XENO[.]zip | Triage

resource
unpack001/Xeno.dll
unpack001/Xeno.exe
unpack001/XenoUI.dll

XENO.zip

.zip

Microsoft.Web.WebView2.Core.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2023 19:51

Not After

16-10-2024 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

82:16:92:aa:f3:86:85:a1:7b:d7:76:7c:40:f5:23:05:fa:60:5b:ab:ec:81:76:94:51:f3:c2:32:7f:d4:70:40
Signer

Actual PE Digest

82:16:92:aa:f3:86:85:a1:7b:d7:76:7c:40:f5:23:05:fa:60:5b:ab:ec:81:76:94:51:f3:c2:32:7f:d4:70:40

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\webview2_api_writer\dotNetAPIWrapper\Microsoft.Web.WebView2.Core\bin\ReleasePackage\Microsoft.Web.WebView2.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 545KB - Virtual size: 545KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Microsoft.Web.WebView2.WinForms.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2023 19:51

Not After

16-10-2024 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

c9:17:2c:ed:19:5a:cc:85:fc:1d:eb:eb:14:58:8b:63:8a:45:61:96:53:ac:96:d7:21:33:b4:bc:6b:fa:c6:4a
Signer

Actual PE Digest

c9:17:2c:ed:19:5a:cc:85:fc:1d:eb:eb:14:58:8b:63:8a:45:61:96:53:ac:96:d7:21:33:b4:bc:6b:fa:c6:4a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\winforms_control\Microsoft.Web.WebView2.WinForms\obj\Release Stable APIs\netcoreapp3.0\Microsoft.Web.WebView2.WinForms.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Microsoft.Web.WebView2.Wpf.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2023 19:51

Not After

16-10-2024 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

44:3c:50:d9:83:21:c2:e3:9c:89:77:52:4e:5b:fb:51:0b:4d:fa:7b:60:17:56:78:29:5d:ea:55:4d:f8:35:1a
Signer

Actual PE Digest

44:3c:50:d9:83:21:c2:e3:9c:89:77:52:4e:5b:fb:51:0b:4d:fa:7b:60:17:56:78:29:5d:ea:55:4d:f8:35:1a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\wpf_control\Microsoft.Web.WebView2.Wpf\obj\Release Stable APIs\netcoreapp3.0\Microsoft.Web.WebView2.Wpf.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Newtonsoft.Json.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Certificate

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Not Before

15-01-2021 00:00

Not After

14-01-2046 23:59

Subject

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Certificate

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Not Before

15-07-2021 00:00

Not After

14-07-2031 23:59

Subject

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Not Before

13-08-2021 00:00

Not After

29-10-2024 23:59

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

12:a2:f8:77:6a:5b:04:46:97:f9:ac:0c:85:0b:b9:3c:9d:a2:ac:a9:a3:72:91:5b:d9:ed:db:47:d0:c2:9e:3d
Signer

Actual PE Digest

12:a2:f8:77:6a:5b:04:46:97:f9:ac:0c:85:0b:b9:3c:9d:a2:ac:a9:a3:72:91:5b:d9:ed:db:47:d0:c2:9e:3d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

/_/Src/Newtonsoft.Json/obj/Release/net6.0/Newtonsoft.Json.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 681KB - Virtual size: 681KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Xeno.dll

.dll windows:6 windows x64 arch:x64

27a311b1330c0aee48d1ddba70a324fa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

C:\Users\rizve\Desktop\Projects\Xeno\build\Release\net8.0-windows\Xeno.pdb

Imports

libcrypto-3-x64

X509_get_ext_d2i

EVP_DigestFinal_ex

ASN1_STRING_length

X509_free

BIO_new_socket

EVP_sha512

ASN1_STRING_get0_data

OPENSSL_sk_value

EVP_DigestInit_ex

EVP_MD_CTX_free

GENERAL_NAMES_free

EVP_DigestUpdate

EVP_sha256

EVP_md5

X509_get_subject_name

OPENSSL_sk_num

X509_STORE_add_cert

d2i_X509

EVP_MD_CTX_new

X509_NAME_get_text_by_NID

X509_STORE_free

OPENSSL_thread_stop

BIO_ctrl

libssl-3-x64

OPENSSL_init_ssl

SSL_connect

SSL_peek

SSL_free

SSL_CTX_get_cert_store

SSL_CTX_set_default_verify_paths

SSL_new

SSL_CTX_free

SSL_CTX_ctrl

SSL_CTX_set_cert_store

SSL_CTX_use_certificate_file

SSL_CTX_use_PrivateKey_file

SSL_CTX_new

SSL_write

SSL_get_verify_result

TLS_client_method

SSL_CTX_set_default_passwd_cb_userdata

SSL_ctrl

SSL_set_bio

SSL_pending

SSL_read

SSL_set_verify

SSL_CTX_load_verify_locations

SSL_get1_peer_certificate

SSL_shutdown

SSL_get_error

kernel32

IsProcessorFeaturePresent

ReleaseSRWLockExclusive

AcquireSRWLockExclusive

WakeAllConditionVariable

SleepConditionVariableSRW

IsDebuggerPresent

GetCurrentThreadId

GetSystemTimeAsFileTime

DisableThreadLibraryCalls

InitializeSListHead

SetCurrentDirectoryW

GetCurrentDirectoryW

CreateDirectoryW

CreateFileW

InitOnceBeginInitialize

InitOnceComplete

GetLocaleInfoEx

FormatMessageA

LocalFree

WideCharToMultiByte

GetFileInformationByHandleEx

CopyFileW

AreFileApisANSI

SetFileInformationByHandle

GetFullPathNameW

GetFileInformationByHandle

GetFileAttributesExW

SetUnhandledExceptionFilter

QueryPerformanceCounter

FindNextFileW

GetFileSizeEx

SetConsoleTitleA

CreateFile2

UnmapViewOfFile

MultiByteToWideChar

GlobalAlloc

GlobalFree

CloseHandle

FreeConsole

CreateFileMappingFromApp

GlobalLock

GetConsoleWindow

MapViewOfFileFromApp

GlobalUnlock

AllocConsole

SizeofResource

GetModuleHandleExW

GetProcessId

OpenProcess

CreateToolhelp32Snapshot

Sleep

GetLastError

Process32NextW

QueryFullProcessImageNameA

LockResource

Process32FirstW

LoadResource

FindResourceW

VirtualProtectEx

VirtualAllocEx

ReadProcessMemory

VirtualQueryEx

GetExitCodeProcess

TerminateProcess

GetModuleFileNameW

LoadLibraryA

GetCurrentProcessId

FindClose

FindFirstFileW

FindFirstFileExW

GetCurrentProcess

UnhandledExceptionFilter

RtlVirtualUnwind

RtlCaptureContext

RtlLookupFunctionEntry

GetProcAddress

GetModuleFileNameA

user32

GetWindowThreadProcessId

MapVirtualKeyW

keybd_event

EnumWindows

OpenClipboard

SetForegroundWindow

PostMessageW

SetClipboardData

EmptyClipboard

CloseClipboard

GetForegroundWindow

advapi32

GetCurrentHwProfileW

ole32

CoCreateGuid

msvcp140

_Thrd_detach

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z

??1_Locinfo@std@@QEAA@XZ

??0_Locinfo@std@@QEAA@PEBD@Z

?_Xlength_error@std@@YAXPEBD@Z

?_Xout_of_range@std@@YAXPEBD@Z

_Cnd_signal

_Thrd_hardware_concurrency

?__ExceptionPtrCreate@@YAXPEAX@Z

_Strxfrm

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

_Query_perf_frequency

??1_Lockit@std@@QEAA@XZ

??0_Lockit@std@@QEAA@H@Z

?_Throw_Cpp_error@std@@YAXH@Z

?uncaught_exceptions@std@@YAHXZ

?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

?_Xbad_alloc@std@@YAXXZ

?_Xinvalid_argument@std@@YAXPEBD@Z

?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z

?_Winerror_map@std@@YAHH@Z

?_Xbad_function_call@std@@YAXXZ

?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A

?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z

?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z

?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z

?id@?$ctype@D@std@@2V0locale@2@A

?_Random_device@std@@YAIXZ

?id@?$collate@D@std@@2V0locale@2@A

?_Syserror_map@std@@YAPEBDH@Z

?__ExceptionPtrDestroy@@YAXPEAX@Z

_Mtx_lock

?__ExceptionPtrCurrentException@@YAXPEAX@Z

?__ExceptionPtrRethrow@@YAXPEBX@Z

_Strcoll

_Cnd_do_broadcast_at_thread_exit

_Cnd_wait

_Thrd_id

_Query_perf_counter

_Thrd_join

_Mtx_unlock

_Cnd_broadcast

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z

?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ

?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ

?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z

?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ

?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z

?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z

?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z

?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z

?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ

??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ

?good@ios_base@std@@QEBA_NXZ

??7ios_base@std@@QEBA_NXZ

?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z

?tolower@?$ctype@D@std@@QEBADD@Z

?always_noconv@codecvt_base@std@@QEBA_NXZ

??1facet@locale@std@@MEAA@XZ

??0facet@locale@std@@IEAA@_K@Z

?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ

?_Incref@facet@locale@std@@UEAAXXZ

??Bid@locale@std@@QEAA_KXZ

ws2_32

bind

closesocket

select

shutdown

listen

WSAGetLastError

WSAAccept

WSASocketW

inet_pton

WSACleanup

WSAStartup

getpeername

getsockname

send

socket

ntohs

connect

recv

getsockopt

setsockopt

getaddrinfo

__WSAFDIsSet

getnameinfo

ioctlsocket

freeaddrinfo

crypt32

CertFreeCertificateContext

CertEnumCertificatesInStore

CertCloseStore

CertOpenSystemStoreW

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset

memchr

__C_specific_handler

__current_exception_context

__current_exception

wcsrchr

strchr

_purecall

__std_exception_copy

__std_exception_destroy

__std_terminate

memcpy

memcmp

memmove

__std_type_info_destroy_list

_CxxThrowException

api-ms-win-crt-heap-l1-1-0

malloc

free

_callnewh

realloc

api-ms-win-crt-stdio-l1-1-0

freopen_s

_fseeki64

__stdio_common_vsprintf

fread

_get_stream_buffer_pointers

fsetpos

ungetc

setvbuf

fgetpos

fwrite

fputc

fclose

fflush

__acrt_iob_func

fgetc

api-ms-win-crt-runtime-l1-1-0

system

terminate

_seh_filter_dll

_configure_narrow_argv

_initialize_narrow_environment

_initialize_onexit_table

_register_onexit_function

_execute_onexit_table

_crt_atexit

_cexit

_initterm

_initterm_e

abort

_invalid_parameter_noinfo

_errno

_invalid_parameter_noinfo_noreturn

_beginthreadex

api-ms-win-crt-math-l1-1-0

ceil

atan2

atan

asin

floor

fmod

log

log10

acos

cosh

ceilf

log2

pow

round

sin

sinh

sqrt

tan

exp

ldexp

cos

_dsign

tanh

api-ms-win-crt-convert-l1-1-0

strtoul

atoi

strtoull

strtoll

strtod

strtol

api-ms-win-crt-string-l1-1-0

strncmp

isdigit

strnlen

strspn

strcpy_s

_wcsicmp

isalnum

strcmp

api-ms-win-crt-filesystem-l1-1-0

_wstat64i32

_lock_file

_unlock_file

api-ms-win-crt-locale-l1-1-0

localeconv

___lc_codepage_func

Exports

Attach

Compilable

DeAllocConsole

Execute

GetClients

Initialize

SetSettings

Sections

.text
Size: 975KB - Virtual size: 975KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Xeno.exe

.exe .ps1 windows:4 windows x86 arch:x86 polyglot

a9c887a4f18a3fede2cc29ceea138ed3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc

memset

strcmp

strcpy

getenv

sprintf

fopen

fwrite

fclose

__argc

__argv

_environ

_XcptFilter

__set_app_type

_controlfp

__getmainargs

exit

shell32

ShellExecuteA

kernel32

SetUnhandledExceptionFilter

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 7.7MB - Virtual size: 7.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.fingerprint

Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.json

Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/protocols.json

Xeno.exe.WebView2/EBWebView/BrowserMetrics-spare.pma

Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2024.12.2/crl-set

Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2024.12.2/manifest.fingerprint

Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2024.12.2/manifest.json

Xeno.exe.WebView2/EBWebView/Crashpad/settings.dat

Xeno.exe.WebView2/EBWebView/Crashpad/throttle_store.dat

Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0

Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1

Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2

Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3

Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000002

.gz

f_000002

Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/index

Xeno.exe.WebView2/EBWebView/Default/Code Cache/js/index

Xeno.exe.WebView2/EBWebView/Default/Code Cache/js/index-dir/the-real-index

Xeno.exe.WebView2/EBWebView/Default/Code Cache/wasm/index

Xeno.exe.WebView2/EBWebView/Default/Code Cache/wasm/index-dir/the-real-index

Xeno.exe.WebView2/EBWebView/Default/DIPS

Xeno.exe.WebView2/EBWebView/Default/DashTrackerDatabase

Xeno.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_0

Xeno.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_1

Xeno.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_2

Xeno.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_3

Xeno.exe.WebView2/EBWebView/Default/DawnGraphiteCache/index

Xeno.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_0

Xeno.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_1

Xeno.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_2

Xeno.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_3

Xeno.exe.WebView2/EBWebView/Default/DawnWebGPUCache/index

Xeno.exe.WebView2/EBWebView/Default/EdgeEDrop/EdgeEDropSQLite.db

Xeno.exe.WebView2/EBWebView/Default/Extension Rules/000003.log

Xeno.exe.WebView2/EBWebView/Default/Extension Rules/CURRENT

Xeno.exe.WebView2/EBWebView/Default/Extension Rules/LOG

Xeno.exe.WebView2/EBWebView/Default/Extension Rules/MANIFEST-000001

Xeno.exe.WebView2/EBWebView/Default/Extension Scripts/000003.log

Xeno.exe.WebView2/EBWebView/Default/Extension Scripts/CURRENT

Xeno.exe.WebView2/EBWebView/Default/Extension Scripts/LOG

Xeno.exe.WebView2/EBWebView/Default/Extension Scripts/MANIFEST-000001

Xeno.exe.WebView2/EBWebView/Default/Extension State/000003.log

Xeno.exe.WebView2/EBWebView/Default/Extension State/CURRENT

Xeno.exe.WebView2/EBWebView/Default/Extension State/LOG

Xeno.exe.WebView2/EBWebView/Default/Extension State/LOG.old

Xeno.exe.WebView2/EBWebView/Default/Extension State/MANIFEST-000001

Xeno.exe.WebView2/EBWebView/Default/ExtensionActivityComp

Xeno.exe.WebView2/EBWebView/Default/ExtensionActivityEdge

Xeno.exe.WebView2/EBWebView/Default/Favicons

Xeno.exe.WebView2/EBWebView/Default/GPUCache/data_0

Xeno.exe.WebView2/EBWebView/Default/GPUCache/data_1

Xeno.exe.WebView2/EBWebView/Default/GPUCache/data_2

Xeno.exe.WebView2/EBWebView/Default/GPUCache/data_3

Xeno.exe.WebView2/EBWebView/Default/GPUCache/index

Xeno.exe.WebView2/EBWebView/Default/History

Xeno.exe.WebView2/EBWebView/Default/Local Storage/leveldb/CURRENT

Xeno.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG

Xeno.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG.old

Xeno.exe.WebView2/EBWebView/Default/Local Storage/leveldb/MANIFEST-000001

Xeno.exe.WebView2/EBWebView/Default/Login Data

Xeno.exe.WebView2/EBWebView/Default/Network Action Predictor

Xeno.exe.WebView2/EBWebView/Default/Network/Cookies

Xeno.exe.WebView2/EBWebView/Default/Network/Network Persistent State

Xeno.exe.WebView2/EBWebView/Default/Network/Reporting and NEL

Xeno.exe.WebView2/EBWebView/Default/Network/SCT Auditing Pending Reports

Xeno.exe.WebView2/EBWebView/Default/Network/Sdch Dictionaries

Xeno.exe.WebView2/EBWebView/Default/Network/TransportSecurity

Xeno.exe.WebView2/EBWebView/Default/Network/Trust Tokens

Xeno.exe.WebView2/EBWebView/Default/Preferences

Xeno.exe.WebView2/EBWebView/Default/PreferredApps

Xeno.exe.WebView2/EBWebView/Default/README

Xeno.exe.WebView2/EBWebView/Default/Safe Browsing Network/Safe Browsing Cookies

Xeno.exe.WebView2/EBWebView/Default/Secure Preferences

Xeno.exe.WebView2/EBWebView/Default/Session Storage/000003.log

Xeno.exe.WebView2/EBWebView/Default/Session Storage/CURRENT

Xeno.exe.WebView2/EBWebView/Default/Session Storage/LOG

Xeno.exe.WebView2/EBWebView/Default/Session Storage/LOG.old

Xeno.exe.WebView2/EBWebView/Default/Session Storage/MANIFEST-000001

Xeno.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index

Xeno.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index-dir/the-real-index

Xeno.exe.WebView2/EBWebView/Default/Shared Dictionary/db

Xeno.exe.WebView2/EBWebView/Default/SharedStorage

Xeno.exe.WebView2/EBWebView/Default/Site Characteristics Database/000003.log

Xeno.exe.WebView2/EBWebView/Default/Site Characteristics Database/CURRENT

Xeno.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG

Xeno.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG.old

Xeno.exe.WebView2/EBWebView/Default/Site Characteristics Database/MANIFEST-000001

Xeno.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/000003.log

Xeno.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/CURRENT

Xeno.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG

Xeno.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG.old

Xeno.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/MANIFEST-000001

Xeno.exe.WebView2/EBWebView/Default/Top Sites

Xeno.exe.WebView2/EBWebView/Default/Visited Links

Xeno.exe.WebView2/EBWebView/Default/Web Data

Xeno.exe.WebView2/EBWebView/Default/favorites_diagnostic.log

Xeno.exe.WebView2/EBWebView/Default/heavy_ad_intervention_opt_out.db

Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/000003.log

Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/CURRENT

Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/LOG

Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/LOG.old

Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/MANIFEST-000001

Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/000003.log

Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/CURRENT

Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG

Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG.old

Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/MANIFEST-000001

Xeno.exe.WebView2/EBWebView/Edge Cloud Config/CloudConfigLog

Xeno.exe.WebView2/EBWebView/Edge Cloud Config/OperationConfig

Xeno.exe.WebView2/EBWebView/GrShaderCache/data_0

Xeno.exe.WebView2/EBWebView/GrShaderCache/data_1

Xeno.exe.WebView2/EBWebView/GrShaderCache/data_2

Xeno.exe.WebView2/EBWebView/GrShaderCache/data_3

Xeno.exe.WebView2/EBWebView/GrShaderCache/f_000001

Xeno.exe.WebView2/EBWebView/GrShaderCache/f_000002

Xeno.exe.WebView2/EBWebView/GrShaderCache/f_000003

Xeno.exe.WebView2/EBWebView/GrShaderCache/f_000004

Xeno.exe.WebView2/EBWebView/GrShaderCache/index

Xeno.exe.WebView2/EBWebView/GraphiteDawnCache/data_0

Xeno.exe.WebView2/EBWebView/GraphiteDawnCache/data_1

Xeno.exe.WebView2/EBWebView/GraphiteDawnCache/data_2

Xeno.exe.WebView2/EBWebView/GraphiteDawnCache/data_3

Xeno.exe.WebView2/EBWebView/GraphiteDawnCache/index

Xeno.exe.WebView2/EBWebView/Last Version

Xeno.exe.WebView2/EBWebView/Local State

Xeno.exe.WebView2/EBWebView/OriginTrials/0.0.1.7/manifest.fingerprint

Xeno.exe.WebView2/EBWebView/OriginTrials/0.0.1.7/manifest.json

Xeno.exe.WebView2/EBWebView/PKIMetadata/21.0.0.0/crs.pb

Xeno.exe.WebView2/EBWebView/PKIMetadata/21.0.0.0/ct_config.pb

Xeno.exe.WebView2/EBWebView/PKIMetadata/21.0.0.0/kp_pinslist.pb

Xeno.exe.WebView2/EBWebView/PKIMetadata/21.0.0.0/manifest.fingerprint

Xeno.exe.WebView2/EBWebView/PKIMetadata/21.0.0.0/manifest.json

Xeno.exe.WebView2/EBWebView/ShaderCache/data_0

Xeno.exe.WebView2/EBWebView/ShaderCache/data_1

Xeno.exe.WebView2/EBWebView/ShaderCache/data_2

Xeno.exe.WebView2/EBWebView/ShaderCache/data_3

Xeno.exe.WebView2/EBWebView/ShaderCache/index

Xeno.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings

Xeno.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings_2.0-0

Xeno.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll

.dll windows:6 windows x64 arch:x64

f51f0d794c7fcc93503306a9cd9ba55d

Code Sign

33:00:00:01:88:af:52:d6:b9:92:6d:e8:f9:00:00:00:00:01:88
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:39

Not After

03-03-2021 18:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:33

Not After

01-09-2022 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d
Signer

Actual PE Digest

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d

Digest Algorithm

sha256

PE Digest Matches

true

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d
Signer

Actual PE Digest

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\1\s\build\bin\Release\Microsoft.CognitiveServices.Speech.core.pdb

Imports

crypt32

CertFreeCertificateContext

CryptDecodeObjectEx

CryptStringToBinaryA

CertSetCertificateContextProperty

CertCreateCertificateContext

ws2_32

WSAStartup

WSAIoctl

recv

WSAGetLastError

freeaddrinfo

ioctlsocket

connect

closesocket

socket

getaddrinfo

send

secur32

EncryptMessage

AcquireCredentialsHandleA

DeleteSecurityContext

InitializeSecurityContextA

FreeCredentialsHandle

DecryptMessage

QueryContextAttributesA

advapi32

CryptAcquireContextA

EventRegister

EventSetInformation

EventWriteTransfer

CryptReleaseContext

CryptDestroyKey

EventUnregister

CryptImportKey

ncrypt

NCryptOpenStorageProvider

NCryptFreeObject

NCryptImportKey

dbghelp

SymFromAddr

SymInitialize

SymCleanup

kernel32

LeaveCriticalSection

InitializeCriticalSectionAndSpinCount

DeleteCriticalSection

InitializeSListHead

CreateEventW

GetModuleHandleW

RtlCaptureContext

GetSystemTime

GetModuleFileNameA

GetSystemTimeAsFileTime

GetCurrentThreadId

GetCurrentProcessId

InitOnceBeginInitialize

InitOnceComplete

AcquireSRWLockShared

AcquireSRWLockExclusive

ReleaseSRWLockShared

EnterCriticalSection

WaitForSingleObjectEx

QueryPerformanceCounter

IsDebuggerPresent

IsProcessorFeaturePresent

TerminateProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlVirtualUnwind

VerSetConditionMask

VerifyVersionInfoW

GetCurrentProcess

FormatMessageW

GetLastError

LoadLibraryA

GetProcAddress

WaitForMultipleObjects

WaitForSingleObject

Sleep

SetEvent

CloseHandle

CreateThread

ResetEvent

CreateEventExA

CreateEventA

LocalFree

FormatMessageA

GetModuleHandleA

RtlLookupFunctionEntry

ReleaseSRWLockExclusive

msvcp140

_Mtx_unlock

?_Xbad_alloc@std@@YAXXZ

?_Xbad_function_call@std@@YAXXZ

?_Xlength_error@std@@YAXPEBD@Z

?_Syserror_map@std@@YAPEBDH@Z

_Mtx_destroy_in_situ

_Mtx_init_in_situ

_Mtx_current_owns

_Query_perf_frequency

?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z

?_Throw_Cpp_error@std@@YAXH@Z

_Cnd_timedwait

_Query_perf_counter

_Xtime_get_ticks

?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z

?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A

??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z

??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ

??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z

?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z

?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z

?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ

?_Incref@facet@locale@std@@UEAAXXZ

??Bid@locale@std@@QEAA_KXZ

?_Xout_of_range@std@@YAXPEBD@Z

??1_Lockit@std@@QEAA@XZ

??0_Lockit@std@@QEAA@H@Z

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

?classic@locale@std@@SAAEBV12@XZ

?id@?$ctype@D@std@@2V0locale@2@A

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z

?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?toupper@?$ctype@D@std@@QEBADD@Z

?tolower@?$ctype@D@std@@QEBADD@Z

?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z

?uncaught_exception@std@@YA_NXZ

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z

?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?_Throw_C_error@std@@YAXH@Z

?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z

?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z

?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ

?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ