Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
10Static
static
1version_2.6_2023.rar
windows10-2004-x64
3version_2....23.unr
windows10-2004-x64
3version_2....er.dll
windows10-2004-x64
1version_2....PF.tmp
windows10-2004-x64
3version_2....PT.tmp
windows10-2004-x64
3version_2....in.xml
windows10-2004-x64
1version_2....nt.log
windows10-2004-x64
1version_2....ls.xml
windows10-2004-x64
1version_2....er.ini
windows10-2004-x64
1version_2....in.ini
windows10-2004-x64
1version_2....e.pimx
windows10-2004-x64
3version_2....ce.dll
windows10-2004-x64
1version_2....ls.xml
windows10-2004-x64
1version_2....nt.dll
windows10-2004-x64
1version_2....re.pbo
windows10-2004-x64
3version_2....ce.dll
windows10-2004-x64
1version_2....64.dll
windows10-2004-x64
1version_2....er.exe
windows10-2004-x64
10Static task
static1
Behavioral task
behavioral1
Sample
version_2.6_2023.rar
Resource
win10v2004-20230221-en
Behavioral task
behavioral2
Sample
version_2.6_2023/dаtа/2103_23.unr
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
version_2.6_2023/dаtа/Debug/Cracker.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral4
Sample
version_2.6_2023/dаtа/Debug/DebugPPF.tmp
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
version_2.6_2023/dаtа/Debug/DebugPPT.tmp
Resource
win10v2004-20230220-en
Behavioral task
behavioral6
Sample
version_2.6_2023/dаtа/Debug/Main.xml
Resource
win10v2004-20230221-en
Behavioral task
behavioral7
Sample
version_2.6_2023/dаtа/Debug/Management.log
Resource
win10v2004-20230220-en
Behavioral task
behavioral8
Sample
version_2.6_2023/dаtа/Debug/Utils.xml
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
version_2.6_2023/dаtа/Debug/updater.ini
Resource
win10v2004-20230220-en
Behavioral task
behavioral10
Sample
version_2.6_2023/dаtа/Main.ini
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
version_2.6_2023/dаtа/Packaged/Language.pimx
Resource
win10v2004-20230220-en
Behavioral task
behavioral12
Sample
version_2.6_2023/dаtа/Packaged/Resource.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral13
Sample
version_2.6_2023/dаtа/Packaged/Utils.xml
Resource
win10v2004-20230220-en
Behavioral task
behavioral14
Sample
version_2.6_2023/dаtа/Packaged/client.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
version_2.6_2023/dаtа/Packaged/core.pbo
Resource
win10v2004-20230220-en
Behavioral task
behavioral16
Sample
version_2.6_2023/dаtа/Resource.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
version_2.6_2023/dаtа/x32-x64.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral18
Sample
version_2.6_2023/uр_lоader.exe
Resource
win10v2004-20230220-en
Target
version_2.6_2023.rar
Size
38.6MB
MD5
a5f0fcca435bc4c13a599df48bbed52c
SHA1
ee1a7371345c661084aef6239bd58d072204d9e4
SHA256
ca4bc63b5ab20803f45b51af345a28435128b4f703ec621d49ecafcba07b473a
SHA512
2ff6c488cd2102ea1d266d57b5cf1df20579fa11be1497d0651644edb2a7d4e7f58eebe8b5699ba813047909ce0e03a40bc2881e28a15663166eab372c927e32
SSDEEP
786432:haizEh7mfvPT3HqCLeDblmdFXekRRkRgikRxqM5PYGl3fccYOgTB0Bmma:siEh7uT3KCSF2FXekRRkRgiooM5Pl3fi
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SystemParametersInfoA
LoadImageA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
DeleteDC
GetDIBits
CreateCompatibleDC
GetObjectA
DeleteObject
ord24
ord8
ord3
ord2
ord1
ord23
SteamAPI_GetHSteamPipe
SteamAPI_UnregisterCallResult
SteamAPI_RegisterCallResult
SteamAPI_UnregisterCallback
SteamInternal_CreateInterface
SteamAPI_RegisterCallback
SteamAPI_InitSafe
SteamAPI_SetTryCatchCallbacks
SteamAPI_GetHSteamUser
SteamInternal_FindOrCreateUserInterface
SteamInternal_ContextInit
Plat_IsInDebugSession
?FindOrCreateCounter@CVProfile@@QAEPAHPBDW4CounterGroup_t@@@Z
Error
Msg
DevMsg
Warning
?ExitScope@CVProfile@@QAEXXZ
Plat_ExitProcess
g_pMemAlloc
CommandLine
LoggingSystem_RegisterLoggingChannel
ThreadInterlockedAssignIf64
?DevWarning@@YAXPBDZZ
?Lock@CThreadMutex@@QAEXXZ
?Unlock@CThreadMutex@@QAEXXZ
?Set@CThreadEvent@@QAE_NXZ
?Lock@CThreadFastMutex@@ACEXII@Z
ThreadInMainThread
DevWarning
g_ClockSpeedMillisecondsMultiplier
LoggingSystem_LogAssert
CallAssertFailedNotifyFunc
ShouldUseNewAssertDialog
AddMemoryInfoCallback
RemoveMemoryInfoCallback
StackToolsNotify_LoadedLibrary
GetThreadedLoadLibraryFunc
DoNewAssertDialog
_ExitOnFatalAssert
?EnterScope@CVProfile@@QAEXPBDH0_NH@Z
g_VProfCurrentProfile
?DevMsg@@YAXPBDZZ
Plat_USTime
?ConColorMsg@@YAXABVColor@@PBDZZ
LoggingSystem_IsChannelEnabled
LoggingSystem_Log
??0CThreadMutex@@QAE@XZ
??1CThreadMutex@@QAE@XZ
??0CThreadEvent@@QAE@_N@Z
??1CThreadEvent@@QAE@XZ
COM_TimestampedLog
ThreadSleep
?g_nThreadID@@3V?$CThreadLocalInt@H@GenericThreadLocals@@A
?SpinLockForRead@CThreadSpinRWLock@@QAEXXZ
?SpinLockForWrite@CThreadSpinRWLock@@QAEXXZ
?Get@CThreadLocalBase@GenericThreadLocals@@QBEPAXXZ
?Reset@CThreadEvent@@QAE_NXZ
LOG_GENERAL
?TryLock@CThreadMutex@@QAE_NXZ
?GetName@CThread@@QAEPBDXZ
?Join@CThread@@QAE_NI@Z
Plat_localtime
Platform_gmtime
Plat_RelativeTickFrequency
Plat_RelativeTicks
g_dwClockSpeed
?LockForRead@CThreadSpinRWLock@@QBEXXZ
StoreTempValue
GetTempValue
g_ClockSpeed
?ConMsg@@YAXPBDZZ
Plat_GetOSVersion
Plat_GetTime
Plat_WindowToScreenCoords
CreateSimpleThread
ReleaseThreadHandle
Plat_IsInBenchmarkMode
Plat_GetTimeString
Plat_MSTime
Plat_timegm
??0CThreadLocalBase@GenericThreadLocals@@QAE@XZ
??1CThreadLocalBase@GenericThreadLocals@@QAE@XZ
?Set@CThreadLocalBase@GenericThreadLocals@@QAEXPAX@Z
MemFreeScratch
MemAllocScratch
ConDMsg
?LoggingSystem_Log@@YA?AW4LoggingResponse_t@@HW4LoggingSeverity_t@@VColor@@PBDZZ
LoggingSystem_AddTagToCurrentChannel
?Wait@CThreadEvent@@QAE_NI@Z
WriteMiniDump
GetCPUInformation
Plat_GetLocalTime
GetCPUFrequencyResults
g_PerfStats
Plat_FloatTime
UuidCreate
UuidFromStringA
UuidToStringA
RpcStringFreeA
??0Utf8Value@String@v8@@QAE@V?$Local@VValue@v8@@@2@@Z
??1Utf8Value@String@v8@@QAE@XZ
?SlowGetInternalField@Object@v8@@AAE?AV?$Local@VValue@v8@@@2@H@Z
?CreateHandle@HandleScope@v8@@CAPAPAVObject@internal@2@PAVHeapObject@42@PAV342@@Z
?Value@External@v8@@QBEPAXXZ
?Enter@Isolate@v8@@QAEXXZ
?Exit@Isolate@v8@@QAEXXZ
??0HandleScope@v8@@QAE@PAVIsolate@1@@Z
??1HandleScope@v8@@QAE@XZ
?Set@Template@v8@@QAEXV?$Local@VName@v8@@@2@V?$Local@VData@v8@@@2@W4PropertyAttribute@2@@Z
?New@FunctionTemplate@v8@@SA?AV?$Local@VFunctionTemplate@v8@@@2@PAVIsolate@2@P6AXABV?$FunctionCallbackInfo@VValue@v8@@@2@@ZV?$Local@VValue@v8@@@2@V?$Local@VSignature@v8@@@2@HW4ConstructorBehavior@2@@Z
?NewFromUtf8@String@v8@@SA?AV?$Local@VString@v8@@@2@PAVIsolate@2@PBDW4NewStringType@12@H@Z
?SetAccessor@ObjectTemplate@v8@@QAEXV?$Local@VString@v8@@@2@P6AX0ABV?$PropertyCallbackInfo@VValue@v8@@@2@@ZP6AX0V?$Local@VValue@v8@@@2@ABV?$PropertyCallbackInfo@X@2@@Z3W4AccessControl@2@W4PropertyAttribute@2@V?$Local@VAccessorSignature@v8@@@2@@Z
?GetCurrentContext@Isolate@v8@@QAE?AV?$Local@VContext@v8@@@2@XZ
?GetCurrent@Isolate@v8@@SAPAV12@XZ
?ToString@Value@v8@@QBE?AV?$MaybeLocal@VString@v8@@@2@V?$Local@VContext@v8@@@2@@Z
?GetName@Function@v8@@QBE?AV?$Local@VValue@v8@@@2@XZ
?ThrowException@Isolate@v8@@QAE?AV?$Local@VValue@v8@@@2@V32@@Z
??0TryCatch@v8@@QAE@XZ
??1TryCatch@v8@@QAE@XZ
?HasCaught@TryCatch@v8@@QBE_NXZ
?DisposeGlobal@V8@v8@@CAXPAPAVObject@internal@2@@Z
?CreateHandle@HandleScope@v8@@KAPAPAVObject@internal@2@PAVIsolate@42@PAV342@@Z
?GlobalizeReference@V8@v8@@CAPAPAVObject@internal@2@PAVIsolate@42@PAPAV342@@Z
?Get@Object@v8@@QAE?AV?$Local@VValue@v8@@@2@V32@@Z
?New@Integer@v8@@SA?AV?$Local@VInteger@v8@@@2@PAVIsolate@2@H@Z
?New@Number@v8@@SA?AV?$Local@VNumber@v8@@@2@PAVIsolate@2@N@Z
?New@Object@v8@@SA?AV?$Local@VObject@v8@@@2@PAVIsolate@2@@Z
?Set@Object@v8@@QAE_NV?$Local@VValue@v8@@@2@0@Z
?IsArray@Value@v8@@QBE_NXZ
?Length@Array@v8@@QBEIXZ
?NumberValue@Value@v8@@QBENXZ
?Get@Object@v8@@QAE?AV?$Local@VValue@v8@@@2@I@Z
?IsObject@Value@v8@@QBE_NXZ
?New@Array@v8@@SA?AV?$Local@VArray@v8@@@2@PAVIsolate@2@H@Z
?Set@Object@v8@@QAE_NIV?$Local@VValue@v8@@@2@@Z
?IsBoolean@Value@v8@@QBE_NXZ
?BooleanValue@Value@v8@@QBE_NXZ
?IsInt32@Value@v8@@QBE_NXZ
?Int32Value@Value@v8@@QBEHXZ
?IsNumber@Value@v8@@QBE_NXZ
?GetPropertyNames@Object@v8@@QAE?AV?$Local@VArray@v8@@@2@XZ
?TypeOf@Value@v8@@QAE?AV?$Local@VString@v8@@@2@PAVIsolate@2@@Z
?New@Context@v8@@SA?AV?$Local@VContext@v8@@@2@PAVIsolate@2@PAVExtensionConfiguration@2@V?$MaybeLocal@VObjectTemplate@v8@@@2@V?$MaybeLocal@VValue@v8@@@2@@Z
?Enter@Context@v8@@QAEXXZ
?Exit@Context@v8@@QAEXXZ
?IsUint32@Value@v8@@QBE_NXZ
?NewFromTwoByte@String@v8@@SA?AV?$Local@VString@v8@@@2@PAVIsolate@2@PBGW4NewStringType@12@H@Z
?Value@Number@v8@@QBENXZ
?ToNumber@Value@v8@@QBE?AV?$MaybeLocal@VNumber@v8@@@2@V?$Local@VContext@v8@@@2@@Z
?InternalFieldCount@Object@v8@@QAEHXZ
?ToBoolean@Value@v8@@QBE?AV?$MaybeLocal@VBoolean@v8@@@2@V?$Local@VContext@v8@@@2@@Z
?Value@Boolean@v8@@QBE_NXZ
?GetIsolate@Object@v8@@QAEPAVIsolate@2@XZ
?Uint32Value@Value@v8@@QBEIXZ
?IsFunction@Value@v8@@QBE_NXZ
?ToObject@Value@v8@@QBE?AV?$MaybeLocal@VObject@v8@@@2@V?$Local@VContext@v8@@@2@@Z
?GetCallingContext@Isolate@v8@@QAE?AV?$Local@VContext@v8@@@2@XZ
CreateVideoPlayer
DeleteVideoPlayer
Coroutine_Continue
Coroutine_Create
?RandomInt@CUniformRandomStream@@UAEHHH@Z
V_UnicodeToUTF8
CreateNewThreadPool
?RandomFloat@CUniformRandomStream@@UAEMMM@Z
?SetSeed@CUniformRandomStream@@UAEXH@Z
Coroutine_YieldToMain
?RandomFloat@CGaussianRandomStream@@QAEMMM@Z
??0CUniformRandomStream@@QAE@XZ
?AttachToStream@CGaussianRandomStream@@QAEXPAVIUniformRandomStream@@@Z
??0CGaussianRandomStream@@QAE@PAVIUniformRandomStream@@@Z
KeyValuesSystem
g_pThreadPool
RandomFloat
RandomSeed
RandomInt
DestroyThreadPool
TlsAlloc
GetLastError
InitializeCriticalSectionAndSpinCount
TlsSetValue
GetStdHandle
SetEndOfFile
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExA
GetFileAttributesExW
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetACP
GetConsoleCP
ReadConsoleW
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
GetModuleHandleExW
ExitProcess
GetTempPathW
GetTimeZoneInformation
TzSpecificLocalTimeToSystemTime
GetCurrentDirectoryW
SetEnvironmentVariableA
PeekNamedPipe
GetFullPathNameA
GetFullPathNameW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
RtlUnwind
RaiseException
InterlockedFlushSList
InterlockedPushEntrySList
GetProcAddress
FreeLibrary
TlsGetValue
TlsFree
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeSListHead
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
GetModuleHandleW
CreateEventW
DecodePointer
EncodePointer
GetStringTypeW
GetLongPathNameA
GetShortPathNameA
GetSystemInfo
WideCharToMultiByte
MultiByteToWideChar
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetDateFormatA
GetTimeFormatA
GetProcessHeap
LoadLibraryExA
VirtualAlloc
VirtualFree
QueryPerformanceFrequency
QueryPerformanceCounter
VirtualQuery
GetCurrentThread
GetCurrentProcessId
GetModuleHandleExA
GlobalMemoryStatusEx
GetSystemTimeAsFileTime
FindNextFileA
FindFirstFileA
WaitForSingleObject
SetLastError
FileTimeToDosDateTime
GetFileSize
GetLocalTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileInformationByHandle
DosDateTimeToFileTime
CreateDirectoryA
GetFileType
LoadLibraryExW
FindFirstFileW
FindNextFileW
SystemTimeToFileTime
DuplicateHandle
GetCurrentDirectoryA
SetFilePointer
SetFileTime
GetCurrentProcess
ReadFile
Sleep
CreateFileMappingA
CreateFileA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
DeleteFileA
CopyFileA
GetModuleHandleA
GetModuleFileNameA
FlushFileBuffers
SetFilePointerEx
CloseHandle
DeleteFileW
SetFileAttributesW
GetFileAttributesW
CreateFileW
FindClose
RemoveDirectoryW
WriteFile
GetCurrentThreadId
ShellExecuteA
ntohs
CreateInterface
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
lstrlenA
LocalAlloc
LoadLibraryA
GetSystemTimeAsFileTime
GetModuleHandleA
CreateEventA
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
GetCurrentThreadId
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
WriteProcessMemory
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
LoadLibraryA
FreeLibrary
GetTickCount
SystemTimeToFileTime
FileTimeToSystemTime
GlobalFree
LocalAlloc
LocalFree
GetProcAddress
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
LoadResource
MultiByteToWideChar
FindResourceExW
FindResourceExA
WideCharToMultiByte
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
CreateFileW
LoadLibraryW
GetLastError
FlushFileBuffers
WriteConsoleW
SetStdHandle
IsProcessorFeaturePresent
DecodePointer
GetCommandLineA
RaiseException
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
LCMapStringW
GetStringTypeW
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
HeapSize
WriteFile
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapReAlloc
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
ord524
ord239
CoInitialize
CharUpperBuffW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ