blankgrabber | Xeno-v1[.]1[.]35-x64[.]zip

resource	yara_rule
static1/unpack002/(��Io�.pyc	blankgrabber

resource
unpack001/Xeno-v1.1.35-x64/Xeno.dll
unpack001/Xeno-v1.1.35-x64/XenoUI.dll

Xeno-v1.1.35-x64.zip

.zip

Xeno-v1.1.35-x64/Microsoft.Web.WebView2.Core.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

82:16:92:aa:f3:86:85:a1:7b:d7:76:7c:40:f5:23:05:fa:60:5b:ab:ec:81:76:94:51:f3:c2:32:7f:d4:70:40
Signer

Actual PE Digest

82:16:92:aa:f3:86:85:a1:7b:d7:76:7c:40:f5:23:05:fa:60:5b:ab:ec:81:76:94:51:f3:c2:32:7f:d4:70:40

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\webview2_api_writer\dotNetAPIWrapper\Microsoft.Web.WebView2.Core\bin\ReleasePackage\Microsoft.Web.WebView2.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 545KB - Virtual size: 545KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Xeno-v1.1.35-x64/Microsoft.Web.WebView2.WinForms.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

c9:17:2c:ed:19:5a:cc:85:fc:1d:eb:eb:14:58:8b:63:8a:45:61:96:53:ac:96:d7:21:33:b4:bc:6b:fa:c6:4a
Signer

Actual PE Digest

c9:17:2c:ed:19:5a:cc:85:fc:1d:eb:eb:14:58:8b:63:8a:45:61:96:53:ac:96:d7:21:33:b4:bc:6b:fa:c6:4a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\winforms_control\Microsoft.Web.WebView2.WinForms\obj\Release Stable APIs\netcoreapp3.0\Microsoft.Web.WebView2.WinForms.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Xeno-v1.1.35-x64/Microsoft.Web.WebView2.Wpf.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

44:3c:50:d9:83:21:c2:e3:9c:89:77:52:4e:5b:fb:51:0b:4d:fa:7b:60:17:56:78:29:5d:ea:55:4d:f8:35:1a
Signer

Actual PE Digest

44:3c:50:d9:83:21:c2:e3:9c:89:77:52:4e:5b:fb:51:0b:4d:fa:7b:60:17:56:78:29:5d:ea:55:4d:f8:35:1a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\wpf_control\Microsoft.Web.WebView2.Wpf\obj\Release Stable APIs\netcoreapp3.0\Microsoft.Web.WebView2.Wpf.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Xeno-v1.1.35-x64/Newtonsoft.Json.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Certificate

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Not Before

15/01/2021, 00:00

Not After

14/01/2046, 23:59

Subject

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Certificate

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Not Before

15/07/2021, 00:00

Not After

14/07/2031, 23:59

Subject

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Not Before

13/08/2021, 00:00

Not After

29/10/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

12:a2:f8:77:6a:5b:04:46:97:f9:ac:0c:85:0b:b9:3c:9d:a2:ac:a9:a3:72:91:5b:d9:ed:db:47:d0:c2:9e:3d
Signer

Actual PE Digest

12:a2:f8:77:6a:5b:04:46:97:f9:ac:0c:85:0b:b9:3c:9d:a2:ac:a9:a3:72:91:5b:d9:ed:db:47:d0:c2:9e:3d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

/_/Src/Newtonsoft.Json/obj/Release/net6.0/Newtonsoft.Json.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 681KB - Virtual size: 681KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Xeno-v1.1.35-x64/Xeno.dll

.dll windows:6 windows x64 arch:x64

922bafe27c5681b864aef9beedb388a2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

C:\Users\rizve\Desktop\Projects\Xeno\build\Release\net8.0-windows\Xeno.pdb

Imports

libcrypto-3-x64

X509_get_ext_d2i

EVP_DigestFinal_ex

ASN1_STRING_length

X509_free

BIO_new_socket

EVP_sha512

ASN1_STRING_get0_data

OPENSSL_sk_value

EVP_DigestInit_ex

EVP_MD_CTX_free

GENERAL_NAMES_free

EVP_DigestUpdate

EVP_sha256

EVP_md5

X509_get_subject_name

OPENSSL_sk_num

X509_STORE_add_cert

d2i_X509

EVP_MD_CTX_new

X509_NAME_get_text_by_NID

X509_STORE_free

OPENSSL_thread_stop

BIO_ctrl

libssl-3-x64

OPENSSL_init_ssl

SSL_connect

SSL_peek

SSL_free

SSL_CTX_get_cert_store

SSL_CTX_set_default_verify_paths

SSL_new

SSL_CTX_free

SSL_CTX_ctrl

SSL_CTX_set_cert_store

SSL_CTX_use_certificate_file

SSL_CTX_use_PrivateKey_file

SSL_CTX_new

SSL_write

SSL_get_verify_result

TLS_client_method

SSL_CTX_set_default_passwd_cb_userdata

SSL_ctrl

SSL_set_bio

SSL_pending

SSL_read

SSL_set_verify

SSL_CTX_load_verify_locations

SSL_get1_peer_certificate

SSL_shutdown

SSL_get_error

kernel32

IsProcessorFeaturePresent

ReleaseSRWLockExclusive

AcquireSRWLockExclusive

WakeAllConditionVariable

SleepConditionVariableSRW

IsDebuggerPresent

GetCurrentThreadId

GetSystemTimeAsFileTime

DisableThreadLibraryCalls

InitializeSListHead

SetCurrentDirectoryW

GetCurrentDirectoryW

CreateDirectoryW

CreateFileW

InitOnceBeginInitialize

InitOnceComplete

GetLocaleInfoEx

FormatMessageA

LocalFree

WideCharToMultiByte

GetFileInformationByHandleEx

CopyFileW

AreFileApisANSI

SetFileInformationByHandle

GetFullPathNameW

GetFileInformationByHandle

GetFileAttributesExW

SetUnhandledExceptionFilter

QueryPerformanceCounter

FindNextFileW

GetFileSizeEx

SetConsoleTitleA

CreateFile2

UnmapViewOfFile

MultiByteToWideChar

GlobalAlloc

GlobalFree

CloseHandle

FreeConsole

CreateFileMappingFromApp

GlobalLock

GetConsoleWindow

MapViewOfFileFromApp

GlobalUnlock

AllocConsole

SizeofResource

GetModuleHandleExW

GetProcessId

OpenProcess

CreateToolhelp32Snapshot

Sleep

GetLastError

Process32NextW

QueryFullProcessImageNameA

LockResource

Process32FirstW

LoadResource

FindResourceW

Module32FirstW

VirtualProtectEx

VirtualAllocEx

VirtualQueryEx

TerminateProcess

GetModuleFileNameW

LoadLibraryA

GetCurrentProcessId

GetExitCodeProcess

FindClose

FindFirstFileW

FindFirstFileExW

GetCurrentProcess

UnhandledExceptionFilter

RtlVirtualUnwind

RtlCaptureContext

RtlLookupFunctionEntry

GetProcAddress

GetModuleFileNameA

user32

GetWindowThreadProcessId

MapVirtualKeyW

keybd_event

EnumWindows

OpenClipboard

SetForegroundWindow

PostMessageW

SetClipboardData

EmptyClipboard

CloseClipboard

GetForegroundWindow

advapi32

GetCurrentHwProfileW

ole32

CoCreateGuid

msvcp140

_Thrd_detach

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z

??1_Locinfo@std@@QEAA@XZ

??0_Locinfo@std@@QEAA@PEBD@Z

?_Xlength_error@std@@YAXPEBD@Z

?_Xout_of_range@std@@YAXPEBD@Z

_Cnd_signal

_Thrd_hardware_concurrency

?__ExceptionPtrCreate@@YAXPEAX@Z

_Strxfrm

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

_Query_perf_frequency

??1_Lockit@std@@QEAA@XZ

??0_Lockit@std@@QEAA@H@Z

?_Throw_Cpp_error@std@@YAXH@Z

?uncaught_exceptions@std@@YAHXZ

?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

?_Xbad_alloc@std@@YAXXZ

?_Xinvalid_argument@std@@YAXPEBD@Z

?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z

?_Winerror_map@std@@YAHH@Z

?_Xbad_function_call@std@@YAXXZ

?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A

?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z

?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z

?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z

?id@?$ctype@D@std@@2V0locale@2@A

?_Random_device@std@@YAIXZ

?id@?$collate@D@std@@2V0locale@2@A

?_Syserror_map@std@@YAPEBDH@Z

?__ExceptionPtrDestroy@@YAXPEAX@Z

_Mtx_lock

?__ExceptionPtrCurrentException@@YAXPEAX@Z

?__ExceptionPtrRethrow@@YAXPEBX@Z

_Strcoll

_Cnd_do_broadcast_at_thread_exit

_Cnd_wait

_Thrd_id

_Query_perf_counter

_Thrd_join

_Mtx_unlock

_Cnd_broadcast

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z

?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ

?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ

?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z

?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ

?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z

?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z

?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z

?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z

?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ

??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ

?good@ios_base@std@@QEBA_NXZ

??7ios_base@std@@QEBA_NXZ

?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z

?tolower@?$ctype@D@std@@QEBADD@Z

?always_noconv@codecvt_base@std@@QEBA_NXZ

??1facet@locale@std@@MEAA@XZ

??0facet@locale@std@@IEAA@_K@Z

?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ

?_Incref@facet@locale@std@@UEAAXXZ

??Bid@locale@std@@QEAA_KXZ

ws2_32

bind

closesocket

select

shutdown

listen

WSAGetLastError

WSAAccept

WSASocketW

inet_pton

WSACleanup

WSAStartup

getpeername

getsockname

send

socket

ntohs

connect

recv

getsockopt

setsockopt

getaddrinfo

__WSAFDIsSet

getnameinfo

ioctlsocket

freeaddrinfo

crypt32

CertFreeCertificateContext

CertEnumCertificatesInStore

CertCloseStore

CertOpenSystemStoreW

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset

memchr

__C_specific_handler

__current_exception_context

__current_exception

wcsrchr

strchr

_purecall

__std_exception_copy

__std_exception_destroy

__std_terminate

memcpy

memcmp

memmove

__std_type_info_destroy_list

_CxxThrowException

api-ms-win-crt-heap-l1-1-0

malloc

free

_callnewh

realloc

api-ms-win-crt-stdio-l1-1-0

freopen_s

_fseeki64

__stdio_common_vsprintf

fread

_get_stream_buffer_pointers

fsetpos

ungetc

setvbuf

fgetpos

fwrite

fputc

fclose

fflush

__acrt_iob_func

fgetc

api-ms-win-crt-runtime-l1-1-0

system

terminate

_seh_filter_dll

_configure_narrow_argv

_initialize_narrow_environment

_initialize_onexit_table

_register_onexit_function

_execute_onexit_table

_crt_atexit

_cexit

_initterm

_initterm_e

abort

_invalid_parameter_noinfo

_errno

_invalid_parameter_noinfo_noreturn

_beginthreadex

api-ms-win-crt-math-l1-1-0

ceil

atan2

atan

asin

floor

fmod

log

log10

acos

cosh

ceilf

log2

pow

round

sin

sinh

sqrt

tan

exp

ldexp

cos

_dsign

tanh

api-ms-win-crt-convert-l1-1-0

strtoul

atoi

strtoull

strtoll

strtod

strtol

api-ms-win-crt-string-l1-1-0

strncmp

isdigit

strnlen

strspn

strcpy_s

_wcsicmp

isalnum

strcmp

api-ms-win-crt-filesystem-l1-1-0

_wstat64i32

_lock_file

_unlock_file

api-ms-win-crt-locale-l1-1-0

localeconv

___lc_codepage_func

Exports

Attach

Compilable

DeAllocConsole

Execute

GetClients

Initialize

SetSettings

Sections

.text
Size: 967KB - Virtual size: 967KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Xeno-v1.1.35-x64/Xeno.exe

.exe windows:6 windows x64 arch:x64

72c4e339b7af8ab1ed2eb3821c98713a

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

bf:b1:50:01:bb:f5:92:d4:96:2a:77:97:ea:73:6f:a3
Certificate

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Not Before

29/09/2021, 00:00

Not After

28/09/2024, 23:59

Subject

SERIALNUMBER=407950,CN=Akeo Consulting,O=Akeo Consulting,ST=Donegal,C=IE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024945

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

93:5d:1a:d4:1a:5d:52:a7:a9:75:6d:ac:b3:93:7f:c6:81:b1:5d:c5:98:dd:79:04:de:c2:da:40:dc:c4:86:b4
Signer

Actual PE Digest

93:5d:1a:d4:1a:5d:52:a7:a9:75:6d:ac:b3:93:7f:c6:81:b1:5d:c5:98:dd:79:04:de:c2:da:40:dc:c4:86:b4

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

CreateWindowExW

ShutdownBlockReasonCreate

MsgWaitForMultipleObjects

ShowWindow

DestroyWindow

RegisterClassW

DefWindowProcW

PeekMessageW

DispatchMessageW

TranslateMessage

PostMessageW

GetMessageW

MessageBoxW

MessageBoxA

SystemParametersInfoW

DestroyIcon

SetWindowLongPtrW

GetWindowLongPtrW

GetClientRect

InvalidateRect

ReleaseDC

GetDC

DrawTextW

GetDialogBaseUnits

EndDialog

DialogBoxIndirectParamW

MoveWindow

SendMessageW

comctl32

ord380

kernel32

GetACP

IsValidCodePage

GetStringTypeW

GetFileAttributesExW

SetEnvironmentVariableW

FlushFileBuffers

GetCurrentDirectoryW

LCMapStringW

CompareStringW

FlsFree

GetOEMCP

GetCPInfo

GetModuleHandleW

MulDiv

FormatMessageW

GetLastError

GetModuleFileNameW

LoadLibraryExW

SetDllDirectoryW

CreateSymbolicLinkW

GetProcAddress

GetEnvironmentStringsW

GetCommandLineW

GetEnvironmentVariableW

ExpandEnvironmentStringsW

DeleteFileW

FindClose

FindFirstFileW

FindNextFileW

GetDriveTypeW

RemoveDirectoryW

GetTempPathW

CloseHandle

QueryPerformanceCounter

QueryPerformanceFrequency

WaitForSingleObject

Sleep

GetCurrentProcess

TerminateProcess

GetExitCodeProcess

CreateProcessW

GetStartupInfoW

FreeLibrary

LocalFree

SetConsoleCtrlHandler

K32EnumProcessModules

K32GetModuleFileNameExW

CreateFileW

FindFirstFileExW

GetFinalPathNameByHandleW

MultiByteToWideChar

WideCharToMultiByte

FlsSetValue

FreeEnvironmentStringsW

GetProcessHeap

GetTimeZoneInformation

HeapSize

HeapReAlloc

WriteConsoleW

SetEndOfFile

CreateDirectoryW

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

UnhandledExceptionFilter

SetUnhandledExceptionFilter

IsProcessorFeaturePresent

GetCurrentProcessId

GetCurrentThreadId

GetSystemTimeAsFileTime

InitializeSListHead

IsDebuggerPresent

RtlUnwindEx

SetLastError

EnterCriticalSection

LeaveCriticalSection

DeleteCriticalSection

InitializeCriticalSectionAndSpinCount

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

EncodePointer

RaiseException

RtlPcToFileHeader

GetCommandLineA

GetFileInformationByHandle

GetFileType

PeekNamedPipe

SystemTimeToTzSpecificLocalTime

FileTimeToSystemTime

ReadFile

GetFullPathNameW

SetStdHandle

GetStdHandle

WriteFile

ExitProcess

GetModuleHandleExW

HeapFree

GetConsoleMode

ReadConsoleW

SetFilePointerEx

GetConsoleOutputCP

GetFileSizeEx

HeapAlloc

FlsAlloc

FlsGetValue

advapi32

OpenProcessToken

GetTokenInformation

ConvertStringSecurityDescriptorToSecurityDescriptorW

ConvertSidToStringSidW

gdi32

SelectObject

DeleteObject

CreateFontIndirectW

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

(��Io�.pyc

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.fingerprint

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.json

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/protocols.json

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2024.12.2/crl-set

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2024.12.2/manifest.fingerprint

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2024.12.2/manifest.json

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Crashpad/settings.dat

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Crashpad/throttle_store.dat

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000001

.gz

f_000001

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/index

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Code Cache/js/index

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Code Cache/js/index-dir/the-real-index

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Code Cache/wasm/index

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Code Cache/wasm/index-dir/the-real-index

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/DIPS

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/DashTrackerDatabase

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_0

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_1

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_2

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_3

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/DawnGraphiteCache/index

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_0

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_1

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_2

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_3

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/DawnWebGPUCache/index

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/EdgeEDrop/EdgeEDropSQLite.db

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/EdgeHubAppUsage/EdgeHubAppUsageSQLite.db

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Extension Rules/000003.log

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Extension Rules/CURRENT

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Extension Rules/LOG

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Extension Rules/MANIFEST-000001

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Extension Scripts/000003.log

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Extension Scripts/CURRENT

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Extension Scripts/LOG

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Extension Scripts/MANIFEST-000001

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Extension State/000003.log

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Extension State/CURRENT

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Extension State/LOG

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Extension State/LOG.old

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Extension State/MANIFEST-000001

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/ExtensionActivityComp

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/ExtensionActivityEdge

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Favicons

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/GPUCache/data_0

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/GPUCache/data_1

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/GPUCache/data_2

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/GPUCache/data_3

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/GPUCache/index

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/History

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Local Storage/leveldb/CURRENT

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG.old

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Local Storage/leveldb/MANIFEST-000001

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Login Data

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Network Action Predictor

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Network/Cookies

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Network/Network Persistent State

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Network/Reporting and NEL

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Network/SCT Auditing Pending Reports

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Network/Sdch Dictionaries

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Network/TransportSecurity

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Network/Trust Tokens

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Preferences

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/PreferredApps

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/README

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Safe Browsing Network/Safe Browsing Cookies

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Secure Preferences

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Session Storage/000003.log

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Session Storage/CURRENT

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Session Storage/LOG

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Session Storage/LOG.old

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Session Storage/MANIFEST-000001

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index-dir/the-real-index

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Shared Dictionary/db

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/SharedStorage

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Site Characteristics Database/000003.log

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Site Characteristics Database/CURRENT

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG.old

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Site Characteristics Database/MANIFEST-000001

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/000003.log

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/CURRENT

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG.old

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/MANIFEST-000001

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Top Sites

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Visited Links

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/Web Data

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/favorites_diagnostic.log

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/heavy_ad_intervention_opt_out.db

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/000003.log

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/CURRENT

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/LOG

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/LOG.old

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/MANIFEST-000001

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/000003.log

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/CURRENT

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG.old

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/MANIFEST-000001

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/GrShaderCache/data_0

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/GrShaderCache/data_1

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/GrShaderCache/data_2

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/GrShaderCache/data_3

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/GrShaderCache/f_000001

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/GrShaderCache/f_000002

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/GrShaderCache/f_000003

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/GrShaderCache/index

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/GraphiteDawnCache/data_0

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/GraphiteDawnCache/data_1

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/GraphiteDawnCache/data_2

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/GraphiteDawnCache/data_3

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/GraphiteDawnCache/index

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Last Version

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Local State

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/OriginTrials/0.0.1.7/manifest.fingerprint

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/OriginTrials/0.0.1.7/manifest.json

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/PKIMetadata/21.0.0.0/crs.pb

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/PKIMetadata/21.0.0.0/ct_config.pb

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/PKIMetadata/21.0.0.0/kp_pinslist.pb

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/PKIMetadata/21.0.0.0/manifest.fingerprint

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/PKIMetadata/21.0.0.0/manifest.json

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/ShaderCache/data_0

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/ShaderCache/data_1

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/ShaderCache/data_2

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/ShaderCache/data_3

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/ShaderCache/index

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings_2.0-0

Xeno-v1.1.35-x64/Xeno.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll

.dll windows:6 windows x64 arch:x64

f51f0d794c7fcc93503306a9cd9ba55d

Code Sign

33:00:00:01:88:af:52:d6:b9:92:6d:e8:f9:00:00:00:00:01:88
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:39

Not After

03/03/2021, 18:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:33

Not After

01/09/2022, 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d
Signer

Actual PE Digest

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d

Digest Algorithm

sha256

PE Digest Matches

true

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d
Signer

Actual PE Digest

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\1\s\build\bin\Release\Microsoft.CognitiveServices.Speech.core.pdb

Imports

crypt32

CertFreeCertificateContext

CryptDecodeObjectEx

CryptStringToBinaryA

CertSetCertificateContextProperty

CertCreateCertificateContext

ws2_32

WSAStartup

WSAIoctl

recv

WSAGetLastError

freeaddrinfo

ioctlsocket

connect

closesocket

socket

getaddrinfo

send

secur32

EncryptMessage

AcquireCredentialsHandleA

DeleteSecurityContext

InitializeSecurityContextA

FreeCredentialsHandle

DecryptMessage

QueryContextAttributesA

advapi32

CryptAcquireContextA

EventRegister

EventSetInformation

EventWriteTransfer

CryptReleaseContext

CryptDestroyKey

EventUnregister

CryptImportKey

ncrypt

NCryptOpenStorageProvider

NCryptFreeObject

NCryptImportKey

dbghelp

SymFromAddr

SymInitialize

SymCleanup

kernel32

LeaveCriticalSection

InitializeCriticalSectionAndSpinCount

DeleteCriticalSection

InitializeSListHead

CreateEventW

GetModuleHandleW

RtlCaptureContext

GetSystemTime

GetModuleFileNameA

GetSystemTimeAsFileTime

GetCurrentThreadId

GetCurrentProcessId

InitOnceBeginInitialize

InitOnceComplete

AcquireSRWLockShared

AcquireSRWLockExclusive

ReleaseSRWLockShared

EnterCriticalSection

WaitForSingleObjectEx

QueryPerformanceCounter

IsDebuggerPresent

IsProcessorFeaturePresent

TerminateProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlVirtualUnwind

VerSetConditionMask

VerifyVersionInfoW

GetCurrentProcess

FormatMessageW

GetLastError

LoadLibraryA

GetProcAddress

WaitForMultipleObjects

WaitForSingleObject

Sleep

SetEvent

CloseHandle

CreateThread

ResetEvent

CreateEventExA

CreateEventA

LocalFree

FormatMessageA

GetModuleHandleA

RtlLookupFunctionEntry

ReleaseSRWLockExclusive

msvcp140

_Mtx_unlock

?_Xbad_alloc@std@@YAXXZ

?_Xbad_function_call@std@@YAXXZ

?_Xlength_error@std@@YAXPEBD@Z

?_Syserror_map@std@@YAPEBDH@Z

_Mtx_destroy_in_situ

_Mtx_init_in_situ

_Mtx_current_owns

_Query_perf_frequency

?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z

?_Throw_Cpp_error@std@@YAXH@Z

_Cnd_timedwait

_Query_perf_counter

_Xtime_get_ticks

?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z

?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A

??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z

??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ

??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z

?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z

?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z

?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ

?_Incref@facet@locale@std@@UEAAXXZ

??Bid@locale@std@@QEAA_KXZ

?_Xout_of_range@std@@YAXPEBD@Z

??1_Lockit@std@@QEAA@XZ

??0_Lockit@std@@QEAA@H@Z

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

?classic@locale@std@@SAAEBV12@XZ

?id@?$ctype@D@std@@2V0locale@2@A

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z

?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?toupper@?$ctype@D@std@@QEBADD@Z

?tolower@?$ctype@D@std@@QEBADD@Z

?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z

?uncaught_exception@std@@YA_NXZ

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z

?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?_Throw_C_error@std@@YAXH@Z

?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z

?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z

?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ

?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ