebView/Crashpad/throttle_store.dat

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/AssistanceHome/AssistanceHomeSQLite

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000001

.gz

f_000001

.js

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000002

.gz

f_000002

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000003

.gz

f_000003

.js

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000004

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000005

.gz

f_000005

.js

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000006

.gz

f_000006

.js

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000007

.gz

f_000007

.js

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000008

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000009

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000a

.gz

f_00000a

.js

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000b

.gz

f_00000b

.js

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000c

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000d

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000e

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000f

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000010

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000011

.gz

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000012

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000013

.gz

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000014

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000015

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000016

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000017

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000018

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000019

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001a

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001b

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001c

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001d

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001e

.jpg

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001f

.png

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000020

.gz

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000021

.gz

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000022

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Cache/Cache_Data/index

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/042e996ea86224ac_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/085cbbfe3c68714c_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/08a228d108d0dbd3_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/0af47b59b5c727fc_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/0bebe2713072d398_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/1206397b203b9ec3_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/13391c2ab6fffd0e_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/159e6650cf6124e7_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/16a252e9479d30a9_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/19cc9d1bb776c01f_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/1b442a3d31831e02_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/1dc77cbcb222bb76_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/24aeecb73ea90c9c_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/254bd6fcfb89d335_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/26cef72fb163714d_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/2775a0ada468ea66_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/285a56ef0095900b_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/2bf653cfa803f3b6_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/2d97dd17de8eb69a_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/2ecb39eb3b78c280_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/319c8298095c1537_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/322569c2bf12d0de_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/326f12e451499599_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/34444505ce5c814c_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/37f87a1e56a1c59d_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/395d5a17a13d053f_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/3a47e373f76356ae_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/3cb1eb9e6998b9e7_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/3d490f31764efe8b_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/46e30c23928fbb5d_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/4883659de0fa25ad_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/48aba12dfa932d9e_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/495aad7f78861c35_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/4bda8c3ab8804662_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/4ec33e49cb42a7ad_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/53a7e060e932ed54_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/53acfb3b59f26828_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/54ea7f997d75d48c_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/582a835a7e6e696c_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/5c4246ab1ba2bf23_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/5d7588d74deb78ba_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/60d03b108df7be77_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/64a738c5338cf82b_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/6864d720aeee1630_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/71524faeb04ace48_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/7237c99e134cdca7_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/76dc554bed5badd4_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/78f9ae86155313e9_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/7a00aa6d362bb130_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/7b76793f3ac328ba_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/7bd932f2760555fa_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/7c1168d573feb924_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/80f8ebf10ec055a4_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/81bbfaa9fd70e186_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/8e7da273e8a2bc38_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/9089ca639712d1a0_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/9362dab6394fb469_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/961bf5cfded37a09_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/97b37f457bf397cb_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/98e013decce5d56c_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/995c0df93b0cd1bd_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/9c9023f46d2e9d16_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/9eb3e31a577f8c22_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/9faed0bb4c8fa0eb_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/a3b1bf77c17f7389_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/a415f71219a8d843_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/a41eb21f08aac6b0_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/a6e5431dfca82c43_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/a7e081483cb63645_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/a98d9a31e189ba34_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/ae07498098fe48b8_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/b282d32754395e5f_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/b89fcd4a466042fc_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/be084eaa3902956e_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/c0a1afa893728c5c_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/c3d32575e51965b8_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/c61029a0f1eb13e9_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/c7cec88ad232fb1b_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/c8c34767d14a595f_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/ca4ccce9a8042496_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/ced6f6cd73b4d732_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/cfeed3ed9fc2c7ec_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/d522d7826a7e2849_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/d6192484bd47eeb7_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/d884b1eea85e52e7_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/db900955711666b9_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/de12d5201e99cbf4_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/de7b804c372f8ff1_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/e1c797d059be6b4e_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/e2afd5450cd19b67_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/e3d4bf6ce48ea9b2_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/e981f0318b950806_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/ed22f9f8fa01d79f_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/ee8004870d815344_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/ef27ae3736440c4b_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/f1eb92c4c4ba16c4_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/f5f522a786075cd7_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/fa4e4bf7af500769_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/fafa63a771fb4bfe_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/fca2b860982b9a2d_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/fda372ae7e80f691_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/fee43dff7ec42549_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/index

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/js/index-dir/the-real-index

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/wasm/index

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Code Cache/wasm/index-dir/the-real-index

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/DIPS

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_1

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_2

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_3

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/DawnGraphiteCache/index

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_1

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_2

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_3

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/DawnWebGPUCache/index

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/EdgeEDrop/EdgeEDropSQLite.db

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/EdgeHubAppUsage/EdgeHubAppUsageSQLite.db

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Extension Rules/000003.log

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Extension Rules/CURRENT

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Extension Rules/LOG

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Extension Rules/MANIFEST-000001

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Extension Scripts/000003.log

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Extension Scripts/CURRENT

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Extension Scripts/LOG

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Extension Scripts/MANIFEST-000001

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Extension State/000003.log

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Extension State/CURRENT

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Extension State/LOG

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Extension State/LOG.old

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Extension State/MANIFEST-000001

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/ExtensionActivityComp

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/ExtensionActivityEdge

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Favicons

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/GPUCache/data_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/GPUCache/data_1

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/GPUCache/data_2

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/GPUCache/data_3

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/GPUCache/index

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/History

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Local Storage/leveldb/000003.log

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Local Storage/leveldb/CURRENT

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG.old

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Local Storage/leveldb/MANIFEST-000001

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Login Data

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Network Action Predictor

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Network/Cookies

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Network/Network Persistent State

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Network/Reporting and NEL

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Network/SCT Auditing Pending Reports

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Network/Sdch Dictionaries

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Network/TransportSecurity

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Network/Trust Tokens

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Preferences

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/PreferredApps

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/README

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Safe Browsing Network/Safe Browsing Cookies

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Secure Preferences

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Session Storage/000003.log

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Session Storage/CURRENT

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Session Storage/LOG

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Session Storage/LOG.old

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Session Storage/MANIFEST-000001

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Sessions/Session_13362152352379788

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index-dir/the-real-index

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Shared Dictionary/db

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/SharedStorage

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Shortcuts

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Site Characteristics Database/000003.log

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Site Characteristics Database/CURRENT

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG.old

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Site Characteristics Database/MANIFEST-000001

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/000003.log

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/CURRENT

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG.old

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/MANIFEST-000001

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Top Sites

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Visited Links

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/Web Data

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/heavy_ad_intervention_opt_out.db

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/shared_proto_db/000003.log

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/shared_proto_db/CURRENT

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/shared_proto_db/LOG

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/shared_proto_db/LOG.old

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/shared_proto_db/MANIFEST-000001

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/000003.log

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/CURRENT

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG.old

net8.0-windows/nexarX.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/MANIFEST-000001

net8.0-windows/nexarX.exe.WebView2/EBWebView/GrShaderCache/data_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/GrShaderCache/data_1

net8.0-windows/nexarX.exe.WebView2/EBWebView/GrShaderCache/data_2

net8.0-windows/nexarX.exe.WebView2/EBWebView/GrShaderCache/data_3

net8.0-windows/nexarX.exe.WebView2/EBWebView/GrShaderCache/f_000001

net8.0-windows/nexarX.exe.WebView2/EBWebView/GrShaderCache/f_000002

net8.0-windows/nexarX.exe.WebView2/EBWebView/GrShaderCache/f_000003

net8.0-windows/nexarX.exe.WebView2/EBWebView/GrShaderCache/f_000004

net8.0-windows/nexarX.exe.WebView2/EBWebView/GrShaderCache/f_000005

net8.0-windows/nexarX.exe.WebView2/EBWebView/GrShaderCache/f_000006

net8.0-windows/nexarX.exe.WebView2/EBWebView/GrShaderCache/f_000007

net8.0-windows/nexarX.exe.WebView2/EBWebView/GrShaderCache/f_000008

net8.0-windows/nexarX.exe.WebView2/EBWebView/GrShaderCache/f_000009

net8.0-windows/nexarX.exe.WebView2/EBWebView/GrShaderCache/f_00000a

net8.0-windows/nexarX.exe.WebView2/EBWebView/GrShaderCache/f_00000b

net8.0-windows/nexarX.exe.WebView2/EBWebView/GrShaderCache/f_00000c

net8.0-windows/nexarX.exe.WebView2/EBWebView/GrShaderCache/f_00000d

net8.0-windows/nexarX.exe.WebView2/EBWebView/GrShaderCache/f_00000e

net8.0-windows/nexarX.exe.WebView2/EBWebView/GrShaderCache/index

net8.0-windows/nexarX.exe.WebView2/EBWebView/GraphiteDawnCache/data_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/GraphiteDawnCache/data_1

net8.0-windows/nexarX.exe.WebView2/EBWebView/GraphiteDawnCache/data_2

net8.0-windows/nexarX.exe.WebView2/EBWebView/GraphiteDawnCache/data_3

net8.0-windows/nexarX.exe.WebView2/EBWebView/GraphiteDawnCache/index

net8.0-windows/nexarX.exe.WebView2/EBWebView/Last Version

net8.0-windows/nexarX.exe.WebView2/EBWebView/Local State

net8.0-windows/nexarX.exe.WebView2/EBWebView/OriginTrials/0.0.1.4/manifest.fingerprint

net8.0-windows/nexarX.exe.WebView2/EBWebView/OriginTrials/0.0.1.4/manifest.json

net8.0-windows/nexarX.exe.WebView2/EBWebView/PKIMetadata/13.0.0.0/crs.pb

net8.0-windows/nexarX.exe.WebView2/EBWebView/PKIMetadata/13.0.0.0/ct_config.pb

net8.0-windows/nexarX.exe.WebView2/EBWebView/PKIMetadata/13.0.0.0/kp_pinslist.pb

net8.0-windows/nexarX.exe.WebView2/EBWebView/PKIMetadata/13.0.0.0/manifest.fingerprint

net8.0-windows/nexarX.exe.WebView2/EBWebView/PKIMetadata/13.0.0.0/manifest.json

net8.0-windows/nexarX.exe.WebView2/EBWebView/ShaderCache/data_0

net8.0-windows/nexarX.exe.WebView2/EBWebView/ShaderCache/data_1

net8.0-windows/nexarX.exe.WebView2/EBWebView/ShaderCache/data_2

net8.0-windows/nexarX.exe.WebView2/EBWebView/ShaderCache/data_3

net8.0-windows/nexarX.exe.WebView2/EBWebView/ShaderCache/index

net8.0-windows/nexarX.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSettings

net8.0-windows/nexarX.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSettings_F95BA787499AB4FA9EFFF472CE383A14

net8.0-windows/nexarX.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings

net8.0-windows/nexarX.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings_2.0-0

net8.0-windows/nexarX.exe.WebView2/EBWebView/SmartScreen/RemoteData/synchronousLookupUris

net8.0-windows/nexarX.exe.WebView2/EBWebView/SmartScreen/RemoteData/synchronousLookupUris_636976985063396749.rel.v2

net8.0-windows/nexarX.exe.WebView2/EBWebView/SmartScreen/RemoteData/topTraffic

net8.0-windows/nexarX.exe.WebView2/EBWebView/SmartScreen/RemoteData/topTraffic_170540185939602997400506234197983529371

net8.0-windows/nexarX.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll

.dll windows:6 windows x64 arch:x64

f51f0d794c7fcc93503306a9cd9ba55d

Code Sign

33:00:00:01:88:af:52:d6:b9:92:6d:e8:f9:00:00:00:00:01:88
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:39

Not After

03/03/2021, 18:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:33

Not After

01/09/2022, 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d
Signer

Actual PE Digest

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d

Digest Algorithm

sha256

PE Digest Matches

true

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d
Signer

Actual PE Digest

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\1\s\build\bin\Release\Microsoft.CognitiveServices.Speech.core.pdb

Imports

crypt32

CertFreeCertificateContext

CryptDecodeObjectEx

CryptStringToBinaryA

CertSetCertificateContextProperty

CertCreateCertificateContext

ws2_32

WSAStartup

WSAIoctl

recv

WSAGetLastError

freeaddrinfo

ioctlsocket

connect

closesocket

socket

getaddrinfo

send

secur32

EncryptMessage

AcquireCredentialsHandleA

DeleteSecurityContext

InitializeSecurityContextA

FreeCredentialsHandle

DecryptMessage

QueryContextAttributesA

advapi32

CryptAcquireContextA

EventRegister

EventSetInformation

EventWriteTransfer

CryptReleaseContext

CryptDestroyKey

EventUnregister

CryptImportKey

ncrypt

NCryptOpenStorageProvider

NCryptFreeObject

NCryptImportKey

dbghelp

SymFromAddr

SymInitialize

SymCleanup

kernel32

LeaveCriticalSection

InitializeCriticalSectionAndSpinCount

DeleteCriticalSection

InitializeSListHead

CreateEventW

GetModuleHandleW

RtlCaptureContext

GetSystemTime

GetModuleFileNameA

GetSystemTimeAsFileTime

GetCurrentThreadId

GetCurrentProcessId

InitOnceBeginInitialize

InitOnceComplete

AcquireSRWLockShared

AcquireSRWLockExclusive

ReleaseSRWLockShared

EnterCriticalSection

WaitForSingleObjectEx

QueryPerformanceCounter

IsDebuggerPresent

IsProcessorFeaturePresent

TerminateProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlVirtualUnwind

VerSetConditionMask

VerifyVersionInfoW

GetCurrentProcess

FormatMessageW

GetLastError

LoadLibraryA

GetProcAddress

WaitForMultipleObjects

WaitForSingleObject

Sleep

SetEvent

CloseHandle

CreateThread

ResetEvent

CreateEventExA

CreateEventA

LocalFree

FormatMessageA

GetModuleHandleA

RtlLookupFunctionEntry

ReleaseSRWLockExclusive

msvcp140

_Mtx_unlock

?_Xbad_alloc@std@@YAXXZ

?_Xbad_function_call@std@@YAXXZ

?_Xlength_error@std@@YAXPEBD@Z

?_Syserror_map@std@@YAPEBDH@Z

_Mtx_destroy_in_situ

_Mtx_init_in_situ

_Mtx_current_owns

_Query_perf_frequency

?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z

?_Throw_Cpp_error@std@@YAXH@Z

_Cnd_timedwait

_Query_perf_counter

_Xtime_get_ticks

?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z

?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A

??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z

??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ

??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z

?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z

?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z

?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ

?_Incref@facet@locale@std@@UEAAXXZ

??Bid@locale@std@@QEAA_KXZ

?_Xout_of_range@std@@YAXPEBD@Z

??1_Lockit@std@@QEAA@XZ

??0_Lockit@std@@QEAA@H@Z

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

?classic@locale@std@@SAAEBV12@XZ

?id@?$ctype@D@std@@2V0locale@2@A

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z

?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?toupper@?$ctype@D@std@@QEBADD@Z

?tolower@?$ctype@D@std@@QEBADD@Z

?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z

?uncaught_exception@std@@YA_NXZ

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z

?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?_Throw_C_error@std@@YAXH@Z

?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z

?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z

?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ

?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z

?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z

?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z

??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

?width@ios_base@std@@QEAA_J_J@Z

?width@ios_base@std@@QEBA_JXZ

?setf@ios_base@std@@QEAAHHH@Z

?flags@ios_base@std@@QEBAHXZ

?good@ios_base@std@@QEBA_NXZ

?_Xinvalid_argument@std@@YAXPEBD@Z

?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

_Thrd_id

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z

_Thrd_yield

?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z

_Thrd_join

?__ExceptionPtrDestroy@@YAXPEAX@Z

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

_Cnd_unregister_at_thread_exit

_Cnd_destroy_in_situ

_Cnd_broadcast

_Cnd_register_at_thread_exit

?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z

?__ExceptionPtrToBool@@YA_NPEBX@Z

_Cnd_wait

?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z

?__ExceptionPtrCreate@@YAXPEAX@Z

_Cnd_init_in_situ

?__ExceptionPtrAssign@@YAXPEAXPEBX@Z

_Cnd_do_broadcast_at_thread_exit

_Thrd_sleep

?__ExceptionPtrRethrow@@YAXPEBX@Z

?__ExceptionPtrCurrentException@@YAXPEAX@Z

?_ReportUnobservedException@details@Concurrency@@YAXXZ

?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ

?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ

??0task_continuation_context@Concurrency@@AEAA@XZ

?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ

?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z

?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z

?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z

?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ

?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z

?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

_Thrd_detach

?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z

?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ

?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z

?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ

?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z

?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ

?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z

?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ

?eof@ios_base@std@@QEBA_NXZ

??7ios_base@std@@QEBA_NXZ

??Bios_base@std@@QEBA_NXZ

?always_noconv@codecvt_base@std@@QEBA_NXZ

_Cnd_signal

??1_Locinfo@std@@QEAA@XZ

?c_str@?$_Yarn@D@std@@QEBAPEBDXZ

??0_Locinfo@std@@QEAA@PEBD@Z

??1facet@locale@std@@MEAA@XZ

??0facet@locale@std@@IEAA@_K@Z

?id@?$collate@D@std@@2V0locale@2@A

_Strxfrm

_Strcoll

?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ

?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z

?is@?$ctype@D@std@@QEBA_NFD@Z

?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z

_Mtx_lock

?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z

?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ

?_Xruntime_error@std@@YAXPEBD@Z

?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z

?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z

?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A

?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z

?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ

?getloc@ios_base@std@@QEBA?AVlocale@2@XZ

?fail@ios_base@std@@QEBA_NXZ

?_Getname@_Locinfo@std@@QEBAPEBDXZ

??0_Locinfo@std@@QEAA@HPEBD@Z

?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_destroy

__std_exception_copy

_CxxThrowException

strrchr

memmove

__std_type_info_compare

memset

_purecall

memcmp

memchr

strstr

strchr

__std_type_info_destroy_list

__C_specific_handler

__std_type_info_name

__current_exception_context

memcpy

__current_exception

__RTDynamicCast

api-ms-win-crt-string-l1-1-0

toupper

strncpy_s

isupper

tolower

_strnicmp

_stricmp

isspace

strnlen

strcmp

strncpy

strtok

strncmp

strcpy_s

strcpy

strtok_s

wcslen

strlen

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table

_crt_atexit

_initialize_onexit_table

_initterm

_initterm_e

_initialize_narrow_environment

_configure_narrow_argv

_register_onexit_function

_seh_filter_dll

_beginthreadex

_errno

terminate

abort

_cexit

_invalid_parameter_noinfo

_invalid_parameter_noinfo_noreturn

api-ms-win-crt-heap-l1-1-0

malloc

calloc

_callnewh

free

realloc

api-ms-win-crt-math-l1-1-0

pow

_dtest

sqrt

ceilf

_dsign

ceil

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func

__stdio_common_vfprintf

__stdio_common_vsprintf

__stdio_common_vsprintf_s

_get_stream_buffer_pointers

_fseeki64

fread

fflush

fclose

fopen_s

_fsopen

fputc

fgetc

fwrite

fgetpos

setvbuf

ungetc

fsetpos

api-ms-win-crt-convert-l1-1-0

strtoul

strtoll

strtoull

strtol

strtod

atoi

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-utility-l1-1-0

rand

llabs

api-ms-win-crt-time-l1-1-0

_ctime64

_time64

_mkgmtime64

_gmtime64_s

strftime

api-ms-win-crt-filesystem-l1-1-0

_lock_file

_unlock_file

ole32

CoCreateInstance

CoInitializeEx

CoUninitialize

PropVariantClear

rpcrt4

UuidToStringA

UuidCreate

RpcStringFreeA

Exports

CreateModuleObject

GetModuleObject

add_source_lang_config_to_auto_detect_source_lang_config

audio_config_create_audio_input_from_a_microphone

audio_config_create_audio_input_from_default_microphone

audio_config_create_audio_input_from_stream

audio_config_create_audio_input_from_wav_file_name

audio_config_create_audio_output_from_a_speaker

audio_config_create_audio_output_from_default_speaker

audio_config_create_audio_output_from_stream

audio_config_create_audio_output_from_wav_file_name

audio_config_create_pull_audio_input_stream

audio_config_create_push_audio_input_stream

audio_config_get_property_bag

audio_config_is_handle_valid

audio_config_release

audio_data_stream_can_read_data

audio_data_stream_can_read_data_from_position

audio_data_stream_create_from_file

audio_data_stream_create_from_keyword_result

audio_data_stream_create_from_result

audio_data_stream_detach_input

audio_data_stream_get_canceled_error_code

audio_data_stream_get_position

audio_data_stream_get_property_bag

audio_data_stream_get_reason_canceled

audio_data_stream_get_status

audio_data_stream_is_handle_valid

audio_data_stream_read

audio_data_stream_read_from_position

audio_data_stream_release

audio_data_stream_save_to_wave_file

audio_data_stream_set_position

audio_stream_create_pull_audio_input_stream

audio_stream_create_pull_audio_output_stream

audio_stream_create_push_audio_input_stream

audio_stream_create_push_audio_output_stream

audio_stream_format_create_from_compressed_format

audio_stream_format_create_from_default_input

audio_stream_format_create_from_default_output

audio_stream_format_create_from_waveformat_pcm

audio_stream_format_is_handle_valid

audio_stream_format_release

audio_stream_is_handle_valid

audio_stream_release

auto_detect_source_lang_config_get_property_bag

auto_detect_source_lang_config_is_handle_valid

auto_detect_source_lang_config_release

bot_framework_config_from_authorization_token

bot_framework_config_from_subscription

class_language_model_assign_class

class_language_model_from_storage_id

connection_async_handle_release

connection_close

connection_connected_set_callback

connection_disconnected_set_callback

connection_from_conversation_translator

connection_from_dialog_service_connector

connection_from_recognizer

connection_get_property_bag

connection_handle_is_valid

connection_handle_release

connection_message_get_data

connection_message_get_data_size

connection_message_get_property_bag

connection_message_handle_is_valid

connection_message_handle_release

connection_message_received_event_get_message

connection_message_received_event_handle_is_valid

connection_message_received_event_handle_release

connection_message_received_set_callback

connection_open

connection_send_message

connection_send_message_async

connection_send_message_data

connection_send_message_data_async

connection_send_message_wait_for

connection_set_message_property

conversation_create_from_config

conversation_delete_conversation

conversation_end_conversation

conversation_get_conversation_id

conversation_get_property_bag

conversation_lock_conversation

conversation_mute_all_participants

conversation_mute_participant

conversation_release_handle

conversation_start_conversation

conversation_transcription_result_get_user_id

conversation_transcription_result_get_utterance_id

conversation_translator_canceled_set_callback

conversation_translator_connection_connected_set_callback

conversation_translator_connection_disconnected_set_callback

conversation_translator_conversation_expiration_set_callback

conversation_translator_create_from_config

conversation_translator_event_get_expiration_time

conversation_translator_event_get_participant_changed_at_index

conversation_translator_event_get_participant_changed_reason

conversation_translator_event_handle_is_valid

conversation_translator_event_handle_release

conversation_translator_get_property_bag

conversation_translator_handle_is_valid

conversation_translator_handle_release

conversation_translator_join

conversation_translator_join_with_id

conversation_translator_leave

conversation_translator_participant_get_avatar

conversation_translator_participant_get_displayname

conversation_translator_participant_get_id

conversation_translator_participant_get_is_host

conversation_translator_participant_get_is_muted

conversation_translator_participant_get_is_using_tts

conversation_translator_participants_changed_set_callback

conversation_translator_result_get_original_lang

conversation_translator_send_text_message

conversation_translator_session_started_set_callback

conversation_translator_session_stopped_set_callback

conversation_translator_set_authorization_token

conversation_translator_start_transcribing

conversation_translator_stop_transcribing

conversation_translator_text_message_recevied_set_callback

conversation_translator_transcribed_set_callback

conversation_translator_transcribing_set_callback

conversation_unlock_conversation

conversation_unmute_all_participants

conversation_unmute_participant

conversation_update_participant

conversation_update_participant_by_user

conversation_update_participant_by_user_id

create_auto_detect_source_lang_config_from_languages

create_auto_detect_source_lang_config_from_open_range

create_auto_detect_source_lang_config_from_source_lang_config

create_pronunciation_assessment_config

create_pronunciation_assessment_config_from_json

create_voice_profile

create_voice_profile_client_from_config

create_voice_profile_from_id_and_type

custom_commands_config_from_authorization_token

custom_commands_config_from_subscription

delete_voice_profile

diagnostics_log_apply_properties

diagnostics_log_format_message

diagnostics_log_memory_dump

diagnostics_log_memory_dump_to_stderr

diagnostics_log_memory_get_line

diagnostics_log_memory_get_line_num_newest

diagnostics_log_memory_get_line_num_oldest

diagnostics_log_memory_start_logging

diagnostics_log_memory_stop_logging

diagnostics_log_start_logging

diagnostics_log_stop_logging

diagnostics_log_trace_message

diagnostics_log_trace_message2

diagnostics_log_trace_string

diagnostics_logmessage_set_callback

diagnostics_logmessage_set_filters

dialog_service_connector_activity_received_event_get_activity

dialog_service_connector_activity_received_event_get_activity_size

dialog_service_connector_activity_received_event_get_audio

dialog_service_connector_activity_received_event_handle_is_valid

dialog_service_connector_activity_received_event_has_audio

dialog_service_connector_activity_received_event_release

dialog_service_connector_activity_received_set_callback

dialog_service_connector_async_handle_is_valid

dialog_service_connector_async_handle_release

dialog_service_connector_async_reco_result_handle_is_valid

dialog_service_connector_async_reco_result_handle_release

dialog_service_connector_async_string_handle_is_valid

dialog_service_connector_async_string_handle_release

dialog_service_connector_async_void_handle_is_valid

dialog_service_connector_async_void_handle_release

dialog_service_connector_canceled_set_callback

dialog_service_connector_connect

dialog_service_connector_connect_async

dialog_service_connector_connect_async_wait_for

dialog_service_connector_create_dialog_service_connector_from_config

dialog_service_connector_disconnect

dialog_service_connector_disconnect_async

dialog_service_connector_disconnect_async_wait_for

dialog_service_connector_get_property_bag

dialog_service_connector_handle_is_valid

dialog_service_connector_handle_release

dialog_service_connector_listen_once

dialog_service_connector_listen_once_async

dialog_service_connector_listen_once_async_wait_for

dialog_service_connector_recognized_set_callback

dialog_service_connector_recognizing_set_callback

dialog_service_connector_send_activity

dialog_service_connector_send_activity_async

dialog_service_connector_send_activity_async_wait_for

dialog_service_connector_session_started_set_callback

dialog_service_connector_session_stopped_set_callback

dialog_service_connector_start_keyword_recognition

dialog_service_connector_start_keyword_recognition_async

dialog_service_connector_start_keyword_recognition_async_wait_for

dialog_service_connector_stop_keyword_recognition

dialog_service_connector_stop_keyword_recognition_async

dialog_service_connector_stop_keyword_recognition_async_wait_for

dialog_service_connector_stop_listening

dialog_service_connector_stop_listening_async

dialog_service_connector_synthesizing_audio_set_callback

dialog_service_connector_turn_status_received_get_conversation_id

dialog_service_connector_turn_status_received_get_conversation_id_size

dialog_service_connector_turn_status_received_get_interaction_id

dialog_service_connector_turn_status_received_get_interaction_id_size

dialog_service_connector_turn_status_received_get_status

dialog_service_connector_turn_status_received_handle_is_valid

dialog_service_connector_turn_status_received_release

dialog_service_connector_turn_status_received_set_callback

enroll_voice_profile

error_get_call_stack

error_get_error_code

error_get_message

error_release

get_voice_profiles

grammar_create_from_storage_id

grammar_handle_is_valid

grammar_handle_release

grammar_list_add_grammar

grammar_list_from_recognizer

grammar_list_set_recognition_factor

grammar_phrase_create_from_text

grammar_phrase_handle_is_valid

grammar_phrase_handle_release

intent_recognizer_add_intent

intent_result_get_intent_id

intent_trigger_create_from_language_understanding_model

intent_trigger_create_from_phrase

intent_trigger_handle_is_valid

intent_trigger_handle_release

keyword_recognition_model_create_from_file

keyword_recognition_model_handle_is_valid

keyword_recognition_model_handle_release

language_understanding_model__handle_release

language_understanding_model_create_from_app_id

language_understanding_model_create_from_subscription

language_understanding_model_create_from_uri

language_understanding_model_handle_is_valid

participant_create_handle

participant_get_property_bag

participant_release_handle

participant_set_preferred_langugage

participant_set_voice_signature

phrase_list_grammar_add_phrase

phrase_list_grammar_clear

phrase_list_grammar_from_recognizer_by_name

pronunciation_assessment_config_apply_to_recognizer

pronunciation_assessment_config_get_property_bag

pronunciation_assessment_config_is_handle_valid

pronunciation_assessment_config_release

pronunciation_assessment_config_to_json

property_bag_copy

property_bag_free_string

property_bag_get_string

property_bag_is_valid

property_bag_release

property_bag_set_string

pull_audio_input_stream_set_callbacks

pull_audio_input_stream_set_getproperty_callback

pull_audio_output_stream_read

push_audio_input_stream_close

push_audio_input_stream_set_property_by_id

push_audio_input_stream_set_property_by_name

push_audio_input_stream_write

push_audio_output_stream_set_callbacks

recognizer_async_handle_is_valid

recognizer_async_handle_release

recognizer_canceled_set_callback

recognizer_create_conversation_transcriber_from_config

recognizer_create_intent_recognizer_from_config

recognizer_create_keyword_recognizer_from_audio_config

recognizer_create_speaker_recognizer_from_config

recognizer_create_speech_recognizer_from_auto_detect_source_lang_config

recognizer_create_speech_recognizer_from_config

recognizer_create_speech_recognizer_from_source_lang_config

recognizer_create_translation_recognizer_from_config

recognizer_disable

recognizer_enable

recognizer_event_handle_is_valid

recognizer_event_handle_release

recognizer_get_property_bag

recognizer_handle_is_valid

recognizer_handle_release

recognizer_is_enabled

recognizer_join_conversation

recognizer_leave_conversation

recognizer_recognition_event_get_offset

recognizer_recognition_event_get_result

recognizer_recognize_keyword_once

recognizer_recognize_keyword_once_async

recognizer_recognize_keyword_once_async_wait_for

recognizer_recognize_once

recognizer_recognize_once_async

recognizer_recognize_once_async_wait_for

recognizer_recognized_set_callback

recognizer_recognizing_set_callback

recognizer_result_handle_is_valid

recognizer_result_handle_release

recognizer_session_event_get_session_id

recognizer_session_started_set_callback

recognizer_session_stopped_set_callback

recognizer_speech_end_detected_set_callback

recognizer_speech_start_detected_set_callback

recognizer_start_continuous_recognition

recognizer_start_continuous_recognition_async

recognizer_start_continuous_recognition_async_wait_for

recognizer_start_keyword_recognition

recognizer_start_keyword_recognition_async

recognizer_start_keyword_recognition_async_wait_for

recognizer_stop_continuous_recognition

recognizer_stop_continuous_recognition_async

recognizer_stop_continuous_recognition_async_wait_for

recognizer_stop_keyword_recognition

recognizer_stop_keyword_recognition_async

recognizer_stop_keyword_recognition_async_wait_for

reset_voice_profile

result_get_canceled_error_code

result_get_duration

result_get_no_match_reason

result_get_offset

result_get_property_bag

result_get_reason

result_get_reason_canceled

result_get_result_id

result_get_text

session_from_recognizer

session_get_property_bag

session_handle_is_valid

session_handle_release

source_lang_config_from_language

source_lang_config_from_language_and_endpointId

source_lang_config_get_property_bag

source_lang_config_is_handle_valid

source_lang_config_release

speaker_identification_model_add_profile

speaker_identification_model_create

speaker_identification_model_release_handle

speaker_recognizer_get_property_bag

speaker_recognizer_identify

speaker_recognizer_release_handle

speaker_recognizer_verify

speaker_verification_model_create

speaker_verification_model_release_handle

speech_config_from_authorization_token

speech_config_from_authorization_token_internal

speech_config_from_endpoint

speech_config_from_endpoint_internal

speech_config_from_host

speech_config_from_host_internal

speech_config_from_subscription

speech_config_from_subscription_internal

speech_config_get_property_bag

speech_config_is_handle_valid

speech_config_release

speech_config_set_audio_output_format

speech_config_set_profanity

speech_config_set_service_property

speech_translation_config_add_target_language

speech_translation_config_from_authorization_token

speech_translation_config_from_endpoint

speech_translation_config_from_host

speech_translation_config_from_subscription

speech_translation_config_remove_target_language

speechapi_async_handle_release

speechapi_async_wait_for

synth_result_get_audio_data

synth_result_get_audio_format

synth_result_get_audio_length

synth_result_get_canceled_error_code

synth_result_get_property_bag

synth_result_get_reason

synth_result_get_reason_canceled

synth_result_get_result_id

synthesizer_async_handle_is_valid

synthesizer_async_handle_release

synthesizer_canceled_set_callback

synthesizer_completed_set_callback

synthesizer_create_speech_synthesizer_from_auto_detect_source_lang_config

synthesizer_create_speech_synthesizer_from_config

synthesizer_disable

synthesizer_enable

synthesizer_event_handle_is_valid

synthesizer_event_handle_release

synthesizer_get_property_bag

synthesizer_handle_is_valid

synthesizer_handle_release

synthesizer_is_enabled

synthesizer_result_handle_is_valid

synthesizer_result_handle_release

synthesizer_speak_async_wait_for

synthesizer_speak_ssml

synthesizer_speak_ssml_async

synthesizer_speak_text

synthesizer_speak_text_async

synthesizer_start_speaking_ssml

synthesizer_start_speaking_ssml_async

synthesizer_start_speaking_text

synthesizer_start_speaking_text_async

synthesizer_started_set_callback

synthesizer_stop_speaking

synthesizer_stop_speaking_async

synthesizer_stop_speaking_async_wait_for

synthesizer_synthesis_event_get_result

synthesizer_synthesizing_set_callback

synthesizer_word_boundary_event_get_values

synthesizer_word_boundary_set_callback

translation_synthesis_result_get_audio_data

translation_text_result_get_translation_text_buffer_header

translator_add_target_language

translator_remove_target_language

translator_synthesizing_audio_set_callback

user_create_from_id

user_get_id

user_release_handle

voice_profile_client_get_property_bag

voice_profile_client_release_handle

voice_profile_get_id

voice_profile_release_handle

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 673KB - Virtual size: 673KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 171KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

net8.0-windows/nexarX.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/manifest.fingerprint

net8.0-windows/nexarX.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/manifest.json

net8.0-windows/nexarX.exe.WebView2/EBWebView/Subresource Filter/Indexed Rules/36/10.34.0.52/LICENSE

net8.0-windows/nexarX.exe.WebView2/EBWebView/Subresource Filter/Indexed Rules/36/10.34.0.52/Ruleset Data

net8.0-windows/nexarX.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.52/Filtering Rules

net8.0-windows/nexarX.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.52/Filtering Rules-AA

net8.0-windows/nexarX.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.52/LICENSE

net8.0-windows/nexarX.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.52/Part-DE

net8.0-windows/nexarX.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.52/Part-ES

net8.0-windows/nexarX.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.52/Part-FR

net8.0-windows/nexarX.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.52/Part-IT

net8.0-windows/nexarX.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.52/Part-NL

net8.0-windows/nexarX.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.52/Part-RU

net8.0-windows/nexarX.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.52/Part-ZH

net8.0-windows/nexarX.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.52/adblock_snippet.js

.js

net8.0-windows/nexarX.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.52/manifest.fingerprint

net8.0-windows/nexarX.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.52/manifest.json

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/Mu/Advertising

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/Mu/Analytics

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/Mu/CompatExceptions

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/Mu/Content

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/Mu/Cryptomining

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/Mu/Entities

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/Mu/Fingerprinting

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/Mu/LICENSE

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/Mu/Other

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/Mu/Social

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/Mu/TransparentAdvertisers

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/Sigma/Advertising

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/Sigma/Analytics

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/Sigma/Content

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/Sigma/Cryptomining

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/Sigma/Entities

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/Sigma/Fingerprinting

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/Sigma/LICENSE

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/Sigma/Other

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/Sigma/Social

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/Sigma/Staging

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/manifest.fingerprint

net8.0-windows/nexarX.exe.WebView2/EBWebView/Trust Protection Lists/1.0.0.26/manifest.json

net8.0-windows/nexarX.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.6.5.1/LICENSE

net8.0-windows/nexarX.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.6.5.1/_metadata/verified_contents.json

net8.0-windows/nexarX.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.6.5.1/keys.json

net8.0-windows/nexarX.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.6.5.1/manifest.fingerprint

net8.0-windows/nexarX.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.6.5.1/manifest.json

net8.0-windows/nexarX.exe.WebView2/EBWebView/Variations

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/_metadata/verified_contents.json

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-as.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-be.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-bg.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-bn.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-cu.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-cy.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-da.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-de-1901.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-de-1996.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-de-ch-1901.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-en-gb.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-en-us.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-es.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-et.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-eu.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-fr.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-ga.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-gu.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-hi.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-hr.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-hu.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-hy.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-kn.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-la.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-ml.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-mn-cyrl.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-mr.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-nb.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-nn.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-or.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-pa.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-pt.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-sl.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-ta.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-te.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-tk.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/hyph-und-ethi.hyb

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/manifest.fingerprint

net8.0-windows/nexarX.exe.WebView2/EBWebView/hyphen-data/101.0.4906.0/manifest.json

net8.0-windows/nexarX.pdb

net8.0-windows/nexarX.runtimeconfig.json

net8.0-windows/runtimes/win-x64/native/WebView2Loader.dll

.dll windows:10 windows x64 arch:x64

f6946d311bccc86e2042a388e375de41

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

91:d5:76:b5:70:67:38:de:13:42:4f:d7:e3:ba:32:9e:4f:cf:f0:8e:b7:95:fa:6d:98:99:29:80:84:ba:db:0c
Signer

Actual PE Digest

91:d5:76:b5:70:67:38:de:13:42:4f:d7:e3:ba:32:9e:4f:cf:f0:8e:b7:95:fa:6d:98:99:29:80:84:ba:db:0c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release_x64\WebView2Loader.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive

CloseHandle

CreateFileW

DeleteCriticalSection

EncodePointer

EnterCriticalSection

ExitProcess

FindClose

FindFirstFileExW

FindNextFileW

FlsAlloc

FlsFree

FlsGetValue

FlsSetValue

FlushFileBuffers

FreeEnvironmentStringsW

FreeLibrary

GetACP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetConsoleMode

GetConsoleOutputCP

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

GetEnvironmentStringsW

GetEnvironmentVariableW

GetFileAttributesW

GetFileType

GetLastError

GetModuleFileNameW

GetModuleHandleExW

GetModuleHandleW

GetOEMCP

GetProcAddress

GetProcessHeap

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemInfo

GetSystemTimeAsFileTime

HeapAlloc

HeapFree

HeapReAlloc

HeapSize

InitializeCriticalSectionAndSpinCount

InitializeSListHead

InterlockedFlushSList

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

LCMapStringW

LeaveCriticalSection

LoadLibraryExA

LoadLibraryExW

LoadLibraryW

MultiByteToWideChar

OutputDebugStringA

OutputDebugStringW

QueryPerformanceCounter

RaiseException

ReleaseSRWLockExclusive

RtlCaptureContext

RtlLookupFunctionEntry

RtlPcToFileHeader

RtlUnwindEx

RtlVirtualUnwind

SetFilePointerEx

SetLastError

SetStdHandle

SetUnhandledExceptionFilter

SleepConditionVariableSRW

TerminateProcess

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

UnhandledExceptionFilter

VirtualProtect

VirtualQuery

WakeAllConditionVariable

WideCharToMultiByte

WriteConsoleW

WriteFile

Exports

CompareBrowserVersions

CreateCoreWebView2Environment

CreateCoreWebView2EnvironmentWithOptions

GetAvailableCoreWebView2BrowserVersionString

GetAvailableCoreWebView2BrowserVersionStringWithOptions

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gxfg
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 140B

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

net8.0-windows/runtimes/win-x86/native/WebView2Loader.dll

.dll windows:10 windows x86 arch:x86

72229ff546c74d09d9030ca49ce61b31

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

d2:a1:98:4b:0f:32:93:2f:0a:17:7f:c3:21:1b:97:b3:4a:a4:04:7d:4e:c6:a3:c1:9f:50:8e:9a:36:f0:17:22
Signer

Actual PE Digest

d2:a1:98:4b:0f:32:93:2f:0a:17:7f:c3:21:1b:97:b3:4a:a4:04:7d:4e:c6:a3:c1:9f:50:8e:9a:36:f0:17:22

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release\WebView2Loader.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive

CloseHandle

CreateFileW

DecodePointer

DeleteCriticalSection

EncodePointer

EnterCriticalSection

ExitProcess

FindClose

FindFirstFileExW

FindNextFileW

FlushFileBuffers

FreeEnvironmentStringsW

FreeLibrary

GetACP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetConsoleMode

GetConsoleOutputCP

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

GetEnvironmentStringsW

GetEnvironmentVariableW

GetFileAttributesW

GetFileType

GetLastError

GetModuleFileNameW

GetModuleHandleExW

GetModuleHandleW

GetOEMCP

GetProcAddress

GetProcessHeap

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemInfo

GetSystemTimeAsFileTime

HeapAlloc

HeapFree

HeapReAlloc

HeapSize

InitializeCriticalSectionAndSpinCount

InitializeSListHead

InterlockedFlushSList

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

LCMapStringW

LeaveCriticalSection

LoadLibraryExA

LoadLibraryExW

LoadLibraryW

MultiByteToWideChar

OutputDebugStringA

OutputDebugStringW

QueryPerformanceCounter

RaiseException

ReleaseSRWLockExclusive

RtlUnwind

SetFilePointerEx

SetLastError

SetStdHandle

SetUnhandledExceptionFilter

SleepConditionVariableSRW

TerminateProcess

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

UnhandledExceptionFilter

VirtualProtect

VirtualQuery

WakeAllConditionVariable

WideCharToMultiByte

WriteConsoleW

WriteFile

Exports

CompareBrowserVersions

CreateCoreWebView2Environment

CreateCoreWebView2EnvironmentWithOptions

GetAvailableCoreWebView2BrowserVersionString

GetAvailableCoreWebView2BrowserVersionStringWithOptions

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

net8.0-windows/runtimes/win/lib/net7.0/System.Management.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:05:4d:62:0d:68:85:07:aa:33:00:00:00:00:03:05
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/08/2022, 20:23

Not After

03/08/2023, 20:23

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

46:92:b4:35:81:df:77:c6:04:16:3b:5f:4b:00:f9:6b:d7:8e:d5:f5:f8:ff:d4:65:68:9d:fe:34:58:96:d2:59
Signer

Actual PE Digest

46:92:b4:35:81:df:77:c6:04:16:3b:5f:4b:00:f9:6b:d7:8e:d5:f5:f8:ff:d4:65:68:9d:fe:34:58:96:d2:59

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/System.Management/Release/net7.0-windows/System.Management.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 275KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 299KB - Virtual size: 299KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:dbCertificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

5e:00:a7:1b:7e:46:57:12:de:98:da:e3:8d:91:ea:26:6d:ef:71:eeSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

54:d7:5f:3a:d9:aa:8d:e0:4f:8a:f5:b0:6d:04:ae:fc:b0:90:c8:c1:e1:3c:04:6d:fa:3c:72:92:9f:7c:a8:82Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 545KB - Virtual size: 545KB

.rsrc Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

b4:fb:3b:14:11:7a:84:e6:8a:1f:16:df:de:3b:b1:4a:c0:c4:b7:41:93:c2:a3:f9:67:49:e1:1b:7d:8a:f3:14Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 25KB - Virtual size: 24KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

f5:ad:ff:d7:e2:15:cd:26:7a:dc:58:65:69:5e:c6:a7:a4:bd:0e:fc:d0:3a:ee:82:af:5c:1f:05:ff:8a:2d:7fSigner

Headers

DLL Characteristics

.text
Size: 299KB - Virtual size: 299KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

5e:00:a7:1b:7e:46:57:12:de:98:da:e3:8d:91:ea:26:6d:ef:71:ee
Signer

.text
Size: 2.1MB - Virtual size: 2.1MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

54:d7:5f:3a:d9:aa:8d:e0:4f:8a:f5:b0:6d:04:ae:fc:b0:90:c8:c1:e1:3c:04:6d:fa:3c:72:92:9f:7c:a8:82
Signer

.text
Size: 545KB - Virtual size: 545KB

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 12B

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

b4:fb:3b:14:11:7a:84:e6:8a:1f:16:df:de:3b:b1:4a:c0:c4:b7:41:93:c2:a3:f9:67:49:e1:1b:7d:8a:f3:14
Signer

.text
Size: 25KB - Virtual size: 24KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

f5:ad:ff:d7:e2:15:cd:26:7a:dc:58:65:69:5e:c6:a7:a4:bd:0e:fc:d0:3a:ee:82:af:5c:1f:05:ff:8a:2d:7f
Signer

.text
Size: 38KB - Virtual size: 38KB

.rsrc
Size: 1024B - Virtual size: 984B

.reloc
Size: 512B - Virtual size: 12B

33:00:00:03:05:4d:62:0d:68:85:07:aa:33:00:00:00:00:03:05
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

21:dd:70:75:07:79:76:e9:4c:2e:f9:e2:e8:a9:c9:0c:99:41:ca:c8:0f:9f:d0:4f:af:43:ef:2a:ed:0a:ac:ff
Signer

.text
Size: 59KB - Virtual size: 59KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 289KB - Virtual size: 289KB

.rsrc
Size: 67KB - Virtual size: 66KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 90KB - Virtual size: 90KB

.rdata
Size: 37KB - Virtual size: 37KB

.data
Size: 2KB - Virtual size: 6KB

.pdata
Size: 5KB - Virtual size: 4KB

_RDATA
Size: 512B - Virtual size: 500B

.reloc
Size: 1024B - Virtual size: 792B

.rsrc
Size: 67KB - Virtual size: 66KB

33:00:00:01:88:af:52:d6:b9:92:6d:e8:f9:00:00:00:00:01:88
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate