Beat%20Banger%20-%20SteamGG[.]NET[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

Beat%20Banger%20-%20SteamGG.NET.zip
Size

598.8MB
MD5

c632b80d743469dc75793e6c7a7b62c4
SHA1

b97a558b7d0e70935cb41a1410a773402e537d68
SHA256

a652ee8c16aec1d60c7b9c4dc2fb8accfda87992cf4e85a042e69d0fd18a44b9
SHA512

46c2eef40ea9b1f2acb87529d0b5790863f64b2a452d21dd5becadd2c91f11e763f524d5cb7809dcf1b2a01e4956f2cb18a318f6f828b86d00b2cffa683ca8d2
SSDEEP

12582912:OOAC8RtfyBTOfby5LtYly0fT0XzQR7vtn+2QabPaNps9FHfiC6bopCedd/KqEMUa:OZylybAtYq671Rb/FaC60pCedd/KqEM7

Score

3^/10

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/Beat Banger - SteamGG.NET/beatbanger.console.exe
unpack001/Beat Banger - SteamGG.NET/beatbanger.exe
unpack001/Beat Banger - SteamGG.NET/bin/win64/ffmpeg.exe
unpack001/Beat Banger - SteamGG.NET/bin/win64/ffprobe.exe

Files

Beat%20Banger%20-%20SteamGG.NET.zip
.zip
Beat Banger - SteamGG.NET/README.md
Beat Banger - SteamGG.NET/Read-Me-Instructions.txt
Beat Banger - SteamGG.NET/SteamGG – Free Download Pre-installed Steam Games.url
Beat Banger - SteamGG.NET/_Redist/SteamGG – Free Download Pre-installed Steam Games.url
Beat Banger - SteamGG.NET/_Redist/dotNetFx40_Full_setup.exe
.exe windows:5 windows x86 arch:x86

02483cd76378259a50b7b66146b45f06

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-12-2009 22:40

Not After

07-03-2011 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:01

Not After

25-07-2013 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d6:d5:21:44:87:a4:87:f6:84:c8:27:2e:90:f4:8d:98:d2:12:c9:41
Signer

Actual PE Digest

d6:d5:21:44:87:a4:87:f6:84:c8:27:2e:90:f4:8d:98:d2:12:c9:41

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

boxstub.pdb

Imports

advapi32

CryptGenRandom
CryptReleaseContext
DecryptFileW
CryptAcquireContextA

kernel32

Sleep
WaitForSingleObject
GetExitCodeProcess
CloseHandle
SetFileAttributesW
InitializeCriticalSection
CreateEventA
CreateThread
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetCommandLineW
CreateProcessW
CompareStringW
LocalFree
QueryDosDeviceW
GetLogicalDriveStringsW
GetDiskFreeSpaceExW
GetDriveTypeW
CreateFileW
DeviceIoControl
SetErrorMode
CreateDirectoryW
RemoveDirectoryW
MoveFileExW
LoadLibraryW
GetProcAddress
GetSystemDirectoryW
GetVersion
GetLastError
SetEnvironmentVariableW
ExitThread
GetTickCount
GetEnvironmentVariableW
GetModuleHandleW
lstrlenW
WaitForMultipleObjects
ResetEvent
GetSystemInfo
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetEndOfFile
DuplicateHandle
ReadFile
SetFilePointerEx
GlobalFree
GlobalAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
LCMapStringW
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
GetStringTypeW
HeapSize
HeapReAlloc
IsProcessorFeaturePresent
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileA
GetLocalTime
GetComputerNameW
lstrlenA
FormatMessageW
GetSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
DeleteFileW
GetFileAttributesW
FindFirstFileW
FindNextFileW
FindClose
GetCurrentDirectoryW
SetCurrentDirectoryW
ExpandEnvironmentStringsW
GetProcessHeap
RaiseException

comctl32

ord17

rpcrt4

UuidToStringW
RpcStringFreeW
UuidCreate

shell32

CommandLineToArgvW
SHBrowseForFolderW
SHGetPathFromIDListW

shlwapi

PathRemoveExtensionW

user32

MessageBoxW
GetTopWindow
GetWindowThreadProcessId
GetWindow
SendMessageA
PostMessageW
SendMessageW
DialogBoxParamA
GetDlgItem
SetWindowTextW
EndDialog
PostQuitMessage
DialogBoxParamW
SetWindowLongW
GetWindowLongW
LoadStringW
CharUpperW

cabinet

ord22
ord23
ord20

oleaut32

SysAllocString
VariantClear

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

Exports

Exports

?dwPlaceholder@@3PAEA
_DecodePointerInternal@4
_EncodePointerInternal@4

Sections

.text
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boxld01
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/_Redist/dxwebsetup.exe
.exe windows:5 windows x86 arch:x86

1494de9b53e05fc1f40cb92afbdd6ce4

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-12-2009 22:40

Not After

07-03-2011 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:01

Not After

25-07-2013 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:b8:85:36:04:6e:46:6d:2f:58:b3:18:fd:18:43:f0:b8:4b:28:d3
Signer

Actual PE Digest

47:b8:85:36:04:6e:46:6d:2f:58:b3:18:fd:18:43:f0:b8:4b:28:d3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
GetModuleFileNameA
lstrlenA
GetSystemDirectoryA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
lstrcatA
lstrcpyA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
GetProcAddress
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
CloseHandle
LoadResource
SizeofResource
FindResourceA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
LockResource
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
GlobalFree

gdi32

GetDeviceCaps

user32

ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 239KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/_Redist/install_all.bat
Beat Banger - SteamGG.NET/_Redist/oalinst.exe
.exe windows:4 windows x86 arch:x86

1ff011c2e13ea492fe69b2fbfc802083

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

36:33:6d:83:6a:19:e2:44:ff:0e:52:88:2e:b5:b1:de
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

30-06-2006 00:00

Not After

14-07-2009 23:59

Subject

CN=Creative Labs Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CLI,O=Creative Labs Inc,L=Milpitas,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cb:34:e3:72:3d:d1:2b:57:d7:86:46:9b:d8:78:2f:92:cf:2d:5d:4f
Signer

Actual PE Digest

cb:34:e3:72:3d:d1:2b:57:d7:86:46:9b:d8:78:2f:92:cf:2d:5d:4f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\AL_Installer\Release\oalinst.pdb

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

GetFileAttributesA
GetProcAddress
LoadLibraryA
FreeResource
SizeofResource
LoadResource
FindResourceA
ReadFile
SetEndOfFile
GetLocaleInfoW
HeapSize
IsValidCodePage
IsValidLocale
DeleteFileA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
FlushFileBuffers
SetStdHandle
InterlockedExchange
RemoveDirectoryA
CreateDirectoryA
GetModuleFileNameA
GetSystemDirectoryA
CopyFileA
GetTempFileNameA
LockResource
MoveFileExA
GetTimeZoneInformation
CompareStringA
CompareStringW
EnumSystemLocalesA
VirtualAlloc
GetLastError
HeapFree
HeapAlloc
MoveFileA
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetEnvironmentVariableA
HeapReAlloc
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
LCMapStringA
MultiByteToWideChar
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
SetConsoleCtrlHandler
FreeLibrary

user32

LoadCursorA
RegisterClassExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
PostQuitMessage
LoadIconA
SetClassLongA
LoadImageA
CreateWindowExA
SendMessageA
BeginPaint
GetClientRect
MoveWindow
DrawTextA
EndPaint
DefWindowProcA

gdi32

CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
GetStockObject

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA

Sections

.text
Size: 116KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 636KB - Virtual size: 633KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/_Redist/vcredist2005_x64.exe
.exe windows:5 windows x86 arch:x86

0ebb3c09b06b1666d307952e824c8697

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21-02-2011 20:53

Not After

21-05-2012 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:02

Not After

25-07-2013 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

72:eb:ec:84:ec:eb:2c:99:f6:93:1a:22:55:c2:43:bc:37:c7:56:59
Signer

Actual PE Digest

72:eb:ec:84:ec:eb:2c:99:f6:93:1a:22:55:c2:43:bc:37:c7:56:59

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wextract.pdb

Imports

advapi32

FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
lstrlenA
GetModuleFileNameA
GetSystemDirectoryA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
FreeResource
GetProcAddress
LoadResource
SizeofResource
FindResourceA
lstrcatA
CloseHandle
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
ReadFile
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
LockResource

gdi32

GetDeviceCaps

user32

ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/_Redist/vcredist2005_x86.exe
.exe windows:5 windows x86 arch:x86

0ebb3c09b06b1666d307952e824c8697

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21-02-2011 20:53

Not After

21-05-2012 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:02

Not After

25-07-2013 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

5d:9a:9e:30:e8:b4:79:bd:b9:25:8e:b1:69:72:67:0f:90:ec:0f:7f
Signer

Actual PE Digest

5d:9a:9e:30:e8:b4:79:bd:b9:25:8e:b1:69:72:67:0f:90:ec:0f:7f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wextract.pdb

Imports

advapi32

FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
lstrlenA
GetModuleFileNameA
GetSystemDirectoryA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
FreeResource
GetProcAddress
LoadResource
SizeofResource
FindResourceA
lstrcatA
CloseHandle
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
ReadFile
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
LockResource

gdi32

GetDeviceCaps

user32

ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/_Redist/vcredist2008_x64.exe
.exe windows:5 windows x86 arch:x86

092eb6daba2f17cbda102fd1a32acd00

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21-02-2011 20:53

Not After

21-05-2012 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:02

Not After

25-07-2013 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8f:01:df:78:ce:80:39:28:c8:49:b3:c7:c4:01:28:81:cc:40:e4:47
Signer

Actual PE Digest

8f:01:df:78:ce:80:39:28:c8:49:b3:c7:c4:01:28:81:cc:40:e4:47

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
SetEvent
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
GetVersionExA
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
CreateFileA
FindNextFileA
FindFirstFileA
CopyFileA
SetFileAttributesA
SystemTimeToFileTime
GetSystemTime
GetDiskFreeSpaceA
QueryDosDeviceA
GetCurrentDirectoryA
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetExitCodeProcess
CreateProcessA
ExpandEnvironmentStringsA
GetFileSize
CreateThread
CreateEventA
GetProcessHeap
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
CloseHandle
DeviceIoControl
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
SetErrorMode
GetTickCount
CreateDirectoryA
GetLastError
RemoveDirectoryA
MoveFileExA
SetFilePointer
FindClose
ReadFile

msvcrt

strchr
_strnicmp
_stricmp
strrchr
_strlwr
strncpy
strstr
_snprintf
sprintf

advapi32

AllocateAndInitializeSid
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
InitializeSecurityDescriptor
OpenProcessToken

user32

ShowWindow
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
LoadStringA
EndDialog
SetParent
MessageBoxA

ntdll

NtShutdownSystem
NtAdjustPrivilegesToken
NtClose
NtOpenProcessToken

comctl32

ord17

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.9MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/_Redist/vcredist2008_x86.exe
.exe windows:5 windows x86 arch:x86

092eb6daba2f17cbda102fd1a32acd00

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21-02-2011 20:53

Not After

21-05-2012 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:01

Not After

25-07-2013 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d0:b8:36:c9:ae:3b:cb:20:6d:59:26:4f:5f:9c:95:6f:4b:15:75:3a
Signer

Actual PE Digest

d0:b8:36:c9:ae:3b:cb:20:6d:59:26:4f:5f:9c:95:6f:4b:15:75:3a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
SetEvent
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
GetVersionExA
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
CreateFileA
FindNextFileA
FindFirstFileA
CopyFileA
SetFileAttributesA
SystemTimeToFileTime
GetSystemTime
GetDiskFreeSpaceA
QueryDosDeviceA
GetCurrentDirectoryA
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetExitCodeProcess
CreateProcessA
ExpandEnvironmentStringsA
GetFileSize
CreateThread
CreateEventA
GetProcessHeap
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
CloseHandle
DeviceIoControl
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
SetErrorMode
GetTickCount
CreateDirectoryA
GetLastError
RemoveDirectoryA
MoveFileExA
SetFilePointer
FindClose
ReadFile

msvcrt

strchr
_strnicmp
_stricmp
strrchr
_strlwr
strncpy
strstr
_snprintf
sprintf

advapi32

AllocateAndInitializeSid
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
InitializeSecurityDescriptor
OpenProcessToken

user32

ShowWindow
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
LoadStringA
EndDialog
SetParent
MessageBoxA

ntdll

NtShutdownSystem
NtAdjustPrivilegesToken
NtClose
NtOpenProcessToken

comctl32

ord17

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.2MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/_Redist/vcredist2010_x64.exe
.exe windows:5 windows x86 arch:x86

a1f6f100bff4507a3332f3f0cdfc24f5

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21-02-2011 20:53

Not After

21-05-2012 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:02

Not After

25-07-2013 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

3e:29:68:50:9f:c0:15:85:b2:43:f6:40:df:72:7e:8c:87:c3:b3:4f
Signer

Actual PE Digest

3e:29:68:50:9f:c0:15:85:b2:43:f6:40:df:72:7e:8c:87:c3:b3:4f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

sfxcab.pdb

Imports

msvcrt

__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_adjust_fdiv
_exit
_c_exit
strncpy
strstr
_strlwr
strrchr
_stricmp
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_snprintf
sprintf
strchr
_strnicmp
_vsnprintf

advapi32

InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
InitializeSecurityDescriptor

kernel32

CreateThread
GetFileSize
ExpandEnvironmentStringsA
CreateProcessA
GetExitCodeProcess
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
SetFileTime
SetEndOfFile
CreateEventA
QueryDosDeviceA
GetDiskFreeSpaceA
GetSystemTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetProcessHeap
CopyFileA
SetFileAttributesA
DosDateTimeToFileTime
SetEvent
GetVersionExA
ReadFile
SetFilePointer
MoveFileExA
RemoveDirectoryA
GetLastError
CreateDirectoryA
GetTickCount
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CloseHandle
DeviceIoControl
CreateFileA
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
FindFirstFileA
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
FindClose
FindNextFileA
SystemTimeToFileTime

user32

SendDlgItemMessageA
SendMessageA
DialogBoxParamA
MessageBoxA
SetParent
EndDialog
LoadStringA
ShowWindow

ntdll

NtOpenProcessToken
NtAdjustPrivilegesToken
NtClose
NtShutdownSystem

comctl32

ord17

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9.8MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/_Redist/vcredist2010_x86.exe
.exe windows:5 windows x86 arch:x86

a1f6f100bff4507a3332f3f0cdfc24f5

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21-02-2011 20:53

Not After

21-05-2012 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:01

Not After

25-07-2013 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

58:5d:c5:26:99:03:d9:98:d7:bd:f4:32:05:e3:4e:3b:e4:dd:15:47
Signer

Actual PE Digest

58:5d:c5:26:99:03:d9:98:d7:bd:f4:32:05:e3:4e:3b:e4:dd:15:47

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

sfxcab.pdb

Imports

msvcrt

__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_adjust_fdiv
_exit
_c_exit
strncpy
strstr
_strlwr
strrchr
_stricmp
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_snprintf
sprintf
strchr
_strnicmp
_vsnprintf

advapi32

InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
InitializeSecurityDescriptor

kernel32

CreateThread
GetFileSize
ExpandEnvironmentStringsA
CreateProcessA
GetExitCodeProcess
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
SetFileTime
SetEndOfFile
CreateEventA
QueryDosDeviceA
GetDiskFreeSpaceA
GetSystemTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetProcessHeap
CopyFileA
SetFileAttributesA
DosDateTimeToFileTime
SetEvent
GetVersionExA
ReadFile
SetFilePointer
MoveFileExA
RemoveDirectoryA
GetLastError
CreateDirectoryA
GetTickCount
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CloseHandle
DeviceIoControl
CreateFileA
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
FindFirstFileA
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
FindClose
FindNextFileA
SystemTimeToFileTime

user32

SendDlgItemMessageA
SendMessageA
DialogBoxParamA
MessageBoxA
SetParent
EndDialog
LoadStringA
ShowWindow

ntdll

NtOpenProcessToken
NtAdjustPrivilegesToken
NtClose
NtShutdownSystem

comctl32

ord17

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8.5MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/_Redist/vcredist2012_x64.exe
.exe windows:5 windows x86 arch:x86

33c6db41ca15b47cfcec52de6c2ab2b7

Code Sign

33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-09-2012 21:12

Not After

04-12-2013 21:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24-01-2013 22:33

Not After

24-04-2014 22:33

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:1a:77:bb:74:b3:07:d1:16:b8:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24-09-2013 17:41

Not After

24-12-2014 17:41

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f9:21:a8:7f:5a:3b:9a:0a:03:ac:c7:ff:64:14:0d:fb:d7:83:d6:35:6f:b3:45:b4:6a:5d:07:98:a0:f2:ce:30
Signer

Actual PE Digest

f9:21:a8:7f:5a:3b:9a:0a:03:ac:c7:ff:64:14:0d:fb:d7:83:d6:35:6f:b3:45:b4:6a:5d:07:98:a0:f2:ce:30

Digest Algorithm

sha256

PE Digest Matches

true

fa:4d:cd:f6:4c:96:60:0c:ed:96:a4:ab:84:4d:56:72:9b:e5:6f:2f
Signer

Actual PE Digest

fa:4d:cd:f6:4c:96:60:0c:ed:96:a4:ab:84:4d:56:72:9b:e5:6f:2f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

E:\delivery\Dev\wix36_dev11\build\ship\x86\x86\burn.pdb

Imports

kernel32

CopyFileExW
MapViewOfFile
CreateFileMappingW
CreateMutexW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
ResetEvent
SetEndOfFile
DeleteFileW
GetThreadLocale
UnmapViewOfFile
GetFullPathNameW
GetTempFileNameW
CreateDirectoryW
GetLocalTime
SetFilePointer
GetComputerNameW
CreateFileA
GetProcessHeap
GetModuleHandleA
CopyFileW
MoveFileExW
GlobalFree
GlobalAlloc
GetFileSizeEx
GetCurrentDirectoryW
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
RaiseException
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FormatMessageW
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
CompareStringW
InitializeCriticalSection
CloseHandle
LocalFree
ReleaseMutex
GetVersionExW
GetProcessId
ReadFile
CreateNamedPipeW
ConnectNamedPipe
SetNamedPipeHandleState
lstrlenW
WaitForSingleObject
OpenProcess
CreateFileW
SetFilePointerEx
lstrlenA
RemoveDirectoryW
GetFileAttributesW
ExpandEnvironmentStringsW
VerifyVersionInfoW
VerSetConditionMask
GetTempPathW
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetVolumePathNameW
GetWindowsDirectoryW
GetSystemDefaultLangID
GetUserDefaultLangID
GetDateFormatW
GetSystemTime
LoadLibraryW
InterlockedCompareExchange
GetExitCodeThread
CreateThread
SetEvent
WaitForMultipleObjects
CreateEventW
ProcessIdToSessionId
SetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
CreateProcessW
GetExitCodeProcess
SetThreadExecutionState
FlushFileBuffers

msi

ord171
ord45
ord137
ord125
ord17
ord8
ord141
ord238
ord190
ord88
ord90
ord173
ord111
ord70
ord169
ord118
ord115
ord116
ord205

shell32

SHGetFolderPathW
ShellExecuteExW
CommandLineToArgvW

rpcrt4

UuidCreate

wininet

HttpQueryInfoW
InternetCrackUrlW
InternetSetOptionW
InternetConnectW
InternetCloseHandle
InternetOpenW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetErrorDlg
InternetReadFile
HttpSendRequestW

wintrust

WinVerifyTrust
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
CryptCATAdminCalcHashFromFileHandle

crypt32

CertGetCertificateContextProperty
CryptHashPublicKeyInfo

gdi32

DeleteDC
DeleteObject
GetObjectW
CreateCompatibleDC
SelectObject
StretchBlt

cabinet

ord23
ord22
ord20

advapi32

CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
SetNamedSecurityInfoW
AllocateAndInitializeSid
CheckTokenMembership
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
InitializeSecurityDescriptor
SetEntriesInAclA
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
RegOpenKeyExW
GetTokenInformation
OpenSCManagerW
OpenServiceW
QueryServiceStatus
CloseServiceHandle
ChangeServiceConfigW
DecryptFileW
SetEntriesInAclW
InitializeAcl
CreateWellKnownSid
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
QueryServiceConfigW

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

ole32

CLSIDFromProgID
CoInitializeSecurity
CoTaskMemFree
CoCreateInstance
CoInitialize
CoInitializeEx
CoUninitialize
StringFromGUID2

user32

LoadBitmapW
IsWindow
PostMessageW
PeekMessageW
GetMessageW
GetWindowLongW
SetWindowLongW
DefWindowProcW
UnregisterClassW
DispatchMessageW
TranslateMessage
IsDialogMessageW
CreateWindowExW
RegisterClassW
MsgWaitForMultipleObjects
LoadCursorW
PostQuitMessage
GetCursorPos
MonitorFromPoint
GetMonitorInfoW
PostThreadMessageW
MessageBoxW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Sections

.text
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/_Redist/vcredist2012_x86.exe
.exe windows:5 windows x86 arch:x86

33c6db41ca15b47cfcec52de6c2ab2b7

Code Sign

33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-09-2012 21:12

Not After

04-12-2013 21:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24-01-2013 22:33

Not After

24-04-2014 22:33

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:1a:77:bb:74:b3:07:d1:16:b8:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24-09-2013 17:41

Not After

24-12-2014 17:41

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

51:3c:0e:d0:e9:29:66:d4:05:e1:26:24:9d:da:d9:c0:63:79:c5:68:38:c7:69:c5:25:f3:62:ab:0e:b8:a4:f6
Signer

Actual PE Digest

51:3c:0e:d0:e9:29:66:d4:05:e1:26:24:9d:da:d9:c0:63:79:c5:68:38:c7:69:c5:25:f3:62:ab:0e:b8:a4:f6

Digest Algorithm

sha256

PE Digest Matches

true

8c:12:40:11:a9:d9:22:02:f1:9b:18:34:2a:70:2d:89:dc:3c:69:a5
Signer

Actual PE Digest

8c:12:40:11:a9:d9:22:02:f1:9b:18:34:2a:70:2d:89:dc:3c:69:a5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

E:\delivery\Dev\wix36_dev11\build\ship\x86\x86\burn.pdb

Imports

kernel32

CopyFileExW
MapViewOfFile
CreateFileMappingW
CreateMutexW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
ResetEvent
SetEndOfFile
DeleteFileW
GetThreadLocale
UnmapViewOfFile
GetFullPathNameW
GetTempFileNameW
CreateDirectoryW
GetLocalTime
SetFilePointer
GetComputerNameW
CreateFileA
GetProcessHeap
GetModuleHandleA
CopyFileW
MoveFileExW
GlobalFree
GlobalAlloc
GetFileSizeEx
GetCurrentDirectoryW
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
RaiseException
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FormatMessageW
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
CompareStringW
InitializeCriticalSection
CloseHandle
LocalFree
ReleaseMutex
GetVersionExW
GetProcessId
ReadFile
CreateNamedPipeW
ConnectNamedPipe
SetNamedPipeHandleState
lstrlenW
WaitForSingleObject
OpenProcess
CreateFileW
SetFilePointerEx
lstrlenA
RemoveDirectoryW
GetFileAttributesW
ExpandEnvironmentStringsW
VerifyVersionInfoW
VerSetConditionMask
GetTempPathW
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetVolumePathNameW
GetWindowsDirectoryW
GetSystemDefaultLangID
GetUserDefaultLangID
GetDateFormatW
GetSystemTime
LoadLibraryW
InterlockedCompareExchange
GetExitCodeThread
CreateThread
SetEvent
WaitForMultipleObjects
CreateEventW
ProcessIdToSessionId
SetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
CreateProcessW
GetExitCodeProcess
SetThreadExecutionState
FlushFileBuffers

msi

ord171
ord45
ord137
ord125
ord17
ord8
ord141
ord238
ord190
ord88
ord90
ord173
ord111
ord70
ord169
ord118
ord115
ord116
ord205

shell32

SHGetFolderPathW
ShellExecuteExW
CommandLineToArgvW

rpcrt4

UuidCreate

wininet

HttpQueryInfoW
InternetCrackUrlW
InternetSetOptionW
InternetConnectW
InternetCloseHandle
InternetOpenW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetErrorDlg
InternetReadFile
HttpSendRequestW

wintrust

WinVerifyTrust
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
CryptCATAdminCalcHashFromFileHandle

crypt32

CertGetCertificateContextProperty
CryptHashPublicKeyInfo

gdi32

DeleteDC
DeleteObject
GetObjectW
CreateCompatibleDC
SelectObject
StretchBlt

cabinet

ord23
ord22
ord20

advapi32

CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
SetNamedSecurityInfoW
AllocateAndInitializeSid
CheckTokenMembership
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
InitializeSecurityDescriptor
SetEntriesInAclA
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
RegOpenKeyExW
GetTokenInformation
OpenSCManagerW
OpenServiceW
QueryServiceStatus
CloseServiceHandle
ChangeServiceConfigW
DecryptFileW
SetEntriesInAclW
InitializeAcl
CreateWellKnownSid
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
QueryServiceConfigW

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

ole32

CLSIDFromProgID
CoInitializeSecurity
CoTaskMemFree
CoCreateInstance
CoInitialize
CoInitializeEx
CoUninitialize
StringFromGUID2

user32

LoadBitmapW
IsWindow
PostMessageW
PeekMessageW
GetMessageW
GetWindowLongW
SetWindowLongW
DefWindowProcW
UnregisterClassW
DispatchMessageW
TranslateMessage
IsDialogMessageW
CreateWindowExW
RegisterClassW
MsgWaitForMultipleObjects
LoadCursorW
PostQuitMessage
GetCursorPos
MonitorFromPoint
GetMonitorInfoW
PostThreadMessageW
MessageBoxW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Sections

.text
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/_Redist/vcredist2013_x64.exe
.exe windows:5 windows x86 arch:x86

8e2588a9cf43886de3449dfff03137b6

Code Sign

33:00:00:00:c8:47:22:9d:a3:0d:ca:c0:58:00:00:00:00:00:c8
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-08-2016 20:17

Not After

02-11-2017 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:8e:87:91:a4:57:1a:5f:ca:3e:00:00:00:00:00:8e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17-11-2016 22:09

Not After

17-02-2018 22:09

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d2:15:be:d8:35:8b:b3:7c:e3:4d:4d:50:1d:e6:91:02:c5:a1:a4:0d:b3:8f:12:4d:59:61:61:e5:59:2d:0e:e7
Signer

Actual PE Digest

d2:15:be:d8:35:8b:b3:7c:e3:4d:4d:50:1d:e6:91:02:c5:a1:a4:0d:b3:8f:12:4d:59:61:61:e5:59:2d:0e:e7

Digest Algorithm

sha256

PE Digest Matches

true

44:91:26:71:a4:e4:9a:f9:12:6b:88:da:fb:ae:ae:f6:69:04:19:21
Signer

Actual PE Digest

44:91:26:71:a4:e4:9a:f9:12:6b:88:da:fb:ae:ae:f6:69:04:19:21

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

E:\delivery\Dev\wix37\build\ship\x86\burn.pdb

Imports

gdiplus

GdiplusShutdown
GdiplusStartup
GdipDeleteGraphics
GdipFree
GdipCloneImage
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromResource
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipAlloc

advapi32

QueryServiceConfigW
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCloseKey
RegDeleteValueW
RegQueryValueExW
GetUserNameW
InitiateSystemShutdownExW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
DecryptFileW
ChangeServiceConfigW
ControlService
CloseServiceHandle
QueryServiceStatus
OpenServiceW
OpenSCManagerW
RegQueryInfoKeyW
RegSetValueExW
SetEntriesInAclA
SetSecurityDescriptorGroup
RegOpenKeyExW
GetTokenInformation
CheckTokenMembership
AllocateAndInitializeSid
FreeSid
LookupAccountNameW
SetNamedSecurityInfoW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner

user32

GetMessageW
PeekMessageW
PostMessageW
IsWindow
PostQuitMessage
GetWindowLongW
SetWindowLongW
DefWindowProcW
UnregisterClassW
DispatchMessageW
TranslateMessage
IsDialogMessageW
MsgWaitForMultipleObjects
WaitForInputIdle
LoadCursorW
BeginPaint
EndPaint
GetCursorPos
MonitorFromPoint
GetMonitorInfoW
ReleaseDC
MessageBoxW
PostThreadMessageW
RegisterClassW
CreateWindowExW

oleaut32

VariantClear
VariantInit
SysAllocString
SysFreeString

gdi32

GetDeviceCaps
CreateDCW

shell32

ShellExecuteExW
SHGetFolderPathW
CommandLineToArgvW

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
CoInitializeEx
StringFromGUID2
CoInitializeSecurity
CLSIDFromProgID

kernel32

GetCurrentProcess
InitializeCriticalSection
TlsFree
DeleteCriticalSection
CloseHandle
TlsGetValue
Sleep
GetLastError
ReleaseMutex
TlsSetValue
TlsAlloc
GetCurrentThreadId
GetVersionExW
GetModuleHandleW
ReadFile
SetFilePointerEx
CreateFileW
GetCurrentProcessId
GetProcessId
WriteFile
ConnectNamedPipe
SetNamedPipeHandleState
lstrlenW
CompareStringW
LocalFree
CreateNamedPipeW
WaitForSingleObject
OpenProcess
lstrlenA
RemoveDirectoryW
GetFileAttributesW
ExpandEnvironmentStringsW
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
GetProcAddress
VerifyVersionInfoW
VerSetConditionMask
GetComputerNameW
GetTempPathW
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetVolumePathNameW
HeapAlloc
GetSystemDefaultLangID
GetUserDefaultLangID
GetDateFormatW
GetSystemTime
InterlockedExchange
LoadLibraryW
InterlockedCompareExchange
GetExitCodeThread
CreateThread
SetEvent
WaitForMultipleObjects
CreateEventW
ProcessIdToSessionId
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
SetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
HeapSetInformation
MapViewOfFile
CreateFileMappingW
CreateMutexW
SetEndOfFile
ResetEvent
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
GetSystemTimeAsFileTime
VirtualFree
VirtualAlloc
DeleteFileW
GetThreadLocale
GetTimeZoneInformation
TerminateProcess
UnhandledExceptionFilter
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GlobalAlloc
IsProcessorFeaturePresent
GetTickCount
QueryPerformanceCounter
HeapCreate
SetLastError
EncodePointer
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
GlobalFree
MoveFileExW
CopyFileW
GetFileSizeEx
GetModuleHandleA
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
LCMapStringW
MultiByteToWideChar
SetStdHandle
WriteConsoleW
FlushFileBuffers
GetLocalTime
UnmapViewOfFile
IsDebuggerPresent
DuplicateHandle
HeapFree
FormatMessageW
GetTempFileNameW
GetWindowsDirectoryW
CompareStringA
FreeEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
DecodePointer
ExitProcess
SetUnhandledExceptionFilter
GetStartupInfoW
GetCommandLineW
GetFullPathNameW
CreateDirectoryW
GetProcessHeap

cabinet

ord22
ord20
ord23

crypt32

CertGetCertificateContextProperty
CryptHashPublicKeyInfo

msi

ord88
ord17
ord125
ord116
ord115
ord118
ord8
ord171
ord205
ord45
ord137
ord141
ord238
ord190
ord169
ord90
ord173
ord111
ord70

rpcrt4

UuidCreate

wininet

InternetCloseHandle
HttpAddRequestHeadersW
HttpOpenRequestW
InternetErrorDlg
InternetReadFile
HttpSendRequestW
InternetSetOptionW
InternetOpenW
HttpQueryInfoW
InternetCrackUrlW
InternetConnectW

wintrust

WinVerifyTrust
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
CryptCATAdminCalcHashFromFileHandle

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/_Redist/vcredist2013_x86.exe
.exe windows:5 windows x86 arch:x86

8e2588a9cf43886de3449dfff03137b6

Code Sign

33:00:00:00:c6:78:80:36:01:75:1a:69:72:00:00:00:00:00:c6
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-08-2016 20:17

Not After

02-11-2017 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:8e:87:91:a4:57:1a:5f:ca:3e:00:00:00:00:00:8e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17-11-2016 22:09

Not After

17-02-2018 22:09

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:23:3d:61:a3:c7:a5:8d:8d:8c:82:da:a0:4b:34:8f:7b:f4:1d:29:40:64:85:23:a9:3c:34:b5:c4:85:42:3f
Signer

Actual PE Digest

52:23:3d:61:a3:c7:a5:8d:8d:8c:82:da:a0:4b:34:8f:7b:f4:1d:29:40:64:85:23:a9:3c:34:b5:c4:85:42:3f

Digest Algorithm

sha256

PE Digest Matches

true

55:93:21:ff:30:02:58:ca:25:32:ed:9f:50:2b:ee:cc:82:3b:d9:62
Signer

Actual PE Digest

55:93:21:ff:30:02:58:ca:25:32:ed:9f:50:2b:ee:cc:82:3b:d9:62

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

E:\delivery\Dev\wix37\build\ship\x86\burn.pdb

Imports

gdiplus

GdiplusShutdown
GdiplusStartup
GdipDeleteGraphics
GdipFree
GdipCloneImage
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromResource
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipAlloc

advapi32

QueryServiceConfigW
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCloseKey
RegDeleteValueW
RegQueryValueExW
GetUserNameW
InitiateSystemShutdownExW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
DecryptFileW
ChangeServiceConfigW
ControlService
CloseServiceHandle
QueryServiceStatus
OpenServiceW
OpenSCManagerW
RegQueryInfoKeyW
RegSetValueExW
SetEntriesInAclA
SetSecurityDescriptorGroup
RegOpenKeyExW
GetTokenInformation
CheckTokenMembership
AllocateAndInitializeSid
FreeSid
LookupAccountNameW
SetNamedSecurityInfoW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner

user32

GetMessageW
PeekMessageW
PostMessageW
IsWindow
PostQuitMessage
GetWindowLongW
SetWindowLongW
DefWindowProcW
UnregisterClassW
DispatchMessageW
TranslateMessage
IsDialogMessageW
MsgWaitForMultipleObjects
WaitForInputIdle
LoadCursorW
BeginPaint
EndPaint
GetCursorPos
MonitorFromPoint
GetMonitorInfoW
ReleaseDC
MessageBoxW
PostThreadMessageW
RegisterClassW
CreateWindowExW

oleaut32

VariantClear
VariantInit
SysAllocString
SysFreeString

gdi32

GetDeviceCaps
CreateDCW

shell32

ShellExecuteExW
SHGetFolderPathW
CommandLineToArgvW

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
CoInitializeEx
StringFromGUID2
CoInitializeSecurity
CLSIDFromProgID

kernel32

GetCurrentProcess
InitializeCriticalSection
TlsFree
DeleteCriticalSection
CloseHandle
TlsGetValue
Sleep
GetLastError
ReleaseMutex
TlsSetValue
TlsAlloc
GetCurrentThreadId
GetVersionExW
GetModuleHandleW
ReadFile
SetFilePointerEx
CreateFileW
GetCurrentProcessId
GetProcessId
WriteFile
ConnectNamedPipe
SetNamedPipeHandleState
lstrlenW
CompareStringW
LocalFree
CreateNamedPipeW
WaitForSingleObject
OpenProcess
lstrlenA
RemoveDirectoryW
GetFileAttributesW
ExpandEnvironmentStringsW
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
GetProcAddress
VerifyVersionInfoW
VerSetConditionMask
GetComputerNameW
GetTempPathW
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetVolumePathNameW
HeapAlloc
GetSystemDefaultLangID
GetUserDefaultLangID
GetDateFormatW
GetSystemTime
InterlockedExchange
LoadLibraryW
InterlockedCompareExchange
GetExitCodeThread
CreateThread
SetEvent
WaitForMultipleObjects
CreateEventW
ProcessIdToSessionId
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
SetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
HeapSetInformation
MapViewOfFile
CreateFileMappingW
CreateMutexW
SetEndOfFile
ResetEvent
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
GetSystemTimeAsFileTime
VirtualFree
VirtualAlloc
DeleteFileW
GetThreadLocale
GetTimeZoneInformation
TerminateProcess
UnhandledExceptionFilter
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GlobalAlloc
IsProcessorFeaturePresent
GetTickCount
QueryPerformanceCounter
HeapCreate
SetLastError
EncodePointer
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
GlobalFree
MoveFileExW
CopyFileW
GetFileSizeEx
GetModuleHandleA
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
LCMapStringW
MultiByteToWideChar
SetStdHandle
WriteConsoleW
FlushFileBuffers
GetLocalTime
UnmapViewOfFile
IsDebuggerPresent
DuplicateHandle
HeapFree
FormatMessageW
GetTempFileNameW
GetWindowsDirectoryW
CompareStringA
FreeEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
DecodePointer
ExitProcess
SetUnhandledExceptionFilter
GetStartupInfoW
GetCommandLineW
GetFullPathNameW
CreateDirectoryW
GetProcessHeap

cabinet

ord22
ord20
ord23

crypt32

CertGetCertificateContextProperty
CryptHashPublicKeyInfo

msi

ord88
ord17
ord125
ord116
ord115
ord118
ord8
ord171
ord205
ord45
ord137
ord141
ord238
ord190
ord169
ord90
ord173
ord111
ord70

rpcrt4

UuidCreate

wininet

InternetCloseHandle
HttpAddRequestHeadersW
HttpOpenRequestW
InternetErrorDlg
InternetReadFile
HttpSendRequestW
InternetSetOptionW
InternetOpenW
HttpQueryInfoW
InternetCrackUrlW
InternetConnectW

wintrust

WinVerifyTrust
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
CryptCATAdminCalcHashFromFileHandle

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/_Redist/vcredist2015_2017_2019_2022_x64.exe
.exe windows:5 windows x86 arch:x86

1a5cdbf711fee14b077e599d13fddab2

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2023 19:51

Not After

16-10-2024 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5e:18:06:fe:03:84:bc:c9:9b:18:69:dd:02:f9:1c:4d:21:5e:1c:b6:9c:c2:01:d7:6c:82:c7:2b:73:76:55:23
Signer

Actual PE Digest

5e:18:06:fe:03:84:bc:c9:9b:18:69:dd:02:f9:1c:4d:21:5e:1c:b6:9c:c2:01:d7:6c:82:c7:2b:73:76:55:23

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

C:\agent\_work\8\s\build\ship\x86\burn.pdb

Imports

advapi32

RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW

user32

GetMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
PeekMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW
TranslateMessage

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

gdi32

CreateCompatibleDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
DeleteDC

shell32

SHGetFolderPathW
CommandLineToArgvW
ShellExecuteExW

ole32

CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID

kernel32

GetCommandLineA
GetCPInfo
GetOEMCP
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
Sleep
GetLocalTime
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
GetCommandLineW
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
GetCurrentProcess
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
GetEnvironmentStringsW
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetComputerNameW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ReadFile
SetFilePointerEx
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
CreateEventW
ProcessIdToSessionId
OpenProcess
GetProcessId
WaitForSingleObject
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
IsValidCodePage
FreeEnvironmentStringsW
TlsAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DecodePointer
WriteConsoleW
GetModuleHandleA
GlobalAlloc
GlobalFree
GetFileSizeEx
CopyFileW
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SystemTimeToFileTime
GetSystemInfo
VirtualProtect
VirtualQuery
SetCurrentDirectoryW
FindFirstFileExW
GetFileType
GetACP
ExitProcess
GetStdHandle
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
SetLastError
LoadLibraryExA

rpcrt4

UuidCreate

Sections

.text
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/_Redist/vcredist2015_2017_2019_2022_x86.exe
.exe windows:5 windows x86 arch:x86

1a5cdbf711fee14b077e599d13fddab2

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2023 19:51

Not After

16-10-2024 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f9:68:9d:02:1c:12:b1:a6:ba:e4:a5:a8:bd:49:d5:c8:01:52:9f:20:08:db:28:22:14:a9:53:1b:df:16:c3:86
Signer

Actual PE Digest

f9:68:9d:02:1c:12:b1:a6:ba:e4:a5:a8:bd:49:d5:c8:01:52:9f:20:08:db:28:22:14:a9:53:1b:df:16:c3:86

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

C:\agent\_work\8\s\build\ship\x86\burn.pdb

Imports

advapi32

RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW

user32

GetMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
PeekMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW
TranslateMessage

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

gdi32

CreateCompatibleDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
DeleteDC

shell32

SHGetFolderPathW
CommandLineToArgvW
ShellExecuteExW

ole32

CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID

kernel32

GetCommandLineA
GetCPInfo
GetOEMCP
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
Sleep
GetLocalTime
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
GetCommandLineW
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
GetCurrentProcess
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
GetEnvironmentStringsW
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetComputerNameW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ReadFile
SetFilePointerEx
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
CreateEventW
ProcessIdToSessionId
OpenProcess
GetProcessId
WaitForSingleObject
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
IsValidCodePage
FreeEnvironmentStringsW
TlsAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DecodePointer
WriteConsoleW
GetModuleHandleA
GlobalAlloc
GlobalFree
GetFileSizeEx
CopyFileW
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SystemTimeToFileTime
GetSystemInfo
VirtualProtect
VirtualQuery
SetCurrentDirectoryW
FindFirstFileExW
GetFileType
GetACP
ExitProcess
GetStdHandle
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
SetLastError
LoadLibraryExA

rpcrt4

UuidCreate

Sections

.text
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/_Redist/vcredist_2015-2019_x64.exe
.exe windows:5 windows x86 arch:x86

1a5cdbf711fee14b077e599d13fddab2

Code Sign

33:00:00:01:34:22:1e:7e:49:2a:ac:da:6a:00:00:00:00:01:34
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-10-2019 18:17

Not After

03-01-2021 18:17

Subject

CN=Microsoft Time-Stamp service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:E041-4BEE-FA7E,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b4:cd:00:d9:81:97:db:3f:fb:fb:3f:54:d1:0a:0d:d4:f4:56:29:a6:03:63:86:3f:a0:b1:71:7e:4c:43:8a:da
Signer

Actual PE Digest

b4:cd:00:d9:81:97:db:3f:fb:fb:3f:54:d1:0a:0d:d4:f4:56:29:a6:03:63:86:3f:a0:b1:71:7e:4c:43:8a:da

Digest Algorithm

sha256

PE Digest Matches

true

77:97:6d:62:92:5a:37:44:2f:5d:c5:b0:8d:43:91:09:56:54:b2:48
Signer

Actual PE Digest

77:97:6d:62:92:5a:37:44:2f:5d:c5:b0:8d:43:91:09:56:54:b2:48

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

C:\agent\_work\8\s\build\ship\x86\burn.pdb

Imports

advapi32

RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW

user32

GetMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
PeekMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW
TranslateMessage

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

gdi32

CreateCompatibleDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
DeleteDC

shell32

SHGetFolderPathW
CommandLineToArgvW
ShellExecuteExW

ole32

CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID

kernel32

GetCommandLineA
GetCPInfo
GetOEMCP
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
Sleep
GetLocalTime
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
GetCommandLineW
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
GetCurrentProcess
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
GetEnvironmentStringsW
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetComputerNameW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ReadFile
SetFilePointerEx
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
CreateEventW
ProcessIdToSessionId
OpenProcess
GetProcessId
WaitForSingleObject
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
IsValidCodePage
FreeEnvironmentStringsW
TlsAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DecodePointer
WriteConsoleW
GetModuleHandleA
GlobalAlloc
GlobalFree
GetFileSizeEx
CopyFileW
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SystemTimeToFileTime
GetSystemInfo
VirtualProtect
VirtualQuery
SetCurrentDirectoryW
FindFirstFileExW
GetFileType
GetACP
ExitProcess
GetStdHandle
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
SetLastError
LoadLibraryExA

rpcrt4

UuidCreate

Sections

.text
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/_Redist/vcredist_2015-2019_x86.exe
.exe windows:5 windows x86 arch:x86

1a5cdbf711fee14b077e599d13fddab2

Code Sign

33:00:00:01:2a:30:bf:85:c5:0e:b1:e2:8c:00:00:00:00:01:2a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-09-2019 20:40

Not After

04-12-2020 20:40

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:7D2E-3782-B0F7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

74:6d:60:08:04:c6:65:c7:f8:0a:78:74:29:9a:a4:ab:9d:42:b8:ba:0c:df:95:ee:75:8a:64:a4:2f:71:a6:46
Signer

Actual PE Digest

74:6d:60:08:04:c6:65:c7:f8:0a:78:74:29:9a:a4:ab:9d:42:b8:ba:0c:df:95:ee:75:8a:64:a4:2f:71:a6:46

Digest Algorithm

sha256

PE Digest Matches

true

0b:05:b3:51:e7:d2:3f:ce:ad:94:9d:75:ac:64:9a:ad:21:01:73:2c
Signer

Actual PE Digest

0b:05:b3:51:e7:d2:3f:ce:ad:94:9d:75:ac:64:9a:ad:21:01:73:2c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

C:\agent\_work\8\s\build\ship\x86\burn.pdb

Imports

advapi32

RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW

user32

GetMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
PeekMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW
TranslateMessage

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

gdi32

CreateCompatibleDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
DeleteDC

shell32

SHGetFolderPathW
CommandLineToArgvW
ShellExecuteExW

ole32

CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID

kernel32

GetCommandLineA
GetCPInfo
GetOEMCP
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
Sleep
GetLocalTime
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
GetCommandLineW
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
GetCurrentProcess
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
GetEnvironmentStringsW
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetComputerNameW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ReadFile
SetFilePointerEx
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
CreateEventW
ProcessIdToSessionId
OpenProcess
GetProcessId
WaitForSingleObject
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
IsValidCodePage
FreeEnvironmentStringsW
TlsAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DecodePointer
WriteConsoleW
GetModuleHandleA
GlobalAlloc
GlobalFree
GetFileSizeEx
CopyFileW
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SystemTimeToFileTime
GetSystemInfo
VirtualProtect
VirtualQuery
SetCurrentDirectoryW
FindFirstFileExW
GetFileType
GetACP
ExitProcess
GetStdHandle
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
SetLastError
LoadLibraryExA

rpcrt4

UuidCreate

Sections

.text
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/_Redist/vcredist_x64.exe
.exe windows:5 windows x86 arch:x86

a1f6f100bff4507a3332f3f0cdfc24f5

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-12-2009 22:40

Not After

07-03-2011 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:01

Not After

25-07-2013 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

b7:67:e2:97:28:63:cf:54:51:e3:36:ce:0a:1f:4f:ce:6e:3a:bc:30
Signer

Actual PE Digest

b7:67:e2:97:28:63:cf:54:51:e3:36:ce:0a:1f:4f:ce:6e:3a:bc:30

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

sfxcab.pdb

Imports

msvcrt

__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_adjust_fdiv
_exit
_c_exit
strncpy
strstr
_strlwr
strrchr
_stricmp
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_snprintf
sprintf
strchr
_strnicmp
_vsnprintf

advapi32

InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
InitializeSecurityDescriptor

kernel32

CreateThread
GetFileSize
ExpandEnvironmentStringsA
CreateProcessA
GetExitCodeProcess
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
SetFileTime
SetEndOfFile
CreateEventA
QueryDosDeviceA
GetDiskFreeSpaceA
GetSystemTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetProcessHeap
CopyFileA
SetFileAttributesA
DosDateTimeToFileTime
SetEvent
GetVersionExA
ReadFile
SetFilePointer
MoveFileExA
RemoveDirectoryA
GetLastError
CreateDirectoryA
GetTickCount
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CloseHandle
DeviceIoControl
CreateFileA
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
FindFirstFileA
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
FindClose
FindNextFileA
SystemTimeToFileTime

user32

SendDlgItemMessageA
SendMessageA
DialogBoxParamA
MessageBoxA
SetParent
EndDialog
LoadStringA
ShowWindow

ntdll

NtOpenProcessToken
NtAdjustPrivilegesToken
NtClose
NtShutdownSystem

comctl32

ord17

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.4MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/_Redist/vcredist_x86.exe
.exe windows:5 windows x86 arch:x86

a1f6f100bff4507a3332f3f0cdfc24f5

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-12-2009 22:40

Not After

07-03-2011 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:02

Not After

25-07-2013 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8a:19:aa:3a:87:7f:dd:23:dc:03:96:64:c9:5b:23:7c:35:b0:fd:3d
Signer

Actual PE Digest

8a:19:aa:3a:87:7f:dd:23:dc:03:96:64:c9:5b:23:7c:35:b0:fd:3d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

sfxcab.pdb

Imports

msvcrt

__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_adjust_fdiv
_exit
_c_exit
strncpy
strstr
_strlwr
strrchr
_stricmp
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_snprintf
sprintf
strchr
_strnicmp
_vsnprintf

advapi32

InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
InitializeSecurityDescriptor

kernel32

CreateThread
GetFileSize
ExpandEnvironmentStringsA
CreateProcessA
GetExitCodeProcess
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
SetFileTime
SetEndOfFile
CreateEventA
QueryDosDeviceA
GetDiskFreeSpaceA
GetSystemTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetProcessHeap
CopyFileA
SetFileAttributesA
DosDateTimeToFileTime
SetEvent
GetVersionExA
ReadFile
SetFilePointer
MoveFileExA
RemoveDirectoryA
GetLastError
CreateDirectoryA
GetTickCount
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CloseHandle
DeviceIoControl
CreateFileA
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
FindFirstFileA
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
FindClose
FindNextFileA
SystemTimeToFileTime

user32

SendDlgItemMessageA
SendMessageA
DialogBoxParamA
MessageBoxA
SetParent
EndDialog
LoadStringA
ShowWindow

ntdll

NtOpenProcessToken
NtAdjustPrivilegesToken
NtClose
NtShutdownSystem

comctl32

ord17

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.8MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/_Redist/xnafx40_redist.msi
.msi
Beat Banger - SteamGG.NET/beatbanger.console.exe
.exe windows:4 windows x64 arch:x64

d63eba35c76e43d011d758384b562b42

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AssignProcessToJobObject
CloseHandle
CreateIoCompletionPort
CreateJobObjectW
CreateProcessW
DeleteCriticalSection
EnterCriticalSection
GetCommandLineW
GetExitCodeProcess
GetFileAttributesW
GetLastError
GetModuleFileNameW
GetQueuedCompletionStatus
GetStdHandle
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
ResumeThread
SetConsoleMode
SetConsoleTitleW
SetInformationJobObject
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
__C_specific_handler

msvcrt

___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_commode
_errno
fwprintf
_fmode
_initterm
_lock
_onexit
_snwprintf_s
_unlock
abort
calloc
exit
fprintf
fputwc
free
fwrite
localeconv
malloc
memcpy
memset
signal
strerror
strlen
strncmp
vfprintf
wcslen

shlwapi

PathGetArgsW
StrRStrIW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/beatbanger.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 58.8MB - Virtual size: 58.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13.2MB - Virtual size: 13.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

pck
Size: 113.7MB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 335KB - Virtual size: 335KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/bin/win64/ffmpeg.exe
.exe windows:4 windows x64 arch:x64

1f00634327a00e0e628dc677b68bbedc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CryptAcquireContextW
CryptCreateHash
CryptDecrypt
CryptDestroyHash
CryptGetHashParam
CryptGetProvParam
CryptReleaseContext
CryptSetHashParam
CryptSetProvParam
CryptSignHashA
RegCloseKey
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW

crypt32

CertCloseStore
CertDeleteCertificateFromStore
CertEnumCRLsInStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore
PFXImportCertStore

d2d1

D2D1CreateFactory

dwrite

DWriteCreateFactory

gdi32

BitBlt
ChoosePixelFormat
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateFontIndirectW
CreateFontW
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
DescribePixelFormat
EnumFontFamiliesExW
EnumFontFamiliesW
ExtTextOutW
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetDeviceGammaRamp
GetObjectA
GetPixelFormat
GetStockObject
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextFaceW
GetTextMetricsW
Rectangle
SelectObject
SetBkMode
SetDeviceGammaRamp
SetPixelFormat
SetTextColor
SwapBuffers

imm32

ImmAssociateContext
ImmGetCandidateListW
ImmGetCompositionStringW
ImmGetContext
ImmGetIMEFileNameA
ImmNotifyIME
ImmReleaseContext
ImmSetCompositionStringW
ImmSetCompositionWindow

kernel32

AcquireSRWLockExclusive
AddVectoredExceptionHandler
AllocConsole
AreFileApisANSI
CancelIoEx
CloseHandle
CompareStringA
CopyFileA
CreateConsoleScreenBuffer
CreateDirectoryA
CreateDirectoryW
CreateEventA
CreateEventW
CreateFileA
CreateFileMappingA
CreateFileW
CreateMutexA
CreateProcessA
CreateSemaphoreA
CreateSemaphoreW
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFileA
DuplicateHandle
EnterCriticalSection
ExitProcess
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileExW
FindFirstFileW
FindNextFileA
FindNextFileW
FormatMessageA
FormatMessageW
FreeConsole
FreeLibrary
GetACP
GetActiveProcessorGroupCount
GetCommandLineW
GetConsoleCursorInfo
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentConsoleFont
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentVariableA
GetFileAttributesA
GetFileAttributesExA
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileSizeEx
GetFileType
GetFinalPathNameByHandleA
GetFullPathNameA
GetFullPathNameW
GetHandleInformation
GetLastError
GetLongPathNameA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetNumberOfConsoleInputEvents
GetProcAddress
GetProcessAffinityMask
GetProcessTimes
GetStartupInfoA
GetStdHandle
GetSystemInfo
GetSystemPowerStatus
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetThreadContext
GetThreadGroupAffinity
GetThreadPriority
GetThreadTimes
GetTickCount
GetTickCount64
GetTimeZoneInformation
GetUserDefaultLocaleName
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalAlloc
GlobalLock
GlobalMemoryStatusEx
GlobalUnlock
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSRWLock
IsDBCSLeadByteEx
IsDebuggerPresent
K32GetProcessMemoryInfo
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
MapViewOfFile
MoveFileExA
MoveFileExW
MulDiv
MultiByteToWideChar
OpenProcess
OutputDebugStringA
OutputDebugStringW
PeekNamedPipe
Process32First
Process32Next
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleInputA
ReadFile
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSemaphore
RemoveDirectoryA
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetConsoleActiveScreenBuffer
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleMode
SetConsoleScreenBufferSize
SetConsoleTextAttribute
SetConsoleTitleA
SetConsoleWindowInfo
SetDllDirectoryA
SetDllDirectoryW
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileAttributesA
SetFilePointer
SetFilePointerEx
SetLastError
SetProcessAffinityMask
SetSystemTime
SetThreadAffinityMask
SetThreadContext
SetThreadErrorMode
SetThreadExecutionState
SetThreadGroupAffinity
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
SuspendThread
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleOutputW
WriteConsoleW
WriteFile
__C_specific_handler
lstrcatW
lstrcpyA
lstrcpynA
lstrlenW

msvcrt

___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_access
_acmdln
_aligned_free
_aligned_malloc
_aligned_realloc
_amsg_exit
_assert
_beginthread
_beginthreadex
_cexit
_close
_commode
_difftime64
_endthread
_endthreadex
_errno
_fdopen
_filelengthi64
_fileno
_findclose
_findfirst64
_findnext64
_fmode
_fstat64
_ftime64
_ftime64_s
_fullpath
_get_osfhandle
_getmaxstdio
_gmtime64
_hypot
_i64toa
_initterm
_localtime64
_lock
_locking
_lseeki64
_ltoa
_mbsrchr
_mkdir
_mktime64
_onexit
_open
_open_osfhandle
_rmdir
_setjmp
_setmaxstdio
_setmode
_sopen
_stat64
_stricmp
_strlwr
_strnicmp
_strrev
_strupr
_time64
_ui64toa
_ultoa
_unlink
_unlock
_vscprintf
_vsnprintf
_waccess
_wassert
_wcsicmp
_wfindfirst64
_wfindnext64
_wfopen
_wfopen_s
_wfullpath
_wgetenv
_wmkdir
_wopen
_wremove
_wrmdir
_wsopen
_wstat64
_wunlink
abort
acos
asin
atan
atof
atoi
bsearch
calloc
clearerr
clock
cosh
div
exit
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fgetws
fopen
fprintf
fputc
fputs
fread
free
frexp
fseek
fsetpos
ftell
fwrite
getc
getchar
getenv
getwc
isalnum
isalpha
islower
isprint
isspace
isupper
iswctype
isxdigit
localeconv
log10
malloc
mbstowcs
memchr
memcmp
memcpy
memmove
memset
perror
printf
putc
putwc
qsort
raise
rand
realloc
remove
rename
rewind
setlocale
setvbuf
signal
sinh
sprintf
srand
sscanf
strcat
strchr
strcmp
strcoll
strcpy
strcspn
strerror
strftime
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtok
strtol
strtoul
strxfrm
swscanf_s
system
tan
tanh
tolower
toupper
towlower
towupper
ungetc
ungetwc
vfprintf
vsprintf
wcscat
wcschr
wcscmp
wcscoll
wcscpy
wcscpy_s
wcscspn
wcsftime
wcslen
wcsncmp
wcsrchr
wcsstr
wcstombs
wcstoul
wcsxfrm
longjmp
_nextafter
_write
_wcsdup
_unlink
_strdup
_setmode
_rmdir
_read
_putenv
_open
_lseek
_kbhit
_itoa
_isatty
_getpid
_getcwd
_getch
_fileno
_fdopen
_dup2
_dup
_close
_chmod
_access

ncrypt

BCryptCloseAlgorithmProvider
BCryptGenRandom
BCryptOpenAlgorithmProvider
NCryptDecrypt
NCryptDeleteKey
NCryptFreeObject
NCryptGetProperty
NCryptOpenKey
NCryptOpenStorageProvider
NCryptSignHash

ole32

CoCreateInstance
CoGetMalloc
CoInitialize
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CreateBindCtx
OleLoadFromStream
OleSaveToStream
PropVariantClear
StringFromGUID2

oleaut32

OleCreatePropertyFrame
SysFreeString

opengl32

glBindTexture
glBlendFunc
glClear
glClearColor
glDeleteTextures
glDrawElements
glEnable
glGenTextures
glGetError
glGetIntegerv
glGetString
glPixelStorei
glTexImage2D
glTexParameteri
glTexSubImage2D
glViewport
wglGetProcAddress

shell32

CommandLineToArgvW
DragAcceptFiles
DragFinish
DragQueryFileW
ExtractIconExW
SHGetFolderPathW

shlwapi

PathCombineW
PathIsRelativeW
PathIsUNCW
SHCreateStreamOnFileA

user32

AdjustWindowRectEx
BeginPaint
CallWindowProcW
ChangeDisplaySettingsExW
ClientToScreen
ClipCursor
CloseClipboard
CopyIcon
CreateIconFromResource
CreateIconIndirect
CreateWindowExA
CreateWindowExW
DefWindowProcA
DefWindowProcW
DestroyCursor
DestroyIcon
DestroyWindow
DialogBoxIndirectParamW
DispatchMessageA
DispatchMessageW
DrawIcon
DrawTextW
EmptyClipboard
EndDialog
EndPaint
EnumDisplayDevicesW
EnumDisplayMonitors
EnumDisplaySettingsW
FindWindowW
FrameRect
GetAsyncKeyState
GetClassInfoExW
GetClientRect
GetClipCursor
GetClipboardData
GetClipboardSequenceNumber
GetCursorInfo
GetCursorPos
GetDC
GetDesktopWindow
GetDlgItem
GetDoubleClickTime
GetFocus
GetIconInfo
GetKeyState
GetKeyboardLayout
GetKeyboardState
GetMenu
GetMessageExtraInfo
GetMessageW
GetMonitorInfoW
GetParent
GetPropW
GetRawInputData
GetRawInputDeviceInfoA
GetRawInputDeviceList
GetSystemMetrics
GetUpdateRect
GetWindowLongPtrA
GetWindowLongPtrW
GetWindowLongW
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
InvalidateRect
IsClipboardFormatAvailable
IsIconic
IsRectEmpty
IsWindowVisible
KillTimer
LoadCursorA
LoadCursorW
LoadIconW
MapVirtualKeyW
MessageBoxA
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageW
PostThreadMessageW
RegisterClassExW
RegisterClassW
RegisterDeviceNotificationW
RegisterRawInputDevices
ReleaseDC
RemovePropW
ScreenToClient
SendMessageA
SendMessageW
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetLayeredWindowAttributes
SetPropW
SetTimer
SetWindowLongPtrA
SetWindowLongPtrW
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowTextW
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
ToUnicode
TrackMouseEvent
TranslateMessage
UnregisterClassW
UnregisterDeviceNotification
ValidateRect
WindowFromPoint
wsprintfA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

avicap32

capCreateCaptureWindowA
capGetDriverDescriptionA

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime
waveInAddBuffer
waveInClose
waveInGetDevCapsW
waveInGetNumDevs
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInUnprepareHeader
waveOutClose
waveOutGetDevCapsW
waveOutGetErrorTextW
waveOutGetNumDevs
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite

ws2_32

WSACleanup
WSAGetLastError
WSARecvFrom
WSASendTo
WSASetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostname
getnameinfo
getpeername
getsockname
getsockopt
htons
inet_ntop
inet_pton
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket

wsock32

htonl

Exports

Exports

flite_lang_list
flite_lang_list_length
flite_voice_list
gme_ay_type
gme_clear_playlist
gme_delete
gme_enable_accuracy
gme_equalizer
gme_free_info
gme_gbs_type
gme_gym_type
gme_hes_type
gme_identify_extension
gme_identify_file
gme_identify_header
gme_ignore_silence
gme_kss_type
gme_load_custom
gme_load_data
gme_load_file
gme_multi_channel
gme_mute_voice
gme_mute_voices
gme_new_emu
gme_new_emu_multi_channel
gme_nsf_type
gme_nsfe_type
gme_open_data
gme_open_file
gme_play
gme_sap_type
gme_seek
gme_seek_samples
gme_set_autoload_playback_limit
gme_set_equalizer
gme_set_fade
gme_set_stereo_depth
gme_set_tempo
gme_set_user_cleanup
gme_set_user_data
gme_spc_type
gme_start_track
gme_tell
gme_tell_samples
gme_track_count
gme_track_ended
gme_track_info
gme_type
gme_type_extension
gme_type_list
gme_type_multitrack
gme_type_system
gme_user_data
gme_vgm_type
gme_vgz_type
gme_voice_count
gme_voice_name
gme_warning
gme_wrong_file_type

Sections

.text
Size: 50.5MB - Virtual size: 50.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 657KB - Virtual size: 656KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 27.6MB - Virtual size: 27.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 793KB - Virtual size: 792KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 24.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 481KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/bin/win64/ffprobe.exe
.exe windows:4 windows x64 arch:x64

3d509941b62bbe06e3d4ffccb90157f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CryptAcquireContextA
CryptAcquireContextW
CryptCreateHash
CryptDecrypt
CryptDestroyHash
CryptGenRandom
CryptGetHashParam
CryptGetProvParam
CryptReleaseContext
CryptSetHashParam
CryptSetProvParam
CryptSignHashA
DeregisterEventSource
GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
GetUserNameA
GetUserNameW
InitializeSecurityDescriptor
OpenProcessToken
RegCloseKey
RegEnumKeyExW
RegEnumValueA
RegEnumValueW
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExA
RegQueryValueExW
RegisterEventSourceW
ReportEventW
SetSecurityDescriptorDacl
SystemFunction036

cfgmgr32

CM_Get_Child
CM_Get_DevNode_Registry_PropertyW
CM_Get_DevNode_Status
CM_Get_Device_IDW
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_SizeW
CM_Get_Sibling
CM_Locate_DevNodeW
CM_Open_DevNode_Key

crypt32

CertCloseStore
CertDeleteCertificateFromStore
CertEnumCRLsInStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore
PFXImportCertStore

gdi32

BitBlt
ChoosePixelFormat
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateFontIndirectW
CreateFontW
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
DescribePixelFormat
EnumFontFamiliesW
ExtTextOutW
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetDeviceGammaRamp
GetICMProfileW
GetObjectA
GetPixelFormat
GetStockObject
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextFaceW
GetTextMetricsW
Rectangle
SelectObject
SetBkMode
SetDeviceGammaRamp
SetPixelFormat
SetTextColor
SwapBuffers

imm32

ImmAssociateContext
ImmGetCandidateListW
ImmGetCompositionStringW
ImmGetContext
ImmGetIMEFileNameA
ImmNotifyIME
ImmReleaseContext
ImmSetCandidateWindow
ImmSetCompositionStringW
ImmSetCompositionWindow

iphlpapi

GetAdaptersAddresses
if_indextoname
if_nametoindex

kernel32

AcquireSRWLockExclusive
AcquireSRWLockShared
AddVectoredExceptionHandler
AllocConsole
AreFileApisANSI
AttachConsole
CancelIo
CancelIoEx
CloseHandle
CompareStringA
CompareStringOrdinal
ConvertFiberToThread
ConvertThreadToFiberEx
CopyFileExW
CreateConsoleScreenBuffer
CreateDirectoryW
CreateEventA
CreateEventW
CreateFiberEx
CreateFileA
CreateFileMappingA
CreateFileW
CreateHardLinkW
CreateMutexA
CreateNamedPipeW
CreateProcessW
CreateSemaphoreA
CreateSemaphoreW
CreateSymbolicLinkW
CreateThread
CreateToolhelp32Snapshot
DebugBreak
DeleteCriticalSection
DeleteFiber
DeleteFileW
DeviceIoControl
DuplicateHandle
EnterCriticalSection
EnumResourceLanguagesA
EnumSystemLocalesA
ExitProcess
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileExW
FindFirstFileW
FindNextFileA
FindNextFileW
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeConsole
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetActiveProcessorGroupCount
GetCPInfo
GetCommandLineW
GetComputerNameA
GetComputerNameW
GetConsoleCursorInfo
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentConsoleFont
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesExA
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSize
GetFileSizeEx
GetFileType
GetFinalPathNameByHandleA
GetFinalPathNameByHandleW
GetFullPathNameA
GetFullPathNameW
GetHandleInformation
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetLogicalProcessorInformation
GetLongPathNameA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetNativeSystemInfo
GetNumaHighestNodeNumber
GetNumaNodeProcessorMaskEx
GetNumberOfConsoleInputEvents
GetOverlappedResult
GetProcAddress
GetProcessAffinityMask
GetProcessHeap
GetProcessId
GetProcessTimes
GetShortPathNameW
GetStdHandle
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemPowerStatus
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetThreadContext
GetThreadGroupAffinity
GetThreadLocale
GetThreadPriority
GetThreadTimes
GetTickCount
GetTickCount64
GetTimeZoneInformation
GetVersion
GetVersionExA
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalMemoryStatusEx
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSRWLock
IsDBCSLeadByteEx
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsWow64Process
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
MapViewOfFile
Module32FirstW
Module32NextW
MoveFileExA
MoveFileExW
MulDiv
MultiByteToWideChar
OpenFileMappingA
OpenProcess
OutputDebugStringA
OutputDebugStringW
PeekConsoleInputA
PeekNamedPipe
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleA
ReadConsoleInputA
ReadConsoleW
ReadFile
ReadFileEx
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
RemoveDirectoryW
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
RtlCaptureContext
RtlCaptureStackBackTrace
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetConsoleActiveScreenBuffer
SetConsoleCursorInfo
SetConsoleMode
SetConsoleScreenBufferSize
SetConsoleTextAttribute
SetConsoleTitleA
SetConsoleWindowInfo
SetCurrentDirectoryA
SetCurrentDirectoryW
SetDllDirectoryA
SetDllDirectoryW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFileAttributesW
SetFileInformationByHandle
SetFilePointer
SetFilePointerEx
SetFileTime
SetHandleInformation
SetLastError
SetProcessAffinityMask
SetSystemTime
SetThreadAffinityMask
SetThreadContext
SetThreadErrorMode
SetThreadExecutionState
SetThreadGroupAffinity
SetThreadPriority
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SignalObjectAndWait
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
SleepEx
SuspendThread
SwitchToFiber
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
TryEnterCriticalSection
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualLock
VirtualProtect
VirtualQuery
VirtualUnlock
WaitForMultipleObjects
WaitForMultipleObjectsEx
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleOutputW
WriteConsoleW
WriteFile
WriteFileEx
__C_specific_handler
lstrcmpiW
lstrcpyA
lstrcpynA

msvcrt

___lc_codepage_func
___mb_cur_max_func
__argv
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_access
_aligned_free
_aligned_malloc
_aligned_realloc
_access
_amsg_exit
_assert
_beginthread
_beginthreadex
_cexit
_chdir
_chmod
_chsize
_close
_close
_commit
_commode
_dup
_dup2
_dup2
_endthreadex
_errno
_exit
_fdopen
_fdopen
_filelengthi64
_fileno
_fileno
_findclose
_findfirst64
_findnext64
_fmode
_fstat64
_ftime64
_ftime64_s
_get_osfhandle
_getcwd
_getdrive
_getmaxstdio
_getpid
_gmtime64
_hypot
_i64toa
_initterm
_isatty
_isatty
_isctype
_itoa_s
_itoa
_j1
_kbhit
_localtime64
_lock
_locking
_lseeki64
_ltoa
_mbsrchr
_mkdir
_mkdir
_mktime64
_onexit
_open
_open
_open_osfhandle
_pipe
_putenv
_read
_read
_rmdir
_rmdir
_nextafter
_setjmp
_setmaxstdio
_setmode
_setmode
_snwprintf_s
_sopen
_stat64
_strdup
_strdup
_stricmp
_strlwr
_strnicmp
_strrev
_strtoi64
_strtoui64
_strtoui64
_strupr
_time64
_ui64toa
_ui64toa_s
_ultoa
_unlink
_unlock
_unlink
_vscprintf
_vsnprintf
_vsnprintf_s
_vsnwprintf
_vsnprintf_s
_waccess
_wassert
_wchdir
_wchmod
_wcsdup
_wcsdup
_wcsicmp
_wcsicmp
_wcsnicmp
_wfindfirst64
_wfindnext64
_wfopen
_wfreopen
_wfullpath
_wgetcwd
_wgetenv
_wmkdir
_wopen
_wputenv
_wremove
_wrename
_write
_wrmdir
_wsopen
_wspawnv
_wspawnve
_wspawnvp
_wspawnvpe
_wstat64
_wunlink
_wutime64
abort
acos
asin
atan
atof
atoi
bsearch
calloc
clearerr
clock
fseek
fwprintf
cosh
div
exit
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fopen
fopen_s
fprintf
fputc
fputs
fputwc
fread
free
freopen
fsetpos
ftell
fwrite
getc
getchar
getenv
getwc
isalnum
isalpha
iscntrl
isgraph
islower
isprint
ispunct
isspace
isupper
iswctype
isxdigit
localeconv
log10
longjmp
malloc
mbstowcs
memchr
memcmp
memcpy
memmove
memset
perror
printf
putc
puts
putwc
qsort
raise
rand
realloc
remove
rename
rewind
setlocale
setvbuf
signal
sinh
sprintf
srand
sscanf
strcat
strchr
strcmp
strcoll
strcpy
strcpy_s
strcspn
strerror
strftime
strlen
strncat
strncmp
strncpy
strncpy_s
strpbrk
strrchr
strspn
strstr
strtok
strtok_s
strtol
strtoul
strxfrm
tan
tanh
tolower
toupper
towlower
towupper
vfprintf
ungetc
ungetwc
wcscat
wcschr
wcscmp
wcscoll
wcscpy
wcscpy_s
wcsftime
wcslen
wcsncmp
wcsncpy
wcsrchr
wcsspn
wcsstr
wcstol
wcstombs
wcstombs_s
wcstoul
wcsxfrm
wctomb

ncrypt

BCryptCloseAlgorithmProvider
BCryptGenRandom
BCryptOpenAlgorithmProvider
NCryptDecrypt
NCryptDeleteKey
NCryptFreeObject
NCryptGetProperty
NCryptOpenKey
NCryptOpenStorageProvider
NCryptSignHash

ole32

CLSIDFromString
CoCreateInstance
CoGetMalloc
CoInitialize
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CreateBindCtx
OleLoadFromStream
OleSaveToStream
PropVariantClear
StringFromGUID2

oleaut32

OleCreatePropertyFrame
SysFreeString

setupapi

CM_Get_Device_IDA
CM_Get_Parent
CM_Locate_DevNodeA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceRegistryPropertyA

shell32

CommandLineToArgvW
DragAcceptFiles
DragFinish
DragQueryFileW
ExtractIconExW
SHGetFolderPathW
SHGetKnownFolderPath
SHGetSpecialFolderPathA
ShellExecuteW

shlwapi

PathRemoveFileSpecW
SHCreateStreamOnFileA

user32

AdjustWindowRectEx
AttachThreadInput
BeginPaint
CallNextHookEx
CallWindowProcW
ChangeDisplaySettingsExW
ClientToScreen
ClipCursor
CloseClipboard
CopyIcon
CopyImage
CreateIconFromResource
CreateIconIndirect
CreateWindowExA
CreateWindowExW
DefWindowProcA
DefWindowProcW
DestroyCursor
DestroyIcon
DestroyWindow
DialogBoxIndirectParamW
DispatchMessageA
DispatchMessageW
DrawIcon
DrawTextW
EmptyClipboard
EndDialog
EndPaint
EnumDisplayDevicesW
EnumDisplayMonitors
EnumDisplaySettingsW
FillRect
FindWindowW
FlashWindowEx
FrameRect
GetAsyncKeyState
GetClassInfoExW
GetClientRect
GetClipCursor
GetClipboardData
GetClipboardSequenceNumber
GetCursorInfo
GetCursorPos
GetDC
GetDesktopWindow
GetDlgItem
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyState
GetKeyboardLayout
GetKeyboardState
GetMenu
GetMessageExtraInfo
GetMessageW
GetMonitorInfoW
GetParent
GetProcessWindowStation
GetPropW
GetRawInputData
GetRawInputDeviceInfoA
GetRawInputDeviceList
GetSystemMetrics
GetUpdateRect
GetUserObjectInformationW
GetWindowLongPtrA
GetWindowLongPtrW
GetWindowLongW
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
IntersectRect
InvalidateRect
IsClipboardFormatAvailable
IsIconic
IsRectEmpty
IsWindow
KillTimer
LoadCursorA
LoadCursorW
LoadIconW
MapVirtualKeyW
MessageBoxA
MessageBoxW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MsgWaitForMultipleObjectsEx
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageA
PostMessageW
PostThreadMessageW
PtInRect
RegisterClassExA
RegisterClassExW
RegisterClassW
RegisterDeviceNotificationW
RegisterRawInputDevices
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemovePropW
ScreenToClient
SendMessageA
SendMessageW
SetActiveWindow
SetCapture
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetLayeredWindowAttributes
SetPropW
SetTimer
SetWindowLongPtrA
SetWindowLongPtrW
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
ToUnicode
TrackMouseEvent
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UnregisterDeviceNotification
ValidateRect
wsprintfA

userenv

GetUserProfileDirectoryW

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

avicap32

capCreateCaptureWindowA
capGetDriverDescriptionA

winmm

mciGetErrorStringA
mciSendCommandA
timeBeginPeriod
timeEndPeriod
waveInAddBuffer
waveInClose
waveInGetDevCapsW
waveInGetNumDevs
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInUnprepareHeader
waveOutClose
waveOutGetDevCapsW
waveOutGetErrorTextW
waveOutGetNumDevs
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite

ws2_32

WSACleanup
WSACloseEvent
WSACreateEvent
WSADuplicateSocketA
WSADuplicateSocketW
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSAIoctl
WSARecv
WSARecvFrom
WSASend
WSASendTo
WSASetEvent
WSASetLastError
WSASocketA
WSASocketW
WSAStartup
WSAStringToAddressA
WSAWaitForMultipleEvents
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyaddr
gethostbyname
gethostname
getnameinfo
getpeername
getservbyname
getservbyport
getsockname
getsockopt
htonl
htons
inet_addr
inet_ntoa
inet_ntop
inet_pton
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket

Exports

Exports

FT_Activate_Size
FT_Add_Default_Modules
FT_Add_Module
FT_Angle_Diff
FT_Atan2
FT_Attach_File
FT_Attach_Stream
FT_Bitmap_Blend
FT_Bitmap_Convert
FT_Bitmap_Copy
FT_Bitmap_Done
FT_Bitmap_Embolden
FT_Bitmap_Init
FT_Bitmap_New
FT_CeilFix
FT_Cos
FT_DivFix
FT_Done_Face
FT_Done_FreeType
FT_Done_Glyph
FT_Done_Library
FT_Done_MM_Var
FT_Done_Size
FT_Error_String
FT_Face_GetCharVariantIndex
FT_Face_GetCharVariantIsDefault
FT_Face_GetCharsOfVariant
FT_Face_GetVariantSelectors
FT_Face_GetVariantsOfChar
FT_Face_Properties
FT_FloorFix
FT_Get_Advance
FT_Get_Advances
FT_Get_BDF_Charset_ID
FT_Get_BDF_Property
FT_Get_CMap_Format
FT_Get_CMap_Language_ID
FT_Get_Char_Index
FT_Get_Charmap_Index
FT_Get_Color_Glyph_ClipBox
FT_Get_Color_Glyph_Layer
FT_Get_Color_Glyph_Paint
FT_Get_Colorline_Stops
FT_Get_First_Char
FT_Get_Font_Format
FT_Get_Glyph
FT_Get_Glyph_Name
FT_Get_Kerning
FT_Get_MM_Blend_Coordinates
FT_Get_MM_Var
FT_Get_MM_WeightVector
FT_Get_Module
FT_Get_Multi_Master
FT_Get_Name_Index
FT_Get_Next_Char
FT_Get_PS_Font_Info
FT_Get_PS_Font_Private
FT_Get_PS_Font_Value
FT_Get_Paint
FT_Get_Paint_Layers
FT_Get_Postscript_Name
FT_Get_Renderer
FT_Get_Sfnt_LangTag
FT_Get_Sfnt_Name
FT_Get_Sfnt_Name_Count
FT_Get_Sfnt_Table
FT_Get_SubGlyph_Info
FT_Get_Track_Kerning
FT_Get_Transform
FT_Get_TrueType_Engine_Type
FT_Get_Var_Axis_Flags
FT_Get_Var_Blend_Coordinates
FT_Get_Var_Design_Coordinates
FT_Get_X11_Font_Format
FT_GlyphSlot_Own_Bitmap
FT_Glyph_Copy
FT_Glyph_Get_CBox
FT_Glyph_Stroke
FT_Glyph_StrokeBorder
FT_Glyph_To_Bitmap
FT_Glyph_Transform
FT_Has_PS_Glyph_Names
FT_Init_FreeType
FT_Library_SetLcdFilter
FT_Library_SetLcdFilterWeights
FT_Library_SetLcdGeometry
FT_Library_Version
FT_List_Add
FT_List_Finalize
FT_List_Find
FT_List_Insert
FT_List_Iterate
FT_List_Remove
FT_List_Up
FT_Load_Char
FT_Load_Glyph
FT_Load_Sfnt_Table
FT_Matrix_Invert
FT_Matrix_Multiply
FT_MulDiv
FT_MulFix
FT_New_Face
FT_New_Glyph
FT_New_Library
FT_New_Memory_Face
FT_New_Size
FT_Open_Face
FT_Outline_Check
FT_Outline_Copy
FT_Outline_Decompose
FT_Outline_Done
FT_Outline_Embolden
FT_Outline_EmboldenXY
FT_Outline_GetInsideBorder
FT_Outline_GetOutsideBorder
FT_Outline_Get_Bitmap
FT_Outline_Get_CBox
FT_Outline_Get_Orientation
FT_Outline_New
FT_Outline_Render
FT_Outline_Reverse
FT_Outline_Transform
FT_Outline_Translate
FT_Palette_Data_Get
FT_Palette_Select
FT_Palette_Set_Foreground_Color
FT_Property_Get
FT_Property_Set
FT_Reference_Face
FT_Reference_Library
FT_Remove_Module
FT_Render_Glyph
FT_Request_Size
FT_RoundFix
FT_Select_Charmap
FT_Select_Size
FT_Set_Char_Size
FT_Set_Charmap
FT_Set_Debug_Hook
FT_Set_Default_Log_Handler
FT_Set_Default_Properties
FT_Set_Log_Handler
FT_Set_MM_Blend_Coordinates
FT_Set_MM_Design_Coordinates
FT_Set_MM_WeightVector
FT_Set_Named_Instance
FT_Set_Pixel_Sizes
FT_Set_Renderer
FT_Set_Transform
FT_Set_Var_Blend_Coordinates
FT_Set_Var_Design_Coordinates
FT_Sfnt_Table_Info
FT_Sin
FT_Stream_OpenLZW
FT_Stroker_BeginSubPath
FT_Stroker_ConicTo
FT_Stroker_CubicTo
FT_Stroker_Done
FT_Stroker_EndSubPath
FT_Stroker_Export
FT_Stroker_ExportBorder
FT_Stroker_GetBorderCounts
FT_Stroker_GetCounts
FT_Stroker_LineTo
FT_Stroker_New
FT_Stroker_ParseOutline
FT_Stroker_Rewind
FT_Stroker_Set
FT_Tan
FT_Trace_Set_Default_Level
FT_Trace_Set_Level
FT_Vector_From_Polar
FT_Vector_Length
FT_Vector_Polarize
FT_Vector_Rotate
FT_Vector_Transform
FT_Vector_Unit
JxlColorEncodingSetToLinearSRGB
JxlColorEncodingSetToSRGB
JxlDecoderCloseInput
JxlDecoderCreate
JxlDecoderDefaultPixelFormat
JxlDecoderDestroy
JxlDecoderExtraChannelBufferSize
JxlDecoderFlushImage
JxlDecoderGetBasicInfo
JxlDecoderGetBoxSizeRaw
JxlDecoderGetBoxType
JxlDecoderGetColorAsEncodedProfile
JxlDecoderGetColorAsICCProfile
JxlDecoderGetExtraChannelBlendInfo
JxlDecoderGetExtraChannelInfo
JxlDecoderGetExtraChannelName
JxlDecoderGetFrameHeader
JxlDecoderGetFrameName
JxlDecoderGetICCProfileSize
JxlDecoderGetIntendedDownsamplingRatio
JxlDecoderImageOutBufferSize
JxlDecoderPreviewOutBufferSize
JxlDecoderProcessInput
JxlDecoderReleaseBoxBuffer
JxlDecoderReleaseInput
JxlDecoderReleaseJPEGBuffer
JxlDecoderReset
JxlDecoderRewind
JxlDecoderSetBoxBuffer
JxlDecoderSetCoalescing
JxlDecoderSetDecompressBoxes
JxlDecoderSetDesiredIntensityTarget
JxlDecoderSetExtraChannelBuffer
JxlDecoderSetImageOutBitDepth
JxlDecoderSetImageOutBuffer
JxlDecoderSetImageOutCallback
JxlDecoderSetInput
JxlDecoderSetJPEGBuffer
JxlDecoderSetKeepOrientation
JxlDecoderSetMultithreadedImageOutCallback
JxlDecoderSetParallelRunner
JxlDecoderSetPreferredColorProfile
JxlDecoderSetPreviewOutBuffer
JxlDecoderSetProgressiveDetail
JxlDecoderSetRenderSpotcolors
JxlDecoderSetUnpremultiplyAlpha
JxlDecoderSizeHintBasicInfo
JxlDecoderSkipCurrentFrame
JxlDecoderSkipFrames
JxlDecoderSubscribeEvents
JxlDecoderVersion
JxlEncoderAddBox
JxlEncoderAddImageFrame
JxlEncoderAddJPEGFrame
JxlEncoderAllowExpertOptions
JxlEncoderCloseBoxes
JxlEncoderCloseFrames
JxlEncoderCloseInput
JxlEncoderCreate
JxlEncoderDestroy
JxlEncoderFrameSettingsCreate
JxlEncoderFrameSettingsSetFloatOption
JxlEncoderFrameSettingsSetOption
JxlEncoderGetError
JxlEncoderGetRequiredCodestreamLevel
JxlEncoderInitBasicInfo
JxlEncoderInitBlendInfo
JxlEncoderInitExtraChannelInfo
JxlEncoderInitFrameHeader
JxlEncoderOptionsCreate
JxlEncoderOptionsSetDecodingSpeed
JxlEncoderOptionsSetDistance
JxlEncoderOptionsSetEffort
JxlEncoderOptionsSetLossless
JxlEncoderProcessOutput
JxlEncoderReset
JxlEncoderSetBasicInfo
JxlEncoderSetCms
JxlEncoderSetCodestreamLevel
JxlEncoderSetColorEncoding
JxlEncoderSetExtraChannelBlendInfo
JxlEncoderSetExtraChannelBuffer
JxlEncoderSetExtraChannelDistance
JxlEncoderSetExtraChannelInfo
JxlEncoderSetExtraChannelName
JxlEncoderSetFrameBitDepth
JxlEncoderSetFrameDistance
JxlEncoderSetFrameHeader
JxlEncoderSetFrameLossless
JxlEncoderSetFrameName
JxlEncoderSetICCProfile
JxlEncoderSetParallelRunner
JxlEncoderStoreJPEGMetadata
JxlEncoderUseBoxes
JxlEncoderUseContainer
JxlEncoderVersion
JxlSignatureCheck
TT_New_Context
TT_RunIns
flite_lang_list
flite_lang_list_length
flite_voice_list
gme_ay_type
gme_clear_playlist
gme_delete
gme_enable_accuracy
gme_equalizer
gme_free_info
gme_gbs_type
gme_gym_type
gme_hes_type
gme_identify_extension
gme_identify_file
gme_identify_header
gme_ignore_silence
gme_kss_type
gme_load_custom
gme_load_data
gme_load_file
gme_multi_channel
gme_mute_voice
gme_mute_voices
gme_new_emu
gme_new_emu_multi_channel
gme_nsf_type
gme_nsfe_type
gme_open_data
gme_open_file
gme_play
gme_sap_type
gme_seek
gme_seek_samples
gme_set_autoload_playback_limit
gme_set_equalizer
gme_set_fade
gme_set_stereo_depth
gme_set_tempo
gme_set_user_cleanup
gme_set_user_data
gme_spc_type
gme_start_track
gme_tell
gme_tell_samples
gme_track_count
gme_track_ended
gme_track_info
gme_type
gme_type_extension
gme_type_list
gme_type_multitrack
gme_type_system
gme_user_data
gme_vgm_type
gme_vgz_type
gme_voice_count
gme_voice_name
gme_warning
gme_wrong_file_type

Sections

.text
Size: 88.7MB - Virtual size: 88.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32.0MB - Virtual size: 32.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 14.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 618KB - Virtual size: 617KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Beat Banger - SteamGG.NET/data/.gdignore
Beat Banger - SteamGG.NET/data/_template/placeholder_legacy_album_cover.png
.png
Beat Banger - SteamGG.NET/data/_template/template_album_thumb.png
.png
Beat Banger - SteamGG.NET/data/_template/template_level_icon.png
.png
Beat Banger - SteamGG.NET/data/_template/template_song.ogg
Beat Banger - SteamGG.NET/data/_template/template_splash.png
.png
Beat Banger - SteamGG.NET/data/base/base_level/audio/base_jam.ogg
Beat Banger - SteamGG.NET/data/base/base_level/audio/sfx_break.ogg
Beat Banger - SteamGG.NET/data/base/base_level/audio/sfx_game_over.ogg
Beat Banger - SteamGG.NET/data/base/base_level/audio/sfx_level_start.ogg
Beat Banger - SteamGG.NET/data/base/base_level/audio/sfx_shutter.ogg
Beat Banger - SteamGG.NET/data/base/base_level/audio/sfx_slap.ogg
Beat Banger - SteamGG.NET/data/base/base_level/audio/sfx_squish.ogg
Beat Banger - SteamGG.NET/data/base/base_level/config/keyframes.cfg
Beat Banger - SteamGG.NET/data/base/base_level/config/meta.cfg
Beat Banger - SteamGG.NET/data/base/base_level/config/notes.cfg
Beat Banger - SteamGG.NET/data/base/base_level/config/settings.cfg
Beat Banger - SteamGG.NET/data/base/base_level/cutscene/post.cfg
Beat Banger - SteamGG.NET/data/base/base_level/cutscene/pre.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/act.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/126_virgin_newbie_master.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_climax_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_lick_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_lick_10.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_lick_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_lick_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_lick_4.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_lick_5.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_lick_6.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_lick_7.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_lick_8.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_lick_9.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_moan_closed_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_moan_closed_10.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_moan_closed_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_moan_closed_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_moan_closed_4.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_moan_closed_5.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_moan_closed_6.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_moan_closed_7.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_moan_closed_8.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_moan_closed_9.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_suck_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_suck_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_suck_4.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_suck_5.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_suck_6.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/cathy_suck_7.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/sfx_horny_mode_e.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/sfx_lick.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/sfx_lick2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/sfx_plap.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/audio/sfx_shutter.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/config/asset.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/config/keyframes.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/config/meta.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/config/notes.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/config/settings.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/amb.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/anger_twitch.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/bong.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/cathy_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/cathy_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/claire_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/claire_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/claire_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/claire_4.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/claire_5.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/cold_wind.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/ding.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/dizzy.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/finger_snap.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/page_flip.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/rattle.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/record_scratch.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/sfx_dizzy_pause.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/sfx_snap.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/slow_clap.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/sparkle_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/squeak.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/squeeze.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/stretch.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/zoe_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/zoe_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/zoe_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/zoe_4.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/audio/zoe_5.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/script.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/0.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/1.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/10.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/11.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/12.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/13.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/14.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/15.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/16.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/17.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/18.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/19.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/2.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/20.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/21.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/22.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/23.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/24.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/25.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/3.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/4.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/5.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/6.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/7.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/8.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/post/shots/9.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/bell.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/boop.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/bus.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/cathy_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/cathy_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/cathy_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/cathy_4.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/cathy_5.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/cathy_6.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/click.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/clothing_ruffle.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/door_open.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/door_slam.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/drone.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/mus_song_old_bb.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/page_flip.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/sfx_bus.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/sfx_door_slam.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/sfx_phone_sounds.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/sfx_scratch.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/sfx_steam.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/sfx_watch_ticking.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/sfx_whip.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/soft_thud.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/sparkle.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/thunder.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/whoosh.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/zoe_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/zoe_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/audio/zoe_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/script.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/shots/Prologue_001.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/shots/Prologue_002.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/shots/Prologue_0021.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/shots/Prologue_0022.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/shots/Prologue_0023.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/shots/Prologue_003.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/shots/Prologue_004.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/shots/Prologue_006.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/shots/Prologue_007.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/shots/Prologue_008.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/shots/Prologue_009.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/shots/Prologue_010.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/shots/Prologue_011.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/shots/Prologue_012.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/shots/Prologue_013.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/shots/Prologue_014.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/shots/Prologue_015.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/shots/Prologue_016.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/shots/Prologue_017.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/shots/Prologue_018.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/shots/Prologue_019.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/cutscene/pre/shots/Prologue_020.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/images/cathy_anal.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/images/cathy_e1_headlick.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/images/cathy_expert_icon.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/images/cathy_foreskin.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/images/cathy_normal_icon.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/images/cathy_rimming.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/images/cathy_throat.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/images/cathy_virgin_icon.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/images/game_over.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/splash.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/thumb.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/cathy_e1/video/climax.ogv
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/128_the_boss_master.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/claire_climax.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/claire_moan_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/claire_moan_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/claire_moan_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/claire_moan_4.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/claire_moan_5.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/claire_moan_6.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/claire_moan_7.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/claire_moan_open_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/claire_moan_open_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/claire_moan_open_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/claire_moan_open_4.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/claire_moan_open_5.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/claire_moan_open_6.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/sfx_horny_mode_c#.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/sfx_plap_dry_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/sfx_plap_dry_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/sfx_plap_dry_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/sfx_plap_dry_4.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/sfx_plap_dry_5.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/sfx_plap_wet_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/sfx_plap_wet_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/sfx_plap_wet_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/sfx_plap_wet_4.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/sfx_plap_wet_5.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/sfx_shutter.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/sfx_slide_wet.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/audio/sfx_throb.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/config/asset.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/config/keyframes.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/config/meta.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/config/notes.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/config/settings.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/post/audio/amb.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/post/audio/claire_sitting.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/post/audio/claire_walking.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/post/audio/front_door_close.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/post/audio/front_door_open.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/post/audio/post_claire_line_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/post/audio/post_claire_line_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/post/audio/post_claire_line_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/post/audio/post_claire_line_4.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/post/audio/post_claire_line_5.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/post/script.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/post/shots/shot_1.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/post/shots/shot_2.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/post/shots/shot_3.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/post/shots/shot_4.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/post/shots/shot_5.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/post/shots/shot_6.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/post/shots/shot_7.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/post/shots/shot_8.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/post/shots/shot_9.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/audio/amb.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/audio/claire_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/audio/claire_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/audio/claire_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/audio/claire_4.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/audio/claire_5.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/audio/claire_6.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/audio/claire_6a.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/audio/claire_7.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/audio/clothing_move.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/audio/dailup.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/audio/door_open.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/audio/knocking.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/script.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/1.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/10.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/11.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/12.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/13.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/14.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/15.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/16.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/18.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/19.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/2.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/20.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/21.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/22.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/23.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/24.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/25.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/26.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/27.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/28.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/3.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/4.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/5.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/6.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/7.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/8.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/cutscene/pre/shots/9.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/editor_cache.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/images/claire_buttdrum.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/images/claire_buttdrum_ass_out.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/images/claire_buttdrum_panties.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/images/claire_expert_icon.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/images/claire_legs_up.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/images/claire_normal_icon.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/images/claire_plowed.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/images/claire_pound.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/images/claire_tit_bounce.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/images/claire_tit_bounce_shirt.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/images/claire_virgin_icon.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/images/game_over.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/splash.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/thumb.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/claire_e1/video/climax.ogv
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/audio/128_secret_weapon.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/audio/d_e1_s2.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/audio/sfx_shutter.mp3
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/audio/sfx_shutter.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/audio/sfx_squish.mp3
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/config/asset.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/config/keyframes.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/config/meta.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/config/notes.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/config/settings.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/post/script.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/script.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_1.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_10.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_11.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_12.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_13.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_14.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_15.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_16.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_17.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_18.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_19.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_2.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_20.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_21.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_22.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_23.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_24.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_3.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_4.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_5.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_6.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_7.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_8.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/cutscene/pre/shots/pre_dawna_shot_9.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/editor_cache.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/images/da_0000.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/images/da_0001.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/images/da_0002.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/images/da_0003.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/images/da_0004.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/images/da_0005.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/images/dawna_blowjob.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/images/dawna_cowgirl.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/images/dawna_face_sit.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/images/dawna_handjob.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/images/dawna_thighjob.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/images/game_over.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/splash.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/dawna_e1/thumb.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/audio/130_i_can_do_it_better_master.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/audio/gale_climax.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/audio/gale_moan_short_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/audio/gale_moan_short_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/audio/gale_moan_short_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/audio/gale_moan_short_4.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/audio/gale_open_moan_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/audio/gale_open_moan_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/audio/gale_quick_moan_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/audio/gale_quick_moan_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/audio/gale_quick_moan_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/audio/gale_quick_moan_4.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/audio/gale_quick_moan_5.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/audio/gale_quick_moan_6.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/audio/gale_quick_moan_7.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/audio/sfx_shutter.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/audio/wet_slap_pussy.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/audio/wet_titty.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/audio/wet_titty_slap.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/config/asset.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/config/keyframes.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/config/meta.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/config/notes.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/config/settings.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/audio/amb.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/audio/claire_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/audio/claire_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/audio/claire_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/audio/cloth_drop.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/audio/doki.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/audio/front_door_open_and_close.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/audio/gale_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/audio/gale_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/audio/gale_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/audio/gale_4.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/audio/growl.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/audio/pop.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/audio/squeeze.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/audio/timer_alarm.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/audio/timer_ticking.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/audio/wet_suck.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/script.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/1.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/10.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/11.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/12.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/13.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/14.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/15.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/16.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/18.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/19.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/2.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/20.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/21.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/22.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/23.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/24.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/25.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/26.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/27.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/28.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/3.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/4.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/5.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/6.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/7.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/8.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/post/shots/9.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/amb.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/anger_twitch.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/claire_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/claire_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/claire_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/claire_4.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/claire_5.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/claire_6.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/cleaning.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/cloth_drop.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/ding.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/doki.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/gale_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/gale_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/gale_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/gleam.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/growl.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/heavy_fall.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/long_creak.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/office_chair.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/scary_bell.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/screen_on.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/sfx_whip.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/shaker.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/sparkle_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/squeeze.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/stretch.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/tits_out.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/audio/typing.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/script.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/shots/1.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/shots/10.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/shots/11.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/shots/12.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/shots/13.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/shots/14.png
.png .ps1 polyglot
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/shots/15.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/shots/16.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/shots/17.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/shots/18.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/shots/19.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/shots/2.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/shots/20.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/shots/21.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/shots/22.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/shots/3.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/shots/4.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/shots/5.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/shots/6.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/shots/7.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/shots/8.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/cutscene/pre/shots/9.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/editor_cache.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/gale_expert_icon.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/gale_normal_icon.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/gale_pussyfuck.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/gale_rev_cow.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/gale_titfuck.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/gale_titfuck_smaller.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/gale_virgin_icon.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/game_over.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_pussyfuck_0000.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_pussyfuck_0001.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_pussyfuck_0002.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_pussyfuck_0003.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_pussyfuck_0004.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_pussyfuck_0005.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_rev_cow_0000.png
.png .ps1 polyglot
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_rev_cow_0001.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_rev_cow_0002.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_rev_cow_0003.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_rev_cow_0004.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_rev_cow_0005.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_titfuck_0000.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_titfuck_0001.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_titfuck_0002.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_titfuck_0003.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_titfuck_0004.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_titfuck_0005.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_titfuck_smaller_0000.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_titfuck_smaller_0001.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_titfuck_smaller_0002.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_titfuck_smaller_0003.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_titfuck_smaller_0004.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/images/seq/gale_titfuck_smaller_0005.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/splash.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/thumb.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/gale_e1/video/climax.ogv
Beat Banger - SteamGG.NET/data/bb_vol_1/thumb.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/128_busty_bird_master.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/sfx_horny_mode_e.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/sfx_shutter.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/sfx_titfuck_less_wet_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/sfx_titfuck_less_wet_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/sfx_titfuck_less_wet_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/sfx_titfuck_less_wet_4.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/sfx_titfuck_less_wet_5.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/sfx_titfuck_wet_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/sfx_titfuck_wet_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/sfx_titfuck_wet_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/sfx_titfuck_wet_4.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/sfx_titfuck_wet_5.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/zoe_climax.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/zoe_moan_mid_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/zoe_moan_mid_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/zoe_moan_mid_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/zoe_moan_mid_4.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/zoe_moan_mid_5.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/zoe_moan_mid_6.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/zoe_moan_open_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/zoe_moan_open_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/zoe_moan_open_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/zoe_moan_open_4.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/zoe_moan_open_5.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/zoe_moan_open_6.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/zoe_moan_open_7.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/zoe_moan_soft_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/zoe_moan_soft_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/zoe_moan_soft_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/zoe_moan_soft_4.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/zoe_moan_soft_5.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/zoe_moan_soft_6.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/zoe_moan_soft_7.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/audio/zoe_protag_gasm.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/config/asset.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/config/keyframes.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/config/meta.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/config/notes.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/config/settings.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/amb.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/claire_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/claire_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/cleaning.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/cloth_drop.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/ding.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/doki.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/growl.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/heavy_fall.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/long_creak.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/scary_bell.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/sfx_whip.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/shaker.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/sparkle_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/squeeze.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/stretch.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/synth_kick.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/typing.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/zoe_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/zoe_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/zoe_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/zoe_4.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/audio/zoe_5.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/script.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/shots/1.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/shots/10.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/shots/11.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/shots/12.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/shots/13.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/shots/14.png
.png .ps1 polyglot
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/shots/15.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/shots/16.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/shots/17.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/shots/18.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/shots/19.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/shots/2.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/shots/20.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/shots/21.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/shots/22.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/shots/3.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/shots/4.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/shots/5.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/shots/6.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/shots/7.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/shots/8.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/post/shots/9.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/audio/amb.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/audio/bong.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/audio/claire_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/audio/claire_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/audio/cold_wind.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/audio/ding.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/audio/dizzy.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/audio/finger_snap.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/audio/page_flip.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/audio/rattle.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/audio/record_scratch.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/audio/sfx_dizzy_pause.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/audio/sfx_snap.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/audio/slow_clap.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/audio/squeak.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/audio/squeeze.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/audio/stretch.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/audio/vhs.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/audio/zoe_1.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/audio/zoe_2.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/audio/zoe_3.ogg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/script.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/0.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/1.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/10.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/11.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/12.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/13.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/14.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/15.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/16.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/17.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/18.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/19.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/2.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/20.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/21.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/22.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/23.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/24.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/25.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/3.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/4.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/5.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/6.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/7.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/8.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/cutscene/pre/shots/9.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/editor_cache.cfg
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/game_over.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zo_titfuck_final_0000.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zo_titfuck_final_0001.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zo_titfuck_final_0002.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zo_titfuck_final_0003.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zo_titfuck_final_0004.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zo_titfuck_final_0005.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zoe_titfuck_final_0000.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zoe_titfuck_final_0001.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zoe_titfuck_final_0002.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zoe_titfuck_final_0003.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zoe_titfuck_final_0004.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zoe_titfuck_final_0005.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zoe_titfuck_horny_0000.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zoe_titfuck_horny_0001.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zoe_titfuck_horny_0002.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zoe_titfuck_horny_0003.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zoe_titfuck_horny_0004.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zoe_titfuck_horny_0005.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zoe_titfuck_top_0000.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zoe_titfuck_top_0001.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zoe_titfuck_top_0002.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zoe_titfuck_top_0003.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zoe_titfuck_top_0004.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/seq/zoe_titfuck_top_0005.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/zoe_expert_icon.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/zoe_normal_icon.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/zoe_titfuck.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/zoe_titfuck_final.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/zoe_titfuck_nipples.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/zoe_titfuck_nipples_out.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/zoe_titfuck_side.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/zoe_titfuck_top.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/zoe_titfuck_top_arms_up.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/zoe_titfuck_top_horny.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/images/zoe_virgin_icon.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/splash.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/thumb.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_1/zoe_e1/video/climax.ogv
Beat Banger - SteamGG.NET/data/bb_vol_2/act.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/cathy_e2/audio/in_the_dorms.ogg
Beat Banger - SteamGG.NET/data/bb_vol_2/cathy_e2/audio/sfx_break.ogg
Beat Banger - SteamGG.NET/data/bb_vol_2/cathy_e2/audio/sfx_game_over.ogg
Beat Banger - SteamGG.NET/data/bb_vol_2/cathy_e2/audio/sfx_level_start.ogg
Beat Banger - SteamGG.NET/data/bb_vol_2/cathy_e2/audio/sfx_shutter.ogg
Beat Banger - SteamGG.NET/data/bb_vol_2/cathy_e2/audio/sfx_slap.ogg
Beat Banger - SteamGG.NET/data/bb_vol_2/cathy_e2/audio/sfx_squish.ogg
Beat Banger - SteamGG.NET/data/bb_vol_2/cathy_e2/config/asset.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/cathy_e2/config/keyframes.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/cathy_e2/config/meta.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/cathy_e2/config/notes.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/cathy_e2/config/settings.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/cathy_e2/editor_cache.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/cathy_e2/images/background.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_2/cathy_e2/images/c_e2_s0.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_2/cathy_e2/images/c_e2_s1.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_2/cathy_e2/images/c_e2_s2.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_2/cathy_e2/images/c_e2_s3.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_2/cathy_e2/splash.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_2/cathy_e2/thumb.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_2/claire_e2/config/keyframes.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/claire_e2/config/meta.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/claire_e2/config/notes.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/claire_e2/config/settings.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/claire_e2/splash.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_2/claire_e2/thumb.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_2/dawna_e2/config/keyframes.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/dawna_e2/config/meta.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/dawna_e2/config/notes.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/dawna_e2/config/settings.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/dawna_e2/splash.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_2/dawna_e2/thumb.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_2/gale_e2/audio/g_e2_Master.ogg
Beat Banger - SteamGG.NET/data/bb_vol_2/gale_e2/audio/sfx_break.ogg
Beat Banger - SteamGG.NET/data/bb_vol_2/gale_e2/audio/sfx_game_over.ogg
Beat Banger - SteamGG.NET/data/bb_vol_2/gale_e2/audio/sfx_level_start.ogg
Beat Banger - SteamGG.NET/data/bb_vol_2/gale_e2/audio/sfx_shutter.ogg
Beat Banger - SteamGG.NET/data/bb_vol_2/gale_e2/audio/sfx_slap.ogg
Beat Banger - SteamGG.NET/data/bb_vol_2/gale_e2/audio/sfx_squish.ogg
Beat Banger - SteamGG.NET/data/bb_vol_2/gale_e2/config/keyframes.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/gale_e2/config/meta.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/gale_e2/config/notes.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/gale_e2/config/settings.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/gale_e2/cutscene/script.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/gale_e2/splash.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_2/gale_e2/thumb.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_2/someone_e2/boing.ogg
Beat Banger - SteamGG.NET/data/bb_vol_2/someone_e2/config/keyframes.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/someone_e2/config/notes.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/someone_e2/config/settings.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/someone_e2/secret.txt
Beat Banger - SteamGG.NET/data/bb_vol_2/thumb.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_2/zoe_e2/audio/sfx_break.ogg
Beat Banger - SteamGG.NET/data/bb_vol_2/zoe_e2/audio/sfx_game_over.ogg
Beat Banger - SteamGG.NET/data/bb_vol_2/zoe_e2/audio/sfx_level_start.ogg
Beat Banger - SteamGG.NET/data/bb_vol_2/zoe_e2/audio/sfx_shutter.ogg
Beat Banger - SteamGG.NET/data/bb_vol_2/zoe_e2/audio/sfx_slap.ogg
Beat Banger - SteamGG.NET/data/bb_vol_2/zoe_e2/audio/sfx_squish.ogg
Beat Banger - SteamGG.NET/data/bb_vol_2/zoe_e2/audio/zoe_e2_master.ogg
Beat Banger - SteamGG.NET/data/bb_vol_2/zoe_e2/config/keyframes.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/zoe_e2/config/meta.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/zoe_e2/config/notes.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/zoe_e2/config/settings.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/zoe_e2/cutscene/script.cfg
Beat Banger - SteamGG.NET/data/bb_vol_2/zoe_e2/images/zoe_e2_blowjob.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_2/zoe_e2/images/zoe_e2_blowjob_behind.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_2/zoe_e2/splash.png
.png
Beat Banger - SteamGG.NET/data/bb_vol_2/zoe_e2/thumb.png
.png
Beat Banger - SteamGG.NET/data/gay_act1/act.cfg
Beat Banger - SteamGG.NET/data/gay_act1/thumb.png
.png
Beat Banger - SteamGG.NET/data/gay_act2/act.cfg
Beat Banger - SteamGG.NET/data/gay_act2/thumb.png
.png

Sharing

General

Malware Config

Signatures

Files

02483cd76378259a50b7b66146b45f06

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate

Extended Key Usages

Key Usages

61:01:cf:3e:00:00:00:00:00:0fCertificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

61:05:a2:30:00:00:00:00:00:08Certificate

Extended Key Usages

Key Usages

d6:d5:21:44:87:a4:87:f6:84:c8:27:2e:90:f4:8d:98:d2:12:c9:41Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

kernel32

comctl32

rpcrt4

shell32

shlwapi

user32

cabinet

oleaut32

version

Exports

Exports

Sections

.text Size: 161KB - Virtual size: 161KB

.data Size: 5KB - Virtual size: 13KB

.boxld01 Size: 512B - Virtual size: 194B

.rsrc Size: 7KB - Virtual size: 7KB

.reloc Size: 10KB - Virtual size: 10KB

1494de9b53e05fc1f40cb92afbdd6ce4

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate

Extended Key Usages

Key Usages

61:01:cf:3e:00:00:00:00:00:0fCertificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

61:05:a2:30:00:00:00:00:00:08Certificate

Extended Key Usages

Key Usages

47:b8:85:36:04:6e:46:6d:2f:58:b3:18:fd:18:43:f0:b8:4b:28:d3Signer

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

comctl32

version

Sections

.text Size: 34KB - Virtual size: 33KB

.data Size: 1024B - Virtual size: 6KB

.rsrc Size: 239KB - Virtual size: 240KB

1ff011c2e13ea492fe69b2fbfc802083

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:01:cf:3e:00:00:00:00:00:0f
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

61:05:a2:30:00:00:00:00:00:08
Certificate

d6:d5:21:44:87:a4:87:f6:84:c8:27:2e:90:f4:8d:98:d2:12:c9:41
Signer

.text
Size: 161KB - Virtual size: 161KB

.data
Size: 5KB - Virtual size: 13KB

.boxld01
Size: 512B - Virtual size: 194B

.rsrc
Size: 7KB - Virtual size: 7KB

.reloc
Size: 10KB - Virtual size: 10KB

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:01:cf:3e:00:00:00:00:00:0f
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

61:05:a2:30:00:00:00:00:00:08
Certificate

47:b8:85:36:04:6e:46:6d:2f:58:b3:18:fd:18:43:f0:b8:4b:28:d3
Signer

.text
Size: 34KB - Virtual size: 33KB

.data
Size: 1024B - Virtual size: 6KB

.rsrc
Size: 239KB - Virtual size: 240KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

36:33:6d:83:6a:19:e2:44:ff:0e:52:88:2e:b5:b1:de
Certificate

61:0c:12:06:00:00:00:00:00:1b
Certificate

cb:34:e3:72:3d:d1:2b:57:d7:86:46:9b:d8:78:2f:92:cf:2d:5d:4f
Signer

.text
Size: 116KB - Virtual size: 113KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 12KB - Virtual size: 15KB

.rsrc
Size: 636KB - Virtual size: 633KB

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:01:b2:9b:00:00:00:00:00:15
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

61:06:94:2d:00:00:00:00:00:09
Certificate

72:eb:ec:84:ec:eb:2c:99:f6:93:1a:22:55:c2:43:bc:37:c7:56:59
Signer

.text
Size: 38KB - Virtual size: 38KB

.data
Size: 1024B - Virtual size: 6KB

.rsrc
Size: 3.0MB - Virtual size: 3.0MB

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:01:b2:9b:00:00:00:00:00:15
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

61:06:94:2d:00:00:00:00:00:09
Certificate

5d:9a:9e:30:e8:b4:79:bd:b9:25:8e:b1:69:72:67:0f:90:ec:0f:7f
Signer