Microsoft[.]CognitiveServices[.]Speech[.]core[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

Microsoft.CognitiveServices.Speech.core.dll
Size

2.6MB
MD5

0ee2b50c85a110689352fccfa77b5b18
SHA1

d9ecc4b12d2d50e3cbce40e75edad804c9988b25
SHA256

62a13d8459e0992c311dc3551bf3c2d1ce167ea7fa40f0ec62193f3bd760b36e
SHA512

a4f94a05a69b5ae3a0ecf8bdb7592f698d0df81e2f1fae679f38890ad04a2384883837bc792c73848955ff4af7afed49d38839f7ab174454e61919ed78655bff
SSDEEP

49152:NodIJ85qaIU7ui8DDR5s8L0Oty8CvFqwsNcrCY2/YUZzQ7L9qhV6O8mOn0k10:gEDRwrcAwDl

Score

1^/10

Malware Config

Signatures

Files

Microsoft.CognitiveServices.Speech.core.dll
.dll windows:6 windows x64 arch:x64

f51f0d794c7fcc93503306a9cd9ba55d

Code Sign

33:00:00:01:88:af:52:d6:b9:92:6d:e8:f9:00:00:00:00:01:88
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:39

Not After

03/03/2021, 18:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:33

Not After

01/09/2022, 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d
Signer

Actual PE Digest

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d

Digest Algorithm

sha256

PE Digest Matches

true

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d
Signer

Actual PE Digest

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\1\s\build\bin\Release\Microsoft.CognitiveServices.Speech.core.pdb

Imports

crypt32

CertFreeCertificateContext
CryptDecodeObjectEx
CryptStringToBinaryA
CertSetCertificateContextProperty
CertCreateCertificateContext

ws2_32

WSAStartup
WSAIoctl
recv
WSAGetLastError
freeaddrinfo
ioctlsocket
connect
closesocket
socket
getaddrinfo
send

secur32

EncryptMessage
AcquireCredentialsHandleA
DeleteSecurityContext
InitializeSecurityContextA
FreeCredentialsHandle
DecryptMessage
QueryContextAttributesA

advapi32

CryptAcquireContextA
EventRegister
EventSetInformation
EventWriteTransfer
CryptReleaseContext
CryptDestroyKey
EventUnregister
CryptImportKey

ncrypt

NCryptOpenStorageProvider
NCryptFreeObject
NCryptImportKey

dbghelp

SymFromAddr
SymInitialize
SymCleanup

kernel32

LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitializeSListHead
CreateEventW
GetModuleHandleW
RtlCaptureContext
GetSystemTime
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
InitOnceBeginInitialize
InitOnceComplete
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
EnterCriticalSection
WaitForSingleObjectEx
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
VerSetConditionMask
VerifyVersionInfoW
GetCurrentProcess
FormatMessageW
GetLastError
LoadLibraryA
GetProcAddress
WaitForMultipleObjects
WaitForSingleObject
Sleep
SetEvent
CloseHandle
CreateThread
ResetEvent
CreateEventExA
CreateEventA
LocalFree
FormatMessageA
GetModuleHandleA
RtlLookupFunctionEntry
ReleaseSRWLockExclusive

msvcp140

_Mtx_unlock
?_Xbad_alloc@std@@YAXXZ
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Mtx_current_owns
_Query_perf_frequency
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_timedwait
_Query_perf_counter
_Xtime_get_ticks
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??Bid@locale@std@@QEAA_KXZ
?_Xout_of_range@std@@YAXPEBD@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?classic@locale@std@@SAAEBV12@XZ
?id@?$ctype@D@std@@2V0locale@2@A
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?toupper@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Throw_C_error@std@@YAXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?setf@ios_base@std@@QEAAHHH@Z
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
_Thrd_id
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
_Thrd_yield
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
_Thrd_join
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
_Cnd_unregister_at_thread_exit
_Cnd_destroy_in_situ
_Cnd_broadcast
_Cnd_register_at_thread_exit
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
_Cnd_wait
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
_Cnd_init_in_situ
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
_Cnd_do_broadcast_at_thread_exit
_Thrd_sleep
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
??0task_continuation_context@Concurrency@@AEAA@XZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
_Thrd_detach
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?eof@ios_base@std@@QEBA_NXZ
??7ios_base@std@@QEBA_NXZ
??Bios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
_Cnd_signal
??1_Locinfo@std@@QEAA@XZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??0_Locinfo@std@@QEAA@PEBD@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?id@?$collate@D@std@@2V0locale@2@A
_Strxfrm
_Strcoll
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?is@?$ctype@D@std@@QEBA_NFD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
_Mtx_lock
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Xruntime_error@std@@YAXPEBD@Z
?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?fail@ios_base@std@@QEBA_NXZ
?_Getname@_Locinfo@std@@QEBAPEBDXZ
??0_Locinfo@std@@QEAA@HPEBD@Z
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_destroy
__std_exception_copy
_CxxThrowException
strrchr
memmove
__std_type_info_compare
memset
_purecall
memcmp
memchr
strstr
strchr
__std_type_info_destroy_list
__C_specific_handler
__std_type_info_name
__current_exception_context
memcpy
__current_exception
__RTDynamicCast

api-ms-win-crt-string-l1-1-0

toupper
strncpy_s
isupper
tolower
_strnicmp
_stricmp
isspace
strnlen
strcmp
strncpy
strtok
strncmp
strcpy_s
strcpy
strtok_s
wcslen
strlen

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_crt_atexit
_initialize_onexit_table
_initterm
_initterm_e
_initialize_narrow_environment
_configure_narrow_argv
_register_onexit_function
_seh_filter_dll
_beginthreadex
_errno
terminate
abort
_cexit
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-heap-l1-1-0

malloc
calloc
_callnewh
free
realloc

api-ms-win-crt-math-l1-1-0

pow
_dtest
sqrt
ceilf
_dsign
ceil

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsprintf_s
_get_stream_buffer_pointers
_fseeki64
fread
fflush
fclose
fopen_s
_fsopen
fputc
fgetc
fwrite
fgetpos
setvbuf
ungetc
fsetpos

api-ms-win-crt-convert-l1-1-0

strtoul
strtoll
strtoull
strtol
strtod
atoi

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-utility-l1-1-0

rand
llabs

api-ms-win-crt-time-l1-1-0

_ctime64
_time64
_mkgmtime64
_gmtime64_s
strftime

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

ole32

CoCreateInstance
CoInitializeEx
CoUninitialize
PropVariantClear

rpcrt4

UuidToStringA
UuidCreate
RpcStringFreeA

Exports

Exports

CreateModuleObject
GetModuleObject
add_source_lang_config_to_auto_detect_source_lang_config
audio_config_create_audio_input_from_a_microphone
audio_config_create_audio_input_from_default_microphone
audio_config_create_audio_input_from_stream
audio_config_create_audio_input_from_wav_file_name
audio_config_create_audio_output_from_a_speaker
audio_config_create_audio_output_from_default_speaker
audio_config_create_audio_output_from_stream
audio_config_create_audio_output_from_wav_file_name
audio_config_create_pull_audio_input_stream
audio_config_create_push_audio_input_stream
audio_config_get_property_bag
audio_config_is_handle_valid
audio_config_release
audio_data_stream_can_read_data
audio_data_stream_can_read_data_from_position
audio_data_stream_create_from_file
audio_data_stream_create_from_keyword_result
audio_data_stream_create_from_result
audio_data_stream_detach_input
audio_data_stream_get_canceled_error_code
audio_data_stream_get_position
audio_data_stream_get_property_bag
audio_data_stream_get_reason_canceled
audio_data_stream_get_status
audio_data_stream_is_handle_valid
audio_data_stream_read
audio_data_stream_read_from_position
audio_data_stream_release
audio_data_stream_save_to_wave_file
audio_data_stream_set_position
audio_stream_create_pull_audio_input_stream
audio_stream_create_pull_audio_output_stream
audio_stream_create_push_audio_input_stream
audio_stream_create_push_audio_output_stream
audio_stream_format_create_from_compressed_format
audio_stream_format_create_from_default_input
audio_stream_format_create_from_default_output
audio_stream_format_create_from_waveformat_pcm
audio_stream_format_is_handle_valid
audio_stream_format_release
audio_stream_is_handle_valid
audio_stream_release
auto_detect_source_lang_config_get_property_bag
auto_detect_source_lang_config_is_handle_valid
auto_detect_source_lang_config_release
bot_framework_config_from_authorization_token
bot_framework_config_from_subscription
class_language_model_assign_class
class_language_model_from_storage_id
connection_async_handle_release
connection_close
connection_connected_set_callback
connection_disconnected_set_callback
connection_from_conversation_translator
connection_from_dialog_service_connector
connection_from_recognizer
connection_get_property_bag
connection_handle_is_valid
connection_handle_release
connection_message_get_data
connection_message_get_data_size
connection_message_get_property_bag
connection_message_handle_is_valid
connection_message_handle_release
connection_message_received_event_get_message
connection_message_received_event_handle_is_valid
connection_message_received_event_handle_release
connection_message_received_set_callback
connection_open
connection_send_message
connection_send_message_async
connection_send_message_data
connection_send_message_data_async
connection_send_message_wait_for
connection_set_message_property
conversation_create_from_config
conversation_delete_conversation
conversation_end_conversation
conversation_get_conversation_id
conversation_get_property_bag
conversation_lock_conversation
conversation_mute_all_participants
conversation_mute_participant
conversation_release_handle
conversation_start_conversation
conversation_transcription_result_get_user_id
conversation_transcription_result_get_utterance_id
conversation_translator_canceled_set_callback
conversation_translator_connection_connected_set_callback
conversation_translator_connection_disconnected_set_callback
conversation_translator_conversation_expiration_set_callback
conversation_translator_create_from_config
conversation_translator_event_get_expiration_time
conversation_translator_event_get_participant_changed_at_index
conversation_translator_event_get_participant_changed_reason
conversation_translator_event_handle_is_valid
conversation_translator_event_handle_release
conversation_translator_get_property_bag
conversation_translator_handle_is_valid
conversation_translator_handle_release
conversation_translator_join
conversation_translator_join_with_id
conversation_translator_leave
conversation_translator_participant_get_avatar
conversation_translator_participant_get_displayname
conversation_translator_participant_get_id
conversation_translator_participant_get_is_host
conversation_translator_participant_get_is_muted
conversation_translator_participant_get_is_using_tts
conversation_translator_participants_changed_set_callback
conversation_translator_result_get_original_lang
conversation_translator_send_text_message
conversation_translator_session_started_set_callback
conversation_translator_session_stopped_set_callback
conversation_translator_set_authorization_token
conversation_translator_start_transcribing
conversation_translator_stop_transcribing
conversation_translator_text_message_recevied_set_callback
conversation_translator_transcribed_set_callback
conversation_translator_transcribing_set_callback
conversation_unlock_conversation
conversation_unmute_all_participants
conversation_unmute_participant
conversation_update_participant
conversation_update_participant_by_user
conversation_update_participant_by_user_id
create_auto_detect_source_lang_config_from_languages
create_auto_detect_source_lang_config_from_open_range
create_auto_detect_source_lang_config_from_source_lang_config
create_pronunciation_assessment_config
create_pronunciation_assessment_config_from_json
create_voice_profile
create_voice_profile_client_from_config
create_voice_profile_from_id_and_type
custom_commands_config_from_authorization_token
custom_commands_config_from_subscription
delete_voice_profile
diagnostics_log_apply_properties
diagnostics_log_format_message
diagnostics_log_memory_dump
diagnostics_log_memory_dump_to_stderr
diagnostics_log_memory_get_line
diagnostics_log_memory_get_line_num_newest
diagnostics_log_memory_get_line_num_oldest
diagnostics_log_memory_start_logging
diagnostics_log_memory_stop_logging
diagnostics_log_start_logging
diagnostics_log_stop_logging
diagnostics_log_trace_message
diagnostics_log_trace_message2
diagnostics_log_trace_string
diagnostics_logmessage_set_callback
diagnostics_logmessage_set_filters
dialog_service_connector_activity_received_event_get_activity
dialog_service_connector_activity_received_event_get_activity_size
dialog_service_connector_activity_received_event_get_audio
dialog_service_connector_activity_received_event_handle_is_valid
dialog_service_connector_activity_received_event_has_audio
dialog_service_connector_activity_received_event_release
dialog_service_connector_activity_received_set_callback
dialog_service_connector_async_handle_is_valid
dialog_service_connector_async_handle_release
dialog_service_connector_async_reco_result_handle_is_valid
dialog_service_connector_async_reco_result_handle_release
dialog_service_connector_async_string_handle_is_valid
dialog_service_connector_async_string_handle_release
dialog_service_connector_async_void_handle_is_valid
dialog_service_connector_async_void_handle_release
dialog_service_connector_canceled_set_callback
dialog_service_connector_connect
dialog_service_connector_connect_async
dialog_service_connector_connect_async_wait_for
dialog_service_connector_create_dialog_service_connector_from_config
dialog_service_connector_disconnect
dialog_service_connector_disconnect_async
dialog_service_connector_disconnect_async_wait_for
dialog_service_connector_get_property_bag
dialog_service_connector_handle_is_valid
dialog_service_connector_handle_release
dialog_service_connector_listen_once
dialog_service_connector_listen_once_async
dialog_service_connector_listen_once_async_wait_for
dialog_service_connector_recognized_set_callback
dialog_service_connector_recognizing_set_callback
dialog_service_connector_send_activity
dialog_service_connector_send_activity_async
dialog_service_connector_send_activity_async_wait_for
dialog_service_connector_session_started_set_callback
dialog_service_connector_session_stopped_set_callback
dialog_service_connector_start_keyword_recognition
dialog_service_connector_start_keyword_recognition_async
dialog_service_connector_start_keyword_recognition_async_wait_for
dialog_service_connector_stop_keyword_recognition
dialog_service_connector_stop_keyword_recognition_async
dialog_service_connector_stop_keyword_recognition_async_wait_for
dialog_service_connector_stop_listening
dialog_service_connector_stop_listening_async
dialog_service_connector_synthesizing_audio_set_callback
dialog_service_connector_turn_status_received_get_conversation_id
dialog_service_connector_turn_status_received_get_conversation_id_size
dialog_service_connector_turn_status_received_get_interaction_id
dialog_service_connector_turn_status_received_get_interaction_id_size
dialog_service_connector_turn_status_received_get_status
dialog_service_connector_turn_status_received_handle_is_valid
dialog_service_connector_turn_status_received_release
dialog_service_connector_turn_status_received_set_callback
enroll_voice_profile
error_get_call_stack
error_get_error_code
error_get_message
error_release
get_voice_profiles
grammar_create_from_storage_id
grammar_handle_is_valid
grammar_handle_release
grammar_list_add_grammar
grammar_list_from_recognizer
grammar_list_set_recognition_factor
grammar_phrase_create_from_text
grammar_phrase_handle_is_valid
grammar_phrase_handle_release
intent_recognizer_add_intent
intent_result_get_intent_id
intent_trigger_create_from_language_understanding_model
intent_trigger_create_from_phrase
intent_trigger_handle_is_valid
intent_trigger_handle_release
keyword_recognition_model_create_from_file
keyword_recognition_model_handle_is_valid
keyword_recognition_model_handle_release
language_understanding_model__handle_release
language_understanding_model_create_from_app_id
language_understanding_model_create_from_subscription
language_understanding_model_create_from_uri
language_understanding_model_handle_is_valid
participant_create_handle
participant_get_property_bag
participant_release_handle
participant_set_preferred_langugage
participant_set_voice_signature
phrase_list_grammar_add_phrase
phrase_list_grammar_clear
phrase_list_grammar_from_recognizer_by_name
pronunciation_assessment_config_apply_to_recognizer
pronunciation_assessment_config_get_property_bag
pronunciation_assessment_config_is_handle_valid
pronunciation_assessment_config_release
pronunciation_assessment_config_to_json
property_bag_copy
property_bag_free_string
property_bag_get_string
property_bag_is_valid
property_bag_release
property_bag_set_string
pull_audio_input_stream_set_callbacks
pull_audio_input_stream_set_getproperty_callback
pull_audio_output_stream_read
push_audio_input_stream_close
push_audio_input_stream_set_property_by_id
push_audio_input_stream_set_property_by_name
push_audio_input_stream_write
push_audio_output_stream_set_callbacks
recognizer_async_handle_is_valid
recognizer_async_handle_release
recognizer_canceled_set_callback
recognizer_create_conversation_transcriber_from_config
recognizer_create_intent_recognizer_from_config
recognizer_create_keyword_recognizer_from_audio_config
recognizer_create_speaker_recognizer_from_config
recognizer_create_speech_recognizer_from_auto_detect_source_lang_config
recognizer_create_speech_recognizer_from_config
recognizer_create_speech_recognizer_from_source_lang_config
recognizer_create_translation_recognizer_from_config
recognizer_disable
recognizer_enable
recognizer_event_handle_is_valid
recognizer_event_handle_release
recognizer_get_property_bag
recognizer_handle_is_valid
recognizer_handle_release
recognizer_is_enabled
recognizer_join_conversation
recognizer_leave_conversation
recognizer_recognition_event_get_offset
recognizer_recognition_event_get_result
recognizer_recognize_keyword_once
recognizer_recognize_keyword_once_async
recognizer_recognize_keyword_once_async_wait_for
recognizer_recognize_once
recognizer_recognize_once_async
recognizer_recognize_once_async_wait_for
recognizer_recognized_set_callback
recognizer_recognizing_set_callback
recognizer_result_handle_is_valid
recognizer_result_handle_release
recognizer_session_event_get_session_id
recognizer_session_started_set_callback
recognizer_session_stopped_set_callback
recognizer_speech_end_detected_set_callback
recognizer_speech_start_detected_set_callback
recognizer_start_continuous_recognition
recognizer_start_continuous_recognition_async
recognizer_start_continuous_recognition_async_wait_for
recognizer_start_keyword_recognition
recognizer_start_keyword_recognition_async
recognizer_start_keyword_recognition_async_wait_for
recognizer_stop_continuous_recognition
recognizer_stop_continuous_recognition_async
recognizer_stop_continuous_recognition_async_wait_for
recognizer_stop_keyword_recognition
recognizer_stop_keyword_recognition_async
recognizer_stop_keyword_recognition_async_wait_for
reset_voice_profile
result_get_canceled_error_code
result_get_duration
result_get_no_match_reason
result_get_offset
result_get_property_bag
result_get_reason
result_get_reason_canceled
result_get_result_id
result_get_text
session_from_recognizer
session_get_property_bag
session_handle_is_valid
session_handle_release
source_lang_config_from_language
source_lang_config_from_language_and_endpointId
source_lang_config_get_property_bag
source_lang_config_is_handle_valid
source_lang_config_release
speaker_identification_model_add_profile
speaker_identification_model_create
speaker_identification_model_release_handle
speaker_recognizer_get_property_bag
speaker_recognizer_identify
speaker_recognizer_release_handle
speaker_recognizer_verify
speaker_verification_model_create
speaker_verification_model_release_handle
speech_config_from_authorization_token
speech_config_from_authorization_token_internal
speech_config_from_endpoint
speech_config_from_endpoint_internal
speech_config_from_host
speech_config_from_host_internal
speech_config_from_subscription
speech_config_from_subscription_internal
speech_config_get_property_bag
speech_config_is_handle_valid
speech_config_release
speech_config_set_audio_output_format
speech_config_set_profanity
speech_config_set_service_property
speech_translation_config_add_target_language
speech_translation_config_from_authorization_token
speech_translation_config_from_endpoint
speech_translation_config_from_host
speech_translation_config_from_subscription
speech_translation_config_remove_target_language
speechapi_async_handle_release
speechapi_async_wait_for
synth_result_get_audio_data
synth_result_get_audio_format
synth_result_get_audio_length
synth_result_get_canceled_error_code
synth_result_get_property_bag
synth_result_get_reason
synth_result_get_reason_canceled
synth_result_get_result_id
synthesizer_async_handle_is_valid
synthesizer_async_handle_release
synthesizer_canceled_set_callback
synthesizer_completed_set_callback
synthesizer_create_speech_synthesizer_from_auto_detect_source_lang_config
synthesizer_create_speech_synthesizer_from_config
synthesizer_disable
synthesizer_enable
synthesizer_event_handle_is_valid
synthesizer_event_handle_release
synthesizer_get_property_bag
synthesizer_handle_is_valid
synthesizer_handle_release
synthesizer_is_enabled
synthesizer_result_handle_is_valid
synthesizer_result_handle_release
synthesizer_speak_async_wait_for
synthesizer_speak_ssml
synthesizer_speak_ssml_async
synthesizer_speak_text
synthesizer_speak_text_async
synthesizer_start_speaking_ssml
synthesizer_start_speaking_ssml_async
synthesizer_start_speaking_text
synthesizer_start_speaking_text_async
synthesizer_started_set_callback
synthesizer_stop_speaking
synthesizer_stop_speaking_async
synthesizer_stop_speaking_async_wait_for
synthesizer_synthesis_event_get_result
synthesizer_synthesizing_set_callback
synthesizer_word_boundary_event_get_values
synthesizer_word_boundary_set_callback
translation_synthesis_result_get_audio_data
translation_text_result_get_translation_text_buffer_header
translator_add_target_language
translator_remove_target_language
translator_synthesizing_audio_set_callback
user_create_from_id
user_get_id
user_release_handle
voice_profile_client_get_property_bag
voice_profile_client_release_handle
voice_profile_get_id
voice_profile_release_handle

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 673KB - Virtual size: 673KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 171KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f51f0d794c7fcc93503306a9cd9ba55d

Code Sign

33:00:00:01:88:af:52:d6:b9:92:6d:e8:f9:00:00:00:00:01:88Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6dSigner

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6dSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

crypt32

ws2_32

secur32

advapi32

ncrypt

dbghelp

kernel32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

ole32

rpcrt4

Exports

Exports

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 673KB - Virtual size: 673KB

.data Size: 171KB - Virtual size: 2.2MB

.pdata Size: 149KB - Virtual size: 148KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 21KB - Virtual size: 20KB

33:00:00:01:88:af:52:d6:b9:92:6d:e8:f9:00:00:00:00:01:88
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d
Signer

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d
Signer

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 673KB - Virtual size: 673KB

.data
Size: 171KB - Virtual size: 2.2MB

.pdata
Size: 149KB - Virtual size: 148KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 21KB - Virtual size: 20KB