Static task
static1
Behavioral task
behavioral1
Sample
7d9c542882a02d978433476a209adf52e29c7e044d2da10bcb22359bb66b7cd5.dll
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral2
Sample
7d9c542882a02d978433476a209adf52e29c7e044d2da10bcb22359bb66b7cd5.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
Target
76b2f859e5b57a2975cd0eed0235ffbe.bin
Size
2.2MB
MD5
25e86c406e037cac6c68a518b2fbc7e7
SHA1
8562105fadf14fd8d6f2ca89158f54f7011fc22c
SHA256
f34ed4d3ed85a8ea09e0926434df3ca0c632b4330cb1e264df3df200bd9904bd
SHA512
f59e3422a68d1f1def038a970bb5fd86e86000895682948969aa63931661f206acb658952a50ea676988ff725e32bcc0c813ee1438de0868e732a6055aabdf6f
SSDEEP
49152:S6OqrTcNe5mmYvIM82cW7YoZhmegeDN2WEQhvyW9NQaFAlzVb:S63pmDp7df2WEQhFNnGVb
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetModuleFileNameA
CreateFileW
FindClose
FindFirstFileW
GetFileAttributesW
DeviceIoControl
CreateDirectoryW
CreateFileA
DeleteFileW
GetFileSize
GetFullPathNameW
WriteFile
SetLastError
FreeLibrary
GetModuleFileNameW
LoadLibraryA
LocalFree
MoveFileExW
MultiByteToWideChar
ExitProcess
FindFirstFileExW
FindNextFileW
FlushFileBuffers
HeapAlloc
GetDriveTypeW
GetFileInformationByHandle
GetFileSizeEx
ReadFile
SetEndOfFile
SetFilePointer
SetFileTime
GetOverlappedResult
CancelIo
SetProcessShutdownParameters
GetCurrentProcessId
GetEnvironmentVariableA
GetLongPathNameA
Process32Next
Process32First
CreateToolhelp32Snapshot
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
WaitForMultipleObjects
CreateEventA
ResetEvent
SetEvent
GetModuleHandleExA
GetCurrentThreadId
GetCurrentProcess
CreateMutexA
WaitForSingleObject
ReleaseMutex
DeleteCriticalSection
InitializeCriticalSection
GetLastError
GetModuleHandleA
OpenProcess
GetExitCodeProcess
CloseHandle
GetProcAddress
GetProcessHeap
SleepEx
GetSystemTimeAsFileTime
GetLogicalDriveStringsA
ReadDirectoryChangesW
GetDateFormatW
GetTimeFormatW
FileTimeToSystemTime
GetModuleHandleW
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
DuplicateHandle
WideCharToMultiByte
GetStringTypeW
InitOnceBeginInitialize
InitOnceComplete
EncodePointer
DecodePointer
InitializeCriticalSectionEx
LCMapStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
RtlUnwind
RaiseException
LeaveCriticalSection
GetDiskFreeSpaceA
EnterCriticalSection
InterlockedFlushSList
TlsAlloc
TryEnterCriticalSection
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
SystemTimeToFileTime
GetSystemTime
ReadConsoleA
SetConsoleMode
ConvertFiberToThread
DeleteFiber
GetEnvironmentVariableW
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
GetStdHandle
GetConsoleOutputCP
GetConsoleMode
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetFilePointerEx
SetConsoleCtrlHandler
ReadConsoleW
GetCurrentDirectoryW
SetStdHandle
GetTimeZoneInformation
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
ShowWindow
GetWindowLongA
PeekMessageA
GetMessageA
SetWindowLongA
DispatchMessageA
TranslateMessage
SetParent
MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation
GetParent
GetClientRect
DeregisterEventSource
ReportEventW
RegQueryValueExW
RegOpenKeyExA
RegEnumValueW
RegDeleteValueW
LookupPrivilegeValueA
AdjustTokenPrivileges
SetSecurityDescriptorDacl
IsValidSid
InitializeSecurityDescriptor
InitializeAcl
GetTokenInformation
GetLengthSid
CreateWellKnownSid
CopySid
AddAccessAllowedAce
OpenProcessToken
RegQueryValueExA
RegOpenKeyA
RegCloseKey
RegisterEventSourceW
ShellExecuteW
SHGetKnownFolderPath
CoTaskMemFree
OleUninitialize
OleInitialize
VariantClear
GetModuleFileNameExW
?Pop@CValidator@@QAEXXZ
?AssertFailed@?$AssertMsgHelper@$0A@@@SA_NPBDI0ZZ
?ClaimMemory@CValidator@@QAEXPBX@Z
VProfInternalEnterScopeCurrentThread
CVProfile_ExitScope
g_VProfProfilesRunningCount
Msg
?Init@CThread@@MAE_NXZ
?OnExit@CThread@@MAEXXZ
?IsThreadRunning@CThread@@MBE_NXZ
?GetThreadProc@CThread@@EAEP6GIPAX@ZXZ
??0CThreadMutex@@QAE@XZ
??1CThreadMutex@@QAE@XZ
??0CThread@@QAE@XZ
??1CThread@@UAE@XZ
?Start@CThread@@QAE_NI@Z
?IsAlive@CThread@@QBE_NXZ
?Join@CThread@@QAE_NI@Z
?IsClaimed@CValidator@@QBE_NPBX@Z
Warning
Plat_FloatTime
Plat_MSTime
Plat_CommandLineParamExists
Plat_CommandLineParamValue
Plat_IsGamescope
ETW_Steamworks_RunCallbacks_Start
ETW_Steamworks_RunCallbacks_End_
ETW_Steamworks_DispatchCallback_Start
ETW_Steamworks_DispatchCallback_End_
Log
?GetCPUInformation@@YAABUCPUInformation@@XZ
Plat_IsInDebugSession
Plat_RelativeTicks
Plat_gmtime
Plat_GetExecutablePath
SpewOutputFunc
ThreadSleep
ThreadGetCurrentProcessId
?Get@CThreadLocalBase@@QBEPAXXZ
VProfInternalGetProfileForCurrentThread
?MarkFrame@CVProfile@@QAEXPBD@Z
g_pMemAllocSteam
?StartProfilingAllThreads@CVProfManager@@QAEXXZ
?StopProfilingAllThreads@CVProfManager@@QAEXXZ
?DumpAllThreadProfiles@CVProfManager@@QAEXH@Z
CatchAndWriteMiniDumpForVoidPtrFn
SetMiniDumpBuildID
SetMiniDumpSteamID
g_VProfile
g_VProfManager
?SetName@CThread@@QAEXPBD@Z
?AssertFailed@?$AssertMsgHelper@$00@@SA_NPBDI0@Z
?Push@CValidator@@QAEXPBDPAX0@Z
Plat_MSTime64
ThreadShellExecute
ThreadIsProcessIdActive
Plat_ExitProcess
WriteMiniDump
g_dwDllEntryThreadId
Error
Plat_IsChromeOS
GetLocalHostname
BGetLocalFQDN
Plat_GetExecutablePathUTF8
Plat_localtime
Is64BitOS
Plat_OutputDebugString
?Set@CThreadEvent@@QAE_NXZ
?ClaimArrayMemory@CValidator@@QAEXPBX@Z
ThreadImplOneTimeInit
ThreadInterlockedExchangeAdd64
SecureRandomBytes
fopen_utf8_internal
Plat_RelativeTickFrequency
Plat_ctime
_DMsg
g_ClockSpeed
Test_SetFailed
Test_IsActive
?Lock@CThreadSpinLock@@ACEXI@Z
?Set@CThreadLocalBase@@QAEXPAX@Z
??1CThreadLocalBase@@QAE@XZ
?CleanupUnusedProfiles@CVProfManager@@QAEXXZ
??0CThreadLocalBase@@QAE@XZ
ThreadInMainThread
ReleaseThreadHandle
?CreateSimpleThread@@YAPAXP6AIPAX@Z0PAII@Z
_SpewMessageType
GetSpewOutputFunc
Plat_OutputDebugStringRaw
getcwd_utf8
V_vsnprintfRet
V_StrSubstInPlace
V_FixSlashes
V_URLDecodeRaw
StringAfterPrefix
V_strnicmp
V_UTF16ToUTF8
?V_SplitStringInternal@@YAXPBDPBQBDQAPBDHAAV?$CUtlVector@VCUtlString@@V?$CUtlMemory@VCUtlString@@@@@@_N@Z
WeakRandomInt
V_StripFilename
V_strncpy
V_pretifymem
V_URLEncode
V_StrSkipArticles
V_UTF8ToUTF16
V_strncat
V_SplitNumbers
V_StripPrecedingAndTrailingWhitespace
V_snprintf
V_StripTrailingSlash
GetOSType
V_atoi
V_strtoui64
?V_stristr@@YAPBDPBD0@Z
V_snwprintf
WeakRandomFloat
??0CCommandLineParam@@QAE@PBD0@Z
??1CCommandLineParam@@QAE@XZ
CommandLine
V_strncmp
V_vsnprintf
V_MakeAbsolutePath
V_AggressiveStripPrecedingAndTrailingWhitespace
V_UTF32ToUTF8
V_URLContainsDomain
V_URLParse
V_IsSteamCloseProtocol
V_strristr
V_ParseURLQueryString
V_ParseSteamOpenURLExternalProtocol
GetPlatformName
V_ExtractDomainFromURL
V_URLCracker
V_UTF16ToUTF32
V_UTF32ToUTF16
V_binarytohex
V_wcsncpy
V_vsnwprintf
V_ExtractFileExtension
StringFindSuffix
V_strncat_length
V_ExtractFilePath
V_RemoveDotSlashes
V_AppendSlash
V_IsAbsolutePath
V_FixDoubleSlashes
V_tolower
V_strlower_fast
V_strcat
V_atof
V_wcstoui64
KeyValuesSystemSteam
V_atoui64
V_towlower32
V_towupper32
V_UChar32ToUTF16
?V_UnicodeAdvance@@YAPAGPAGH@Z
V_UTF32CharsToUTF8
V_UTF32CharsToUTF16
V_UTF16ToUChar32
CanBreakBetween
V_isbreakablewspace
V_IsValidURLCharacter
V_stricmp_prefix
V_GetFileExtension
V_WcsSkipArticles
V_SetExtension
V_StripLastDir
V_UnqualifiedFileName
closesocket
WSASetLastError
recv
WSACleanup
getaddrinfo
ntohs
ntohl
WSAGetLastError
freeaddrinfo
send
glClear
glEnable
glDisable
glGetError
glMatrixMode
glBegin
glOrtho
glLoadIdentity
glClearColor
glBindTexture
glGenTextures
glTexImage2D
glEnd
glVertex2f
glColor4ub
glTexCoord2f
glPixelStorei
SDL_GetNumVideoDisplays
SDL_GetDisplayBounds
SDL_CreateWindow
SDL_GetWindowFromID
SDL_GetWindowSize
SDL_ShowWindow
SDL_GetWindowWMInfo
SDL_RaiseWindow
SDL_DestroyWindow
SDL_GL_SetAttribute
SDL_GL_CreateContext
SDL_GL_MakeCurrent
SDL_GL_SwapWindow
SDL_GL_DeleteContext
SDL_ShowCursor
SDL_HideCursor
SDL_AddEventWatch
SDL_DelEventWatch
SDL_SetHint
SDL_InitSubSystem
SDL_WasInit
BCryptGenRandom
CreateInterface
WinAppMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ