Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
Setup.js
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Setup.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
sеttings.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
sеttings.dll
Resource
win10v2004-20220901-en
Target
AdobePhotoshop2022.rar
Size
11.1MB
MD5
cb7ef5d6b1f0aeed9ec94aed49f4d404
SHA1
2a129fca506eb7f6b3f66c0c83311e20b8b25405
SHA256
a81bff716aac89f34ef6019499d8cca004d7cc8842e45fe2a5e2247914f4446e
SHA512
af78d44ff0f9ccf6d8851ac9d672f5a3d34924092520d0d9e9427b23353c0043812f99e50848d079e06c97b9a170737605485a1efe005c2d183a4f2f4aa76009
SSDEEP
196608:RXGeo0+asauBgq2CSVENBiUOYsGn+eMwlCSaLj6USN49rkbG41:R2B0aajq27+iUXsNE0Lj6FOrW1
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
OpenEventA
CreateProcessW
OpenFileMappingA
GetExitCodeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAllocEx
VirtualProtectEx
ReadProcessMemory
WriteProcessMemory
GetModuleHandleW
GetStdHandle
GetEnvironmentStrings
FreeEnvironmentStringsA
SetHandleInformation
ReleaseMutex
ResumeThread
AssignProcessToJobObject
SetInformationJobObject
CreateJobObjectA
VerSetConditionMask
GetFileAttributesW
GetSystemDirectoryW
lstrcmpA
VerifyVersionInfoW
FileTimeToSystemTime
ExpandEnvironmentStringsA
FindClose
FindFirstFileA
GetProcessId
GetSystemDirectoryA
CopyFileA
SetThreadAffinityMask
ResetEvent
GetModuleFileNameA
GetOverlappedResult
GetFileTime
GetSystemTime
SystemTimeToFileTime
OutputDebugStringA
CreatePipe
PeekNamedPipe
Sleep
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetCurrentDirectoryW
FindFirstFileW
GetDiskFreeSpaceExA
GetDriveTypeA
GetLogicalDrives
GetSystemPowerStatus
GetEnvironmentVariableW
CreateDirectoryW
DeleteFileW
GetFullPathNameW
GetLongPathNameW
GetVolumePathNameW
RemoveDirectoryW
GetVolumeNameForVolumeMountPointW
GetVolumePathNamesForVolumeNameW
ProcessIdToSessionId
VirtualQueryEx
SizeofResource
MoveFileExA
MoveFileExW
WTSGetActiveConsoleSessionId
RaiseException
InitializeCriticalSection
GetProcessHeap
OutputDebugStringW
GetCurrentDirectoryW
FindNextFileW
ExitProcess
HeapFree
HeapAlloc
SetLastError
DebugBreak
IsDebuggerPresent
GetTempFileNameA
WriteFile
ReadConsoleA
SetConsoleMode
ConvertThreadToFiber
ConvertFiberToThread
CreateFiber
DeleteFiber
SwitchToFiber
DeleteCriticalSection
AreFileApisANSI
GetTempPathA
GetFileAttributesExW
GetDiskFreeSpaceA
SetFilePointerEx
SetFileAttributesA
GetFileSizeEx
GetFileAttributesA
DeleteFileA
CreateFileMappingW
GetDiskFreeSpaceW
LockFileEx
HeapSize
FlushFileBuffers
FormatMessageW
LocalFree
LocalAlloc
ExpandEnvironmentStringsW
FindResourceA
LockResource
LoadResource
LoadLibraryExA
WideCharToMultiByte
LoadLibraryW
GetModuleHandleExA
VirtualQuery
GetSystemTimeAsFileTime
CreateThread
GetProcessTimes
CreateMutexA
GetFileInformationByHandle
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
FreeLibrary
InitializeCriticalSectionAndSpinCount
DeviceIoControl
GetVersionExA
GetSystemInfo
SetEnvironmentVariableA
GetEnvironmentVariableA
CreateProcessA
GetExitCodeProcess
TerminateProcess
GetFileSize
CreateFileA
CreateFileMappingA
CreateSemaphoreA
UnmapViewOfFile
MapViewOfFile
OpenProcess
GetCurrentProcess
WaitForMultipleObjects
ReleaseSemaphore
SetEvent
DuplicateHandle
GetModuleFileNameW
HeapValidate
HeapCreate
HeapDestroy
UnlockFileEx
LockFile
UnlockFile
QueryPerformanceCounter
SetEndOfFile
CreateMutexW
HeapReAlloc
GetFullPathNameA
InterlockedCompareExchange
FindFirstFileExW
GetDiskFreeSpaceExW
GetDriveTypeW
GetTempFileNameW
GetVolumeInformationW
VirtualProtect
SetFilePointer
ReadFile
Process32Next
Process32First
CreateToolhelp32Snapshot
GetModuleHandleA
GetWindowsDirectoryW
GetTickCount
GetCurrentProcessId
GetTempPathW
SetFileAttributesW
GetVolumeInformationA
CopyFileW
GetDateFormatW
GetTimeFormatW
GetModuleHandleExW
SetEnvironmentVariableW
SetThreadExecutionState
SetThreadPriority
GetCurrentThread
WaitForSingleObjectEx
SleepEx
CancelIo
CloseHandle
WriteFileEx
SetFileTime
ReadFileEx
WriteConsoleW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
SetConsoleCtrlHandler
EnumSystemLocalesW
IsBadWritePtr
SetSystemPowerState
GetLocaleInfoW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
SetStdHandle
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
FreeLibraryAndExitThread
ExitThread
GetLocalTime
GetFileType
SystemTimeToTzSpecificLocalTime
RtlUnwind
InterlockedFlushSList
InterlockedPushEntrySList
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateFileW
GetLastError
FormatMessageA
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
CreateEventA
WaitForSingleObject
MultiByteToWideChar
LoadLibraryA
GetProcAddress
lstrcmpW
IsProcessorFeaturePresent
InitializeSListHead
CreateEventW
GetCPInfo
GlobalFree
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
InitOnceBeginInitialize
InitOnceComplete
LCMapStringEx
DecodePointer
EncodePointer
GetStringTypeW
QueryPerformanceFrequency
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
TryEnterCriticalSection
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
lstrcmpiA
EnumDisplayDevicesA
GetForegroundWindow
GetWindowThreadProcessId
GetKeyboardLayout
GetMessageExtraInfo
VkKeyScanExA
UnregisterClassW
RegisterClassExW
GetClassInfoExW
wsprintfA
ExitWindowsEx
keybd_event
EnumDisplayMonitors
GetMonitorInfoA
GetShellWindow
GetWindowLongA
SetForegroundWindow
IsIconic
IsWindowVisible
ShowWindow
PostMessageA
GetAsyncKeyState
GetAncestor
EnumWindows
FindWindowExW
EnumChildWindows
PostMessageW
SendMessageTimeoutW
SendInput
ReleaseDC
GetDC
GetSystemMetrics
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
GetDesktopWindow
GetCursorPos
GetWindowRect
MapVirtualKeyExA
MonitorFromPoint
GetDeviceCaps
DeleteObject
DeleteDC
CreateDCA
ExtEscape
CreateProcessAsUserW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
RegCloseKey
RegOpenKeyA
RegOpenKeyExW
RegQueryValueExA
RegQueryValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
AddAccessAllowedAce
RegEnumValueA
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceConfigW
QueryServiceStatus
QueryServiceStatusEx
StartServiceW
CreateWellKnownSid
RegSetValueExW
RegSetValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyExA
LookupPrivilegeValueA
SetTokenInformation
EqualSid
DuplicateTokenEx
AdjustTokenPrivileges
ConvertStringSecurityDescriptorToSecurityDescriptorW
IsValidSid
GetTokenInformation
CopySid
OpenProcessToken
ReadEventLogW
OpenEventLogA
CloseEventLog
InitializeAcl
GetLengthSid
ShellExecuteW
ShellExecuteExA
SHGetFolderPathW
ShellExecuteExW
SHGetSpecialFolderPathW
SHGetKnownFolderPath
ord680
CoTaskMemFree
CoInitializeEx
CoSetProxyBlanket
CLSIDFromString
CoInitialize
CoUninitialize
CoCreateInstance
SysAllocString
SysFreeString
VariantInit
VariantClear
VariantChangeType
VariantCopy
SysAllocStringByteLen
SysStringByteLen
WSASocketA
gethostname
freeaddrinfo
getaddrinfo
WSASendTo
WSAEventSelect
WSAEnumNetworkEvents
WSAGetLastError
WSACleanup
WSAStartup
socket
setsockopt
htonl
getsockname
ioctlsocket
closesocket
bind
ntohs
ntohl
recvfrom
WSASetLastError
getpeername
accept
gethostbyname
inet_addr
htons
__WSAFDIsSet
select
sendto
WSAIoctl
shutdown
WSACloseEvent
WSACreateEvent
WSARecv
WSARecvFrom
WSAResetEvent
WSASend
WSAWaitForMultipleEvents
connect
recv
send
listen
PathFileExistsW
SHDeleteKeyA
mixerGetLineInfoA
waveOutClose
waveOutGetDevCapsW
timeEndPeriod
timeBeginPeriod
mixerSetControlDetails
mixerGetControlDetailsA
mixerGetLineControlsA
mixerGetID
waveOutOpen
mixerClose
mixerOpen
mixerGetDevCapsA
waveInMessage
waveInClose
waveInOpen
waveOutMessage
CertFreeCertificateChain
CertGetCertificateChain
CertCloseStore
CertFreeCertificateContext
CertAddCertificateContextToStore
CertCreateCertificateContext
CertOpenStore
NotifyAddrChange
GetAdaptersAddresses
GetExtendedTcpTable
GetAdaptersInfo
GetBestInterface
ImageAddCertificate
ImageRemoveCertificate
ImageEnumerateCertificates
EnumProcessModules
GetModuleBaseNameA
EnumProcesses
GetModuleFileNameExW
GetModuleInformation
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoA
SetupDiGetDeviceInstanceIdA
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiClassGuidsFromNameA
??0CThreadEvent@@QAE@PAX_N@Z
?GetResult@CThread@@QBEHXZ
SpewOutputFunc
GetSpewOutputFunc
?ClaimMemory_Aligned@CValidator@@QAEXPBX@Z
Plat_IsSteamConsoleMode
GetSpewAndLogLevel
GetCrashHandlerFactory
GetCRunTimeVersion
g_dwDllEntryThreadId
WriteMiniDump
Plat_ExitProcess
ETW_Steamworks_IPCSend_Start
?Set@CThreadLocalBase@@QAEXPAX@Z
SetEnvironmentVariableUTF8
?EnterScope@CVProfile@@QAE_NPBDW4EVProfBugdetGroup@@PAX@Z
?ExitScope@CVProfile@@QAEXXZ
ETW_Steamworks_IPCRecv_Start
ETW_Steamworks_IPCRecv_End_
??0CThreadLocalBase@@QAE@XZ
SHGetFolderPathUTF8
ETW_Steamworks_IPCSend_End_
Plat_gmtime
Plat_localtime
Plat_AbsoluteTime
ThreadSuspendProcess
ThreadResumeProcess
ThreadShellExecute
?ClaimSocket@CValidator@@QAEXI@Z
?ClaimConnection@CValidator@@QAEXI@Z
ThreadGetProcessListInfo
Plat_AbsoluteTimeToFloat
CatchAndWriteMiniDumpForVoidPtrFn
GetAvailableRAM
ThreadInterlockedExchangeAdd64
ThreadInterlockedExchange64
?ClaimUntrackedMemory@CValidator@@QAEXI@Z
?Lock@CThreadSpinLock@@ACEXI@Z
ThreadInterlockedCompareExchange64
SecureRandomBytes
ThreadInterlockedDecrement64
ThreadInterlockedIncrement64
Test_SetFailed
Test_IsActive
ReleaseThreadHandle
?CreateSimpleThread@@YAPAXP6AIPAX@Z0PAII@Z
ThreadSetDebugName
SpewAndLogActivate
?Resume@CThread@@QAEIXZ
?Suspend@CThread@@QAEIXZ
ThreadInMainThread
getcwd_utf8
Plat_timegm
Plat_ctime
_DMsg
_SpewMessageType
Plat_USTime
WaitForMultipleEvents
?Reset@CThreadEvent@@QAE_NXZ
??1CThreadLocalBase@@QAE@XZ
?Terminate@CThread@@QAE_NH@Z
GetModuleFileNameUTF8
CreateFileUTF8
Plat_RelativeTickFrequency
?SetPriority@CThread@@QAE_NH@Z
?TryLock@CThreadMutex@@QAE_NH@Z
Log
?AssertFailed@?$AssertMsgHelper@$00@@SA_NPBDI0@Z
Plat_TickAddMicroSec
Plat_TickDiffMicroSec
Plat_TickDiffMilliSec
ETWEnd
ETWBegin
ETWIsTracingEnabled
Plat_IsGamescope
Plat_IsSteamOS
Plat_MSTime64
GetInstalledRAM
Warning
Plat_IsChromeOS
CreateProcessUTF8
GetLocalHostname
?ClaimArrayMemory@CValidator@@QAEXPBX@Z
g_ClockSpeed
GetMiniDumpDirectory
GetMiniDumpSteamID
GetMiniDumpBuildID
ThreadWaitForProcessExit
?ThreadTerminateProcessCode@@YA_NPAXH@Z
ThreadIsProcessActive
ThreadTerminateProcessCode
ThreadIsProcessIdActive
ThreadGetCurrentProcessId
ThreadGetProcessId
ThreadCloseProcess
CreateSimpleProcess
Plat_IsSteamOS3
Plat_CommandLineParamValue
Plat_CommandLineParamExists
?GetCPUInformation@@YAABUCPUInformation@@XZ
g_VProfile
?MarkFrame@CVProfile@@QAEXPBD@Z
VProfInternalGetProfileForCurrentThread
?GetName@CThread@@QAEPBDXZ
?Get@CThreadLocalBase@@QBEPAXXZ
ThreadSetBackgroundPriority
Is64BitOS
Plat_IsSteamDeck
Plat_GetExecutablePathUTF8
Plat_GetExecutablePath
Plat_OutputDebugString
?Init@CThread@@MAE_NXZ
?BHasValidThreadID@CThread@@QBE_NXZ
?Set@CThreadEvent@@QAE_NXZ
??0CThreadEvent@@QAE@_N@Z
TSQueue_PopIntoFreeList
TSQueueBase_UnsafeDummy
TSQueueBase_UnsafePeek
TSQueueBase_Pop
TSQueueBase_Push
TSQueueBase_Init
TSListBase_UnsafePeek
TSListBase_Pop
TSListBase_Init
?Start@CThread@@QAE_NI@Z
ThreadSleep
?OnExit@CThread@@MAEXXZ
?IsThreadRunning@CThread@@MBE_NXZ
?GetThreadProc@CThread@@EAEP6GIPAX@ZXZ
?Join@CThread@@QAE_NI@Z
?IsAlive@CThread@@QBE_NXZ
?SetName@CThread@@QAEXPBD@Z
??1CThread@@UAE@XZ
??0CThread@@QAE@XZ
g_ClockSpeedSecondsMultiplier
Plat_MSTime
Plat_RelativeTicks
?Release@CThreadSemaphore@@QAE_NJ@Z
??0CThreadSemaphore@@QAE@JJ@Z
?Wait@CThreadSyncObject@@QAE_NI@Z
??1CThreadSyncObject@@QAE@XZ
??1CThreadMutex@@QAE@XZ
??0CThreadMutex@@QAE@XZ
Error
Plat_OutputDebugStringRaw
Plat_IsInDebugSession
?IsClaimed@CValidator@@QBE_NPBX@Z
?AssertFailed@?$AssertMsgHelper@$0A@@@SA_NPBDI0ZZ
fopen_utf8_internal
ThreadImplOneTimeInit
g_VProfProfilesRunningCount
g_pMemAllocSteam
?ClaimMemory@CValidator@@QAEXPBX@Z
?Pop@CValidator@@QAEXXZ
?Push@CValidator@@QAEXPBDPAX0@Z
CVProfile_ExitScope
VProfInternalEnterScopeCurrentThread
Msg
Plat_FloatTime
BGetLocalFQDN
V_URLDecode
V_strcmp_prefix
DebugStatsSystem
V_wcstoi64
V_strtoi64
V_tolower
Coroutine_IsAddressInOurStack
Coroutine_IsActive
Coroutine_YieldToMain
Coroutine_Continue
Coroutine_Create
V_strncat_length
WeakRandomSeed
V_StripTrailingWhitespaceASCII
V_snwprintf
V_StrSubst
?V_UnicodeValidate@@YA_NPBD@Z
V_strnlen
V_URLContainsDomain
?V_UnicodeRepair@@YAHPADW4EStringConvertErrorPolicy@@@Z
V_wcstoui64
Coroutine_ValidateGlobals
V_MatchWildcardDNSName
?V_UnicodeLength@@YAHPBD@Z
V_pretifynum
V_BasicHtmlEntityEncode
GetPlatformNameFromEPlatformType
V_URLCracker
V_vsnwprintf
Coroutine_ReleaseThreadMemory
V_LocaleSpecificANSIToUTF8
V_toupper
V_UTF8ToUChar32
GetOSDetailString
V_wcsncpy
V_isvalidhex
V_SplitStringInternal
GetPlatformFromOS
V_URLParse
V_StripPrecedingAndTrailingWhitespace
V_atoui64
V_atof
WeakRandomFloat
?V_ConvertUUIDToString@@YA_NPBUV_UUID@@W4EUUIDStringFlags@@PADH@Z
V_strnchr
GetNameFromOSType
?RandomFillMemory@CUniformRandomStream@@UAEXPAXI@Z
?SetSeed@CUniformRandomStream@@UAEXH@Z
V_URLEncode
V_FixupPathName
V_strtoui64
V_strcat
V_strncat_length_unbounded
V_ExtractDomainFromURL
?GetValue@CCommandLineParam@@QBEPBDPBD@Z
?Exists@CCommandLineParam@@QBE_NXZ
WeakRandomUint32
KeyValuesSystemSteam
V_hextobinary
V_FormatAndAppend
V_CopyAndFixSlashes
V_strnappend
GetPlatformName
WeakRandomGaussianFloat
V_MatchWildcardString
V_AppendParamToURL
?V_EscapeShellArgumentAndAppend@@YAIPAVCUtlStringBuilder@@PBD@Z
?V_ParseShellCommandLine@@YAXPBDAAV?$CUtlVector@VCUtlString@@V?$CUtlMemory@VCUtlString@@@@@@HPAPBD@Z
V_FixDoubleSlashes
V_StrTrim
V_JoinNumbers
V_SplitNumbers
V_StrReplaceChar
V_TruncateAbsolutePathToDiskIdentity
V_IsAbsolutePath
V_AppendSlash
V_MakeRelativePath
V_MakeAbsolutePath
V_RemoveDotSlashes
V_ComposeFileName
V_SetExtension
V_pretifymem
OSTypesAreCompatible
GetOSType
V_JoinNumbersUint
V_SplitNumbersUint
?V_stristr@@YAPBDPBD0@Z
V_isnumeric
V_URLEncodeRaw
V_StrSubstInPlace
V_GetFileExtension
V_UnqualifiedFileName
V_binarytohex
V_strncmp
V_strupper_fast
StringFindSuffix
V_ExtractFileExtension
V_ExtractFilePath
V_StripLastDir
V_StripFilename
V_StripTrailingSlash
V_FileBase
V_strnistr
V_URLDecodeRaw
V_FixSlashes
V_memcpy_nocache
StringAfterPrefix
?V_SplitStringInternal@@YAXPBDPBQBDQAPBDHAAV?$CUtlVector@VCUtlString@@V?$CUtlMemory@VCUtlString@@@@@@_N@Z
V_strlower_fast
V_vsnprintf
V_UTF32ToUTF16
V_UTF8ToUTF32
V_UTF8ToUTF16
V_atoi
V_iswalpha32
V_towlower32
??0CUniformRandomStream@@QAE@XZ
V_UTF32ToUTF8
V_UTF16ToUTF8
WeakRandomInt
V_StripExtension
V_strncat
??1CCommandLineParam@@QAE@XZ
??0CCommandLineParam@@QAE@PBD0@Z
V_snprintf
CommandLine
V_strncpy
V_strnicmp
V_vsnprintfRet
WeakRandomFillMemory
AcceptEx
GetAcceptExSockaddrs
BCryptGenRandom
AcquireCredentialsHandleA
InitializeSecurityContextA
CompleteAuthToken
DeleteSecurityContext
FreeCredentialsHandle
Breakpad_SteamMiniDumpInit
Breakpad_SteamSetAppID
Breakpad_SteamSetSteamID
Breakpad_SteamWriteMiniDumpSetComment
Breakpad_SteamWriteMiniDumpUsingExceptionInfoWithBuildId
CreateInterface
Steam_BConnected
Steam_BGetCallback
Steam_BLoggedOn
Steam_BReleaseSteamPipe
Steam_ConnectToGlobalUser
Steam_CreateGlobalUser
Steam_CreateLocalUser
Steam_CreateSteamPipe
Steam_FreeLastCallback
Steam_GSBLoggedOn
Steam_GSBSecure
Steam_GSGetSteam2GetEncryptionKeyToSendToNewClient
Steam_GSGetSteamID
Steam_GSLogOff
Steam_GSLogOn
Steam_GSRemoveUserConnect
Steam_GSSendSteam2UserConnect
Steam_GSSendSteam3UserConnect
Steam_GSSendUserDisconnect
Steam_GSSendUserStatusResponse
Steam_GSSetServerType
Steam_GSSetSpawnCount
Steam_GSUpdateStatus
Steam_GetAPICallResult
Steam_GetGSHandle
Steam_InitiateGameConnection
Steam_LogOff
Steam_LogOn
Steam_ReleaseThreadLocalMemory
Steam_ReleaseUser
Steam_SetLocalIPBinding
Steam_TerminateGameConnection
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ