Ｒｅｌｅａｓｅ - １[.]１２ - ｘ６４[.]zip

Resubmissions

16/03/2025, 20:22

250316-y5r1kssl15 9

16/03/2025, 20:19

250316-y37cgssly3 9

Sharing

Copy URL

Twitter E-mail

General

Target

Ｒｅｌｅａｓｅ - １.１２ - ｘ６４.zip
Size

49.3MB
MD5

a39ae12ea9341704557a79b568b36d25
SHA1

7c274f3c944a613c95555f98d544b90683513c64
SHA256

83c3da74d138306ffef0f2cbcd64c67b3b989431cde7cff5388c1796d7995768
SHA512

2e841d3f0d98497aa27bc7f6089a9359b444a5436f3b50cfeba85166855bf429d5487c2d34f4c2423b68a9b24ad0ca706a7deda8d944ba6ebcb6bb7a02450e6b
SSDEEP

1572864:DNM0vGEkTXGuIdBun7UJdd2a+DjXu+hm41ZyZItEB:RDvGbTXBIAzje9VZIw

Score

9^/10

vmprotect cryptone packer

Malware Config

Signatures

CryptOne packer 3 IoCs

Detects CryptOne packer defined in NCC blogpost.

cryptone packer

resource	yara_rule
static1/unpack002/Executor/autoexec/bin	cryptone
static1/unpack002/Executor/autoexec/local	cryptone
static1/unpack002/Executor/autoexec/scripts	cryptone

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
static1/unpack002/Executor/Releases.exe	vmprotect

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Executor/locales/resources/app.asar.unpacked/node_modules/btime/binding.node
unpack002/Executor/locales/resources/app.asar.unpacked/node_modules/get-fonts/binding.node
unpack002/Executor/locales/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.node

Files

Ｒｅｌｅａｓｅ - １.１２ - ｘ６４.zip
.zip

Password: xeno
README.txt
Release.zip
.zip

Password: xeno
Executor/Releases.exe
.exe windows:6 windows x86 arch:x86

Password: xeno

40f6563dcb9e8aed6d908f9990347ae8

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3e:39:1b:5c:c7:4f:87:89:be:63:7c:42:ba:3c:3e:3e
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

24/07/2024, 10:14

Not After

24/07/2027, 10:14

Subject

CN=Solveig Multimedia Germany GmbH,O=Solveig Multimedia Germany GmbH,L=Hamburg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

02/11/2023, 08:32

Not After

30/10/2034, 08:32

Subject

CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b1:49:de:29:41:80:f7:19:84:c6:84:fc:9e:e2:aa:a5:96:d1:07:60:9c:c4:9c:cd:2c:ff:8e:65:1b:2b:8d:f9
Signer

Actual PE Digest

b1:49:de:29:41:80:f7:19:84:c6:84:fc:9e:e2:aa:a5:96:d1:07:60:9c:c4:9c:cd:2c:ff:8e:65:1b:2b:8d:f9

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundW
timeGetTime
timeSetEvent

quartz

AMGetErrorTextW

wmvcore

WMCreateIndexer
WMIsContentProtected

kernel32

FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetStdHandle
SetStdHandle
HeapQueryInformation
ChangeTimerQueueTimer
FreeLibraryAndExitThread
ExitThread
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
GetCommandLineW
GetCommandLineA
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
GetACP
GetCPInfo
GetStringTypeW
LCMapStringW
SwitchToThread
TryEnterCriticalSection
SetEnvironmentVariableW
SetConsoleCtrlHandler
WriteConsoleW
CreateTimerQueue
SignalObjectAndWait
GetLogicalProcessorInformation
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
WaitForSingleObjectEx
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LocalUnlock
LocalLock
SearchPathW
VerifyVersionInfoW
VerSetConditionMask
FindResourceExW
GetWindowsDirectoryW
SetErrorMode
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GetAtomNameW
SetFileAttributesW
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExW
GetStringTypeExW
lstrcmpiW
GetCurrentProcess
UnlockFile
SetEndOfFile
LockFile
GetShortPathNameW
CreateTimerQueueTimer
GlobalFlags
GetProfileIntW
GetThreadLocale
LocalReAlloc
LocalAlloc
GlobalHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetUserDefaultLCID
ReplaceFileW
GetFileAttributesW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
lstrcmpA
SystemTimeToTzSpecificLocalTime
FileTimeToLocalFileTime
lstrcmpW
GetSystemDirectoryW
EncodePointer
GlobalGetAtomNameW
LoadLibraryA
GetModuleHandleA
OutputDebugStringA
ReleaseMutex
ReleaseSemaphore
SuspendThread
DebugBreak
IsDBCSLeadByteEx
VirtualFree
VirtualAlloc
QueryPerformanceFrequency
QueryPerformanceCounter
SetFileTime
GetFileTime
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
FindNextFileW
FindFirstFileW
FindClose
SetFilePointer
FlushFileBuffers
lstrcatW
TerminateThread
DuplicateHandle
GlobalReAlloc
ReadFile
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
VirtualQuery
VirtualProtect
GetSystemInfo
CreateSemaphoreW
WaitForMultipleObjects
GetThreadPriority
SetThreadPriority
GetCurrentThread
GetSystemDefaultLCID
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
RaiseException
DecodePointer
GlobalMemoryStatus
CompareFileTime
GetEnvironmentVariableW
GlobalFindAtomW
GlobalAddAtomW
MulDiv
GlobalDeleteAtom
GetProcAddress
GetVersionExW
GetTickCount
GetVersion
SetLastError
InitializeCriticalSectionEx
OutputDebugStringW
CompareStringW
FormatMessageW
LocalFree
FreeResource
ResumeThread
ResetEvent
GlobalFree
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
MoveFileW
lstrlenW
lstrcpyW
lstrcpynW
GlobalSize
RtlCaptureStackBackTrace
LoadLibraryW
LoadLibraryExW
FreeLibrary
GetCurrentThreadId
ExitProcess
GetCurrentProcessId
Sleep
CreateEventW
SetEvent
GetTempFileNameW
GetFileSize
DeleteFileW
CreateDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
CopyFileW
GlobalLock
GlobalUnlock
GlobalAlloc
CreateProcessW
GetExitCodeProcess
OpenMutexW
CreateMutexW
GetVolumeInformationW
GetFullPathNameW
CloseHandle
GetTempPathW
WriteFile
CreateFileW
SystemTimeToFileTime
FileTimeToSystemTime
GetLocalTime
GetSystemTimeAsFileTime
GetSystemTime
MultiByteToWideChar
GetModuleHandleW
GetModuleFileNameW
GetLastError
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
CreateThread
WaitForSingleObject
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
UnregisterWait
GetThreadTimes
SetProcessAffinityMask
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
WaitForMultipleObjectsEx
GetModuleHandleExW
VirtualQuery
GetSystemTimeAsFileTime
GetModuleHandleA
CreateEventA
GetModuleFileNameW
LoadLibraryA
TerminateProcess
GetCurrentProcess
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
GetCurrentThreadId
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
WriteProcessMemory
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
FreeLibrary
GetTickCount
GlobalFree
GetProcAddress
LocalAlloc
LocalFree
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
LoadResource
MultiByteToWideChar
FindResourceExW
FindResourceExA
WideCharToMultiByte
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
CreateFileW
LoadLibraryW
GetLastError
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetCommandLineA
RaiseException
RtlUnwind
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
HeapReAlloc
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
WriteFile
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
SetStdHandle
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

MonitorFromPoint
GetWindowInfo
AnimateWindow
GetWindowRgn
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
CharLowerBuffW
DestroyAcceleratorTable
GetQueueStatus
UnregisterClassW
EnumDisplayDevicesW
CreateMenu
UnregisterHotKey
RegisterHotKey
ShowScrollBar
FindWindowW
GetForegroundWindow
IsIconic
EndPaint
BeginPaint
UpdateLayeredWindow
GetScrollInfo
SetParent
UnionRect
FrameRect
GetClipboardData
WindowFromPoint
GetIconInfo
DestroyIcon
GetClassNameW
IsRectEmpty
DrawFocusRect
RemovePropW
GetPropW
SetPropW
WindowFromDC
DrawStateW
GetMenuItemRect
GetMenuDefaultItem
SetMenuInfo
GetMenuInfo
DeleteMenu
AppendMenuW
CreatePopupMenu
DrawMenuBar
SetMenu
GetMessagePos
DrawEdge
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetMenu
IsMenu
GetClassInfoW
DefWindowProcW
ReleaseDC
GetDC
IntersectRect
GetSysColor
GetUpdateRect
TranslateAcceleratorW
LoadAcceleratorsW
CallWindowProcW
DestroyCursor
CreateCursor
OffsetRect
GetMonitorInfoW
SetRect
InflateRect
SetDlgItemInt
GetDlgItemInt
SetDlgItemTextW
LoadImageW
TrackMouseEvent
GetDlgItemTextW
CheckDlgButton
CheckRadioButton
UnregisterClassA
IsDlgButtonChecked
CopyImage
LoadIconW
LoadCursorW
GetParent
GetDesktopWindow
SetWindowLongW
GetWindowLongW
PtInRect
EqualRect
CopyRect
SetCursor
LockWindowUpdate
RedrawWindow
SetWindowRgn
GetDCEx
SetActiveWindow
UpdateWindow
SetMenuItemBitmaps
WinHelpW
GetMenuBarInfo
GetKeyboardLayout
UnpackDDElParam
ReuseDDElParam
GetMenuCheckMarkDimensions
GetMessageTime
RegisterClassW
GetClassInfoExW
CreateWindowExW
SetWindowPlacement
TrackPopupMenuEx
ValidateRect
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
GetWindowTextW
GetWindowTextLengthW
AdjustWindowRectEx
MapWindowPoints
TrackPopupMenu
RemoveMenu
InsertMenuW
GetSubMenu
EnableMenuItem
CheckMenuItem
GetMenuState
LoadMenuW
GetSystemMetrics
IsWindowEnabled
SetTimer
MsgWaitForMultipleObjects
GetCapture
GetKeyState
SetFocus
CharUpperW
RegisterClipboardFormatW
MonitorFromRect
GetMenuStringW
CharLowerW
MsgWaitForMultipleObjectsEx
DestroyWindow
CreateDialogIndirectParamW
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
BringWindowToTop
InsertMenuItemW
GetWindowThreadProcessId
SetRectEmpty
GetLastActivePopup
SendDlgItemMessageW
ScrollWindowEx
SetWindowTextW
IsDialogMessageW
TranslateMessage
SendDlgItemMessageA
PostQuitMessage
ShowOwnedPopups
SetWindowContextHelpId
MapDialogRect
CharNextW
DrawIcon
CopyAcceleratorTableW
GetClassLongW
GetTopWindow
InvalidateRgn
RegisterWindowMessageW
SendMessageW
IsChild
GetFocus
KillTimer
EnableWindow
GetSystemMenu
DestroyMenu
MenuItemFromPoint
GetCursorPos
GetMenuItemID
GetMenuItemCount
ModifyMenuW
GetMenuItemInfoW
SetMenuItemInfoW
PostMessageW
IsWindowVisible
DrawTextW
DrawTextExW
GetNextDlgGroupItem
GrayStringW
TabbedTextOutW
GetWindowRect
ScreenToClient
GetWindowDC
GetClientRect
FillRect
LoadBitmapW
GetWindow
LoadStringW
MessageBoxW
SetCapture
ReleaseCapture
InvalidateRect
ClientToScreen
SystemParametersInfoW
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
SetForegroundWindow
EnumWindows
wsprintfW
GetMessageW
DispatchMessageW
PeekMessageW
PostThreadMessageW
IsWindow
MessageBeep
GetKeyNameTextW
MapVirtualKeyW
IsClipboardFormatAvailable
RealChildWindowFromPoint
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
GetSysColorBrush
GetDialogBaseUnits
GetAsyncKeyState
DrawIconEx
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
EnumDisplayMonitors
ShowWindow
SetLayeredWindowAttributes
MoveWindow
SetWindowPos
SetClassLongW
DrawFrameControl
SetCursorPos
CopyIcon
GetWindowPlacement
IsZoomed
GetComboBoxInfo
WaitMessage
SetScrollInfo
GetTabbedTextExtentW
InSendMessage
SendNotifyMessageW
SubtractRect
EnumChildWindows
CharUpperBuffW
GetDoubleClickTime
SetMenuDefaultItem
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
MonitorFromWindow
GetUserObjectInformationW
CharUpperBuffW
MessageBoxW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW

gdi32

CombineRgn
CreateHatchBrush
CreatePatternBrush
CreateRectRgnIndirect
GetNearestColor
GetTextExtentPoint32W
SelectClipRgn
SetBrushOrgEx
UnrealizeObject
GetRgnBox
GetStockObject
SetBkColor
SetTextColor
GetCharacterPlacementW
CombineTransform
CreateFontW
SetStretchBltMode
OffsetRgn
PtInRegion
ExtCreateRegion
GetDIBits
ExtCreatePen
GetTextColor
LineTo
MoveToEx
AddFontResourceW
TranslateCharsetInfo
SetBkMode
SetMapMode
AbortPath
BeginPath
CloseFigure
EndPath
GetPath
CopyMetaFileW
CreateDIBPatternBrushPt
ExcludeClipRect
GetClipBox
GetClipRgn
GetCurrentPositionEx
GetObjectType
IntersectClipRect
OffsetClipRgn
PlayMetaFile
RestoreDC
SaveDC
ExtSelectClipRgn
SelectPalette
SetMapperFlags
SetGraphicsMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextCharacterExtra
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetPixel
ModifyWorldTransform
SetColorAdjustment
StartDocW
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
PatBlt
SetRectRgn
CreateEllipticRgn
Ellipse
GetCharWidthW
StretchDIBits
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetDIBColorTable
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
GetCurrentObject
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
CloseMetaFile
CreateMetaFileW
DeleteMetaFile
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetROP2
GetBkMode
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextFaceW
SetBitmapBits
RoundRect
GetDeviceCaps
CreateBitmapIndirect
CreatePen
CreateDIBSection
StretchBlt
GetPixel
GetBitmapBits
FillRgn
CreateRectRgn
CreateBitmap
Rectangle
CreateFontIndirectW
GetObjectW
GetTextMetricsW
SelectObject
DeleteObject
DeleteDC
CreateSolidBrush
CreateDCW
LPtoDP
DPtoLP
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetMapMode
GetBkColor
Escape
CreateCompatibleDC
CreateCompatibleBitmap
SetWorldTransform
AngleArc
BitBlt

msimg32

AlphaBlend
TransparentBlt

comdlg32

CommDlgExtendedError

winspool.drv

DocumentPropertiesW
GetJobW
OpenPrinterW
ClosePrinter

advapi32

RegEnumValueW
RegOpenKeyW
RegQueryValueExW
RegConnectRegistryW
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegDeleteKeyW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueW
RegEnumKeyW
RegQueryValueW
GetFileSecurityW
SetFileSecurityW
RegCloseKey

shell32

SHGetPathFromIDListW
ShellExecuteExW
SHAppBarMessage
SHGetDesktopFolder
SHGetSpecialFolderLocation
ExtractIconW
SHGetFileInfoW
SHAddToRecentDocs
DragFinish
SHGetMalloc
SHBrowseForFolderW
SHGetFolderPathW
DragQueryFileW
SHParseDisplayName
SHBindToParent
SHGetSpecialFolderPathW
SHOpenFolderAndSelectItems
ord190
ord155
Shell_NotifyIconW
DragAcceptFiles
ShellExecuteW

comctl32

ImageList_AddMasked
_TrackMouseEvent
ImageList_GetImageCount
ImageList_Add
ImageList_ReplaceIcon
ImageList_Draw
ImageList_Replace
ImageList_GetIcon
ImageList_GetIconSize
ImageList_SetBkColor
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove

shlwapi

PathStripToRootW
PathIsUNCW
PathRemoveExtensionW
PathCombineW
StrCmpW
SHCreateStreamOnFileW
PathFindExtensionW
PathFileExistsW
PathAppendW
StrCpyW
PathRemoveFileSpecW
PathIsRelativeW
PathFindFileNameW
StrFormatKBSizeW

uxtheme

GetWindowTheme
GetThemeSysColor
GetThemeColor
DrawThemeText
DrawThemeParentBackground
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
DrawThemeBackground
CloseThemeData
OpenThemeData
GetCurrentThemeName

ole32

OleGetIconOfClass
OleSetContainedObject
OleSaveToStream
OleSave
OleLoad
CreateOleAdviseHolder
OleCreateLinkToFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleCreate
CreateGenericComposite
GetHGlobalFromILockBytes
WriteClassStm
OleRegEnumVerbs
OleRegGetMiscStatus
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateFileMoniker
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
OleLockRunning
OleSetMenuDescriptor
CoRegisterMessageFilter
OleUninitialize
OleInitialize
OleRun
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
PropVariantCopy
CLSIDFromProgID
CoInitializeEx
SetConvertStg
OleRegGetUserType
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
WriteClassStg
ReadClassStg
PropVariantClear
StringFromGUID2
CLSIDFromString
CoLoadLibrary
CoFreeUnusedLibraries
CoRevokeClassObject
CoRegisterClassObject
CreateBindCtx
CoTaskMemAlloc
GetRunningObjectTable
CreateItemMoniker
CoTaskMemFree
StringFromCLSID
CreateStreamOnHGlobal
ReleaseStgMedium
CoInitialize
CoCreateGuid
CoFreeUnusedLibrariesEx
CoTreatAsClass
CreateDataAdviseHolder
OleIsRunning
CoUninitialize
CoCreateInstance
CoGetMalloc
OleQueryLinkFromData
OleQueryCreateFromData
OleCreateFromFile

oleaut32

SafeArrayDestroy
SafeArrayCreate
SysStringLen
SysFreeString
SafeArrayGetUBound
SysAllocString
SysStringByteLen
SysAllocStringByteLen
VariantCopy
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SysAllocStringLen
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayPutElement
SafeArrayCreateVector
VarBstrCmp
OleCreatePropertyFrame
OleLoadPicture
VarCmp
VariantInit
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
SysReAllocStringLen
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantClear
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayRedim
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetElement
SafeArrayCopy
SafeArrayPtrOfIndex
VarDateFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VarBstrFromDec
VarBstrCat
GetErrorInfo
SetErrorInfo
CreateErrorInfo
SafeArrayGetVartype
VariantChangeType
VarDecFromStr

oledlg

OleUIBusyW

hhctrl.ocx

ord15

gdiplus

GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipDrawImage
GdipLoadImageFromFile
GdipLoadImageFromStreamICM
GdipLoadImageFromFileICM
GdipGetImageWidth
GdipGetImageHeight
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipCreateFromHWND
GdipCreateFromHWNDICM
GdipDrawImageRectI
GdiplusShutdown
GdiplusStartup
GdipGetImageGraphicsContext
GdipCreateBitmapFromHBITMAP
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromResource
GdipFillRectangle
GdipFillRectangleI
GdipCreateFontFromDC
GdipCreateFontFromLogfontW
GdipDeleteFont
GdipDrawString
GdipMeasureString
GdipCreateStringFormat
GdipDeleteStringFormat
GdipCreateBitmapFromScan0
GdipDrawImageI
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipCreateFont
GdipStringFormatGetGenericTypographic
GdipCloneStringFormat
GdipLoadImageFromStream
GdipDrawImageRectRectI
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipSetInterpolationMode
GdipGetImageEncodersSize
GdipCloneImage
GdipFillEllipse
GdipDrawLine
GdipDeleteGraphics
GdipCreateFromHDC
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipFree
GdipAlloc
GdipGetImageEncoders
GdipSetStringFormatAlign
GdipDisposeImage

ws2_32

getaddrinfo
WSAGetLastError
socket
setsockopt
send
select
recv
ioctlsocket
connect
closesocket
WSACleanup
WSAStartup
freeaddrinfo

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

winhttp

WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpOpenRequest
WinHttpSetOption
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpCrackUrl
WinHttpConnect
WinHttpCloseHandle
WinHttpOpen

wtsapi32

WTSSendMessageW

Sections

.text
Size: - Virtual size: 8.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: 7.9MB - Virtual size: 7.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 725KB - Virtual size: 24.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Executor/autoexec/bin
.dll regsvr32 windows:5 windows x86 arch:x86

Password: xeno

a9fd3e7f71a802c8eee0a502f46de991

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

04/03/2014, 00:00

Not After

03/03/2024, 23:59

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4e:a1:e8:9e:15:ea:4f:fa:93:79:84:d8:8f:54:5f:ba
Certificate

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

14/05/2015, 00:00

Not After

07/05/2017, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Flash Player,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

58:87:9f:24:25:99:c5:8a:6a:3d:a1:73:d2:9f:04:d8:cb:0a:4b:54
Signer

Actual PE Digest

58:87:9f:24:25:99:c5:8a:6a:3d:a1:73:d2:9f:04:d8:cb:0a:4b:54

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Flash.pdb

Imports

version

VerQueryValueW
GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW

winmm

mixerGetID
waveInGetDevCapsA
waveOutGetDevCapsA
waveOutMessage
waveOutGetDevCapsW
waveInGetDevCapsW
waveOutGetNumDevs
waveInGetNumDevs
waveInStart
waveInAddBuffer
waveInStop
waveInMessage
waveInUnprepareHeader
waveInReset
waveInPrepareHeader
waveInOpen
timeKillEvent
timeGetTime
timeSetEvent
timeEndPeriod
timeBeginPeriod
timeGetDevCaps
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutReset
waveOutClose
waveOutOpen
waveOutGetPosition
mixerClose
mixerGetLineControlsA
mixerGetLineInfoA
mixerGetDevCapsA
mixerOpen
mixerGetControlDetailsA
waveOutRestart
waveOutPause
mixerSetControlDetails
waveInClose
waveInGetPosition

wininet

InternetSetCookieW
InternetGetCookieW

crypt32

CertFindCertificateInStore
CertVerifySubjectCertificateContext
CertCreateCertificateContext
CryptGetMessageCertificates
CryptVerifyMessageSignature
CertAddStoreToCollection
CertOpenStore
CertVerifyRevocation
CertFreeCertificateContext
CertCompareCertificate
CertEnumCertificatesInStore
CertAddCertificateContextToStore
CertCompareCertificateName
CryptFindOIDInfo
CertRDNValueToStrW
CertFindRDNAttr
CryptDecodeObjectEx
CertNameToStrW
CertCloseStore
CertVerifyTimeValidity

oleaut32

SysAllocString
VariantClear
VariantInit
SysStringByteLen
SysStringLen
SysAllocStringLen
SysFreeString
RegisterTypeLi
VarUI4FromStr
LoadRegTypeLi
LoadTypeLi
VarBstrCat
SysAllocStringByteLen
SafeArrayUnlock
SafeArrayLock
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayDestroy
SafeArrayAccessData
VariantChangeType
OleCreatePropertyFrame
UnRegisterTypeLi

dsound

ord1
ord8

msimg32

AlphaBlend

kernel32

GetTickCount
LCMapStringW
CreateProcessA
GetSystemDirectoryW
GetSystemWow64DirectoryW
FindClose
FindNextFileW
RemoveDirectoryW
FindFirstFileW
SystemTimeToFileTime
GetSystemTime
GetFileSizeEx
CreateFileW
CreateDirectoryW
GetProcessTimes
GetCurrentProcessId
GlobalSize
GetSystemDirectoryA
GetTempFileNameW
GetSystemInfo
GetUserDefaultUILanguage
MoveFileExW
VirtualQuery
GetUserDefaultLangID
DeleteFileA
CreateFileA
WriteFile
SetFilePointer
VerifyVersionInfoW
VerSetConditionMask
ReadFile
GetFileSize
CreateThread
LockResource
FindResourceExA
FindResourceExW
SetUnhandledExceptionFilter
GetTempPathW
GetTimeZoneInformation
ReleaseSemaphore
CreateSemaphoreW
DeviceIoControl
GetFileAttributesExW
ExpandEnvironmentStringsA
GetLongPathNameW
GetTempFileNameA
GetTempPathA
CreateDirectoryA
FindResourceW
SetFilePointerEx
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
OutputDebugStringA
GetFileInformationByHandle
GetVolumeInformationW
TryEnterCriticalSection
UnmapViewOfFile
ReleaseMutex
MapViewOfFile
CreateFileMappingA
GetExitCodeThread
DuplicateHandle
TerminateThread
CreateWaitableTimerW
SetThreadPriority
CompareFileTime
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserAPC
OpenThread
SleepEx
SwitchToThread
SetEndOfFile
FlushFileBuffers
GlobalMemoryStatusEx
IsDebuggerPresent
SetSystemTime
FileTimeToSystemTime
TlsAlloc
TlsFree
ResumeThread
CreateTimerQueueTimer
DeleteTimerQueueTimer
CreateSemaphoreA
HeapAlloc
HeapFree
HeapUnlock
HeapWalk
HeapLock
HeapCreate
HeapDestroy
VirtualProtect
GetNumberFormatW
GetCurrencyFormatW
CompareStringW
GetDateFormatW
GetTimeFormatW
GetUserDefaultLCID
IsValidLocale
EnumSystemLocalesW
GetProcessHeap
GetProcessAffinityMask
IsProcessorFeaturePresent
ExitProcess
UnhandledExceptionFilter
RtlUnwind
GetCommandLineA
ExitThread
HeapReAlloc
GetLocaleInfoW
GetSystemTimeAsFileTime
GetStdHandle
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoA
LCMapStringA
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetStdHandle
GetStringTypeA
GetStringTypeW
EnumSystemLocalesA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
SetEnvironmentVariableA
GetNativeSystemInfo
lstrcpynW
GlobalMemoryStatus
FlushConsoleInputBuffer
LoadResource
SizeofResource
DisableThreadLibraryCalls
SetLastError
OutputDebugStringW
GetCurrentThreadId
GetModuleFileNameW
GetVersionExA
GetModuleFileNameA
GetFileAttributesA
SetFileAttributesA
LocalAlloc
LocalFree
GlobalLock
GlobalUnlock
MulDiv
GetCurrentProcess
FlushInstructionCache
lstrcmpiW
CreateMutexW
LoadLibraryW
LoadLibraryA
GetProcAddress
WaitForMultipleObjects
FreeLibrary
WaitForSingleObject
ResetEvent
CloseHandle
CreateEventW
SetEvent
GetModuleHandleW
GlobalAlloc
GetLastError
GetVersionExW
GetLocaleInfoA
lstrlenW
lstrlenA
WideCharToMultiByte
GlobalFree
InterlockedDecrement
InterlockedIncrement
DeleteFileW
GetFileAttributesW
GetCurrentThread
SetThreadAffinityMask
TlsSetValue
IsDBCSLeadByte
GetACP
GetCPInfo
MultiByteToWideChar
RaiseException
HeapSize
DebugBreak
ExpandEnvironmentStringsW
InterlockedExchange
InterlockedCompareExchange
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
TlsGetValue
SetConsoleMode
ReadConsoleInputA
GetModuleHandleA
CreateEventA
CreateWaitableTimerA
SetWaitableTimer
CancelWaitableTimer
InterlockedExchangeAdd
GetVersion
VirtualAlloc
VirtualFree
CopyFileW
TerminateProcess
LoadLibraryExW
CreateMutexA

user32

RegisterClipboardFormatW
GetWindowThreadProcessId
RemoveMenu
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
CreatePopupMenu
TrackPopupMenu
DestroyMenu
DrawMenuBar
CreateMenu
SetMenuInfo
CharUpperW
CharLowerW
PostThreadMessageW
GetMessageW
CloseWindow
WaitForInputIdle
TranslateMessage
DispatchMessageW
SetWindowTextA
RedrawWindow
DialogBoxIndirectParamW
SetWindowTextW
SendMessageTimeoutW
CreateIconIndirect
GetMonitorInfoW
SetRectEmpty
GetCursor
DestroyIcon
LoadImageW
GetPropW
SetPropW
GetSystemMetrics
InflateRect
GetClipboardFormatNameA
RegisterClipboardFormatA
IsWindow
PtInRect
EqualRect
SetWindowRgn
BeginPaint
EndPaint
GetSubMenu
MapVirtualKeyW
LoadStringW
IntersectRect
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
SetClipboardData
EmptyClipboard
EnumDisplayDevicesW
DestroyCaret
ShowCaret
CreateCaret
SetCaretPos
MoveWindow
GetActiveWindow
UnregisterClassA
LoadIconA
DeleteMenu
RegisterClassExA
CreateWindowExA
ReleaseCapture
UpdateWindow
SystemParametersInfoW
GetMessageTime
LoadIconW
RegisterClassW
IsWindowVisible
DialogBoxParamW
GetDlgItem
EndDialog
SetWindowPos
GetKeyState
LoadStringA
MessageBoxA
SendMessageW
GetQueueStatus
SetTimer
GetCapture
SetCursor
GetCursorPos
WindowFromPoint
ScreenToClient
GetClientRect
SetCapture
MessageBoxW
KillTimer
PeekMessageW
EnableMenuItem
CheckMenuItem
GetWindowInfo
CopyRect
PostQuitMessage
ClientToScreen
SendInput
ActivateKeyboardLayout
GetKeyboardLayout
GetWindowRect
UpdateLayeredWindow
UnregisterClassW
GetParent
GetFocus
IsChild
SetFocus
RegisterClassExW
InvalidateRect
DefWindowProcW
UnionRect
CallWindowProcW
GetDC
ReleaseDC
LoadCursorW
GetClassInfoExW
GetWindowLongW
SetWindowLongW
CharNextW
SetRect
GetForegroundWindow
GetDesktopWindow
EnumDisplayDevicesA
MonitorFromWindow
FillRect
OffsetRect
FlashWindowEx
GetSystemMenu
IsZoomed
GetWindowPlacement
SetWindowPlacement
ShowWindowAsync
IsIconic
EnumDisplaySettingsW
MapWindowPoints
GetWindowTextLengthW
CreateWindowExW
ShowWindow
DestroyWindow
GetDoubleClickTime
EnumWindows
PostMessageW
IsWindowEnabled
GetWindow
GetClassNameA
GetWindowTextW
GetWindowTextA
DefWindowProcA
GetWindowLongA
LoadCursorA
SetWindowLongA
PostMessageA
RegisterWindowMessageA
EnumDisplayMonitors
MonitorFromRect
GetMonitorInfoA
wsprintfW
GetUserObjectInformationW
GetProcessWindowStation
SetCursorPos

gdi32

GetDeviceCaps
CreateDIBSection
SelectObject
GetStockObject
GetObjectW
DeleteObject
GdiFlush
DeleteDC
CreateMetaFileW
GetClipBox
SetViewportOrgEx
LPtoDP
CreateRectRgnIndirect
GetObjectType
GetICMProfileA
CreateDCA
SetPixel
TextOutW
SetTextAlign
DeleteMetaFile
CreateBitmap
CreateFontIndirectW
GetTextExtentPoint32A
ExtTextOutA
GetTextExtentPoint32W
GetTextMetricsW
SetTextColor
CreateFontIndirectA
IntersectClipRect
GetClipRgn
CreateRectRgn
SetBkMode
SelectClipRgn
SetTextCharacterExtra
GetTextAlign
GetBkMode
GetTextColor
GetCurrentObject
GetBkColor
EnumFontFamiliesA
CreatePen
DPtoLP
GetTextCharacterExtra
SetWorldTransform
SetGraphicsMode
GetWorldTransform
StartDocW
EndDoc
StrokePath
ExtCreatePen
FillPath
StartPage
EndPage
BeginPath
EndPath
SetPolyFillMode
PolyBezierTo
SelectClipPath
CloseMetaFile
RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
GdiAlphaBlend
StretchBlt
BitBlt
SetStretchBltMode
CreateCompatibleBitmap
ExtTextOutW
SetBkColor
GetStretchBltMode
EnumFontFamiliesW
CreateSolidBrush
GetFontData
EnumFontFamiliesExW
LineTo
MoveToEx
Rectangle
StretchDIBits
CreateCompatibleDC
RectVisible

comdlg32

GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError
PrintDlgW

advapi32

CryptDecrypt
CryptSetKeyParam
CryptGetHashParam
CryptHashData
CryptDestroyHash
CryptAcquireContextA
CryptCreateHash
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
RegisterEventSourceA
ReportEventA
DeregisterEventSource
OpenProcessToken
GetTokenInformation
IsValidSid
GetSidSubAuthorityCount
GetSidSubAuthority
CryptImportKey
CryptGenKey
CryptDestroyKey
CryptExportKey
CryptEncrypt
RegOpenKeyA
RegQueryValueExW
RegCreateKeyA
RegEnumKeyExW
RegCreateKeyExA
RegSetValueExA
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

SHGetFolderLocation
SHGetFolderPathW
ShellExecuteW
SHGetSpecialFolderPathW
SHFileOperationW
SHGetFolderPathA
SHGetPathFromIDListW
SHBrowseForFolderW
SHAppBarMessage
SHGetSettings
SHGetDiskFreeSpaceExW
ord165

ole32

CoTaskMemRealloc
CreateOleAdviseHolder
OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
CreateDataAdviseHolder
StringFromGUID2
WriteClassStm
OleSaveToStream
ReadClassStm
MkParseDisplayName
PropVariantClear
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleGetClipboard
OleUninitialize
OleInitialize
CoInitializeEx
CoRegisterMessageFilter
CoSetProxyBlanket
CoTaskMemFree
CoFreeUnusedLibraries
CoInitialize
CreateBindCtx
CoTaskMemAlloc
ReleaseStgMedium
CoCreateInstance
CoUninitialize

ws2_32

socket
WSAIoctl
WSAGetLastError
WSAAsyncSelect
closesocket
WSACleanup
WSASocketA
ntohl
gethostname
WSASocketW
select
__WSAFDIsSet
connect
ioctlsocket
WSAEnumNetworkEvents
WSAEventSelect
WSACreateEvent
WSAAddressToStringA
bind
sendto
recvfrom
WSASetLastError
getservbyport
gethostbyaddr
getservbyname
htonl
inet_ntoa
gethostbyname
inet_addr
WSACloseEvent
htons
getsockname
ntohs
send
WSAStartup
setsockopt
recv

shlwapi

UrlCanonicalizeW
ord158
PathFindFileNameW
StrRStrIW
StrStrIW
AssocQueryStringW

urlmon

HlinkSimpleNavigateToMoniker
RegisterBindStatusCallback
CreateURLMoniker
CopyStgMedium

mscms

DeleteColorTransform
CloseColorProfile
CreateColorTransformW
OpenColorProfileW
TranslateBitmapBits

iphlpapi

GetAdaptersAddresses

psapi

GetProcessMemoryInfo

Exports

Exports

AdobeCPGetAPI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IAEModule_AEModule_PutKernel
IAEModule_IAEKernel_LoadModule
IAEModule_IAEKernel_UnloadModule

Sections

.text
Size: 13.1MB - Virtual size: 13.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 836KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 583KB - Virtual size: 582KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 700KB - Virtual size: 699KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Executor/autoexec/local
.dll regsvr32 windows:5 windows x86 arch:x86

Password: xeno

a9fd3e7f71a802c8eee0a502f46de991

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

04/03/2014, 00:00

Not After

03/03/2024, 23:59

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4e:a1:e8:9e:15:ea:4f:fa:93:79:84:d8:8f:54:5f:ba
Certificate

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

14/05/2015, 00:00

Not After

07/05/2017, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Flash Player,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

58:87:9f:24:25:99:c5:8a:6a:3d:a1:73:d2:9f:04:d8:cb:0a:4b:54
Signer

Actual PE Digest

58:87:9f:24:25:99:c5:8a:6a:3d:a1:73:d2:9f:04:d8:cb:0a:4b:54

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Flash.pdb

Imports

version

VerQueryValueW
GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW

winmm

mixerGetID
waveInGetDevCapsA
waveOutGetDevCapsA
waveOutMessage
waveOutGetDevCapsW
waveInGetDevCapsW
waveOutGetNumDevs
waveInGetNumDevs
waveInStart
waveInAddBuffer
waveInStop
waveInMessage
waveInUnprepareHeader
waveInReset
waveInPrepareHeader
waveInOpen
timeKillEvent
timeGetTime
timeSetEvent
timeEndPeriod
timeBeginPeriod
timeGetDevCaps
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutReset
waveOutClose
waveOutOpen
waveOutGetPosition
mixerClose
mixerGetLineControlsA
mixerGetLineInfoA
mixerGetDevCapsA
mixerOpen
mixerGetControlDetailsA
waveOutRestart
waveOutPause
mixerSetControlDetails
waveInClose
waveInGetPosition

wininet

InternetSetCookieW
InternetGetCookieW

crypt32

CertFindCertificateInStore
CertVerifySubjectCertificateContext
CertCreateCertificateContext
CryptGetMessageCertificates
CryptVerifyMessageSignature
CertAddStoreToCollection
CertOpenStore
CertVerifyRevocation
CertFreeCertificateContext
CertCompareCertificate
CertEnumCertificatesInStore
CertAddCertificateContextToStore
CertCompareCertificateName
CryptFindOIDInfo
CertRDNValueToStrW
CertFindRDNAttr
CryptDecodeObjectEx
CertNameToStrW
CertCloseStore
CertVerifyTimeValidity

oleaut32

SysAllocString
VariantClear
VariantInit
SysStringByteLen
SysStringLen
SysAllocStringLen
SysFreeString
RegisterTypeLi
VarUI4FromStr
LoadRegTypeLi
LoadTypeLi
VarBstrCat
SysAllocStringByteLen
SafeArrayUnlock
SafeArrayLock
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayDestroy
SafeArrayAccessData
VariantChangeType
OleCreatePropertyFrame
UnRegisterTypeLi

dsound

ord1
ord8

msimg32

AlphaBlend

kernel32

GetTickCount
LCMapStringW
CreateProcessA
GetSystemDirectoryW
GetSystemWow64DirectoryW
FindClose
FindNextFileW
RemoveDirectoryW
FindFirstFileW
SystemTimeToFileTime
GetSystemTime
GetFileSizeEx
CreateFileW
CreateDirectoryW
GetProcessTimes
GetCurrentProcessId
GlobalSize
GetSystemDirectoryA
GetTempFileNameW
GetSystemInfo
GetUserDefaultUILanguage
MoveFileExW
VirtualQuery
GetUserDefaultLangID
DeleteFileA
CreateFileA
WriteFile
SetFilePointer
VerifyVersionInfoW
VerSetConditionMask
ReadFile
GetFileSize
CreateThread
LockResource
FindResourceExA
FindResourceExW
SetUnhandledExceptionFilter
GetTempPathW
GetTimeZoneInformation
ReleaseSemaphore
CreateSemaphoreW
DeviceIoControl
GetFileAttributesExW
ExpandEnvironmentStringsA
GetLongPathNameW
GetTempFileNameA
GetTempPathA
CreateDirectoryA
FindResourceW
SetFilePointerEx
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
OutputDebugStringA
GetFileInformationByHandle
GetVolumeInformationW
TryEnterCriticalSection
UnmapViewOfFile
ReleaseMutex
MapViewOfFile
CreateFileMappingA
GetExitCodeThread
DuplicateHandle
TerminateThread
CreateWaitableTimerW
SetThreadPriority
CompareFileTime
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserAPC
OpenThread
SleepEx
SwitchToThread
SetEndOfFile
FlushFileBuffers
GlobalMemoryStatusEx
IsDebuggerPresent
SetSystemTime
FileTimeToSystemTime
TlsAlloc
TlsFree
ResumeThread
CreateTimerQueueTimer
DeleteTimerQueueTimer
CreateSemaphoreA
HeapAlloc
HeapFree
HeapUnlock
HeapWalk
HeapLock
HeapCreate
HeapDestroy
VirtualProtect
GetNumberFormatW
GetCurrencyFormatW
CompareStringW
GetDateFormatW
GetTimeFormatW
GetUserDefaultLCID
IsValidLocale
EnumSystemLocalesW
GetProcessHeap
GetProcessAffinityMask
IsProcessorFeaturePresent
ExitProcess
UnhandledExceptionFilter
RtlUnwind
GetCommandLineA
ExitThread
HeapReAlloc
GetLocaleInfoW
GetSystemTimeAsFileTime
GetStdHandle
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoA
LCMapStringA
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetStdHandle
GetStringTypeA
GetStringTypeW
EnumSystemLocalesA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
SetEnvironmentVariableA
GetNativeSystemInfo
lstrcpynW
GlobalMemoryStatus
FlushConsoleInputBuffer
LoadResource
SizeofResource
DisableThreadLibraryCalls
SetLastError
OutputDebugStringW
GetCurrentThreadId
GetModuleFileNameW
GetVersionExA
GetModuleFileNameA
GetFileAttributesA
SetFileAttributesA
LocalAlloc
LocalFree
GlobalLock
GlobalUnlock
MulDiv
GetCurrentProcess
FlushInstructionCache
lstrcmpiW
CreateMutexW
LoadLibraryW
LoadLibraryA
GetProcAddress
WaitForMultipleObjects
FreeLibrary
WaitForSingleObject
ResetEvent
CloseHandle
CreateEventW
SetEvent
GetModuleHandleW
GlobalAlloc
GetLastError
GetVersionExW
GetLocaleInfoA
lstrlenW
lstrlenA
WideCharToMultiByte
GlobalFree
InterlockedDecrement
InterlockedIncrement
DeleteFileW
GetFileAttributesW
GetCurrentThread
SetThreadAffinityMask
TlsSetValue
IsDBCSLeadByte
GetACP
GetCPInfo
MultiByteToWideChar
RaiseException
HeapSize
DebugBreak
ExpandEnvironmentStringsW
InterlockedExchange
InterlockedCompareExchange
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
TlsGetValue
SetConsoleMode
ReadConsoleInputA
GetModuleHandleA
CreateEventA
CreateWaitableTimerA
SetWaitableTimer
CancelWaitableTimer
InterlockedExchangeAdd
GetVersion
VirtualAlloc
VirtualFree
CopyFileW
TerminateProcess
LoadLibraryExW
CreateMutexA

user32

RegisterClipboardFormatW
GetWindowThreadProcessId
RemoveMenu
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
CreatePopupMenu
TrackPopupMenu
DestroyMenu
DrawMenuBar
CreateMenu
SetMenuInfo
CharUpperW
CharLowerW
PostThreadMessageW
GetMessageW
CloseWindow
WaitForInputIdle
TranslateMessage
DispatchMessageW
SetWindowTextA
RedrawWindow
DialogBoxIndirectParamW
SetWindowTextW
SendMessageTimeoutW
CreateIconIndirect
GetMonitorInfoW
SetRectEmpty
GetCursor
DestroyIcon
LoadImageW
GetPropW
SetPropW
GetSystemMetrics
InflateRect
GetClipboardFormatNameA
RegisterClipboardFormatA
IsWindow
PtInRect
EqualRect
SetWindowRgn
BeginPaint
EndPaint
GetSubMenu
MapVirtualKeyW
LoadStringW
IntersectRect
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
SetClipboardData
EmptyClipboard
EnumDisplayDevicesW
DestroyCaret
ShowCaret
CreateCaret
SetCaretPos
MoveWindow
GetActiveWindow
UnregisterClassA
LoadIconA
DeleteMenu
RegisterClassExA
CreateWindowExA
ReleaseCapture
UpdateWindow
SystemParametersInfoW
GetMessageTime
LoadIconW
RegisterClassW
IsWindowVisible
DialogBoxParamW
GetDlgItem
EndDialog
SetWindowPos
GetKeyState
LoadStringA
MessageBoxA
SendMessageW
GetQueueStatus
SetTimer
GetCapture
SetCursor
GetCursorPos
WindowFromPoint
ScreenToClient
GetClientRect
SetCapture
MessageBoxW
KillTimer
PeekMessageW
EnableMenuItem
CheckMenuItem
GetWindowInfo
CopyRect
PostQuitMessage
ClientToScreen
SendInput
ActivateKeyboardLayout
GetKeyboardLayout
GetWindowRect
UpdateLayeredWindow
UnregisterClassW
GetParent
GetFocus
IsChild
SetFocus
RegisterClassExW
InvalidateRect
DefWindowProcW
UnionRect
CallWindowProcW
GetDC
ReleaseDC
LoadCursorW
GetClassInfoExW
GetWindowLongW
SetWindowLongW
CharNextW
SetRect
GetForegroundWindow
GetDesktopWindow
EnumDisplayDevicesA
MonitorFromWindow
FillRect
OffsetRect
FlashWindowEx
GetSystemMenu
IsZoomed
GetWindowPlacement
SetWindowPlacement
ShowWindowAsync
IsIconic
EnumDisplaySettingsW
MapWindowPoints
GetWindowTextLengthW
CreateWindowExW
ShowWindow
DestroyWindow
GetDoubleClickTime
EnumWindows
PostMessageW
IsWindowEnabled
GetWindow
GetClassNameA
GetWindowTextW
GetWindowTextA
DefWindowProcA
GetWindowLongA
LoadCursorA
SetWindowLongA
PostMessageA
RegisterWindowMessageA
EnumDisplayMonitors
MonitorFromRect
GetMonitorInfoA
wsprintfW
GetUserObjectInformationW
GetProcessWindowStation
SetCursorPos

gdi32

GetDeviceCaps
CreateDIBSection
SelectObject
GetStockObject
GetObjectW
DeleteObject
GdiFlush
DeleteDC
CreateMetaFileW
GetClipBox
SetViewportOrgEx
LPtoDP
CreateRectRgnIndirect
GetObjectType
GetICMProfileA
CreateDCA
SetPixel
TextOutW
SetTextAlign
DeleteMetaFile
CreateBitmap
CreateFontIndirectW
GetTextExtentPoint32A
ExtTextOutA
GetTextExtentPoint32W
GetTextMetricsW
SetTextColor
CreateFontIndirectA
IntersectClipRect
GetClipRgn
CreateRectRgn
SetBkMode
SelectClipRgn
SetTextCharacterExtra
GetTextAlign
GetBkMode
GetTextColor
GetCurrentObject
GetBkColor
EnumFontFamiliesA
CreatePen
DPtoLP
GetTextCharacterExtra
SetWorldTransform
SetGraphicsMode
GetWorldTransform
StartDocW
EndDoc
StrokePath
ExtCreatePen
FillPath
StartPage
EndPage
BeginPath
EndPath
SetPolyFillMode
PolyBezierTo
SelectClipPath
CloseMetaFile
RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
GdiAlphaBlend
StretchBlt
BitBlt
SetStretchBltMode
CreateCompatibleBitmap
ExtTextOutW
SetBkColor
GetStretchBltMode
EnumFontFamiliesW
CreateSolidBrush
GetFontData
EnumFontFamiliesExW
LineTo
MoveToEx
Rectangle
StretchDIBits
CreateCompatibleDC
RectVisible

comdlg32

GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError
PrintDlgW

advapi32

CryptDecrypt
CryptSetKeyParam
CryptGetHashParam
CryptHashData
CryptDestroyHash
CryptAcquireContextA
CryptCreateHash
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
RegisterEventSourceA
ReportEventA
DeregisterEventSource
OpenProcessToken
GetTokenInformation
IsValidSid
GetSidSubAuthorityCount
GetSidSubAuthority
CryptImportKey
CryptGenKey
CryptDestroyKey
CryptExportKey
CryptEncrypt
RegOpenKeyA
RegQueryValueExW
RegCreateKeyA
RegEnumKeyExW
RegCreateKeyExA
RegSetValueExA
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

SHGetFolderLocation
SHGetFolderPathW
ShellExecuteW
SHGetSpecialFolderPathW
SHFileOperationW
SHGetFolderPathA
SHGetPathFromIDListW
SHBrowseForFolderW
SHAppBarMessage
SHGetSettings
SHGetDiskFreeSpaceExW
ord165

ole32

CoTaskMemRealloc
CreateOleAdviseHolder
OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
CreateDataAdviseHolder
StringFromGUID2
WriteClassStm
OleSaveToStream
ReadClassStm
MkParseDisplayName
PropVariantClear
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleGetClipboard
OleUninitialize
OleInitialize
CoInitializeEx
CoRegisterMessageFilter
CoSetProxyBlanket
CoTaskMemFree
CoFreeUnusedLibraries
CoInitialize
CreateBindCtx
CoTaskMemAlloc
ReleaseStgMedium
CoCreateInstance
CoUninitialize

ws2_32

socket
WSAIoctl
WSAGetLastError
WSAAsyncSelect
closesocket
WSACleanup
WSASocketA
ntohl
gethostname
WSASocketW
select
__WSAFDIsSet
connect
ioctlsocket
WSAEnumNetworkEvents
WSAEventSelect
WSACreateEvent
WSAAddressToStringA
bind
sendto
recvfrom
WSASetLastError
getservbyport
gethostbyaddr
getservbyname
htonl
inet_ntoa
gethostbyname
inet_addr
WSACloseEvent
htons
getsockname
ntohs
send
WSAStartup
setsockopt
recv

shlwapi

UrlCanonicalizeW
ord158
PathFindFileNameW
StrRStrIW
StrStrIW
AssocQueryStringW

urlmon

HlinkSimpleNavigateToMoniker
RegisterBindStatusCallback
CreateURLMoniker
CopyStgMedium

mscms

DeleteColorTransform
CloseColorProfile
CreateColorTransformW
OpenColorProfileW
TranslateBitmapBits

iphlpapi

GetAdaptersAddresses

psapi

GetProcessMemoryInfo

Exports

Exports

AdobeCPGetAPI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IAEModule_AEModule_PutKernel
IAEModule_IAEKernel_LoadModule
IAEModule_IAEKernel_UnloadModule

Sections

.text
Size: 13.1MB - Virtual size: 13.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 836KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 583KB - Virtual size: 582KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 700KB - Virtual size: 699KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Executor/autoexec/scripts
.dll regsvr32 windows:5 windows x86 arch:x86

Password: xeno

a9fd3e7f71a802c8eee0a502f46de991

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

04/03/2014, 00:00

Not After

03/03/2024, 23:59

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4e:a1:e8:9e:15:ea:4f:fa:93:79:84:d8:8f:54:5f:ba
Certificate

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

14/05/2015, 00:00

Not After

07/05/2017, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Flash Player,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

58:87:9f:24:25:99:c5:8a:6a:3d:a1:73:d2:9f:04:d8:cb:0a:4b:54
Signer

Actual PE Digest

58:87:9f:24:25:99:c5:8a:6a:3d:a1:73:d2:9f:04:d8:cb:0a:4b:54

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Flash.pdb

Imports

version

VerQueryValueW
GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW

winmm

mixerGetID
waveInGetDevCapsA
waveOutGetDevCapsA
waveOutMessage
waveOutGetDevCapsW
waveInGetDevCapsW
waveOutGetNumDevs
waveInGetNumDevs
waveInStart
waveInAddBuffer
waveInStop
waveInMessage
waveInUnprepareHeader
waveInReset
waveInPrepareHeader
waveInOpen
timeKillEvent
timeGetTime
timeSetEvent
timeEndPeriod
timeBeginPeriod
timeGetDevCaps
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutReset
waveOutClose
waveOutOpen
waveOutGetPosition
mixerClose
mixerGetLineControlsA
mixerGetLineInfoA
mixerGetDevCapsA
mixerOpen
mixerGetControlDetailsA
waveOutRestart
waveOutPause
mixerSetControlDetails
waveInClose
waveInGetPosition

wininet

InternetSetCookieW
InternetGetCookieW

crypt32

CertFindCertificateInStore
CertVerifySubjectCertificateContext
CertCreateCertificateContext
CryptGetMessageCertificates
CryptVerifyMessageSignature
CertAddStoreToCollection
CertOpenStore
CertVerifyRevocation
CertFreeCertificateContext
CertCompareCertificate
CertEnumCertificatesInStore
CertAddCertificateContextToStore
CertCompareCertificateName
CryptFindOIDInfo
CertRDNValueToStrW
CertFindRDNAttr
CryptDecodeObjectEx
CertNameToStrW
CertCloseStore
CertVerifyTimeValidity

oleaut32

SysAllocString
VariantClear
VariantInit
SysStringByteLen
SysStringLen
SysAllocStringLen
SysFreeString
RegisterTypeLi
VarUI4FromStr
LoadRegTypeLi
LoadTypeLi
VarBstrCat
SysAllocStringByteLen
SafeArrayUnlock
SafeArrayLock
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayDestroy
SafeArrayAccessData
VariantChangeType
OleCreatePropertyFrame
UnRegisterTypeLi

dsound

ord1
ord8

msimg32

AlphaBlend

kernel32

GetTickCount
LCMapStringW
CreateProcessA
GetSystemDirectoryW
GetSystemWow64DirectoryW
FindClose
FindNextFileW
RemoveDirectoryW
FindFirstFileW
SystemTimeToFileTime
GetSystemTime
GetFileSizeEx
CreateFileW
CreateDirectoryW
GetProcessTimes
GetCurrentProcessId
GlobalSize
GetSystemDirectoryA
GetTempFileNameW
GetSystemInfo
GetUserDefaultUILanguage
MoveFileExW
VirtualQuery
GetUserDefaultLangID
DeleteFileA
CreateFileA
WriteFile
SetFilePointer
VerifyVersionInfoW
VerSetConditionMask
ReadFile
GetFileSize
CreateThread
LockResource
FindResourceExA
FindResourceExW
SetUnhandledExceptionFilter
GetTempPathW
GetTimeZoneInformation
ReleaseSemaphore
CreateSemaphoreW
DeviceIoControl
GetFileAttributesExW
ExpandEnvironmentStringsA
GetLongPathNameW
GetTempFileNameA
GetTempPathA
CreateDirectoryA
FindResourceW
SetFilePointerEx
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
OutputDebugStringA
GetFileInformationByHandle
GetVolumeInformationW
TryEnterCriticalSection
UnmapViewOfFile
ReleaseMutex
MapViewOfFile
CreateFileMappingA
GetExitCodeThread
DuplicateHandle
TerminateThread
CreateWaitableTimerW
SetThreadPriority
CompareFileTime
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserAPC
OpenThread
SleepEx
SwitchToThread
SetEndOfFile
FlushFileBuffers
GlobalMemoryStatusEx
IsDebuggerPresent
SetSystemTime
FileTimeToSystemTime
TlsAlloc
TlsFree
ResumeThread
CreateTimerQueueTimer
DeleteTimerQueueTimer
CreateSemaphoreA
HeapAlloc
HeapFree
HeapUnlock
HeapWalk
HeapLock
HeapCreate
HeapDestroy
VirtualProtect
GetNumberFormatW
GetCurrencyFormatW
CompareStringW
GetDateFormatW
GetTimeFormatW
GetUserDefaultLCID
IsValidLocale
EnumSystemLocalesW
GetProcessHeap
GetProcessAffinityMask
IsProcessorFeaturePresent
ExitProcess
UnhandledExceptionFilter
RtlUnwind
GetCommandLineA
ExitThread
HeapReAlloc
GetLocaleInfoW
GetSystemTimeAsFileTime
GetStdHandle
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoA
LCMapStringA
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetStdHandle
GetStringTypeA
GetStringTypeW
EnumSystemLocalesA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
SetEnvironmentVariableA
GetNativeSystemInfo
lstrcpynW
GlobalMemoryStatus
FlushConsoleInputBuffer
LoadResource
SizeofResource
DisableThreadLibraryCalls
SetLastError
OutputDebugStringW
GetCurrentThreadId
GetModuleFileNameW
GetVersionExA
GetModuleFileNameA
GetFileAttributesA
SetFileAttributesA
LocalAlloc
LocalFree
GlobalLock
GlobalUnlock
MulDiv
GetCurrentProcess
FlushInstructionCache
lstrcmpiW
CreateMutexW
LoadLibraryW
LoadLibraryA
GetProcAddress
WaitForMultipleObjects
FreeLibrary
WaitForSingleObject
ResetEvent
CloseHandle
CreateEventW
SetEvent
GetModuleHandleW
GlobalAlloc
GetLastError
GetVersionExW
GetLocaleInfoA
lstrlenW
lstrlenA
WideCharToMultiByte
GlobalFree
InterlockedDecrement
InterlockedIncrement
DeleteFileW
GetFileAttributesW
GetCurrentThread
SetThreadAffinityMask
TlsSetValue
IsDBCSLeadByte
GetACP
GetCPInfo
MultiByteToWideChar
RaiseException
HeapSize
DebugBreak
ExpandEnvironmentStringsW
InterlockedExchange
InterlockedCompareExchange
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
TlsGetValue
SetConsoleMode
ReadConsoleInputA
GetModuleHandleA
CreateEventA
CreateWaitableTimerA
SetWaitableTimer
CancelWaitableTimer
InterlockedExchangeAdd
GetVersion
VirtualAlloc
VirtualFree
CopyFileW
TerminateProcess
LoadLibraryExW
CreateMutexA

user32

RegisterClipboardFormatW
GetWindowThreadProcessId
RemoveMenu
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
CreatePopupMenu
TrackPopupMenu
DestroyMenu
DrawMenuBar
CreateMenu
SetMenuInfo
CharUpperW
CharLowerW
PostThreadMessageW
GetMessageW
CloseWindow
WaitForInputIdle
TranslateMessage
DispatchMessageW
SetWindowTextA
RedrawWindow
DialogBoxIndirectParamW
SetWindowTextW
SendMessageTimeoutW
CreateIconIndirect
GetMonitorInfoW
SetRectEmpty
GetCursor
DestroyIcon
LoadImageW
GetPropW
SetPropW
GetSystemMetrics
InflateRect
GetClipboardFormatNameA
RegisterClipboardFormatA
IsWindow
PtInRect
EqualRect
SetWindowRgn
BeginPaint
EndPaint
GetSubMenu
MapVirtualKeyW
LoadStringW
IntersectRect
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
SetClipboardData
EmptyClipboard
EnumDisplayDevicesW
DestroyCaret
ShowCaret
CreateCaret
SetCaretPos
MoveWindow
GetActiveWindow
UnregisterClassA
LoadIconA
DeleteMenu
RegisterClassExA
CreateWindowExA
ReleaseCapture
UpdateWindow
SystemParametersInfoW
GetMessageTime
LoadIconW
RegisterClassW
IsWindowVisible
DialogBoxParamW
GetDlgItem
EndDialog
SetWindowPos
GetKeyState
LoadStringA
MessageBoxA
SendMessageW
GetQueueStatus
SetTimer
GetCapture
SetCursor
GetCursorPos
WindowFromPoint
ScreenToClient
GetClientRect
SetCapture
MessageBoxW
KillTimer
PeekMessageW
EnableMenuItem
CheckMenuItem
GetWindowInfo
CopyRect
PostQuitMessage
ClientToScreen
SendInput
ActivateKeyboardLayout
GetKeyboardLayout
GetWindowRect
UpdateLayeredWindow
UnregisterClassW
GetParent
GetFocus
IsChild
SetFocus
RegisterClassExW
InvalidateRect
DefWindowProcW
UnionRect
CallWindowProcW
GetDC
ReleaseDC
LoadCursorW
GetClassInfoExW
GetWindowLongW
SetWindowLongW
CharNextW
SetRect
GetForegroundWindow
GetDesktopWindow
EnumDisplayDevicesA
MonitorFromWindow
FillRect
OffsetRect
FlashWindowEx
GetSystemMenu
IsZoomed
GetWindowPlacement
SetWindowPlacement
ShowWindowAsync
IsIconic
EnumDisplaySettingsW
MapWindowPoints
GetWindowTextLengthW
CreateWindowExW
ShowWindow
DestroyWindow
GetDoubleClickTime
EnumWindows
PostMessageW
IsWindowEnabled
GetWindow
GetClassNameA
GetWindowTextW
GetWindowTextA
DefWindowProcA
GetWindowLongA
LoadCursorA
SetWindowLongA
PostMessageA
RegisterWindowMessageA
EnumDisplayMonitors
MonitorFromRect
GetMonitorInfoA
wsprintfW
GetUserObjectInformationW
GetProcessWindowStation
SetCursorPos

gdi32

GetDeviceCaps
CreateDIBSection
SelectObject
GetStockObject
GetObjectW
DeleteObject
GdiFlush
DeleteDC
CreateMetaFileW
GetClipBox
SetViewportOrgEx
LPtoDP
CreateRectRgnIndirect
GetObjectType
GetICMProfileA
CreateDCA
SetPixel
TextOutW
SetTextAlign
DeleteMetaFile
CreateBitmap
CreateFontIndirectW
GetTextExtentPoint32A
ExtTextOutA
GetTextExtentPoint32W
GetTextMetricsW
SetTextColor
CreateFontIndirectA
IntersectClipRect
GetClipRgn
CreateRectRgn
SetBkMode
SelectClipRgn
SetTextCharacterExtra
GetTextAlign
GetBkMode
GetTextColor
GetCurrentObject
GetBkColor
EnumFontFamiliesA
CreatePen
DPtoLP
GetTextCharacterExtra
SetWorldTransform
SetGraphicsMode
GetWorldTransform
StartDocW
EndDoc
StrokePath
ExtCreatePen
FillPath
StartPage
EndPage
BeginPath
EndPath
SetPolyFillMode
PolyBezierTo
SelectClipPath
CloseMetaFile
RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
GdiAlphaBlend
StretchBlt
BitBlt
SetStretchBltMode
CreateCompatibleBitmap
ExtTextOutW
SetBkColor
GetStretchBltMode
EnumFontFamiliesW
CreateSolidBrush
GetFontData
EnumFontFamiliesExW
LineTo
MoveToEx
Rectangle
StretchDIBits
CreateCompatibleDC
RectVisible

comdlg32

GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError
PrintDlgW

advapi32

CryptDecrypt
CryptSetKeyParam
CryptGetHashParam
CryptHashData
CryptDestroyHash
CryptAcquireContextA
CryptCreateHash
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
RegisterEventSourceA
ReportEventA
DeregisterEventSource
OpenProcessToken
GetTokenInformation
IsValidSid
GetSidSubAuthorityCount
GetSidSubAuthority
CryptImportKey
CryptGenKey
CryptDestroyKey
CryptExportKey
CryptEncrypt
RegOpenKeyA
RegQueryValueExW
RegCreateKeyA
RegEnumKeyExW
RegCreateKeyExA
RegSetValueExA
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

SHGetFolderLocation
SHGetFolderPathW
ShellExecuteW
SHGetSpecialFolderPathW
SHFileOperationW
SHGetFolderPathA
SHGetPathFromIDListW
SHBrowseForFolderW
SHAppBarMessage
SHGetSettings
SHGetDiskFreeSpaceExW
ord165

ole32

CoTaskMemRealloc
CreateOleAdviseHolder
OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
CreateDataAdviseHolder
StringFromGUID2
WriteClassStm
OleSaveToStream
ReadClassStm
MkParseDisplayName
PropVariantClear
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleGetClipboard
OleUninitialize
OleInitialize
CoInitializeEx
CoRegisterMessageFilter
CoSetProxyBlanket
CoTaskMemFree
CoFreeUnusedLibraries
CoInitialize
CreateBindCtx
CoTaskMemAlloc
ReleaseStgMedium
CoCreateInstance
CoUninitialize

ws2_32

socket
WSAIoctl
WSAGetLastError
WSAAsyncSelect
closesocket
WSACleanup
WSASocketA
ntohl
gethostname
WSASocketW
select
__WSAFDIsSet
connect
ioctlsocket
WSAEnumNetworkEvents
WSAEventSelect
WSACreateEvent
WSAAddressToStringA
bind
sendto
recvfrom
WSASetLastError
getservbyport
gethostbyaddr
getservbyname
htonl
inet_ntoa
gethostbyname
inet_addr
WSACloseEvent
htons
getsockname
ntohs
send
WSAStartup
setsockopt
recv

shlwapi

UrlCanonicalizeW
ord158
PathFindFileNameW
StrRStrIW
StrStrIW
AssocQueryStringW

urlmon

HlinkSimpleNavigateToMoniker
RegisterBindStatusCallback
CreateURLMoniker
CopyStgMedium

mscms

DeleteColorTransform
CloseColorProfile
CreateColorTransformW
OpenColorProfileW
TranslateBitmapBits

iphlpapi

GetAdaptersAddresses

psapi

GetProcessMemoryInfo

Exports

Exports

AdobeCPGetAPI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IAEModule_AEModule_PutKernel
IAEModule_IAEKernel_LoadModule
IAEModule_IAEKernel_UnloadModule

Sections

.text
Size: 13.1MB - Virtual size: 13.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 836KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 583KB - Virtual size: 582KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 700KB - Virtual size: 699KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Executor/locales/hi.pak
Executor/locales/locales/af.pak
Executor/locales/locales/sk.pak
Executor/locales/locales/sl.pak
Executor/locales/locales/sr.pak
Executor/locales/locales/sv.pak
Executor/locales/locales/sw.pak
Executor/locales/locales/ta.pak
Executor/locales/locales/te.pak
Executor/locales/locales/th.pak
Executor/locales/locales/tr.pak
Executor/locales/locales/uk.pak
Executor/locales/locales/ur.pak
Executor/locales/locales/vi.pak
Executor/locales/locales/zh-CN.pak
Executor/locales/locales/zh-TW.pak
Executor/locales/resources/app.asar.unpacked/node_modules/btime/binding.node
.dll windows:6 windows x64 arch:x64

Password: xeno

0242ceb286e744ddd6dd8e963da637ee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\obsidian-stage\electron\btime\build\Release\binding.pdb

Imports

kernel32

GetModuleHandleA
SetFileTime
CreateFileW
MultiByteToWideChar
GetLastError
CloseHandle
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
GetSystemInfo
VirtualProtect
VirtualQuery

Exports

Exports

_register_binding_

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Executor/locales/resources/app.asar.unpacked/node_modules/get-fonts/binding.node
.dll windows:6 windows x64 arch:x64

Password: xeno

2a1b9a0a23b390c22659b30f7660d0da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\obsidian-stage\electron\get-fonts\build\Release\binding.pdb

Imports

kernel32

LoadLibraryExA
WideCharToMultiByte
GetUserDefaultLocaleName
GetModuleHandleA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
WriteConsoleW
GetSystemInfo
VirtualProtect
VirtualQuery

dwrite

DWriteCreateFactory

Exports

Exports

_register_binding_

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Executor/locales/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.node
.dll windows:6 windows x64 arch:x64

Password: xeno

56e83fb6e818a708f7895cf9d6058c3a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\obsidian-stage\electron\vibrancy-win\build\Release\binding.pdb

Imports

kernel32

GetModuleHandleA
GetProcAddress
GetModuleHandleW
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
WriteConsoleW
GetSystemInfo
VirtualProtect
VirtualQuery

Exports

Exports

_register_binding_

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Executor/locales/resources/tr.pak
Executor/locales/resources/uk.pak
Executor/locales/resources/ur.pak
Executor/locales/resources/v8_context_snapshot.bin
Executor/locales/resources/vi.pak
Executor/locales/resources/vk_swiftshader.dll
.dll windows:5 windows x64 arch:x64

6d7b823ac45e01133a6ba8c35160fef1

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9c:90:57:dc:1e:df:33:b0:32:69:ff:6e:54:dc:f1:57
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

15/10/2021, 00:00

Not After

14/10/2024, 23:59

Subject

CN=Dynalist Inc,O=Dynalist Inc,ST=Ontario,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9c:90:57:dc:1e:df:33:b0:32:69:ff:6e:54:dc:f1:57
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

15/10/2021, 00:00

Not After

14/10/2024, 23:59

Subject

CN=Dynalist Inc,O=Dynalist Inc,ST=Ontario,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

93:2b:f4:84:f0:e9:ff:fd:14:a3:14:d1:34:d7:03:6e:57:87:d7:ed:f6:83:55:5b:17:65:ef:80:4c:6f:16:5c
Signer

Actual PE Digest

93:2b:f4:84:f0:e9:ff:fd:14:a3:14:d1:34:d7:03:6e:57:87:d7:ed:f6:83:55:5b:17:65:ef:80:4c:6f:16:5c

Digest Algorithm

sha256

PE Digest Matches

true

96:47:90:15:f8:86:95:b3:96:3c:28:8b:46:52:d6:91:8f:0a:7a:57
Signer

Actual PE Digest

96:47:90:15:f8:86:95:b3:96:3c:28:8b:46:52:d6:91:8f:0a:7a:57

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

vk_swiftshader.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive
CloseHandle
CompareStringW
ConvertFiberToThread
ConvertThreadToFiberEx
CreateEventW
CreateFiberEx
CreateFileW
CreateRemoteThreadEx
CreateThread
DeleteCriticalSection
DeleteFiber
DeleteFileW
DeleteProcThreadAttributeList
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExitThread
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushInstructionCache
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileAttributesW
GetFileInformationByHandle
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetLogicalProcessorInformationEx
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeProcThreadAttributeList
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
RemoveDirectoryW
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetConsoleTextAttribute
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
SwitchToFiber
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
UnhandledExceptionFilter
UpdateProcThreadAttribute
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

user32

GetClientRect
GetDC
IsWindow
ReleaseDC

gdi32

StretchDIBits

Exports

Exports

vkAcquireNextImage2KHR
vkAcquireNextImageKHR
vkAllocateCommandBuffers
vkAllocateDescriptorSets
vkAllocateMemory
vkBeginCommandBuffer
vkBindBufferMemory
vkBindBufferMemory2
vkBindImageMemory
vkBindImageMemory2
vkCmdBeginQuery
vkCmdBeginRenderPass
vkCmdBeginRenderPass2
vkCmdBeginRendering
vkCmdBindDescriptorSets
vkCmdBindIndexBuffer
vkCmdBindPipeline
vkCmdBindVertexBuffers
vkCmdBindVertexBuffers2
vkCmdBlitImage
vkCmdBlitImage2
vkCmdClearAttachments
vkCmdClearColorImage
vkCmdClearDepthStencilImage
vkCmdCopyBuffer
vkCmdCopyBuffer2
vkCmdCopyBufferToImage
vkCmdCopyBufferToImage2
vkCmdCopyImage
vkCmdCopyImage2
vkCmdCopyImageToBuffer
vkCmdCopyImageToBuffer2
vkCmdCopyQueryPoolResults
vkCmdDispatch
vkCmdDispatchBase
vkCmdDispatchIndirect
vkCmdDraw
vkCmdDrawIndexed
vkCmdDrawIndexedIndirect
vkCmdDrawIndexedIndirectCount
vkCmdDrawIndirect
vkCmdDrawIndirectCount
vkCmdEndQuery
vkCmdEndRenderPass
vkCmdEndRenderPass2
vkCmdEndRendering
vkCmdExecuteCommands
vkCmdFillBuffer
vkCmdNextSubpass
vkCmdNextSubpass2
vkCmdPipelineBarrier
vkCmdPipelineBarrier2
vkCmdPushConstants
vkCmdResetEvent
vkCmdResetEvent2
vkCmdResetQueryPool
vkCmdResolveImage
vkCmdResolveImage2
vkCmdSetBlendConstants
vkCmdSetCullMode
vkCmdSetDepthBias
vkCmdSetDepthBiasEnable
vkCmdSetDepthBounds
vkCmdSetDepthBoundsTestEnable
vkCmdSetDepthCompareOp
vkCmdSetDepthTestEnable
vkCmdSetDepthWriteEnable
vkCmdSetDeviceMask
vkCmdSetEvent
vkCmdSetEvent2
vkCmdSetFrontFace
vkCmdSetLineWidth
vkCmdSetPrimitiveRestartEnable
vkCmdSetPrimitiveTopology
vkCmdSetRasterizerDiscardEnable
vkCmdSetScissor
vkCmdSetScissorWithCount
vkCmdSetStencilCompareMask
vkCmdSetStencilOp
vkCmdSetStencilReference
vkCmdSetStencilTestEnable
vkCmdSetStencilWriteMask
vkCmdSetViewport
vkCmdSetViewportWithCount
vkCmdUpdateBuffer
vkCmdWaitEvents
vkCmdWaitEvents2
vkCmdWriteTimestamp
vkCmdWriteTimestamp2
vkCreateBuffer
vkCreateBufferView
vkCreateCommandPool
vkCreateComputePipelines
vkCreateDescriptorPool
vkCreateDescriptorSetLayout
vkCreateDescriptorUpdateTemplate
vkCreateDevice
vkCreateEvent
vkCreateFence
vkCreateFramebuffer
vkCreateGraphicsPipelines
vkCreateImage
vkCreateImageView
vkCreateInstance
vkCreatePipelineCache
vkCreatePipelineLayout
vkCreatePrivateDataSlot
vkCreateQueryPool
vkCreateRenderPass
vkCreateRenderPass2
vkCreateSampler
vkCreateSamplerYcbcrConversion
vkCreateSemaphore
vkCreateShaderModule
vkCreateSwapchainKHR
vkCreateWin32SurfaceKHR
vkDestroyBuffer
vkDestroyBufferView
vkDestroyCommandPool
vkDestroyDescriptorPool
vkDestroyDescriptorSetLayout
vkDestroyDescriptorUpdateTemplate
vkDestroyDevice
vkDestroyEvent
vkDestroyFence
vkDestroyFramebuffer
vkDestroyImage
vkDestroyImageView
vkDestroyInstance
vkDestroyPipeline
vkDestroyPipelineCache
vkDestroyPipelineLayout
vkDestroyPrivateDataSlot
vkDestroyQueryPool
vkDestroyRenderPass
vkDestroySampler
vkDestroySamplerYcbcrConversion
vkDestroySemaphore
vkDestroyShaderModule
vkDestroySurfaceKHR
vkDestroySwapchainKHR
vkDeviceWaitIdle
vkEndCommandBuffer
vkEnumerateDeviceExtensionProperties
vkEnumerateDeviceLayerProperties
vkEnumerateInstanceExtensionProperties
vkEnumerateInstanceLayerProperties
vkEnumerateInstanceVersion
vkEnumeratePhysicalDeviceGroups
vkEnumeratePhysicalDevices
vkFlushMappedMemoryRanges
vkFreeCommandBuffers
vkFreeDescriptorSets
vkFreeMemory
vkGetBufferDeviceAddress
vkGetBufferMemoryRequirements
vkGetBufferMemoryRequirements2
vkGetBufferOpaqueCaptureAddress
vkGetDescriptorSetLayoutSupport
vkGetDeviceBufferMemoryRequirements
vkGetDeviceGroupPeerMemoryFeatures
vkGetDeviceGroupPresentCapabilitiesKHR
vkGetDeviceGroupSurfacePresentModesKHR
vkGetDeviceImageMemoryRequirements
vkGetDeviceImageSparseMemoryRequirements
vkGetDeviceMemoryCommitment
vkGetDeviceMemoryOpaqueCaptureAddress
vkGetDeviceProcAddr
vkGetDeviceQueue
vkGetDeviceQueue2
vkGetEventStatus
vkGetFenceStatus
vkGetImageMemoryRequirements
vkGetImageMemoryRequirements2
vkGetImageSparseMemoryRequirements
vkGetImageSparseMemoryRequirements2
vkGetImageSubresourceLayout
vkGetInstanceProcAddr
vkGetPhysicalDeviceExternalBufferProperties
vkGetPhysicalDeviceExternalFenceProperties
vkGetPhysicalDeviceExternalSemaphoreProperties
vkGetPhysicalDeviceFeatures
vkGetPhysicalDeviceFeatures2
vkGetPhysicalDeviceFormatProperties
vkGetPhysicalDeviceFormatProperties2
vkGetPhysicalDeviceImageFormatProperties
vkGetPhysicalDeviceImageFormatProperties2
vkGetPhysicalDeviceMemoryProperties
vkGetPhysicalDeviceMemoryProperties2
vkGetPhysicalDevicePresentRectanglesKHR
vkGetPhysicalDeviceProperties
vkGetPhysicalDeviceProperties2
vkGetPhysicalDeviceQueueFamilyProperties
vkGetPhysicalDeviceQueueFamilyProperties2
vkGetPhysicalDeviceSparseImageFormatProperties
vkGetPhysicalDeviceSparseImageFormatProperties2
vkGetPhysicalDeviceSurfaceCapabilitiesKHR
vkGetPhysicalDeviceSurfaceFormatsKHR
vkGetPhysicalDeviceSurfacePresentModesKHR
vkGetPhysicalDeviceSurfaceSupportKHR
vkGetPhysicalDeviceToolProperties
vkGetPhysicalDeviceWin32PresentationSupportKHR
vkGetPipelineCacheData
vkGetPrivateData
vkGetQueryPoolResults
vkGetRenderAreaGranularity
vkGetSemaphoreCounterValue
vkGetSwapchainImagesKHR
vkInvalidateMappedMemoryRanges
vkMapMemory
vkMergePipelineCaches
vkQueueBindSparse
vkQueuePresentKHR
vkQueueSubmit
vkQueueSubmit2
vkQueueWaitIdle
vkResetCommandBuffer
vkResetCommandPool
vkResetDescriptorPool
vkResetEvent
vkResetFences
vkResetQueryPool
vkSetEvent
vkSetPrivateData
vkSignalSemaphore
vkTrimCommandPool
vkUnmapMemory
vkUpdateDescriptorSetWithTemplate
vkUpdateDescriptorSets
vkWaitForFences
vkWaitSemaphores
vk_icdGetInstanceProcAddr
vk_icdNegotiateLoaderICDInterfaceVersion

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 745KB - Virtual size: 745KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 101KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gxfg
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 92B

.tls
Size: 512B - Virtual size: 81B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.voltbl
Size: 512B - Virtual size: 56B

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Executor/locales/resources/vk_swiftshader_icd.json
Executor/locales/resources/vulkan-1.dll
.dll windows:5 windows x64 arch:x64

49ed29c3ff417b26c7cd92ecc9b7dcb3

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9c:90:57:dc:1e:df:33:b0:32:69:ff:6e:54:dc:f1:57
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

15/10/2021, 00:00

Not After

14/10/2024, 23:59

Subject

CN=Dynalist Inc,O=Dynalist Inc,ST=Ontario,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9c:90:57:dc:1e:df:33:b0:32:69:ff:6e:54:dc:f1:57
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

15/10/2021, 00:00

Not After

14/10/2024, 23:59

Subject

CN=Dynalist Inc,O=Dynalist Inc,ST=Ontario,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6f:33:f8:de:50:ab:41:37:7f:77:1b:ae:4e:98:7e:aa:1b:d5:1b:ca:4b:aa:bb:c0:8f:ce:33:ca:71:71:0d:33
Signer

Actual PE Digest

6f:33:f8:de:50:ab:41:37:7f:77:1b:ae:4e:98:7e:aa:1b:d5:1b:ca:4b:aa:bb:c0:8f:ce:33:ca:71:71:0d:33

Digest Algorithm

sha256

PE Digest Matches

true

18:2a:6e:0f:8d:2c:aa:b7:5a:ef:cf:70:3c:42:59:29:10:fe:39:54
Signer

Actual PE Digest

18:2a:6e:0f:8d:2c:aa:b7:5a:ef:cf:70:3c:42:59:29:10:fe:39:54

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

vulkan-1.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateEventW
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesExW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
IsWow64Process
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForSingleObjectEx
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

advapi32

GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
OpenProcessToken
RegCloseKey
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA

cfgmgr32

CM_Get_Child
CM_Get_DevNode_Registry_PropertyW
CM_Get_DevNode_Status
CM_Get_Device_IDW
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_SizeW
CM_Get_Sibling
CM_Locate_DevNodeW
CM_Open_DevNode_Key

Exports

Exports

vkAcquireNextImage2KHR
vkAcquireNextImageKHR
vkAllocateCommandBuffers
vkAllocateDescriptorSets
vkAllocateMemory
vkBeginCommandBuffer
vkBindBufferMemory
vkBindBufferMemory2
vkBindImageMemory
vkBindImageMemory2
vkCmdBeginQuery
vkCmdBeginRenderPass
vkCmdBeginRenderPass2
vkCmdBeginRendering
vkCmdBindDescriptorSets
vkCmdBindIndexBuffer
vkCmdBindPipeline
vkCmdBindVertexBuffers
vkCmdBindVertexBuffers2
vkCmdBlitImage
vkCmdBlitImage2
vkCmdClearAttachments
vkCmdClearColorImage
vkCmdClearDepthStencilImage
vkCmdCopyBuffer
vkCmdCopyBuffer2
vkCmdCopyBufferToImage
vkCmdCopyBufferToImage2
vkCmdCopyImage
vkCmdCopyImage2
vkCmdCopyImageToBuffer
vkCmdCopyImageToBuffer2
vkCmdCopyQueryPoolResults
vkCmdDispatch
vkCmdDispatchBase
vkCmdDispatchIndirect
vkCmdDraw
vkCmdDrawIndexed
vkCmdDrawIndexedIndirect
vkCmdDrawIndexedIndirectCount
vkCmdDrawIndirect
vkCmdDrawIndirectCount
vkCmdEndQuery
vkCmdEndRenderPass
vkCmdEndRenderPass2
vkCmdEndRendering
vkCmdExecuteCommands
vkCmdFillBuffer
vkCmdNextSubpass
vkCmdNextSubpass2
vkCmdPipelineBarrier
vkCmdPipelineBarrier2
vkCmdPushConstants
vkCmdResetEvent
vkCmdResetEvent2
vkCmdResetQueryPool
vkCmdResolveImage
vkCmdResolveImage2
vkCmdSetBlendConstants
vkCmdSetCullMode
vkCmdSetDepthBias
vkCmdSetDepthBiasEnable
vkCmdSetDepthBounds
vkCmdSetDepthBoundsTestEnable
vkCmdSetDepthCompareOp
vkCmdSetDepthTestEnable
vkCmdSetDepthWriteEnable
vkCmdSetDeviceMask
vkCmdSetEvent
vkCmdSetEvent2
vkCmdSetFrontFace
vkCmdSetLineWidth
vkCmdSetPrimitiveRestartEnable
vkCmdSetPrimitiveTopology
vkCmdSetRasterizerDiscardEnable
vkCmdSetScissor
vkCmdSetScissorWithCount
vkCmdSetStencilCompareMask
vkCmdSetStencilOp
vkCmdSetStencilReference
vkCmdSetStencilTestEnable
vkCmdSetStencilWriteMask
vkCmdSetViewport
vkCmdSetViewportWithCount
vkCmdUpdateBuffer
vkCmdWaitEvents
vkCmdWaitEvents2
vkCmdWriteTimestamp
vkCmdWriteTimestamp2
vkCreateBuffer
vkCreateBufferView
vkCreateCommandPool
vkCreateComputePipelines
vkCreateDescriptorPool
vkCreateDescriptorSetLayout
vkCreateDescriptorUpdateTemplate
vkCreateDevice
vkCreateDisplayModeKHR
vkCreateDisplayPlaneSurfaceKHR
vkCreateEvent
vkCreateFence
vkCreateFramebuffer
vkCreateGraphicsPipelines
vkCreateHeadlessSurfaceEXT
vkCreateImage
vkCreateImageView
vkCreateInstance
vkCreatePipelineCache
vkCreatePipelineLayout
vkCreatePrivateDataSlot
vkCreateQueryPool
vkCreateRenderPass
vkCreateRenderPass2
vkCreateSampler
vkCreateSamplerYcbcrConversion
vkCreateSemaphore
vkCreateShaderModule
vkCreateSharedSwapchainsKHR
vkCreateSwapchainKHR
vkCreateWin32SurfaceKHR
vkDestroyBuffer
vkDestroyBufferView
vkDestroyCommandPool
vkDestroyDescriptorPool
vkDestroyDescriptorSetLayout
vkDestroyDescriptorUpdateTemplate
vkDestroyDevice
vkDestroyEvent
vkDestroyFence
vkDestroyFramebuffer
vkDestroyImage
vkDestroyImageView
vkDestroyInstance
vkDestroyPipeline
vkDestroyPipelineCache
vkDestroyPipelineLayout
vkDestroyPrivateDataSlot
vkDestroyQueryPool
vkDestroyRenderPass
vkDestroySampler
vkDestroySamplerYcbcrConversion
vkDestroySemaphore
vkDestroyShaderModule
vkDestroySurfaceKHR
vkDestroySwapchainKHR
vkDeviceWaitIdle
vkEndCommandBuffer
vkEnumerateDeviceExtensionProperties
vkEnumerateDeviceLayerProperties
vkEnumerateInstanceExtensionProperties
vkEnumerateInstanceLayerProperties
vkEnumerateInstanceVersion
vkEnumeratePhysicalDeviceGroups
vkEnumeratePhysicalDevices
vkFlushMappedMemoryRanges
vkFreeCommandBuffers
vkFreeDescriptorSets
vkFreeMemory
vkGetBufferDeviceAddress
vkGetBufferMemoryRequirements
vkGetBufferMemoryRequirements2
vkGetBufferOpaqueCaptureAddress
vkGetDescriptorSetLayoutSupport
vkGetDeviceBufferMemoryRequirements
vkGetDeviceGroupPeerMemoryFeatures
vkGetDeviceGroupPresentCapabilitiesKHR
vkGetDeviceGroupSurfacePresentModesKHR
vkGetDeviceImageMemoryRequirements
vkGetDeviceImageSparseMemoryRequirements
vkGetDeviceMemoryCommitment
vkGetDeviceMemoryOpaqueCaptureAddress
vkGetDeviceProcAddr
vkGetDeviceQueue
vkGetDeviceQueue2
vkGetDisplayModeProperties2KHR
vkGetDisplayModePropertiesKHR
vkGetDisplayPlaneCapabilities2KHR
vkGetDisplayPlaneCapabilitiesKHR
vkGetDisplayPlaneSupportedDisplaysKHR
vkGetEventStatus
vkGetFenceStatus
vkGetImageMemoryRequirements
vkGetImageMemoryRequirements2
vkGetImageSparseMemoryRequirements
vkGetImageSparseMemoryRequirements2
vkGetImageSubresourceLayout
vkGetInstanceProcAddr
vkGetPhysicalDeviceDisplayPlaneProperties2KHR
vkGetPhysicalDeviceDisplayPlanePropertiesKHR
vkGetPhysicalDeviceDisplayProperties2KHR
vkGetPhysicalDeviceDisplayPropertiesKHR
vkGetPhysicalDeviceExternalBufferProperties
vkGetPhysicalDeviceExternalFenceProperties
vkGetPhysicalDeviceExternalSemaphoreProperties
vkGetPhysicalDeviceFeatures
vkGetPhysicalDeviceFeatures2
vkGetPhysicalDeviceFormatProperties
vkGetPhysicalDeviceFormatProperties2
vkGetPhysicalDeviceImageFormatProperties
vkGetPhysicalDeviceImageFormatProperties2
vkGetPhysicalDeviceMemoryProperties
vkGetPhysicalDeviceMemoryProperties2
vkGetPhysicalDevicePresentRectanglesKHR
vkGetPhysicalDeviceProperties
vkGetPhysicalDeviceProperties2
vkGetPhysicalDeviceQueueFamilyProperties
vkGetPhysicalDeviceQueueFamilyProperties2
vkGetPhysicalDeviceSparseImageFormatProperties
vkGetPhysicalDeviceSparseImageFormatProperties2
vkGetPhysicalDeviceSurfaceCapabilities2KHR
vkGetPhysicalDeviceSurfaceCapabilitiesKHR
vkGetPhysicalDeviceSurfaceFormats2KHR
vkGetPhysicalDeviceSurfaceFormatsKHR
vkGetPhysicalDeviceSurfacePresentModesKHR
vkGetPhysicalDeviceSurfaceSupportKHR
vkGetPhysicalDeviceToolProperties
vkGetPhysicalDeviceWin32PresentationSupportKHR
vkGetPipelineCacheData
vkGetPrivateData
vkGetQueryPoolResults
vkGetRenderAreaGranularity
vkGetSemaphoreCounterValue
vkGetSwapchainImagesKHR
vkInvalidateMappedMemoryRanges
vkMapMemory
vkMergePipelineCaches
vkQueueBindSparse
vkQueuePresentKHR
vkQueueSubmit
vkQueueSubmit2
vkQueueWaitIdle
vkResetCommandBuffer
vkResetCommandPool
vkResetDescriptorPool
vkResetEvent
vkResetFences
vkResetQueryPool
vkSetEvent
vkSetPrivateData
vkSignalSemaphore
vkTrimCommandPool
vkUnmapMemory
vkUpdateDescriptorSetWithTemplate
vkUpdateDescriptorSets
vkWaitForFences
vkWaitSemaphores

Sections

.text
Size: 583KB - Virtual size: 583KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 223KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gxfg
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 92B

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.voltbl
Size: 512B - Virtual size: 56B

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Executor/runtimes/win-arm64/native/WebView2Loader.dll
Executor/runtimes/win-x64/native/WebView2Loader.dll
.dll windows:5 windows x64 arch:x64

aaa8a1994a594e4746a652eda600aebf

Code Sign

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/02/2023, 20:10

Not After

31/01/2024, 20:10

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fc:d9:ff:45:ce:dd:69:40:84:14:bf:7f:56:d8:a9:e6:e1:d5:19:c6:85:7f:f6:8b:4f:c9:9d:e0:d9:a2:36:8d
Signer

Actual PE Digest

fc:d9:ff:45:ce:dd:69:40:84:14:bf:7f:56:d8:a9:e6:e1:d5:19:c6:85:7f:f6:8b:4f:c9:9d:e0:d9:a2:36:8d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release_x64\WebView2Loader.dll.pdb

Imports

kernel32

CloseHandle
CreateEventW
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile

Exports

Exports

CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gxfg
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 140B

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Executor/runtimes/win-x86/native/WebView2Loader.dll
.dll windows:5 windows x86 arch:x86

608537c42a46a95b31cc1ef01ab6eeb0

Code Sign

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/02/2023, 20:10

Not After

31/01/2024, 20:10

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:ea:c3:64:d8:92:9a:17:5f:f3:f5:15:b8:a6:cf:c1:bd:32:2c:b9:a9:7c:66:6e:e2:ff:3a:a7:65:3d:4b:40
Signer

Actual PE Digest

45:ea:c3:64:d8:92:9a:17:5f:f3:f5:15:b8:a6:cf:c1:bd:32:2c:b9:a9:7c:66:6e:e2:ff:3a:a7:65:3d:4b:40

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release\WebView2Loader.dll.pdb

Imports

kernel32

CloseHandle
CreateEventW
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ResetEvent
RtlUnwind
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile

Exports

Exports

CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Executor/scripts/Alchemy Hub.txt
Executor/scripts/BlueLockRivals.txt
Executor/scripts/Dex.lua
.js
Executor/scripts/IY.txt
.js
Executor/scripts/Infinite Yield.lua
.js
Executor/scripts/Native Hub.txt
Executor/scripts/Orca.txt
Executor/scripts/Ronix Hub.txt
Executor/scripts/Sine Wave.lua
Executor/scripts/Spinning Donut.lua
Executor/scripts/UNC Check.txt
.js
Executor/scripts/UNCCheckEnv.lua
.js
Executor/scripts/Zenith Hub.lua
Executor/workspace/.tests/appendfile.txt
Executor/workspace/.tests/getcustomasset.txt
Executor/workspace/.tests/isfile.txt
Executor/workspace/.tests/listfiles/test_1.txt
Executor/workspace/.tests/listfiles/test_2.txt
Executor/workspace/.tests/loadfile.txt
Executor/workspace/.tests/readfile.txt
Executor/workspace/.tests/writefile
Executor/workspace/.tests/writefile.txt
Executor/workspace/IY_FE.iy
Executor/workspace/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.fingerprint
Executor/workspace/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.json
Executor/workspace/Xeno.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/protocols.json
Executor/workspace/Xeno.exe.WebView2/EBWebView/BrowserMetrics-spare.pma
Executor/workspace/Xeno.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-674329AB-10E8.pma
Executor/workspace/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/crl-set
Executor/workspace/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/manifest.fingerprint
Executor/workspace/Xeno.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/manifest.json
Executor/workspace/Xeno.exe.WebView2/EBWebView/Crashpad/settings.dat
Executor/workspace/Xeno.exe.WebView2/EBWebView/Crashpad/throttle_store.dat
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000003
.gz
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Cache/Cache_Data/index
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Code Cache/js/index
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Code Cache/js/index-dir/the-real-index
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Code Cache/wasm/index
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Code Cache/wasm/index-dir/the-real-index
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/DIPS
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/DashTrackerDatabase
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_0
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_1
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_2
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_3
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/DawnGraphiteCache/index
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_0
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_1
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_2
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_3
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/DawnWebGPUCache/index
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/EdgeEDrop/EdgeEDropSQLite.db
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/EdgeHubAppUsage/EdgeHubAppUsageSQLite.db
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Extension Rules/000003.log
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Extension Rules/CURRENT
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Extension Rules/LOG
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Extension Rules/MANIFEST-000001
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Extension Scripts/000003.log
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Extension Scripts/CURRENT
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Extension Scripts/LOG
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Extension Scripts/MANIFEST-000001
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Extension State/000003.log
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Extension State/CURRENT
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Extension State/LOG
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Extension State/LOG.old
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Extension State/MANIFEST-000001
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/ExtensionActivityComp
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/ExtensionActivityEdge
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Favicons
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/GPUCache/data_0
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/GPUCache/data_1
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/GPUCache/data_2
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/GPUCache/data_3
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/GPUCache/index
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/History
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Local Storage/leveldb/CURRENT
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG.old
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Local Storage/leveldb/MANIFEST-000001
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Login Data
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Network Action Predictor
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Network/Cookies
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Network/Network Persistent State
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Network/Reporting and NEL
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Network/SCT Auditing Pending Reports
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Network/Sdch Dictionaries
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Network/TransportSecurity
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Network/Trust Tokens
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Preferences
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/PreferredApps
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/README
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Safe Browsing Network/Safe Browsing Cookies
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Secure Preferences
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Session Storage/000003.log
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Session Storage/CURRENT
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Session Storage/LOG
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Session Storage/LOG.old
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Session Storage/MANIFEST-000001
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index-dir/the-real-index
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Shared Dictionary/db
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/SharedStorage
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Site Characteristics Database/000003.log
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Site Characteristics Database/CURRENT
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG.old
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Site Characteristics Database/MANIFEST-000001
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/000003.log
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/CURRENT
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG.old
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/MANIFEST-000001
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Top Sites
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Visited Links
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/Web Data
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/heavy_ad_intervention_opt_out.db
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/000003.log
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/CURRENT
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/LOG
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/LOG.old
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/MANIFEST-000001
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/000003.log
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/CURRENT
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG.old
Executor/workspace/Xeno.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/MANIFEST-000001
Executor/workspace/Xeno.exe.WebView2/EBWebView/GrShaderCache/data_0
Executor/workspace/Xeno.exe.WebView2/EBWebView/GrShaderCache/data_1
Executor/workspace/Xeno.exe.WebView2/EBWebView/GrShaderCache/data_2
Executor/workspace/Xeno.exe.WebView2/EBWebView/GrShaderCache/data_3
Executor/workspace/Xeno.exe.WebView2/EBWebView/GrShaderCache/f_000001
Executor/workspace/Xeno.exe.WebView2/EBWebView/GrShaderCache/f_000002
Executor/workspace/Xeno.exe.WebView2/EBWebView/GrShaderCache/f_000003
Executor/workspace/Xeno.exe.WebView2/EBWebView/GrShaderCache/f_000004
Executor/workspace/Xeno.exe.WebView2/EBWebView/GrShaderCache/f_000005
Executor/workspace/Xeno.exe.WebView2/EBWebView/GrShaderCache/f_000006
Executor/workspace/Xeno.exe.WebView2/EBWebView/GrShaderCache/index
Executor/workspace/Xeno.exe.WebView2/EBWebView/GraphiteDawnCache/data_0
Executor/workspace/Xeno.exe.WebView2/EBWebView/GraphiteDawnCache/data_1
Executor/workspace/Xeno.exe.WebView2/EBWebView/GraphiteDawnCache/data_2
Executor/workspace/Xeno.exe.WebView2/EBWebView/GraphiteDawnCache/data_3
Executor/workspace/Xeno.exe.WebView2/EBWebView/GraphiteDawnCache/index
Executor/workspace/Xeno.exe.WebView2/EBWebView/Last Version
Executor/workspace/Xeno.exe.WebView2/EBWebView/Local State
Executor/workspace/Xeno.exe.WebView2/EBWebView/OriginTrials/0.0.1.7/manifest.fingerprint
Executor/workspace/Xeno.exe.WebView2/EBWebView/OriginTrials/0.0.1.7/manifest.json
Executor/workspace/Xeno.exe.WebView2/EBWebView/PKIMetadata/14.0.0.1/crs.pb
Executor/workspace/Xeno.exe.WebView2/EBWebView/PKIMetadata/14.0.0.1/ct_config.pb
Executor/workspace/Xeno.exe.WebView2/EBWebView/PKIMetadata/14.0.0.1/kp_pinslist.pb
Executor/workspace/Xeno.exe.WebView2/EBWebView/PKIMetadata/14.0.0.1/manifest.fingerprint
Executor/workspace/Xeno.exe.WebView2/EBWebView/PKIMetadata/14.0.0.1/manifest.json
Executor/workspace/Xeno.exe.WebView2/EBWebView/ShaderCache/data_0
Executor/workspace/Xeno.exe.WebView2/EBWebView/ShaderCache/data_1
Executor/workspace/Xeno.exe.WebView2/EBWebView/ShaderCache/data_2
Executor/workspace/Xeno.exe.WebView2/EBWebView/ShaderCache/data_3
Executor/workspace/Xeno.exe.WebView2/EBWebView/ShaderCache/index
Executor/workspace/Xeno.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings
Executor/workspace/Xeno.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings_2.0-0
Executor/workspace/Xeno.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll
.dll windows:6 windows x64 arch:x64

f51f0d794c7fcc93503306a9cd9ba55d

Code Sign

33:00:00:01:88:af:52:d6:b9:92:6d:e8:f9:00:00:00:00:01:88
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:39

Not After

03/03/2021, 18:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:33

Not After

01/09/2022, 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d
Signer

Actual PE Digest

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d

Digest Algorithm

sha256

PE Digest Matches

true

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d
Signer

Actual PE Digest

e0:a4:96:c5:ae:6e:90:5e:aa:f2:84:f3:f4:61:20:56:3c:57:4d:40:37:a2:5c:f3:95:41:db:f3:30:c5:61:6d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\1\s\build\bin\Release\Microsoft.CognitiveServices.Speech.core.pdb

Imports

crypt32

CertFreeCertificateContext
CryptDecodeObjectEx
CryptStringToBinaryA
CertSetCertificateContextProperty
CertCreateCertificateContext

ws2_32

WSAStartup
WSAIoctl
recv
WSAGetLastError
freeaddrinfo
ioctlsocket
connect
closesocket
socket
getaddrinfo
send

secur32

EncryptMessage
AcquireCredentialsHandleA
DeleteSecurityContext
InitializeSecurityContextA
FreeCredentialsHandle
DecryptMessage
QueryContextAttributesA

advapi32

CryptAcquireContextA
EventRegister
EventSetInformation
EventWriteTransfer
CryptReleaseContext
CryptDestroyKey
EventUnregister
CryptImportKey

ncrypt

NCryptOpenStorageProvider
NCryptFreeObject
NCryptImportKey

dbghelp

SymFromAddr
SymInitialize
SymCleanup

kernel32

LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitializeSListHead
CreateEventW
GetModuleHandleW
RtlCaptureContext
GetSystemTime
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
InitOnceBeginInitialize
InitOnceComplete
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
EnterCriticalSection
WaitForSingleObjectEx
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
VerSetConditionMask
VerifyVersionInfoW
GetCurrentProcess
FormatMessageW
GetLastError
LoadLibraryA
GetProcAddress
WaitForMultipleObjects
WaitForSingleObject
Sleep
SetEvent
CloseHandle
CreateThread
ResetEvent
CreateEventExA
CreateEventA
LocalFree
FormatMessageA
GetModuleHandleA
RtlLookupFunctionEntry
ReleaseSRWLockExclusive

msvcp140

_Mtx_unlock
?_Xbad_alloc@std@@YAXXZ
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Mtx_current_owns
_Query_perf_frequency
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_timedwait
_Query_perf_counter
_Xtime_get_ticks
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??Bid@locale@std@@QEAA_KXZ
?_Xout_of_range@std@@YAXPEBD@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?classic@locale@std@@SAAEBV12@XZ
?id@?$ctype@D@std@@2V0locale@2@A
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?toupper@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Throw_C_error@std@@YAXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?setf@ios_base@std@@QEAAHHH@Z
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
_Thrd_id
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
_Thrd_yield
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
_Thrd_join
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
_Cnd_unregister_at_thread_exit
_Cnd_destroy_in_situ
_Cnd_broadcast
_Cnd_register_at_thread_exit
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
_Cnd_wait
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
_Cnd_init_in_situ
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
_Cnd_do_broadcast_at_thread_exit
_Thrd_sleep
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
??0task_continuation_context@Concurrency@@AEAA@XZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
_Thrd_detach
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?eof@ios_base@std@@QEBA_NXZ
??7ios_base@std@@QEBA_NXZ
??Bios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
_Cnd_signal
??1_Locinfo@std@@QEAA@XZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??0_Locinfo@std@@QEAA@PEBD@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?id@?$collate@D@std@@2V0locale@2@A
_Strxfrm
_Strcoll
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?is@?$ctype@D@std@@QEBA_NFD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
_Mtx_lock
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Xruntime_error@std@@YAXPEBD@Z
?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?fail@ios_base@std@@QEBA_NXZ
?_Getname@_Locinfo@std@@QEBAPEBDXZ
??0_Locinfo@std@@QEAA@HPEBD@Z
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_destroy
__std_exception_copy
_CxxThrowException
strrchr
memmove
__std_type_info_compare
memset
_purecall
memcmp
memchr
strstr
strchr
__std_type_info_destroy_list
__C_specific_handler
__std_type_info_name
__current_exception_context
memcpy
__current_exception
__RTDynamicCast

api-ms-win-crt-string-l1-1-0

toupper
strncpy_s
isupper
tolower
_strnicmp
_stricmp
isspace
strnlen
strcmp
strncpy
strtok
strncmp
strcpy_s
strcpy
strtok_s
wcslen
strlen

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_crt_atexit
_initialize_onexit_table
_initterm
_initterm_e
_initialize_narrow_environment
_configure_narrow_argv
_register_onexit_function
_seh_filter_dll
_beginthreadex
_errno
terminate
abort
_cexit
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-heap-l1-1-0

malloc
calloc
_callnewh
free
realloc

api-ms-win-crt-math-l1-1-0

pow
_dtest
sqrt
ceilf
_dsign
ceil

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsprintf_s
_get_stream_buffer_pointers
_fseeki64
fread
fflush
fclose
fopen_s
_fsopen
fputc
fgetc
fwrite
fgetpos
setvbuf
ungetc
fsetpos

api-ms-win-crt-convert-l1-1-0

strtoul
strtoll
strtoull
strtol
strtod
atoi

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-utility-l1-1-0

rand
llabs

api-ms-win-crt-time-l1-1-0

_ctime64
_time64
_mkgmtime64
_gmtime64_s
strftime

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

ole32

CoCreateInstance
CoInitializeEx
CoUninitialize
PropVariantClear

rpcrt4

UuidToStringA
UuidCreate
RpcStringFreeA

Exports

Exports

CreateModuleObject
GetModuleObject
add_source_lang_config_to_auto_detect_source_lang_config
audio_config_create_audio_input_from_a_microphone
audio_config_create_audio_input_from_default_microphone
audio_config_create_audio_input_from_stream
audio_config_create_audio_input_from_wav_file_name
audio_config_create_audio_output_from_a_speaker
audio_config_create_audio_output_from_default_speaker
audio_config_create_audio_output_from_stream
audio_config_create_audio_output_from_wav_file_name
audio_config_create_pull_audio_input_stream
audio_config_create_push_audio_input_stream
audio_config_get_property_bag
audio_config_is_handle_valid
audio_config_release
audio_data_stream_can_read_data
audio_data_stream_can_read_data_from_position
audio_data_stream_create_from_file
audio_data_stream_create_from_keyword_result
audio_data_stream_create_from_result
audio_data_stream_detach_input
audio_data_stream_get_canceled_error_code
audio_data_stream_get_position
audio_data_stream_get_property_bag
audio_data_stream_get_reason_canceled
audio_data_stream_get_status
audio_data_stream_is_handle_valid
audio_data_stream_read
audio_data_stream_read_from_position
audio_data_stream_release
audio_data_stream_save_to_wave_file
audio_data_stream_set_position
audio_stream_create_pull_audio_input_stream
audio_stream_create_pull_audio_output_stream
audio_stream_create_push_audio_input_stream
audio_stream_create_push_audio_output_stream
audio_stream_format_create_from_compressed_format
audio_stream_format_create_from_default_input
audio_stream_format_create_from_default_output
audio_stream_format_create_from_waveformat_pcm
audio_stream_format_is_handle_valid
audio_stream_format_release
audio_stream_is_handle_valid
audio_stream_release
auto_detect_source_lang_config_get_property_bag
auto_detect_source_lang_config_is_handle_valid
auto_detect_source_lang_config_release
bot_framework_config_from_authorization_token
bot_framework_config_from_subscription
class_language_model_assign_class
class_language_model_from_storage_id
connection_async_handle_release
connection_close
connection_connected_set_callback
connection_disconnected_set_callback
connection_from_conversation_translator
connection_from_dialog_service_connector
connection_from_recognizer
connection_get_property_bag
connection_handle_is_valid
connection_handle_release
connection_message_get_data
connection_message_get_data_size
connection_message_get_property_bag
connection_message_handle_is_valid
connection_message_handle_release
connection_message_received_event_get_message
connection_message_received_event_handle_is_valid
connection_message_received_event_handle_release
connection_message_received_set_callback
connection_open
connection_send_message
connection_send_message_async
connection_send_message_data
connection_send_message_data_async
connection_send_message_wait_for
connection_set_message_property
conversation_create_from_config
conversation_delete_conversation
conversation_end_conversation
conversation_get_conversation_id
conversation_get_property_bag
conversation_lock_conversation
conversation_mute_all_participants
conversation_mute_participant
conversation_release_handle
conversation_start_conversation
conversation_transcription_result_get_user_id
conversation_transcription_result_get_utterance_id
conversation_translator_canceled_set_callback
conversation_translator_connection_connected_set_callback
conversation_translator_connection_disconnected_set_callback
conversation_translator_conversation_expiration_set_callback
conversation_translator_create_from_config
conversation_translator_event_get_expiration_time
conversation_translator_event_get_participant_changed_at_index
conversation_translator_event_get_participant_changed_reason
conversation_translator_event_handle_is_valid
conversation_translator_event_handle_release
conversation_translator_get_property_bag
conversation_translator_handle_is_valid
conversation_translator_handle_release
conversation_translator_join
conversation_translator_join_with_id
conversation_translator_leave
conversation_translator_participant_get_avatar
conversation_translator_participant_get_displayname
conversation_translator_participant_get_id
conversation_translator_participant_get_is_host
conversation_translator_participant_get_is_muted
conversation_translator_participant_get_is_using_tts
conversation_translator_participants_changed_set_callback
conversation_translator_result_get_original_lang
conversation_translator_send_text_message
conversation_translator_session_started_set_callback
conversation_translator_session_stopped_set_callback
conversation_translator_set_authorization_token
conversation_translator_start_transcribing
conversation_translator_stop_transcribing
conversation_translator_text_message_recevied_set_callback
conversation_translator_transcribed_set_callback
conversation_translator_transcribing_set_callback
conversation_unlock_conversation
conversation_unmute_all_participants
conversation_unmute_participant
conversation_update_participant
conversation_update_participant_by_user
conversation_update_participant_by_user_id
create_auto_detect_source_lang_config_from_languages
create_auto_detect_source_lang_config_from_open_range
create_auto_detect_source_lang_config_from_source_lang_config
create_pronunciation_assessment_config
create_pronunciation_assessment_config_from_json
create_voice_profile
create_voice_profile_client_from_config
create_voice_profile_from_id_and_type
custom_commands_config_from_authorization_token
custom_commands_config_from_subscription
delete_voice_profile
diagnostics_log_apply_properties
diagnostics_log_format_message
diagnostics_log_memory_dump
diagnostics_log_memory_dump_to_stderr
diagnostics_log_memory_get_line
diagnostics_log_memory_get_line_num_newest
diagnostics_log_memory_get_line_num_oldest
diagnostics_log_memory_start_logging
diagnostics_log_memory_stop_logging
diagnostics_log_start_logging
diagnostics_log_stop_logging
diagnostics_log_trace_message
diagnostics_log_trace_message2
diagnostics_log_trace_string
diagnostics_logmessage_set_callback
diagnostics_logmessage_set_filters
dialog_service_connector_activity_received_event_get_activity
dialog_service_connector_activity_received_event_get_activity_size
dialog_service_connector_activity_received_event_get_audio
dialog_service_connector_activity_received_event_handle_is_valid
dialog_service_connector_activity_received_event_has_audio
dialog_service_connector_activity_received_event_release
dialog_service_connector_activity_received_set_callback
dialog_service_connector_async_handle_is_valid
dialog_service_connector_async_handle_release
dialog_service_connector_async_reco_result_handle_is_valid
dialog_service_connector_async_reco_result_handle_release
dialog_service_connector_async_string_handle_is_valid
dialog_service_connector_async_string_handle_release
dialog_service_connector_async_void_handle_is_valid
dialog_service_connector_async_void_handle_release
dialog_service_connector_canceled_set_callback
dialog_service_connector_connect
dialog_service_connector_connect_async
dialog_service_connector_connect_async_wait_for
dialog_service_connector_create_dialog_service_connector_from_config
dialog_service_connector_disconnect
dialog_service_connector_disconnect_async
dialog_service_connector_disconnect_async_wait_for
dialog_service_connector_get_property_bag
dialog_service_connector_handle_is_valid
dialog_service_connector_handle_release
dialog_service_connector_listen_once
dialog_service_connector_listen_once_async
dialog_service_connector_listen_once_async_wait_for
dialog_service_connector_recognized_set_callback
dialog_service_connector_recognizing_set_callback
dialog_service_connector_send_activity
dialog_service_connector_send_activity_async
dialog_service_connector_send_activity_async_wait_for
dialog_service_connector_session_started_set_callback
dialog_service_connector_session_stopped_set_callback
dialog_service_connector_start_keyword_recognition
dialog_service_connector_start_keyword_recognition_async
dialog_service_connector_start_keyword_recognition_async_wait_for
dialog_service_connector_stop_keyword_recognition
dialog_service_connector_stop_keyword_recognition_async
dialog_service_connector_stop_keyword_recognition_async_wait_for
dialog_service_connector_stop_listening
dialog_service_connector_stop_listening_async
dialog_service_connector_synthesizing_audio_set_callback
dialog_service_connector_turn_status_received_get_conversation_id
dialog_service_connector_turn_status_received_get_conversation_id_size
dialog_service_connector_turn_status_received_get_interaction_id
dialog_service_connector_turn_status_received_get_interaction_id_size
dialog_service_connector_turn_status_received_get_status
dialog_service_connector_turn_status_received_handle_is_valid
dialog_service_connector_turn_status_received_release
dialog_service_connector_turn_status_received_set_callback
enroll_voice_profile
error_get_call_stack
error_get_error_code
error_get_message
error_release
get_voice_profiles
grammar_create_from_storage_id
grammar_handle_is_valid
grammar_handle_release
grammar_list_add_grammar
grammar_list_from_recognizer
grammar_list_set_recognition_factor
grammar_phrase_create_from_text
grammar_phrase_handle_is_valid
grammar_phrase_handle_release
intent_recognizer_add_intent
intent_result_get_intent_id
intent_trigger_create_from_language_understanding_model
intent_trigger_create_from_phrase
intent_trigger_handle_is_valid
intent_trigger_handle_release
keyword_recognition_model_create_from_file
keyword_recognition_model_handle_is_valid
keyword_recognition_model_handle_release
language_understanding_model__handle_release
language_understanding_model_create_from_app_id
language_understanding_model_create_from_subscription
language_understanding_model_create_from_uri
language_understanding_model_handle_is_valid
participant_create_handle
participant_get_property_bag
participant_release_handle
participant_set_preferred_langugage
participant_set_voice_signature
phrase_list_grammar_add_phrase
phrase_list_grammar_clear
phrase_list_grammar_from_recognizer_by_name
pronunciation_assessment_config_apply_to_recognizer
pronunciation_assessment_config_get_property_bag
pronunciation_assessment_config_is_handle_valid
pronunciation_assessment_config_release
pronunciation_assessment_config_to_json
property_bag_copy
property_bag_free_string
property_bag_get_string
property_bag_is_valid
property_bag_release
property_bag_set_string
pull_audio_input_stream_set_callbacks
pull_audio_input_stream_set_getproperty_callback
pull_audio_output_stream_read
push_audio_input_stream_close
push_audio_input_stream_set_property_by_id
push_audio_input_stream_set_property_by_name
push_audio_input_stream_write
push_audio_output_stream_set_callbacks
recognizer_async_handle_is_valid
recognizer_async_handle_release
recognizer_canceled_set_callback
recognizer_create_conversation_transcriber_from_config
recognizer_create_intent_recognizer_from_config
recognizer_create_keyword_recognizer_from_audio_config
recognizer_create_speaker_recognizer_from_config
recognizer_create_speech_recognizer_from_auto_detect_source_lang_config
recognizer_create_speech_recognizer_from_config
recognizer_create_speech_recognizer_from_source_lang_config
recognizer_create_translation_recognizer_from_config
recognizer_disable
recognizer_enable
recognizer_event_handle_is_valid
recognizer_event_handle_release
recognizer_get_property_bag
recognizer_handle_is_valid
recognizer_handle_release
recognizer_is_enabled
recognizer_join_conversation
recognizer_leave_conversation
recognizer_recognition_event_get_offset
recognizer_recognition_event_get_result
recognizer_recognize_keyword_once
recognizer_recognize_keyword_once_async
recognizer_recognize_keyword_once_async_wait_for
recognizer_recognize_once
recognizer_recognize_once_async
recognizer_recognize_once_async_wait_for
recognizer_recognized_set_callback
recognizer_recognizing_set_callback
recognizer_result_handle_is_valid
recognizer_result_handle_release
recognizer_session_event_get_session_id
recognizer_session_started_set_callback
recognizer_session_stopped_set_callback
recognizer_speech_end_detected_set_callback
recognizer_speech_start_detected_set_callback
recognizer_start_continuous_recognition
recognizer_start_continuous_recognition_async
recognizer_start_continuous_recognition_async_wait_for
recognizer_start_keyword_recognition
recognizer_start_keyword_recognition_async
recognizer_start_keyword_recognition_async_wait_for
recognizer_stop_continuous_recognition
recognizer_stop_continuous_recognition_async
recognizer_stop_continuous_recognition_async_wait_for
recognizer_stop_keyword_recognition
recognizer_stop_keyword_recognition_async
recognizer_stop_keyword_recognition_async_wait_for
reset_voice_profile
result_get_canceled_error_code
result_get_duration
result_get_no_match_reason
result_get_offset
result_get_property_bag
result_get_reason
result_get_reason_canceled
result_get_result_id
result_get_text
session_from_recognizer
session_get_property_bag
session_handle_is_valid
session_handle_release
source_lang_config_from_language
source_lang_config_from_language_and_endpointId
source_lang_config_get_property_bag
source_lang_config_is_handle_valid
source_lang_config_release
speaker_identification_model_add_profile
speaker_identification_model_create
speaker_identification_model_release_handle
speaker_recognizer_get_property_bag
speaker_recognizer_identify
speaker_recognizer_release_handle
speaker_recognizer_verify
speaker_verification_model_create
speaker_verification_model_release_handle
speech_config_from_authorization_token
speech_config_from_authorization_token_internal
speech_config_from_endpoint
speech_config_from_endpoint_internal
speech_config_from_host
speech_config_from_host_internal
speech_config_from_subscription
speech_config_from_subscription_internal
speech_config_get_property_bag
speech_config_is_handle_valid
speech_config_release
speech_config_set_audio_output_format
speech_config_set_profanity
speech_config_set_service_property
speech_translation_config_add_target_language
speech_translation_config_from_authorization_token
speech_translation_config_from_endpoint
speech_translation_config_from_host
speech_translation_config_from_subscription
speech_translation_config_remove_target_language
speechapi_async_handle_release
speechapi_async_wait_for
synth_result_get_audio_data
synth_result_get_audio_format
synth_result_get_audio_length
synth_result_get_canceled_error_code
synth_result_get_property_bag
synth_result_get_reason
synth_result_get_reason_canceled
synth_result_get_result_id
synthesizer_async_handle_is_valid
synthesizer_async_handle_release
synthesizer_canceled_set_callback
synthesizer_completed_set_callback
synthesizer_create_speech_synthesizer_from_auto_detect_source_lang_config
synthesizer_create_speech_synthesizer_from_config
synthesizer_disable
synthesizer_enable
synthesizer_event_handle_is_valid
synthesizer_event_handle_release
synthesizer_get_property_bag
synthesizer_handle_is_valid
synthesizer_handle_release
synthesizer_is_enabled
synthesizer_result_handle_is_valid
synthesizer_result_handle_release
synthesizer_speak_async_wait_for
synthesizer_speak_ssml
synthesizer_speak_ssml_async
synthesizer_speak_text
synthesizer_speak_text_async
synthesizer_start_speaking_ssml
synthesizer_start_speaking_ssml_async
synthesizer_start_speaking_text
synthesizer_start_speaking_text_async
synthesizer_started_set_callback
synthesizer_stop_speaking
synthesizer_stop_speaking_async
synthesizer_stop_speaking_async_wait_for
synthesizer_synthesis_event_get_result
synthesizer_synthesizing_set_callback
synthesizer_word_boundary_event_get_values
synthesizer_word_boundary_set_callback
translation_synthesis_result_get_audio_data
translation_text_result_get_translation_text_buffer_header
translator_add_target_language
translator_remove_target_language
translator_synthesizing_audio_set_callback
user_create_from_id
user_get_id
user_release_handle
voice_profile_client_get_property_bag
voice_profile_client_release_handle
voice_profile_get_id
voice_profile_release_handle

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 673KB - Virtual size: 673KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 171KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Executor/workspace/Xeno.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/manifest.fingerprint
Executor/workspace/Xeno.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/manifest.json
Executor/workspace/Xeno.exe.WebView2/EBWebView/Subresource Filter/Indexed Rules/36/10.34.0.57/LICENSE
Executor/workspace/Xeno.exe.WebView2/EBWebView/Subresource Filter/Indexed Rules/36/10.34.0.57/Ruleset Data
Executor/workspace/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/Filtering Rules
Executor/workspace/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/Filtering Rules-AA
Executor/workspace/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/LICENSE
Executor/workspace/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/Part-DE
Executor/workspace/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/Part-ES
Executor/workspace/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/Part-FR
Executor/workspace/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/Part-IT
Executor/workspace/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/Part-NL
Executor/workspace/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/Part-RU
Executor/workspace/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/Part-ZH
Executor/workspace/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/adblock_snippet.js
.js
Executor/workspace/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/manifest.fingerprint
Executor/workspace/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/manifest.json
Executor/workspace/Xeno.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.10.11.1/LICENSE
Executor/workspace/Xeno.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.10.11.1/_metadata/verified_contents.json
Executor/workspace/Xeno.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.10.11.1/keys.json
Executor/workspace/Xeno.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.10.11.1/manifest.fingerprint
Executor/workspace/Xeno.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.10.11.1/manifest.json
Executor/workspace/Xeno.exe.WebView2/EBWebView/Variations
Executor/workspace/Xeno.exe.WebView2/EBWebView/component_crx_cache/alpjnmnfbgfkmmpcfpejmmoebdndedno_1.4AF7EE72E9C8E11DAB4124EB233B3B5771D0EE966ECE3055FB251667528D3D0D
.zip
Executor/workspace/Xeno.exe.WebView2/EBWebView/component_crx_cache/eeobbhfgfagbclfofmgbdfoicabjdbkn_1.8BFD50D350D47445B57BB1D61BBDE41CEDA7AC43DC81FCE95BF1AC646D97D2A0
.zip
Executor/workspace/Xeno.exe.WebView2/EBWebView/component_crx_cache/fgbafbciocncjfbbonhocjaohoknlaco_1.D551321488BC5B99465F9047C5EFED82B96666074E4C836AE7B5B91D1DEEE2E5
.zip
Executor/workspace/Xeno.exe.WebView2/EBWebView/component_crx_cache/fppmbhmldokgmleojlplaaodlkibgikh_1.A81D1959892AE4180554347DF1B97834ABBA2E1A5E6B9AEBA000ECEA26EABECC
.zip
Executor/workspace/Xeno.exe.WebView2/EBWebView/component_crx_cache/kpfehajjjbbcifeehjgfgnabifknmdad_1.00AF3F07B5ABB71F6D30337E1EEF62FA280F06EF19485C0CF6B72171F92CCC0A
.zip
Executor/workspace/Xeno.exe.WebView2/EBWebView/component_crx_cache/ndikpojcjlepofdkaaldkinkjbeeebkl_1.69D0D51AD8D1AABAAE811B5BC6F72729BEEBE8AB40C8E6080C8255453F913377
.zip
Executor/workspace/Xeno.exe.WebView2/EBWebView/component_crx_cache/oankkpibpaokgecfckkdkgaoafllipag_1.44C48B9ECD87ACDDD850F9AA5E1C9D48B7A398DEC13D376CD62D55DADBD464A5
.zip
Executor/workspace/Xeno.exe.WebView2/EBWebView/component_crx_cache/ohckeflnhegojcjlcpbfpciadgikcohk_1.95FD9D48E4FC245A3F3A99A3A16ECD1355050BA3F4AFC555F19A97C7F9B49677
.zip
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/_metadata/verified_contents.json
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-af.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-as.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-be.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-bg.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-bn.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-cs.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-cu.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-cy.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-da.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-de-1901.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-de-1996.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-de-ch-1901.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-el.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-en-gb.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-en-us.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-es.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-et.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-eu.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-fr.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-ga.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-gl.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-gu.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-hi.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-hr.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-hu.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-hy.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-it.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-ka.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-kn.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-la.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-lt.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-lv.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-ml.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-mn-cyrl.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-mr.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-mul-ethi.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-nb.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-nl.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-nn.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-or.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-pa.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-pt.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-ru.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-sk.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-sl.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-sq.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-sv.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-ta.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-te.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-tk.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-uk.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-und-ethi.hyb
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/manifest.fingerprint
Executor/workspace/Xeno.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/manifest.json

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Password: xeno

Password: xeno

Password: xeno

40f6563dcb9e8aed6d908f9990347ae8

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

3e:39:1b:5c:c7:4f:87:89:be:63:7c:42:ba:3c:3e:3eCertificate

Extended Key Usages

Key Usages

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31Certificate

Extended Key Usages

Key Usages

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

b1:49:de:29:41:80:f7:19:84:c6:84:fc:9e:e2:aa:a5:96:d1:07:60:9c:c4:9c:cd:2c:ff:8e:65:1b:2b:8d:f9Signer

Headers

DLL Characteristics

File Characteristics

Imports

winmm

quartz

wmvcore

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

hhctrl.ocx

gdiplus

ws2_32

oleacc

imm32

version

winhttp

wtsapi32

Sections

.text Size: - Virtual size: 8.2MB

.rdata Size: - Virtual size: 1.5MB

.data Size: - Virtual size: 145KB

.vmp0 Size: - Virtual size: 2.9MB

.vmp1 Size: 7.9MB - Virtual size: 7.9MB

.rsrc Size: 725KB - Virtual size: 24.2MB

Password: xeno

a9fd3e7f71a802c8eee0a502f46de991

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49Certificate

Extended Key Usages

Key Usages

4e:a1:e8:9e:15:ea:4f:fa:93:79:84:d8:8f:54:5f:baCertificate

Extended Key Usages

Key Usages

58:87:9f:24:25:99:c5:8a:6a:3d:a1:73:d2:9f:04:d8:cb:0a:4b:54Signer

Headers

DLL Characteristics

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

3e:39:1b:5c:c7:4f:87:89:be:63:7c:42:ba:3c:3e:3e
Certificate

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

b1:49:de:29:41:80:f7:19:84:c6:84:fc:9e:e2:aa:a5:96:d1:07:60:9c:c4:9c:cd:2c:ff:8e:65:1b:2b:8d:f9
Signer

.text
Size: - Virtual size: 8.2MB

.rdata
Size: - Virtual size: 1.5MB

.data
Size: - Virtual size: 145KB

.vmp0
Size: - Virtual size: 2.9MB

.vmp1
Size: 7.9MB - Virtual size: 7.9MB

.rsrc
Size: 725KB - Virtual size: 24.2MB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Certificate

4e:a1:e8:9e:15:ea:4f:fa:93:79:84:d8:8f:54:5f:ba
Certificate

58:87:9f:24:25:99:c5:8a:6a:3d:a1:73:d2:9f:04:d8:cb:0a:4b:54
Signer

.text
Size: 13.1MB - Virtual size: 13.1MB

.rodata
Size: 4KB - Virtual size: 4KB

.rdata
Size: 3.6MB - Virtual size: 3.6MB

.data
Size: 836KB - Virtual size: 1.8MB

.rsrc
Size: 583KB - Virtual size: 582KB

.reloc
Size: 700KB - Virtual size: 699KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Certificate

4e:a1:e8:9e:15:ea:4f:fa:93:79:84:d8:8f:54:5f:ba
Certificate

58:87:9f:24:25:99:c5:8a:6a:3d:a1:73:d2:9f:04:d8:cb:0a:4b:54
Signer