Executor[.]rar

resource	yara_rule
static1/unpack001/Executor/Xeno-v1.0.5-x64/libcrypto-3-x64.dll	embeds_openssl

resource
unpack001/Executor/Xeno-v1.0.5-x64/Xeno.dll
unpack001/Executor/Xeno-v1.0.5-x64/Xeno.exe
unpack001/Executor/Xeno-v1.0.5-x64/XenoUI.dll
unpack001/Executor/Xeno-v1.0.5-x64/libcrypto-3-x64.dll
unpack001/Executor/Xeno-v1.0.5-x64/libssl-3-x64.dll
unpack001/Executor/Xeno-v1.0.5-x64/xxhash.dll
unpack001/Executor/Xeno-v1.0.5-x64/zstd.dll

Executor.rar

.rar

Executor/Xeno-v1.0.5-x64/Microsoft.Web.WebView2.Core.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2023 19:51

Not After

16-10-2024 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

82:16:92:aa:f3:86:85:a1:7b:d7:76:7c:40:f5:23:05:fa:60:5b:ab:ec:81:76:94:51:f3:c2:32:7f:d4:70:40
Signer

Actual PE Digest

82:16:92:aa:f3:86:85:a1:7b:d7:76:7c:40:f5:23:05:fa:60:5b:ab:ec:81:76:94:51:f3:c2:32:7f:d4:70:40

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\webview2_api_writer\dotNetAPIWrapper\Microsoft.Web.WebView2.Core\bin\ReleasePackage\Microsoft.Web.WebView2.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 545KB - Virtual size: 545KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Executor/Xeno-v1.0.5-x64/Microsoft.Web.WebView2.WinForms.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2023 19:51

Not After

16-10-2024 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

c9:17:2c:ed:19:5a:cc:85:fc:1d:eb:eb:14:58:8b:63:8a:45:61:96:53:ac:96:d7:21:33:b4:bc:6b:fa:c6:4a
Signer

Actual PE Digest

c9:17:2c:ed:19:5a:cc:85:fc:1d:eb:eb:14:58:8b:63:8a:45:61:96:53:ac:96:d7:21:33:b4:bc:6b:fa:c6:4a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\winforms_control\Microsoft.Web.WebView2.WinForms\obj\Release Stable APIs\netcoreapp3.0\Microsoft.Web.WebView2.WinForms.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Executor/Xeno-v1.0.5-x64/Microsoft.Web.WebView2.Wpf.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2023 19:51

Not After

16-10-2024 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

44:3c:50:d9:83:21:c2:e3:9c:89:77:52:4e:5b:fb:51:0b:4d:fa:7b:60:17:56:78:29:5d:ea:55:4d:f8:35:1a
Signer

Actual PE Digest

44:3c:50:d9:83:21:c2:e3:9c:89:77:52:4e:5b:fb:51:0b:4d:fa:7b:60:17:56:78:29:5d:ea:55:4d:f8:35:1a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\wpf_control\Microsoft.Web.WebView2.Wpf\obj\Release Stable APIs\netcoreapp3.0\Microsoft.Web.WebView2.Wpf.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Executor/Xeno-v1.0.5-x64/Xeno.dll

.dll windows:6 windows x64 arch:x64

3a1f9d973bff43051a3daf411f707362

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

C:\Users\rizve\Desktop\Projects\Xeno\build\Release\net8.0-windows\Xeno.pdb

Imports

kernel32

UnmapViewOfFile

GlobalAlloc

GlobalFree

CloseHandle

FreeConsole

CreateFileMappingFromApp

GlobalLock

MapViewOfFileFromApp

GlobalUnlock

AllocConsole

SizeofResource

GetModuleHandleExW

GetProcessId

OpenProcess

CreateToolhelp32Snapshot

Sleep

GetLastError

Process32NextW

K32GetProcessMemoryInfo

QueryFullProcessImageNameA

LockResource

Process32FirstW

LoadResource

FindResourceW

VirtualProtectEx

VirtualAllocEx

VirtualQueryEx

TerminateProcess

LoadLibraryA

GetCurrentProcessId

GetExitCodeProcess

InitOnceBeginInitialize

InitOnceComplete

GetLocaleInfoEx

FormatMessageA

LocalFree

WideCharToMultiByte

SetConsoleTitleA

GetFileSizeEx

MultiByteToWideChar

GetFileInformationByHandleEx

CopyFileW

AreFileApisANSI

GetTempPathW

SetFileInformationByHandle

GetFullPathNameW

GetFileInformationByHandle

GetFileAttributesExW

GetFileAttributesW

FindNextFileW

FindFirstFileExW

FindFirstFileW

FindClose

CreateFileW

CreateDirectoryW

GetCurrentDirectoryW

SetCurrentDirectoryW

InitializeSListHead

DisableThreadLibraryCalls

GetSystemTimeAsFileTime

GetCurrentThreadId

GetModuleHandleW

IsDebuggerPresent

IsProcessorFeaturePresent

GetCurrentProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

SleepConditionVariableSRW

WakeAllConditionVariable

AcquireSRWLockExclusive

ReleaseSRWLockExclusive

CreateFile2

GetModuleFileNameA

QueryPerformanceCounter

GetProcAddress

user32

GetWindowThreadProcessId

MapVirtualKeyW

keybd_event

GetForegroundWindow

CloseClipboard

OpenClipboard

SetClipboardData

EnumWindows

SetForegroundWindow

EmptyClipboard

advapi32

GetCurrentHwProfileW

ole32

CoCreateGuid

libcrypto-3-x64

EVP_DigestFinal_ex

BIO_ctrl

OPENSSL_thread_stop

X509_STORE_free

X509_NAME_get_text_by_NID

EVP_MD_CTX_new

d2i_X509

X509_STORE_add_cert

OPENSSL_sk_num

X509_get_subject_name

EVP_md5

EVP_sha256

EVP_DigestUpdate

GENERAL_NAMES_free

EVP_MD_CTX_free

EVP_DigestInit_ex

OPENSSL_sk_value

ASN1_STRING_get0_data

EVP_sha512

BIO_new_socket

X509_free

ASN1_STRING_length

X509_get_ext_d2i

libssl-3-x64

SSL_pending

SSL_get_error

SSL_peek

SSL_connect

OPENSSL_init_ssl

SSL_free

SSL_CTX_get_cert_store

SSL_CTX_set_default_verify_paths

SSL_new

SSL_CTX_free

SSL_CTX_set_cert_store

SSL_CTX_use_certificate_file

SSL_CTX_use_PrivateKey_file

SSL_CTX_new

SSL_write

SSL_get_verify_result

TLS_client_method

SSL_CTX_set_default_passwd_cb_userdata

SSL_ctrl

SSL_set_bio

SSL_read

SSL_set_verify

SSL_CTX_load_verify_locations

SSL_get1_peer_certificate

SSL_shutdown

xxhash

XXH32

zstd

ZSTD_decompress

ZSTD_compressBound

ZSTD_isError

ZSTD_getErrorName

ZSTD_compress

ZSTD_maxCLevel

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z

_Thrd_detach

??0_Locinfo@std@@QEAA@PEBD@Z

??1_Locinfo@std@@QEAA@XZ

?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ

??Bid@locale@std@@QEAA_KXZ

?_Xlength_error@std@@YAXPEBD@Z

?_Xout_of_range@std@@YAXPEBD@Z

_Cnd_signal

_Thrd_hardware_concurrency

?__ExceptionPtrCreate@@YAXPEAX@Z

_Cnd_init_in_situ

_Strxfrm

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

_Query_perf_frequency

??1_Lockit@std@@QEAA@XZ

??0_Lockit@std@@QEAA@H@Z

?_Throw_Cpp_error@std@@YAXH@Z

?uncaught_exceptions@std@@YAHXZ

?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

?_Xbad_alloc@std@@YAXXZ

?_Xinvalid_argument@std@@YAXPEBD@Z

?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z

?_Winerror_map@std@@YAHH@Z

?_Xbad_function_call@std@@YAXXZ

?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A

?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z

?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z

?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z

?id@?$ctype@D@std@@2V0locale@2@A

?_Random_device@std@@YAIXZ

?id@?$collate@D@std@@2V0locale@2@A

?_Syserror_map@std@@YAPEBDH@Z

?__ExceptionPtrDestroy@@YAXPEAX@Z

_Mtx_lock

?__ExceptionPtrCurrentException@@YAXPEAX@Z

?__ExceptionPtrRethrow@@YAXPEBX@Z

_Strcoll

_Cnd_do_broadcast_at_thread_exit

_Cnd_wait

_Thrd_id

_Query_perf_counter

_Thrd_join

_Mtx_unlock

_Cnd_broadcast

_Cnd_destroy_in_situ

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z

?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ

?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ

?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z

?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ

?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z

?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z

?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z

?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z

?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ

??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

?good@ios_base@std@@QEBA_NXZ

??7ios_base@std@@QEBA_NXZ

?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z

?tolower@?$ctype@D@std@@QEBADD@Z

?always_noconv@codecvt_base@std@@QEBA_NXZ

??1facet@locale@std@@MEAA@XZ

??0facet@locale@std@@IEAA@_K@Z

?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ

?_Incref@facet@locale@std@@UEAAXXZ

ws2_32

listen

shutdown

select

closesocket

bind

WSASocketW

WSACleanup

inet_pton

WSAStartup

getpeername

WSAAccept

WSAGetLastError

setsockopt

__WSAFDIsSet

getsockname

send

socket

ntohs

connect

recv

getnameinfo

getsockopt

freeaddrinfo

ioctlsocket

getaddrinfo

crypt32

CertCloseStore

CertFreeCertificateContext

CertEnumCertificatesInStore

CertOpenSystemStoreW

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcmp

memchr

__std_type_info_destroy_list

memset

_CxxThrowException

__C_specific_handler

__current_exception

strchr

__std_terminate

_purecall

__std_exception_copy

__std_exception_destroy

memcpy

__current_exception_context

memmove

api-ms-win-crt-runtime-l1-1-0

terminate

system

_invalid_parameter_noinfo

_beginthreadex

abort

_seh_filter_dll

_configure_narrow_argv

_initialize_narrow_environment

_initialize_onexit_table

_register_onexit_function

_execute_onexit_table

_crt_atexit

_cexit

_initterm

_initterm_e

_errno

_invalid_parameter_noinfo_noreturn

api-ms-win-crt-math-l1-1-0

acos

asin

atan

atan2

_dsign

round

ldexp

tan

ceil

ceilf

cos

cosh

exp

floor

fmod

log

log10

log2

pow

sin

sinh

sqrt

tanh

api-ms-win-crt-convert-l1-1-0

strtod

strtoul

strtoull

atoi

strtoll

strtol

api-ms-win-crt-heap-l1-1-0

malloc

realloc

free

_callnewh

api-ms-win-crt-stdio-l1-1-0

fread

fsetpos

ungetc

setvbuf

_get_stream_buffer_pointers

freopen_s

fgetpos

__stdio_common_vsprintf

fwrite

fgetc

fclose

fputc

__acrt_iob_func

fflush

_fseeki64

api-ms-win-crt-string-l1-1-0

strspn

strcmp

tolower

strncmp

strnlen

_wcsicmp

isdigit

strcpy_s

api-ms-win-crt-filesystem-l1-1-0

_access_s

_unlock_file

_lock_file

api-ms-win-crt-locale-l1-1-0

localeconv

___lc_codepage_func

Exports

Compilable

Execute

GetClients

Initialize

Sections

.text
Size: 605KB - Virtual size: 604KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Executor/Xeno-v1.0.5-x64/Xeno.exe

.exe windows:4 windows x86 arch:x86

a9c887a4f18a3fede2cc29ceea138ed3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc

memset

strcmp

strcpy

getenv

sprintf

fopen

fwrite

fclose

__argc

__argv

_environ

_XcptFilter

__set_app_type

_controlfp

__getmainargs

exit

shell32

ShellExecuteA

kernel32

SetUnhandledExceptionFilter

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 10.0MB - Virtual size: 10.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/BrowserMetrics-spare.pma

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-66EAFFB3-3F8C.pma

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/crl-set

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/manifest.fingerprint

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/manifest.json

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Crashpad/settings.dat

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Crashpad/throttle_store.dat

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000001

.gz

f_000001

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/index

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Code Cache/js/index

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Code Cache/js/index-dir/the-real-index

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Code Cache/wasm/index

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Code Cache/wasm/index-dir/the-real-index

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/DIPS

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/DashTrackerDatabase

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_0

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_1

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_2

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_3

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/DawnGraphiteCache/index

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_0

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_1

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_2

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_3

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/DawnWebGPUCache/index

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/EdgeEDrop/EdgeEDropSQLite.db

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/EdgeHubAppUsage/EdgeHubAppUsageSQLite.db

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Extension Rules/000003.log

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Extension Rules/CURRENT

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Extension Rules/LOG

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Extension Rules/MANIFEST-000001

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Extension Scripts/000003.log

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Extension Scripts/CURRENT

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Extension Scripts/LOG

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Extension Scripts/MANIFEST-000001

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Extension State/000003.log

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Extension State/CURRENT

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Extension State/LOG

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Extension State/LOG.old

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Extension State/MANIFEST-000001

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/ExtensionActivityComp

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/ExtensionActivityEdge

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Favicons

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/GPUCache/data_0

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/GPUCache/data_1

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/GPUCache/data_2

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/GPUCache/data_3

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/GPUCache/index

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/History

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Local Storage/leveldb/CURRENT

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG.old

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Local Storage/leveldb/MANIFEST-000001

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Login Data

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Network Action Predictor

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Network/Cookies

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Network/Network Persistent State

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Network/Reporting and NEL

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Network/SCT Auditing Pending Reports

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Network/Sdch Dictionaries

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Network/TransportSecurity

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Network/Trust Tokens

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Preferences

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/PreferredApps

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/README

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Safe Browsing Network/Safe Browsing Cookies

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Secure Preferences

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Session Storage/000003.log

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Session Storage/CURRENT

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Session Storage/LOG

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Session Storage/LOG.old

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Session Storage/MANIFEST-000001

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index-dir/the-real-index

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Shared Dictionary/db

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/SharedStorage

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Site Characteristics Database/000003.log

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Site Characteristics Database/CURRENT

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG.old

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Site Characteristics Database/MANIFEST-000001

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/000003.log

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/CURRENT

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG.old

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/MANIFEST-000001

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Top Sites

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Visited Links

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/Web Data

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/heavy_ad_intervention_opt_out.db

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/000003.log

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/CURRENT

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/LOG

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/LOG.old

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/MANIFEST-000001

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/000003.log

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/CURRENT

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG.old

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/MANIFEST-000001

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/GrShaderCache/data_0

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/GrShaderCache/data_1

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/GrShaderCache/data_2

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/GrShaderCache/data_3

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/GrShaderCache/f_000001

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/GrShaderCache/index

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/GraphiteDawnCache/data_0

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/GraphiteDawnCache/data_1

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/GraphiteDawnCache/data_2

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/GraphiteDawnCache/data_3

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/GraphiteDawnCache/index

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Last Version

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Local State

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/OriginTrials/0.0.1.4/manifest.fingerprint

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/OriginTrials/0.0.1.4/manifest.json

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/ShaderCache/data_0

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/ShaderCache/data_1

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/ShaderCache/data_2

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/ShaderCache/data_3

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/ShaderCache/index

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings_2.0-0

Executor/Xeno-v1.0.5-x64/Xeno.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll

.dll windows:6 windows x64 arch:x64

f51f0d794c7fcc93503306a9cd9ba55d

Code Sign

33:00:00:01:88:af:52:d6:b9:92:6d:e8:f9:00:00:00:00:01:88
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:39

Not After

03-03-2021 18:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:33

Not After

01-09-2022 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d
Signer

Actual PE Digest

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d

Digest Algorithm

sha256

PE Digest Matches

true

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d
Signer

Actual PE Digest

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\1\s\build\bin\Release\Microsoft.CognitiveServices.Speech.core.pdb

Imports

crypt32

CertFreeCertificateContext

CryptDecodeObjectEx

CryptStringToBinaryA

CertSetCertificateContextProperty

CertCreateCertificateContext

ws2_32

WSAStartup

WSAIoctl

recv

WSAGetLastError

freeaddrinfo

ioctlsocket

connect

closesocket

socket

getaddrinfo

send

secur32

EncryptMessage

AcquireCredentialsHandleA

DeleteSecurityContext

InitializeSecurityContextA

FreeCredentialsHandle

DecryptMessage

QueryContextAttributesA

advapi32

CryptAcquireContextA

EventRegister

EventSetInformation

EventWriteTransfer

CryptReleaseContext

CryptDestroyKey

EventUnregister

CryptImportKey

ncrypt

NCryptOpenStorageProvider

NCryptFreeObject

NCryptImportKey

dbghelp

SymFromAddr

SymInitialize

SymCleanup

kernel32

LeaveCriticalSection

InitializeCriticalSectionAndSpinCount

DeleteCriticalSection

InitializeSListHead

CreateEventW

GetModuleHandleW

RtlCaptureContext

GetSystemTime

GetModuleFileNameA

GetSystemTimeAsFileTime

GetCurrentThreadId

GetCurrentProcessId

InitOnceBeginInitialize

InitOnceComplete

AcquireSRWLockShared

AcquireSRWLockExclusive

ReleaseSRWLockShared

EnterCriticalSection

WaitForSingleObjectEx

QueryPerformanceCounter

IsDebuggerPresent

IsProcessorFeaturePresent

TerminateProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlVirtualUnwind

VerSetConditionMask

VerifyVersionInfoW

GetCurrentProcess

FormatMessageW

GetLastError

LoadLibraryA

GetProcAddress

WaitForMultipleObjects

WaitForSingleObject

Sleep

SetEvent

CloseHandle

CreateThread

ResetEvent

CreateEventExA

CreateEventA

LocalFree

FormatMessageA

GetModuleHandleA

RtlLookupFunctionEntry

ReleaseSRWLockExclusive

msvcp140

_Mtx_unlock

?_Xbad_alloc@std@@YAXXZ

?_Xbad_function_call@std@@YAXXZ

?_Xlength_error@std@@YAXPEBD@Z

?_Syserror_map@std@@YAPEBDH@Z

_Mtx_destroy_in_situ

_Mtx_init_in_situ

_Mtx_current_owns

_Query_perf_frequency

?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z

?_Throw_Cpp_error@std@@YAXH@Z

_Cnd_timedwait

_Query_perf_counter

_Xtime_get_ticks

?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z

?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A

??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z

??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ

??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z

?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z

?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z

?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ

?_Incref@facet@locale@std@@UEAAXXZ

??Bid@locale@std@@QEAA_KXZ

?_Xout_of_range@std@@YAXPEBD@Z

??1_Lockit@std@@QEAA@XZ

??0_Lockit@std@@QEAA@H@Z

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

?classic@locale@std@@SAAEBV12@XZ

?id@?$ctype@D@std@@2V0locale@2@A

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z

?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?toupper@?$ctype@D@std@@QEBADD@Z

?tolower@?$ctype@D@std@@QEBADD@Z

?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z

?uncaught_exception@std@@YA_NXZ

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z

?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?_Throw_C_error@std@@YAXH@Z

?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z

?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z

?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ

?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ