General

Malware Config

Signatures

Files

• SteamSetup.exe

  .exe windows:4 windows x86 arch:x86

  4ea4df5d94204fc550be1874e1b77ea7

  
  

  Code Sign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2013 12:00

  Not After

  15-01-2038 12:00

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  07-10-2021 00:00

  Not After

  09-10-2024 23:59

  Subject

  CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  e1:0f:b6:c5:9c:1a:64:26:cb:6e:fd:c3:02:2e:c7:d1:35:56:14:ad:ca:73:fa:ad:09:e9:19:dc:03:80:19:05

  Signer

  Actual PE Digest

  e1:0f:b6:c5:9c:1a:64:26:cb:6e:fd:c3:02:2e:c7:d1:35:56:14:ad:ca:73:fa:ad:09:e9:19:dc:03:80:19:05

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  SetCurrentDirectoryW

  GetFileAttributesW

  GetFullPathNameW

  Sleep

  GetTickCount

  CreateFileW

  GetFileSize

  MoveFileW

  SetFileAttributesW

  GetModuleFileNameW

  CopyFileW

  ExitProcess

  SetEnvironmentVariableW

  GetWindowsDirectoryW

  GetTempPathW

  GetCommandLineW

  GetVersion

  SetErrorMode

  WaitForSingleObject

  GetCurrentProcess

  CompareFileTime

  GlobalUnlock

  GlobalLock

  CreateThread

  GetLastError

  CreateDirectoryW

  CreateProcessW

  RemoveDirectoryW

  lstrcmpiA

  GetTempFileNameW

  WriteFile

  lstrcpyA

  lstrcpyW

  MoveFileExW

  lstrcatW

  GetSystemDirectoryW

  GetProcAddress

  GetModuleHandleA

  GlobalFree

  GlobalAlloc

  GetShortPathNameW

  SearchPathW

  lstrcmpiW

  SetFileTime

  CloseHandle

  ExpandEnvironmentStringsW

  lstrcmpW

  GetDiskFreeSpaceW

  lstrlenW

  lstrcpynW

  GetExitCodeProcess

  FindFirstFileW

  FindNextFileW

  DeleteFileW

  SetFilePointer

  ReadFile

  FindClose

  MulDiv

  MultiByteToWideChar

  lstrlenA

  WideCharToMultiByte

  GetPrivateProfileStringW

  WritePrivateProfileStringW

  FreeLibrary

  LoadLibraryExW

  GetModuleHandleW

  user32

  GetSystemMenu

  SetClassLongW

  IsWindowEnabled

  EnableMenuItem

  SetWindowPos

  GetSysColor

  GetWindowLongW

  SetCursor

  LoadCursorW

  CheckDlgButton

  GetMessagePos

  LoadBitmapW

  CallWindowProcW

  IsWindowVisible

  CloseClipboard

  SetClipboardData

  EmptyClipboard

  OpenClipboard

  wsprintfW

  ScreenToClient

  GetWindowRect

  GetSystemMetrics

  SetDlgItemTextW

  GetDlgItemTextW

  MessageBoxIndirectW

  CharPrevW

  CharNextA

  wsprintfA

  DispatchMessageW

  PeekMessageW

  GetDC

  ReleaseDC

  EnableWindow

  InvalidateRect

  SendMessageW

  DefWindowProcW

  BeginPaint

  GetClientRect

  FillRect

  EndDialog

  RegisterClassW

  SystemParametersInfoW

  CreateWindowExW

  GetClassInfoW

  DialogBoxParamW

  CharNextW

  ExitWindowsEx

  DestroyWindow

  LoadImageW

  SetTimer

  SetWindowTextW

  PostQuitMessage

  ShowWindow

  GetDlgItem

  IsWindow

  SetWindowLongW

  FindWindowExW

  TrackPopupMenu

  AppendMenuW

  CreatePopupMenu

  DrawTextW

  EndPaint

  CreateDialogParamW

  SendMessageTimeoutW

  SetForegroundWindow

  gdi32

  SelectObject

  SetBkMode

  CreateFontIndirectW

  SetTextColor

  DeleteObject

  GetDeviceCaps

  CreateBrushIndirect

  SetBkColor

  shell32

  SHGetSpecialFolderLocation

  SHGetPathFromIDListW

  SHBrowseForFolderW

  SHGetFileInfoW

  ShellExecuteW

  SHFileOperationW

  advapi32

  RegDeleteKeyW

  SetFileSecurityW

  OpenProcessToken

  LookupPrivilegeValueW

  AdjustTokenPrivileges

  RegOpenKeyExW

  RegEnumValueW

  RegDeleteValueW

  RegCloseKey

  RegCreateKeyExW

  RegSetValueExW

  RegQueryValueExW

  RegEnumKeyW

  comctl32

  ImageList_AddMasked

  ord17

  ImageList_Destroy

  ImageList_Create

  ole32

  OleUninitialize

  OleInitialize

  CoTaskMemFree

  CoCreateInstance

  Sections

  .text

  Size: 24KB - Virtual size: 24KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 128KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .ndata

  Size: - Virtual size: 216KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 75KB - Virtual size: 74KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/StdUtils.dll

  .dll windows:5 windows x86 arch:x86

  84484e9fa52eef55faa40a17a55a27f6

  
  

  Code Sign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2013 12:00

  Not After

  15-01-2038 12:00

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  07-10-2021 00:00

  Not After

  09-10-2024 23:59

  Subject

  CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  da:cd:f5:7d:0b:4a:15:b0:92:9e:1c:4c:bd:ce:ea:d5:4a:0b:a3:3e:cb:58:65:b4:b0:a0:d8:ef:af:b8:ad:ea

  Signer

  Actual PE Digest

  da:cd:f5:7d:0b:4a:15:b0:92:9e:1c:4c:bd:ce:ea:d5:4a:0b:a3:3e:cb:58:65:b4:b0:a0:d8:ef:af:b8:ad:ea

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  msvcrt

  iswspace

  _msize

  ??2@YAPAXI@Z

  iswalpha

  _snprintf

  swscanf

  iswcntrl

  abort

  _beginthreadex

  time

  srand

  rand

  iswalnum

  __wgetmainargs

  wcsncpy

  _wcsnicmp

  wcschr

  calloc

  free

  _wcsicmp

  ??3@YAXPAX@Z

  _snwprintf

  memset

  memcpy

  shlwapi

  ord176

  version

  GetFileVersionInfoSizeW

  VerQueryValueW

  GetFileVersionInfoW

  kernel32

  GetVersion

  WideCharToMultiByte

  InterlockedExchange

  HeapValidate

  InterlockedDecrement

  InterlockedIncrement

  GetSystemTime

  OutputDebugStringA

  DeleteCriticalSection

  GetExitCodeProcess

  InitializeCriticalSection

  SystemTimeToFileTime

  TerminateThread

  WaitForSingleObject

  GetProcAddress

  GetCommandLineW

  GetFileAttributesW

  LoadLibraryW

  GetModuleHandleW

  FreeLibrary

  CloseHandle

  GetFileSizeEx

  CreateFileW

  ReadFile

  WriteFile

  SetFilePointerEx

  GlobalAlloc

  lstrcpynW

  GlobalFree

  LeaveCriticalSection

  EnterCriticalSection

  GetTickCount

  Sleep

  VerSetConditionMask

  GetVersionExW

  VerifyVersionInfoW

  GetLastError

  LocalAlloc

  LocalFree

  user32

  MessageBoxA

  RegisterClassW

  DispatchMessageW

  KillTimer

  AllowSetForegroundWindow

  SetTimer

  DestroyWindow

  wsprintfW

  GetWindowThreadProcessId

  LoadStringW

  MessageBoxW

  MsgWaitForMultipleObjects

  UnregisterClassW

  PeekMessageW

  CreateWindowExW

  shell32

  ShellExecuteExW

  SHFileOperationW

  ShellExecuteW

  ole32

  CoCreateInstance

  CoUninitialize

  CoInitialize

  oleaut32

  VariantClear

  SysFreeString

  VariantInit

  SysAllocString

  Exports

  Exports

  AppendToFile

  DisableVerboseMode

  Dummy

  EnableVerboseMode

  ExecShellAsUser

  ExecShellWaitEx

  FormatStr

  FormatStr2

  FormatStr3

  GetAllParameters

  GetDays

  GetHours

  GetLibVersion

  GetMinutes

  GetOsEdition

  GetParameter

  GetRealOsBuildNo

  GetRealOsName

  GetRealOsVersion

  HashFile

  HashText

  InvokeShellVerb

  ParameterCnt

  ParameterStr

  Rand

  RandList

  RandMax

  RandMinMax

  RevStr

  SHFileCopy

  SHFileMove

  ScanStr

  ScanStr2

  ScanStr3

  TestParameter

  Time

  TimerCreate

  TimerDestroy

  TrimStr

  TrimStrLeft

  TrimStrRight

  ValidFileName

  ValidPathSpec

  VerifyRealOsBuildNo

  VerifyRealOsVersion

  WaitForProcEx

  Sections

  .text

  Size: 76KB - Virtual size: 76KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 15KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 904B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/System.dll

  .dll windows:4 windows x86 arch:x86

  fc0224e99e736751432961db63a41b76

  
  

  Code Sign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2013 12:00

  Not After

  15-01-2038 12:00

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  07-10-2021 00:00

  Not After

  09-10-2024 23:59

  Subject

  CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  e6:b6:8f:fe:31:dd:d2:96:92:59:eb:2b:11:2b:5d:ff:c7:ac:a5:f5:09:47:1b:83:94:d8:2a:16:e0:39:bc:0a

  Signer

  Actual PE Digest

  e6:b6:8f:fe:31:dd:d2:96:92:59:eb:2b:11:2b:5d:ff:c7:ac:a5:f5:09:47:1b:83:94:d8:2a:16:e0:39:bc:0a

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  GetModuleHandleW

  GlobalFree

  GlobalSize

  lstrcpynW

  lstrcpyW

  GetProcAddress

  WideCharToMultiByte

  VirtualFree

  FreeLibrary

  lstrlenW

  LoadLibraryW

  GlobalAlloc

  MultiByteToWideChar

  VirtualAlloc

  VirtualProtect

  GetLastError

  user32

  wsprintfW

  ole32

  StringFromGUID2

  CLSIDFromString

  Exports

  Exports

  Alloc

  Call

  Copy

  Free

  Get

  Int64Op

  Store

  StrAlloc

  Sections

  .text

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1024B - Virtual size: 851B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 120B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 1024B - Virtual size: 610B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/modern-header.bmp
• $PLUGINSDIR/modern-wizard.bmp
• $PLUGINSDIR/nsDialogs.dll

  .dll windows:4 windows x86 arch:x86

  e2ee55bddad4241d619d6a8a38e2d869

  
  

  Code Sign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2013 12:00

  Not After

  15-01-2038 12:00

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  07-10-2021 00:00

  Not After

  09-10-2024 23:59

  Subject

  CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  80:66:57:ea:1d:ba:55:46:ca:77:5a:cf:9b:07:75:1d:a5:ac:3d:b1:03:ce:e3:14:36:de:4f:d0:c6:fd:71:82

  Signer

  Actual PE Digest

  80:66:57:ea:1d:ba:55:46:ca:77:5a:cf:9b:07:75:1d:a5:ac:3d:b1:03:ce:e3:14:36:de:4f:d0:c6:fd:71:82

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  GetFileAttributesW

  lstrcpyW

  MulDiv

  lstrlenW

  HeapFree

  GetCurrentDirectoryW

  lstrcmpiW

  GetProcessHeap

  HeapReAlloc

  GlobalFree

  lstrcpynW

  GlobalAlloc

  SetCurrentDirectoryW

  HeapAlloc

  user32

  DestroyWindow

  CallWindowProcW

  SetCursor

  LoadCursorW

  GetPropW

  CharPrevW

  DrawFocusRect

  GetWindowLongW

  DrawTextW

  GetClientRect

  GetDlgItem

  GetSysColor

  SetWindowLongW

  SetWindowPos

  CreateDialogParamW

  MapDialogRect

  GetWindowRect

  SetPropW

  CreateWindowExW

  IsWindow

  SetTimer

  KillTimer

  DispatchMessageW

  TranslateMessage

  GetMessageW

  IsDialogMessageW

  ShowWindow

  wsprintfW

  CharNextW

  SendMessageW

  MapWindowPoints

  RemovePropW

  GetWindowTextW

  gdi32

  SetTextColor

  shell32

  SHBrowseForFolderW

  SHGetPathFromIDListW

  comdlg32

  GetSaveFileNameW

  GetOpenFileNameW

  CommDlgExtendedError

  ole32

  CoTaskMemFree

  Exports

  Exports

  Create

  CreateControl

  CreateItem

  CreateTimer

  GetUserData

  KillTimer

  OnBack

  OnChange

  OnClick

  OnNotify

  SelectFileDialog

  SelectFolderDialog

  SetRTL

  SetUserData

  Show

  Sections

  .text

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 152B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 630B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/nsExec.dll

  .dll windows:4 windows x86 arch:x86

  0b75f1007d3cc8e457970ae3e3fd53c3

  
  

  Code Sign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2013 12:00

  Not After

  15-01-2038 12:00

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  07-10-2021 00:00

  Not After

  09-10-2024 23:59

  Subject

  CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  dd:a4:fa:dc:f8:cf:f7:8e:02:ce:65:71:db:1c:56:b0:b4:66:e1:0d:aa:48:76:86:5d:36:58:04:3e:7c:92:1b

  Signer

  Actual PE Digest

  dd:a4:fa:dc:f8:cf:f7:8e:02:ce:65:71:db:1c:56:b0:b4:66:e1:0d:aa:48:76:86:5d:36:58:04:3e:7c:92:1b

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  GetModuleHandleW

  MultiByteToWideChar

  lstrlenA

  GetExitCodeProcess

  WaitForSingleObject

  Sleep

  TerminateProcess

  GlobalReAlloc

  GlobalUnlock

  GlobalSize

  lstrcpynW

  ReadFile

  PeekNamedPipe

  GetTickCount

  CreateProcessW

  GetStartupInfoW

  CreatePipe

  GetProcAddress

  lstrcpyW

  DeleteFileW

  lstrcmpiW

  GetCurrentProcess

  lstrcatW

  CloseHandle

  UnmapViewOfFile

  MapViewOfFile

  CreateFileMappingW

  CreateFileW

  CopyFileW

  GetTempFileNameW

  GlobalFree

  GlobalAlloc

  GetModuleFileNameW

  ExitProcess

  GetCommandLineW

  GlobalLock

  GetVersion

  lstrlenW

  user32

  SendMessageW

  FindWindowExW

  CharNextW

  wsprintfW

  CharPrevW

  advapi32

  InitializeSecurityDescriptor

  SetSecurityDescriptorDacl

  Exports

  Exports

  Exec

  ExecToLog

  ExecToStack

  Sections

  .text

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 512B - Virtual size: 448B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/nsProcess.dll

  .dll windows:5 windows x86 arch:x86

  439074d1c01f7b16781bdf060930814a

  
  

  Code Sign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2013 12:00

  Not After

  15-01-2038 12:00

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  07-10-2021 00:00

  Not After

  09-10-2024 23:59

  Subject

  CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  6a:40:64:7e:cf:b4:15:9e:4c:19:dc:39:a4:ad:7a:28:7b:d7:0a:e8:a0:1f:bb:06:2e:9c:29:ef:12:55:89:2d

  Signer

  Actual PE Digest

  6a:40:64:7e:cf:b4:15:9e:4c:19:dc:39:a4:ad:7a:28:7b:d7:0a:e8:a0:1f:bb:06:2e:9c:29:ef:12:55:89:2d

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  CloseHandle

  TerminateProcess

  WaitForSingleObject

  GetExitCodeProcess

  OpenProcess

  MultiByteToWideChar

  lstrlenA

  lstrlenW

  LoadLibraryA

  lstrcmpiW

  lstrcpynW

  FreeLibrary

  LocalFree

  LocalAlloc

  GetProcAddress

  LoadLibraryW

  GetVersionExW

  GlobalFree

  GlobalAlloc

  user32

  GetWindowThreadProcessId

  EnumWindows

  wsprintfW

  PostMessageW

  Exports

  Exports

  _CloseProcess

  _FindProcess

  _KillProcess

  _Unload

  Sections

  .text

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1024B - Virtual size: 927B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 436B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 254B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Steam.exe

  .exe windows:6 windows x86 arch:x86

  70710dd0993d00abea20816af9954c33

  
  

  Code Sign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2013 12:00

  Not After

  15-01-2038 12:00

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  07-10-2021 00:00

  Not After

  09-10-2024 23:59

  Subject

  CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  56:c9:ac:30:37:74:66:4d:a6:42:47:6f:a1:90:82:31:f8:34:5d:29:a0:3e:c5:bb:0c:9b:0e:dc:58:0f:0c:9e

  Signer

  Actual PE Digest

  56:c9:ac:30:37:74:66:4d:a6:42:47:6f:a1:90:82:31:f8:34:5d:29:a0:3e:c5:bb:0c:9b:0e:dc:58:0f:0c:9e

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  c:\buildslave\steam_rel_client_win32\build\src\steamexe\Release\steamexe.pdb

  Imports

  kernel32

  SetLastError

  SystemTimeToFileTime

  GetSystemTime

  SetConsoleMode

  ConvertThreadToFiber

  ConvertFiberToThread

  CreateFiber

  DeleteFiber

  SwitchToFiber

  GetEnvironmentVariableW

  ReadConsoleA

  WriteFile

  RemoveDirectoryW

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetOEMCP

  GetACP

  IsValidCodePage

  HeapReAlloc

  GetTimeZoneInformation

  SetConsoleCtrlHandler

  SetFilePointerEx

  LCMapStringW

  CompareStringW

  HeapAlloc

  HeapFree

  HeapValidate

  HeapSize

  WriteConsoleW

  GetStdHandle

  GetConsoleOutputCP

  ReadConsoleW

  GetConsoleMode

  PeekNamedPipe

  GetFileType

  ExitProcess

  InterlockedPushEntrySList

  RtlUnwind

  GetStartupInfoW

  InitializeSListHead

  IsProcessorFeaturePresent

  UnhandledExceptionFilter

  CreateEventW

  VerifyVersionInfoW

  FindResourceA

  LocalFree

  LocalAlloc

  GlobalLock

  GlobalUnlock

  GetCurrentProcess

  GlobalAlloc

  SizeofResource

  LockResource

  LoadResource

  GetModuleFileNameW

  OpenProcess

  GetExitCodeProcess

  SetStdHandle

  GetFullPathNameW

  DeleteFileW

  CreateDirectoryW

  VerSetConditionMask

  MulDiv

  FreeLibrary

  LoadLibraryA

  GetProcAddress

  Sleep

  GetCurrentThreadId

  DeviceIoControl

  GetFileAttributesW

  FindFirstFileW

  FindClose

  CreateFileW

  MoveFileExW

  GetModuleHandleA

  GetTickCount

  CreateFileA

  LeaveCriticalSection

  EnterCriticalSection

  GetLastError

  WaitForSingleObjectEx

  GetCPInfo

  DecodePointer

  EncodePointer

  ProcessIdToSessionId

  GetCurrentProcessId

  GetStringTypeW

  InitOnceComplete

  InitOnceBeginInitialize

  InitializeCriticalSectionEx

  AcquireSRWLockExclusive

  OpenEventA

  SetEvent

  ReleaseSRWLockExclusive

  InitializeSRWLock

  SetProcessAffinityMask

  GetProcessHeaps

  DebugBreak

  SetErrorMode

  CloseHandle

  RemoveDirectoryA

  GetFileAttributesA

  MultiByteToWideChar

  OutputDebugStringA

  SystemTimeToTzSpecificLocalTime

  GetCurrentDirectoryA

  GetCurrentDirectoryW

  FindNextFileW

  WideCharToMultiByte

  GetModuleHandleW

  LoadLibraryExA

  LoadLibraryExW

  LoadLibraryW

  FindFirstFileExW

  FlushFileBuffers

  GetDiskFreeSpaceA

  GetDiskFreeSpaceExW

  GetDriveTypeW

  GetFileAttributesExW

  GetFileInformationByHandle

  GetFileSizeEx

  GetFileTime

  ReadFile

  SetEndOfFile

  SetFileAttributesW

  SetFilePointer

  SetFileTime

  SleepEx

  GetSystemTimeAsFileTime

  CopyFileW

  GetDateFormatW

  GetTimeFormatW

  FileTimeToSystemTime

  GlobalFree

  SetHandleInformation

  VirtualProtect

  VirtualQuery

  GetModuleFileNameA

  GetModuleHandleExA

  GetModuleHandleExW

  IsBadWritePtr

  CreateIoCompletionPort

  PostQueuedCompletionStatus

  InitializeCriticalSection

  DeleteCriticalSection

  ResetEvent

  WaitForSingleObject

  CreateEventA

  QueryPerformanceCounter

  QueryPerformanceFrequency

  GetCommandLineA

  GetProcessHeap

  HeapSetInformation

  HeapLock

  HeapUnlock

  HeapWalk

  HeapQueryInformation

  TerminateProcess

  GlobalMemoryStatusEx

  VirtualAlloc

  IsDebuggerPresent

  GetCommandLineW

  DuplicateHandle

  RaiseException

  InitializeCriticalSectionAndSpinCount

  TryEnterCriticalSection

  SwitchToThread

  CreateThread

  GetCurrentThread

  OpenThread

  SetThreadPriority

  TerminateThread

  GetExitCodeThread

  SuspendThread

  ResumeThread

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  SetThreadAffinityMask

  SetEnvironmentVariableW

  SetCurrentDirectoryW

  OutputDebugStringW

  CreateProcessW

  GetSystemInfo

  GetProcessAffinityMask

  SetUnhandledExceptionFilter

  user32

  CreateWindowExW

  RegisterClassExW

  DefWindowProcW

  PostThreadMessageW

  SendMessageW

  PeekMessageW

  GetProcessWindowStation

  GetWindowThreadProcessId

  EnumWindows

  DispatchMessageW

  IsWindowVisible

  TranslateMessage

  GetMonitorInfoW

  MonitorFromWindow

  MonitorFromPoint

  LoadIconW

  LoadCursorW

  EnumChildWindows

  SetClassLongW

  SetWindowLongW

  GetWindowLongW

  MapWindowPoints

  MessageBoxW

  GetWindowRect

  SetWindowTextW

  RedrawWindow

  EndPaint

  BeginPaint

  UpdateWindow

  KillTimer

  UnregisterClassW

  GetClassInfoExW

  wsprintfA

  DialogBoxParamA

  EndDialog

  GetDlgItem

  SetDlgItemInt

  GetDlgItemInt

  SetDlgItemTextA

  OpenClipboard

  CloseClipboard

  SetClipboardData

  EmptyClipboard

  GetWindowTextLengthA

  GetDesktopWindow

  SetTimer

  MsgWaitForMultipleObjects

  SetWindowPos

  MoveWindow

  GetMessageW

  ReleaseDC

  GetDC

  GetUserObjectInformationW

  AllowSetForegroundWindow

  MessageBoxA

  DestroyWindow

  ShowWindow

  gdi32

  AddFontMemResourceEx

  TextOutW

  CreateDIBSection

  SetTextColor

  SetBkMode

  SetBkColor

  SelectObject

  RemoveFontMemResourceEx

  GetTextExtentPoint32W

  GetStockObject

  GetDeviceCaps

  DeleteObject

  DeleteDC

  CreateICW

  CreateFontW

  CreateCompatibleDC

  SwapBuffers

  SetPixelFormat

  ChoosePixelFormat

  advapi32

  RegisterEventSourceW

  DeregisterEventSource

  SetSecurityDescriptorDacl

  InitializeSecurityDescriptor

  RegOpenKeyA

  RegSetValueExW

  RegSetValueExA

  RegQueryValueExW

  RegQueryValueExA

  ReportEventW

  RegOpenKeyExA

  RegCreateKeyExA

  RegCloseKey

  shell32

  SHGetFileInfoW

  CommandLineToArgvW

  ord680

  SHGetKnownFolderPath

  ole32

  CoTaskMemFree

  oleaut32

  VariantClear

  comctl32

  InitCommonControlsEx

  psapi

  GetModuleFileNameExW

  GetModuleInformation

  GetProcessMemoryInfo

  version

  VerQueryValueW

  crypt32

  CertGetCertificateChain

  CertOpenStore

  CertCloseStore

  CertCreateCertificateContext

  CertFreeCertificateContext

  CertAddCertificateContextToStore

  CertFreeCertificateChain

  ws2_32

  htons

  ntohl

  ntohs

  getaddrinfo

  freeaddrinfo

  closesocket

  shutdown

  socket

  WSAStartup

  WSAGetLastError

  WSARecv

  WSARecvFrom

  WSASend

  htonl

  WSASocketA

  __WSAFDIsSet

  select

  WSASetLastError

  WSACleanup

  WSAIoctl

  setsockopt

  getsockname

  ioctlsocket

  bind

  send

  recv

  connect

  WSASendTo

  wsock32

  ord1142

  bcrypt

  BCryptGenRandom

  Exports

  Exports

  CanSetClientBeta

  ClientUpdateRunFrame

  CreateInterface

  ForceUpdateNextRestart

  GetBootstrapperVersion

  GetClientActualLauncherType

  GetClientBootstrapMetrics

  GetClientLauncherType

  GetClientUpdateBytesDownloaded

  GetClientUpdateBytesToDownload

  GetCurrentClientBeta

  IsCheckingForUpdates

  IsClientUpdateAvailable

  IsClientUpdateOutOfDiskSpace

  IsUpdateSuppressed

  PermitDownloadClientUpdates

  SetClientBeta

  StartCheckingForUpdates

  SteamBootstrapper_GetBaseUserDir

  SteamBootstrapper_GetEUniverse

  SteamBootstrapper_GetForwardedCommandLine

  SteamBootstrapper_GetInstallDir

  SteamBootstrapper_GetLoggingDir

  SteamBootstrapper_SetCommandLineToRunOnExit

  g_dwDllEntryThreadId

  Sections

  .text

  Size: 2.9MB - Virtual size: 2.9MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 921KB - Virtual size: 920KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 57KB - Virtual size: 587KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 219KB - Virtual size: 218KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 126KB - Virtual size: 126KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• bin/SteamService.exe

  .exe windows:6 windows x86 arch:x86

  40288c9db370344b0d8ea6e8a34df7a7

  
  

  Code Sign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2013 12:00

  Not After

  15-01-2038 12:00

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  07-10-2021 00:00

  Not After

  09-10-2024 23:59

  Subject

  CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  b5:2f:e8:24:37:10:ae:d6:1e:d6:82:99:fa:22:0f:8d:6a:da:c5:29:cf:77:fa:f0:b3:1e:58:f1:23:2e:6d:ef

  Signer

  Actual PE Digest

  b5:2f:e8:24:37:10:ae:d6:1e:d6:82:99:fa:22:0f:8d:6a:da:c5:29:cf:77:fa:f0:b3:1e:58:f1:23:2e:6d:ef

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  c:\buildslave\steam_rel_client_win32\build\src\SteamServiceHost\Release\SteamService_exe.pdb

  Imports

  kernel32

  OutputDebugStringA

  SetLastError

  GetCurrentProcess

  GetCurrentProcessId

  ProcessIdToSessionId

  GetVersionExA

  GetModuleFileNameW

  GlobalAlloc

  GlobalUnlock

  GlobalLock

  LocalAlloc

  VerifyVersionInfoW

  WTSGetActiveConsoleSessionId

  MultiByteToWideChar

  CreateToolhelp32Snapshot

  Process32First

  Process32Next

  InitializeCriticalSection

  DeleteCriticalSection

  RemoveDirectoryW

  ResetEvent

  CreateEventA

  WideCharToMultiByte

  TlsFree

  TlsSetValue

  TlsGetValue

  CreateDirectoryW

  WriteConsoleW

  GetStringTypeW

  GetCPInfo

  GetOEMCP

  GetACP

  IsValidCodePage

  DecodePointer

  SetStdHandle

  GetConsoleOutputCP

  SetFilePointerEx

  ExpandEnvironmentStringsA

  HeapReAlloc

  LCMapStringW

  CompareStringW

  HeapFree

  HeapAlloc

  GetFullPathNameW

  GetFileSize

  SetEvent

  VerSetConditionMask

  LocalFree

  GetTickCount

  OpenProcess

  TerminateProcess

  GetConsoleWindow

  SetConsoleTitleW

  SetConsoleCtrlHandler

  MoveFileExW

  CopyFileW

  Sleep

  CreateMutexA

  ReleaseMutex

  OutputDebugStringW

  WriteFile

  SetFilePointer

  SetFileAttributesW

  ReadFile

  GetFileInformationByHandle

  GetProcAddress

  GetFileAttributesExW

  GetFileAttributesW

  FindNextFileW

  FindFirstFileW

  FindClose

  DeleteFileW

  CreateFileW

  GetCommandLineW

  CreateProcessW

  GetExitCodeProcess

  WaitForSingleObject

  CloseHandle

  SetCurrentDirectoryW

  ExpandEnvironmentStringsW

  SetEnvironmentVariableW

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetLastError

  GetModuleHandleA

  LeaveCriticalSection

  EnterCriticalSection

  GetCurrentThreadId

  FindResourceA

  LockResource

  LoadResource

  LoadLibraryExA

  FreeLibrary

  ExitProcess

  HeapValidate

  HeapSize

  FileTimeToSystemTime

  SystemTimeToTzSpecificLocalTime

  PeekNamedPipe

  GetModuleHandleExW

  GetLocalTime

  VirtualQuery

  EncodePointer

  RtlUnwind

  InitializeSListHead

  GetStartupInfoW

  IsProcessorFeaturePresent

  UnhandledExceptionFilter

  CreateEventW

  WaitForSingleObjectEx

  SystemTimeToFileTime

  GetSystemTime

  ReadConsoleW

  ReadConsoleA

  SetConsoleMode

  GetConsoleMode

  TlsAlloc

  GetExitCodeThread

  TerminateThread

  OpenThread

  GetCurrentThread

  ConvertFiberToThread

  DeleteFiber

  GetFileType

  GetEnvironmentVariableW

  GetStdHandle

  SetProcessAffinityMask

  GetProcessHeaps

  DebugBreak

  SetUnhandledExceptionFilter

  LoadLibraryA

  GetTimeZoneInformation

  QueryPerformanceFrequency

  QueryPerformanceCounter

  GetCurrentDirectoryW

  FindFirstFileExW

  FlushFileBuffers

  GetDiskFreeSpaceA

  GetDriveTypeW

  GetFileSizeEx

  SetEndOfFile

  SetFileTime

  SleepEx

  GetSystemTimeAsFileTime

  GetModuleHandleW

  LoadLibraryExW

  LoadLibraryW

  GlobalMemoryStatusEx

  VirtualAlloc

  VirtualProtect

  GetModuleFileNameA

  IsDebuggerPresent

  GetCommandLineA

  GetProcessHeap

  HeapSetInformation

  HeapLock

  HeapUnlock

  HeapWalk

  HeapQueryInformation

  GetSystemInfo

  GetProcessAffinityMask

  DuplicateHandle

  RaiseException

  InitializeCriticalSectionAndSpinCount

  TryEnterCriticalSection

  SwitchToThread

  CreateThread

  SetThreadAffinityMask

  user32

  OpenClipboard

  SetDlgItemTextA

  GetDlgItemInt

  SetDlgItemInt

  SetClipboardData

  MessageBoxA

  GetProcessWindowStation

  GetUserObjectInformationW

  IsWindowVisible

  EmptyClipboard

  CloseClipboard

  GetWindowTextLengthA

  MessageBoxW

  GetDesktopWindow

  GetDlgItem

  GetWindowThreadProcessId

  EnumWindows

  EndDialog

  GetWindowRect

  wsprintfA

  SetWindowPos

  DialogBoxParamA

  ShowWindow

  advapi32

  RegisterEventSourceW

  DeregisterEventSource

  SetNamedSecurityInfoW

  RegSetValueExW

  RegQueryValueExW

  RegEnumValueW

  RegDeleteValueW

  LookupPrivilegeValueA

  SetTokenInformation

  DuplicateTokenEx

  AdjustTokenPrivileges

  OpenProcessToken

  CreateProcessAsUserW

  ConvertStringSidToSidW

  SetEntriesInAclW

  StartServiceW

  StartServiceCtrlDispatcherW

  SetServiceStatus

  SetServiceObjectSecurity

  RegisterServiceCtrlHandlerW

  QueryServiceStatusEx

  QueryServiceStatus

  QueryServiceObjectSecurity

  OpenServiceW

  OpenSCManagerW

  DeleteService

  CreateServiceW

  ControlService

  CloseServiceHandle

  ChangeServiceConfig2W

  ChangeServiceConfigW

  GetSecurityDescriptorDacl

  SetSecurityDescriptorDacl

  InitializeSecurityDescriptor

  RegSetValueExA

  RegQueryValueExA

  RegQueryInfoKeyA

  RegOpenKeyExA

  RegEnumValueA

  RegEnumKeyExA

  RegDeleteValueA

  RegCreateKeyExA

  RegCloseKey

  ReportEventW

  shell32

  SHGetFolderPathW

  ShellExecuteW

  CommandLineToArgvW

  ole32

  CoUninitialize

  CoInitializeEx

  CoCreateInstance

  oleaut32

  VariantClear

  VariantInit

  SysFreeString

  SysAllocString

  ws2_32

  WSAGetLastError

  recv

  send

  WSACleanup

  closesocket

  gethostname

  WSAStartup

  WSASetLastError

  shlwapi

  SHDeleteKeyA

  wintrust

  WinVerifyTrust

  psapi

  GetModuleFileNameExW

  GetProcessMemoryInfo

  bcrypt

  BCryptGenRandom

  Exports

  Exports

  CreateInterface

  g_dwDllEntryThreadId

  Sections

  .text

  Size: 1.6MB - Virtual size: 1.6MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 595KB - Virtual size: 595KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 19KB - Virtual size: 530KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 295KB - Virtual size: 295KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 68KB - Virtual size: 68KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• public/steambootstrapper_brazilian.txt
• public/steambootstrapper_bulgarian.txt
• public/steambootstrapper_czech.txt
• public/steambootstrapper_danish.txt
• public/steambootstrapper_dutch.txt
• public/steambootstrapper_english.txt
• public/steambootstrapper_finnish.txt
• public/steambootstrapper_french.txt
• public/steambootstrapper_german.txt
• public/steambootstrapper_greek.txt
• public/steambootstrapper_hungarian.txt
• public/steambootstrapper_indonesian.txt
• public/steambootstrapper_italian.txt
• public/steambootstrapper_japanese.txt
• public/steambootstrapper_korean.txt
• public/steambootstrapper_koreana.txt
• public/steambootstrapper_latam.txt
• public/steambootstrapper_norwegian.txt
• public/steambootstrapper_polish.txt
• public/steambootstrapper_portuguese.txt
• public/steambootstrapper_romanian.txt
• public/steambootstrapper_russian.txt
• public/steambootstrapper_schinese.txt
• public/steambootstrapper_spanish.txt
• public/steambootstrapper_swedish.txt
• public/steambootstrapper_tchinese.txt
• public/steambootstrapper_thai.txt
• public/steambootstrapper_turkish.txt
• public/steambootstrapper_ukrainian.txt
• public/steambootstrapper_vietnamese.txt
• uninstall.exe

  .exe windows:4 windows x86 arch:x86

  4ea4df5d94204fc550be1874e1b77ea7

  
  

  Code Sign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2013 12:00

  Not After

  15-01-2038 12:00

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  07-10-2021 00:00

  Not After

  09-10-2024 23:59

  Subject

  CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  98:11:78:1b:ba:db:47:53:24:83:28:90:37:fc:51:82:d6:7b:0a:b0:2f:ca:b5:01:e2:79:52:63:7a:0e:df:72

  Signer

  Actual PE Digest

  98:11:78:1b:ba:db:47:53:24:83:28:90:37:fc:51:82:d6:7b:0a:b0:2f:ca:b5:01:e2:79:52:63:7a:0e:df:72

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  SetCurrentDirectoryW

  GetFileAttributesW

  GetFullPathNameW

  Sleep

  GetTickCount

  CreateFileW

  GetFileSize

  MoveFileW

  SetFileAttributesW

  GetModuleFileNameW

  CopyFileW

  ExitProcess

  SetEnvironmentVariableW

  GetWindowsDirectoryW

  GetTempPathW

  GetCommandLineW

  GetVersion

  SetErrorMode

  WaitForSingleObject

  GetCurrentProcess

  CompareFileTime

  GlobalUnlock

  GlobalLock

  CreateThread

  GetLastError

  CreateDirectoryW

  CreateProcessW

  RemoveDirectoryW

  lstrcmpiA

  GetTempFileNameW

  WriteFile

  lstrcpyA

  lstrcpyW

  MoveFileExW

  lstrcatW

  GetSystemDirectoryW

  GetProcAddress

  GetModuleHandleA

  GlobalFree

  GlobalAlloc

  GetShortPathNameW

  SearchPathW

  lstrcmpiW

  SetFileTime

  CloseHandle

  ExpandEnvironmentStringsW

  lstrcmpW

  GetDiskFreeSpaceW

  lstrlenW

  lstrcpynW

  GetExitCodeProcess

  FindFirstFileW

  FindNextFileW

  DeleteFileW

  SetFilePointer

  ReadFile

  FindClose

  MulDiv

  MultiByteToWideChar

  lstrlenA

  WideCharToMultiByte

  GetPrivateProfileStringW

  WritePrivateProfileStringW

  FreeLibrary

  LoadLibraryExW

  GetModuleHandleW

  user32

  GetSystemMenu

  SetClassLongW

  IsWindowEnabled

  EnableMenuItem

  SetWindowPos

  GetSysColor

  GetWindowLongW

  SetCursor

  LoadCursorW

  CheckDlgButton

  GetMessagePos

  LoadBitmapW

  CallWindowProcW

  IsWindowVisible

  CloseClipboard

  SetClipboardData

  EmptyClipboard

  OpenClipboard

  wsprintfW

  ScreenToClient

  GetWindowRect

  GetSystemMetrics

  SetDlgItemTextW

  GetDlgItemTextW

  MessageBoxIndirectW

  CharPrevW

  CharNextA

  wsprintfA

  DispatchMessageW

  PeekMessageW

  GetDC

  ReleaseDC

  EnableWindow

  InvalidateRect

  SendMessageW

  DefWindowProcW

  BeginPaint

  GetClientRect

  FillRect

  EndDialog

  RegisterClassW

  SystemParametersInfoW

  CreateWindowExW

  GetClassInfoW

  DialogBoxParamW

  CharNextW

  ExitWindowsEx

  DestroyWindow

  LoadImageW

  SetTimer

  SetWindowTextW

  PostQuitMessage

  ShowWindow

  GetDlgItem

  IsWindow

  SetWindowLongW

  FindWindowExW

  TrackPopupMenu

  AppendMenuW

  CreatePopupMenu

  DrawTextW

  EndPaint

  CreateDialogParamW

  SendMessageTimeoutW

  SetForegroundWindow

  gdi32

  SelectObject

  SetBkMode

  CreateFontIndirectW

  SetTextColor

  DeleteObject

  GetDeviceCaps

  CreateBrushIndirect

  SetBkColor

  shell32

  SHGetSpecialFolderLocation

  SHGetPathFromIDListW

  SHBrowseForFolderW

  SHGetFileInfoW

  ShellExecuteW

  SHFileOperationW

  advapi32

  RegDeleteKeyW

  SetFileSecurityW

  OpenProcessToken

  LookupPrivilegeValueW

  AdjustTokenPrivileges

  RegOpenKeyExW

  RegEnumValueW

  RegDeleteValueW

  RegCloseKey

  RegCreateKeyExW

  RegSetValueExW

  RegQueryValueExW

  RegEnumKeyW

  comctl32

  ImageList_AddMasked

  ord17

  ImageList_Destroy

  ImageList_Create

  ole32

  OleUninitialize

  OleInitialize

  CoTaskMemFree

  CoCreateInstance

  Sections

  .text

  Size: 24KB - Virtual size: 24KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 128KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .ndata

  Size: - Virtual size: 216KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 75KB - Virtual size: 74KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/LangDLL.dll

  .dll windows:4 windows x86 arch:x86

  3e8d18bb71c7ebbda2ddc2a4bb03547b

  
  

  Code Sign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2013 12:00

  Not After

  15-01-2038 12:00

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  07-10-2021 00:00

  Not After

  09-10-2024 23:59

  Subject

  CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  90:e6:01:15:7b:cf:9a:55:09:8d:c1:8d:77:3c:13:6b:28:ee:2f:15:71:ff:de:41:e1:6a:de:11:e7:4c:53:c2

  Signer

  Actual PE Digest

  90:e6:01:15:7b:cf:9a:55:09:8d:c1:8d:77:3c:13:6b:28:ee:2f:15:71:ff:de:41:e1:6a:de:11:e7:4c:53:c2

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  lstrlenW

  GlobalFree

  lstrcpynW

  lstrcmpW

  GlobalAlloc

  MulDiv

  GetModuleHandleW

  lstrcpyW

  user32

  DialogBoxParamW

  SetDlgItemTextW

  SendDlgItemMessageW

  EndDialog

  SetWindowTextW

  LoadIconW

  ShowWindow

  SendMessageW

  GetDC

  gdi32

  GetDeviceCaps

  CreateFontIndirectW

  DeleteObject

  Exports

  Exports

  LangDialog

  Sections

  .text

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1024B - Virtual size: 681B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 352B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 352B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/ShellLink.dll

  .dll windows:5 windows x86 arch:x86

  45fa690faed482cb9bfd08458ed442ae

  
  

  Code Sign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2013 12:00

  Not After

  15-01-2038 12:00

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  07-10-2021 00:00

  Not After

  09-10-2024 23:59

  Subject

  CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  5b:0d:12:67:a2:11:cb:0a:9b:79:08:28:d3:86:a5:03:ae:57:7c:8a:8a:07:2d:14:1f:32:30:c9:12:f3:ba:4d

  Signer

  Actual PE Digest

  5b:0d:12:67:a2:11:cb:0a:9b:79:08:28:d3:86:a5:03:ae:57:7c:8a:8a:07:2d:14:1f:32:30:c9:12:f3:ba:4d

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  LocalFree

  LocalAlloc

  GlobalFree

  lstrcpyW

  lstrcpynW

  GlobalAlloc

  user32

  wsprintfW

  ole32

  CoCreateInstance

  Exports

  Exports

  GetShortCutArgs

  GetShortCutDescription

  GetShortCutHotkey

  GetShortCutIconIndex

  GetShortCutIconLocation

  GetShortCutShowMode

  GetShortCutTarget

  GetShortCutWorkingDirectory

  SetRunAsAdministrator

  SetShortCutArgs

  SetShortCutDescription

  SetShortCutHotkey

  SetShortCutIconIndex

  SetShortCutIconLocation

  SetShortCutShowMode

  SetShortCutTarget

  SetShortCutWorkingDirectory

  Sections

  .text

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1024B - Virtual size: 998B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 512B - Virtual size: 300B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/modern-header.bmp
• $PLUGINSDIR/nsExec.dll

  .dll windows:4 windows x86 arch:x86

  0b75f1007d3cc8e457970ae3e3fd53c3

  
  

  Code Sign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2013 12:00

  Not After

  15-01-2038 12:00

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  07-10-2021 00:00

  Not After

  09-10-2024 23:59

  Subject

  CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  dd:a4:fa:dc:f8:cf:f7:8e:02:ce:65:71:db:1c:56:b0:b4:66:e1:0d:aa:48:76:86:5d:36:58:04:3e:7c:92:1b

  Signer

  Actual PE Digest

  dd:a4:fa:dc:f8:cf:f7:8e:02:ce:65:71:db:1c:56:b0:b4:66:e1:0d:aa:48:76:86:5d:36:58:04:3e:7c:92:1b

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  GetModuleHandleW

  MultiByteToWideChar

  lstrlenA

  GetExitCodeProcess

  WaitForSingleObject

  Sleep

  TerminateProcess

  GlobalReAlloc

  GlobalUnlock

  GlobalSize

  lstrcpynW

  ReadFile

  PeekNamedPipe

  GetTickCount

  CreateProcessW

  GetStartupInfoW

  CreatePipe

  GetProcAddress

  lstrcpyW

  DeleteFileW

  lstrcmpiW

  GetCurrentProcess

  lstrcatW

  CloseHandle

  UnmapViewOfFile

  MapViewOfFile

  CreateFileMappingW

  CreateFileW

  CopyFileW

  GetTempFileNameW

  GlobalFree

  GlobalAlloc

  GetModuleFileNameW

  ExitProcess

  GetCommandLineW

  GlobalLock

  GetVersion

  lstrlenW

  user32

  SendMessageW

  FindWindowExW

  CharNextW

  wsprintfW

  CharPrevW

  advapi32

  InitializeSecurityDescriptor

  SetSecurityDescriptorDacl

  Exports

  Exports

  Exec

  ExecToLog

  ExecToStack

  Sections

  .text

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 512B - Virtual size: 448B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ