Archive[.]rar | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

Archive.rar
Size

22.6MB
MD5

0f9e37c10a9d0d16ba859852a6abc1cf
SHA1

2004fd4be6797d5eeb8ff4c1a2979a5e22a7353e
SHA256

4463fadbdc3ec3af61cf8172b3007bb510fafe1f3be87de89b3bd4429a3ad59f
SHA512

a426e303b0dc77b87033ed9a0e79041f332bd9a2badec30637d7817e52ab4f9445cb7652249a5adff8dad064dfe29b65b6178fd5023c15843c5d5149fb93fa94
SSDEEP

393216:vg9/QVV+lE87zEicUWNqS0PVpvRTlXcW6fJXqpskWTDToaPcGPGySQC:vg/K0lE87zEiSGVpvRJXcLfgpskwDTty

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Archive/Installer.exe
unpack001/Archive/dav1d.dll

Files

Archive.rar
.rar

Password: archive
Archive/CSERHelper.dll
.dll windows:4 windows x86 arch:x86

Password: archive

dc33390e11f40d35aacb3b7595b60d08

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

08:4c:af:4d:f4:99:14:1d:40:4b:71:99:aa:2c:21:31
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25/09/2015, 00:00

Not After

03/10/2018, 12:00

Subject

CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:b1:01:21:ff:0d:6b:21:e2:db:68:ef:fb:a5:ce:d5:6d:be:ae:a5
Signer

Actual PE Digest

7b:b1:01:21:ff:0d:6b:21:e2:db:68:ef:fb:a5:ce:d5:6d:be:ae:a5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

u:\p4clients\taylor_pubkeys\ThirdPartyCode\DebugNet\Release\BugslayerUtil.pdb

Imports

dbghelp

SymSetOptions
SymGetSymFromAddr
SymGetOptions
SymLoadModule64
SymGetModuleInfo64
SymGetLineFromAddr64
SymGetSymFromAddr64
SymGetModuleBase64
SymLoadModule
SymCleanup
SymInitialize
StackWalk64
UnDecorateSymbolName
SymFunctionTableAccess64

kernel32

GetThreadContext
OutputDebugStringW
WriteFile
IsDebuggerPresent
GetProfileIntW
SearchPathW
LoadLibraryW
GetProcAddress
MultiByteToWideChar
GetModuleFileNameA
CreateFileA
WideCharToMultiByte
GetACP
RaiseException
GetModuleHandleW
SetUnhandledExceptionFilter
IsBadCodePtr
IsBadReadPtr
FormatMessageW
lstrlenA
lstrcpynW
ReadProcessMemory
GlobalAlloc
GetCurrentProcess
GetCurrentThread
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
LocalFree
ExitProcess
OutputDebugStringA
VirtualQueryEx
GetVersionExW
DisableThreadLibraryCalls
VirtualQuery
VirtualProtect
IsBadStringPtrA
IsBadStringPtrW
CreateFileW
CloseHandle
GetCurrentThreadId
OpenProcess
GetThreadPriority
SetThreadPriority
OpenThread
SuspendThread
ResumeThread
FreeLibrary
GlobalLock
GlobalUnlock
GetLocaleInfoW
FindResourceExW
LoadResource
LockResource
GetProcessHeap
HeapFree
lstrlenW
GetLastError
HeapAlloc
GetCurrentProcessId
SetLastError
InterlockedExchange
LocalAlloc
IsBadWritePtr
GlobalFree
HeapReAlloc
TlsSetValue
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetModuleHandleA
TerminateProcess
HeapSize
TlsFree
TlsGetValue
TlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemInfo
LCMapStringA
LCMapStringW
InitializeCriticalSection
SetFilePointer
GetOEMCP
GetCPInfo
LoadLibraryA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
RtlUnwind
SetStdHandle
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
FlushFileBuffers

advapi32

RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegCreateKeyW
RegCloseKey

Exports

Exports

AddClientDV
AddCrashHandlerLimitModule
AddDiagAssertModule
AllocAndFillProcessModuleList
BSUAnsi2Wide
BSUGetModuleBaseNameA
BSUGetModuleBaseNameW
BSUGetModuleFileNameExA
BSUGetModuleFileNameExW
BSUIsInteractiveUser
BSUSetCurrentThreadNameA
BSUSetCurrentThreadNameW
BSUSetThreadNameA
BSUSetThreadNameW
BSUSymInitializeA
BSUSymInitializeW
BSUWide2Ansi
CreateCurrentProcessCrashDumpA
CreateCurrentProcessCrashDumpW
DiagAssertA
DiagAssertW
DiagOutputA
DiagOutputW
GetFaultReason
GetFirstStackTraceString
GetLimitModuleCount
GetLimitModulesArray
GetLoadedModules
GetNextStackTraceString
GetProcessThreadIds
GetRegisterString
GetSuperAssertionCount
HookImportedFunctionsByNameA
HookImportedFunctionsByNameW
HookOrdinalExportA
HookOrdinalExportW
IsMiniDumpFunctionAvailable
IsNT
IsNT4
IsServer2003
IsServer2003orBetter
IsW2K
IsW2KorBetter
IsXP
IsXPorBetter
MemStressInitializeA
MemStressInitializeW
MemStressTerminate
SetCrashHandlerFilter
SetDiagAssertFile
SetDiagAssertOptions
SetDiagOutputFile
SnapCurrentProcessMiniDumpA
SnapCurrentProcessMiniDumpW
SuperAssertionA
SuperAssertionW
ValidateAllBlocks

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Archive/GameOverlayRenderer.dll
.dll windows:6 windows x86 arch:x86

Password: archive

8c7ff060cb78c3e8c05369cec97a3996

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2013, 12:00

Not After

15/01/2038, 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

07/10/2021, 00:00

Not After

09/10/2024, 23:59

Subject

CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6f:88:57:d4:a7:0d:08:ee:3f:b1:af:a9:94:49:a8:c6:e1:b7:d2:f5:0d:eb:f2:96:7b:68:43:d9:79:48:dd:6f
Signer

Actual PE Digest

6f:88:57:d4:a7:0d:08:ee:3f:b1:af:a9:94:49:a8:c6:e1:b7:d2:f5:0d:eb:f2:96:7b:68:43:d9:79:48:dd:6f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\buildslave\steam_rel_client_hotfix_win32\build\src\overlay\gameoverlayrenderer\Release\GameOverlayRenderer.pdb

Imports

kernel32

GetTickCount
GetModuleFileNameW
CreateFileA
ReadFile
GetExitCodeThread
GetThreadContext
SetThreadContext
VirtualProtectEx
GetModuleHandleW
MultiByteToWideChar
GetCurrentProcessId
LocalFree
FormatMessageA
GetLocaleInfoW
SetEvent
ResetEvent
CreateEventA
WaitForMultipleObjects
OpenProcess
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
CreateToolhelp32Snapshot
Process32First
Process32Next
GetCommandLineA
SetEnvironmentVariableA
GetHandleInformation
SetHandleInformation
SetLastError
OpenEventW
OpenThread
SuspendThread
ResumeThread
CreateProcessA
CreateProcessW
GetSystemWindowsDirectoryW
VirtualFree
VirtualQueryEx
DisableThreadLibraryCalls
GetModuleFileNameA
Module32First
Module32Next
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimeAsFileTime
WriteFile
ConnectNamedPipe
DisconnectNamedPipe
GetOverlappedResult
CreateNamedPipeA
DuplicateHandle
ReleaseSemaphore
TerminateProcess
CreateThread
CreateSemaphoreA
SetEnvironmentVariableW
CreateFileW
GetModuleHandleExW
GetFullPathNameW
WriteConsoleW
SetEndOfFile
HeapSize
SetStdHandle
GetFileSizeEx
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
LoadLibraryExA
GetConsoleCP
FlushFileBuffers
HeapReAlloc
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetFileType
GetStdHandle
HeapAlloc
HeapFree
ExitProcess
InterlockedFlushSList
RaiseException
RtlUnwind
InitializeSListHead
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
CreateEventW
WaitForSingleObjectEx
GetCPInfo
GetStringTypeW
LCMapStringEx
DecodePointer
WriteProcessMemory
VirtualAllocEx
VirtualQuery
VirtualProtect
GetSystemInfo
FlushInstructionCache
GetProcessId
GetCurrentProcess
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetModuleHandleExA
WaitForSingleObject
ReleaseMutex
LoadLibraryW
LoadLibraryA
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
EncodePointer
InitializeCriticalSectionEx
InitOnceExecuteOnce
OutputDebugStringA
lstrcmpA
VerSetConditionMask
VerifyVersionInfoW
ExpandEnvironmentStringsW
lstrcmpW
LocalAlloc
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetLastError
WideCharToMultiByte
lstrcatW
lstrcpyW
GetWindowsDirectoryW
GetSystemDirectoryW
GetCurrentThreadId
CreateMutexA
CloseHandle
OutputDebugStringW
GetEnvironmentVariableA
GetProcAddress
GetModuleHandleA
SetThreadPriority
GetCurrentThread
Sleep
IsDebuggerPresent

user32

ClientToScreen
GetDisplayConfigBufferSizes
QueryDisplayConfig
GetClientRect
MonitorFromWindow
GetMonitorInfoW
ReleaseDC
DisplayConfigGetDeviceInfo
EnumWindows
SendMessageTimeoutW
SendMessageTimeoutA
GetRawInputDeviceList
GetRawInputDeviceInfoA
CreateIconIndirect
LoadImageW
DestroyIcon
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindowThreadProcessId
SetClassLongW
GetClassLongW
SetCursor
SetCursorPos
ShowCursor
GetMessageExtraInfo
GetDC
IsWindowUnicode
MapVirtualKeyExW
SendInput
VkKeyScanExW
GetKeyState
GetActiveWindow
IsChild
PostMessageW
PostMessageA
TranslateMessage
SetCaretPos
DestroyCaret
CreateCaret
GetWindowRect
GetKeyboardLayout
GetKeyboardLayoutList
ActivateKeyboardLayout
WindowFromDC
GetSystemMetrics
SetWindowLongW
AdjustWindowRect
GetForegroundWindow
IsIconic
SetWindowPos
ShowWindow

gdi32

CreateDIBSection
DeleteObject
GetDeviceCaps
CreateBitmap

advapi32

GetTokenInformation
RegOpenKeyA
RegQueryValueExA
IsValidSid
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
OpenProcessToken
AddAccessAllowedAce
CopySid
CreateWellKnownSid
GetLengthSid
SetSecurityDescriptorDacl
InitializeAcl
InitializeSecurityDescriptor

ole32

CoUninitialize
CoTaskMemAlloc
CoInitialize
CoTaskMemFree
CoCreateInstance

oleaut32

VariantInit
SysAllocString

winmm

timeBeginPeriod

imm32

ImmCreateContext
ImmDestroyContext
ImmGetContext
ImmReleaseContext
ImmAssociateContext
ImmGetCompositionStringW
ImmSetCompositionStringW
ImmGetCandidateListCountW
ImmGetCandidateListW
ImmGetConversionStatus
ImmSetConversionStatus
ImmGetProperty
ImmGetOpenStatus
ImmSetOpenStatus
ImmNotifyIME
ImmSetCandidateWindow

cfgmgr32

CM_Get_Parent
CM_Locate_DevNodeA
CM_Get_Device_IDA

psapi

GetModuleInformation
GetModuleBaseNameA

Exports

Exports

BOverlayNeedsPresent
IsOverlayEnabled
OverlayHookD3D3
SetNotificationInset
SetNotificationPosition
SteamOverlayIsUsingGamepad
SteamOverlayIsUsingKeyboard
SteamOverlayIsUsingMouse
ValveHookScreenshots
ValveIsScreenshotsHooked
VirtualFreeWrapper
VulkanSteamOverlayGetScaleFactors
VulkanSteamOverlayPresent
VulkanSteamOverlayProcessCapturedFrame

Sections

.text
Size: 833KB - Virtual size: 832KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 230KB - Virtual size: 230KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Archive/Installer.exe
.exe windows:6 windows x86 arch:x86

Password: archive

39d5c04458acdb2fecb1fc360743ee8d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
RaiseFailFastException
QueryPerformanceFrequency
QueryPerformanceCounter
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler

Sections

.text
Size: 7.6MB - Virtual size: 7.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8.6MB - Virtual size: 8.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 375KB - Virtual size: 549KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 409KB - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Archive/crashhandler.dll.old
.dll windows:6 windows x86 arch:x86

Password: archive

05c726fc1cf945d675bbf9861939ca4e

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2013, 12:00

Not After

15/01/2038, 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

07/10/2021, 00:00

Not After

09/10/2024, 23:59

Subject

CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

ef:98:d5:fb:fa:ac:7e:dd:b6:0f:ba:e0:26:4f:ef:2d:bd:7e:68:96:71:c7:29:53:48:c8:13:c0:b2:51:3e:83
Signer

Actual PE Digest

ef:98:d5:fb:fa:ac:7e:dd:b6:0f:ba:e0:26:4f:ef:2d:bd:7e:68:96:71:c7:29:53:48:c8:13:c0:b2:51:3e:83

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\buildslave\steam_rel_client_hotfix_win32\build\src\crashhandler\Release\crashhandler.pdb

Imports

kernel32

OutputDebugStringW
CloseHandle
GetLastError
CreateEventA
Sleep
CreateProcessW
GetSystemTimeAsFileTime
GetModuleFileNameW
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
LCMapStringEx
InitializeCriticalSectionEx
WaitNamedPipeW
GetSystemTime
RtlCaptureContext
EnterCriticalSection
GetCurrentProcess
ReleaseSemaphore
InterlockedDecrement
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
GetCurrentThreadId
TerminateThread
LoadLibraryW
CreateThread
DeleteCriticalSection
CreateSemaphoreW
InterlockedIncrement
OpenThread
VirtualQueryEx
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
QueryPerformanceCounter
QueryPerformanceFrequency
GetCommandLineW
GetCurrentProcessId
GlobalMemoryStatusEx
VirtualAlloc
GetModuleFileNameA
LoadLibraryA
LocalAlloc
LocalFree
WideCharToMultiByte
GetCommandLineA
GetProcessHeap
HeapSetInformation
HeapLock
HeapUnlock
HeapWalk
HeapQueryInformation
GlobalAlloc
GlobalUnlock
GlobalLock
LoadLibraryExA
MultiByteToWideChar
RaiseException
SetLastError
TryEnterCriticalSection
SetEvent
ResetEvent
WaitForMultipleObjects
GetCurrentThread
GetExitCodeThread
DebugBreak
GetProcessHeaps
SetEnvironmentVariableW
WriteFile
CreateDirectoryW
GetFileAttributesW
GetFullPathNameW
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
GetDriveTypeW
GetFileSizeEx
ReadFile
SetEndOfFile
UnhandledExceptionFilter
IsProcessorFeaturePresent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetStartupInfoW
InitializeSListHead
RtlUnwind
InterlockedFlushSList
EncodePointer
VirtualQuery
ExitProcess
GetModuleHandleExW
HeapSize
HeapValidate
GetFileType
HeapFree
HeapAlloc
GetStdHandle
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetFilePointerEx
HeapReAlloc
DecodePointer
SetStdHandle
ReadConsoleW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
WriteConsoleW
TransactNamedPipe
SetNamedPipeHandleState
OutputDebugStringA
GetCurrentDirectoryW
CreateFileW

psapi

GetModuleBaseNameW
GetProcessMemoryInfo
EnumProcessModules

user32

MessageBoxA
GetDesktopWindow
EnumWindows
GetWindowThreadProcessId
SetDlgItemInt
EndDialog
DialogBoxParamA
IsWindowVisible
GetWindowRect
GetWindowTextLengthA
EmptyClipboard
SetClipboardData
GetDlgItemInt
SetDlgItemTextA
OpenClipboard
CloseClipboard
GetDlgItem
wsprintfA
SetWindowPos

shell32

CommandLineToArgvW

wininet

InternetReadFile
HttpAddRequestHeadersW
InternetConnectW
InternetCloseHandle
HttpSendRequestW
HttpQueryInfoW
InternetOpenW
InternetQueryDataAvailable
HttpOpenRequestW
InternetCrackUrlW

Exports

Exports

Breakpad_SetSteamID
CreateInterface
g_dwDllEntryThreadId

Sections

.text
Size: 255KB - Virtual size: 254KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Archive/crashhandler64.dll
.dll windows:6 windows x64 arch:x64

Password: archive

cb076cef214ff70d2290afce5b4b1b83

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2013, 12:00

Not After

15/01/2038, 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

07/10/2021, 00:00

Not After

09/10/2024, 23:59

Subject

CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:f8:23:88:4c:19:fc:56:be:82:fd:5a:62:b1:06:39:16:6b:99:48:b1:db:16:16:15:7c:01:2c:f8:44:e5:8b
Signer

Actual PE Digest

0d:f8:23:88:4c:19:fc:56:be:82:fd:5a:62:b1:06:39:16:6b:99:48:b1:db:16:16:15:7c:01:2c:f8:44:e5:8b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\buildslave\steam_rel_client_hotfix_win64\build\src\crashhandler\win64\Release\crashhandler64.pdb

Imports

kernel32

OutputDebugStringW
CloseHandle
GetLastError
CreateEventA
Sleep
GetCurrentProcessId
CreateProcessW
GetSystemTimeAsFileTime
GetModuleFileNameW
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
DecodePointer
LCMapStringEx
InitializeCriticalSectionEx
GetSystemTime
RtlCaptureContext
VirtualQueryEx
GetCurrentProcess
SetUnhandledExceptionFilter
CreateThread
GetCurrentThreadId
OpenThread
TerminateThread
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseSemaphore
WaitForSingleObject
CreateSemaphoreW
LoadLibraryW
IsDebuggerPresent
TerminateProcess
QueryPerformanceCounter
QueryPerformanceFrequency
RtlCaptureStackBackTrace
GetCommandLineW
GlobalMemoryStatusEx
VirtualAlloc
VirtualFree
GetModuleFileNameA
LoadLibraryA
LocalAlloc
LocalFree
WideCharToMultiByte
GetCommandLineA
HeapAlloc
HeapFree
GetProcessHeap
HeapSetInformation
HeapLock
HeapUnlock
HeapWalk
HeapQueryInformation
GlobalAlloc
GlobalUnlock
GlobalLock
LoadLibraryExA
MultiByteToWideChar
RaiseException
SetLastError
TryEnterCriticalSection
SetEvent
ResetEvent
WaitForMultipleObjects
GetExitCodeThread
DebugBreak
GetProcessHeaps
SetEnvironmentVariableW
WriteFile
CreateDirectoryW
GetFileAttributesW
GetFullPathNameW
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
GetDriveTypeW
GetFileSizeEx
ReadFile
SetEndOfFile
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
InitializeSListHead
RtlPcToFileHeader
RtlUnwindEx
InterlockedFlushSList
EncodePointer
ExitProcess
GetModuleHandleExW
HeapSize
HeapValidate
GetFileType
GetStdHandle
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetFilePointerEx
HeapReAlloc
SetStdHandle
ReadConsoleW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
WriteConsoleW
WaitNamedPipeW
TransactNamedPipe
SetNamedPipeHandleState
OutputDebugStringA
GetCurrentDirectoryW
CreateFileW
RtlUnwind

psapi

GetModuleBaseNameW
EnumProcessModules
GetProcessMemoryInfo

user32

EnumWindows
GetWindowThreadProcessId
GetDesktopWindow
EmptyClipboard
GetDlgItem
EndDialog
MessageBoxA
GetWindowRect
SetDlgItemTextA
GetWindowTextLengthA
SetClipboardData
GetDlgItemInt
CloseClipboard
SetDlgItemInt
OpenClipboard
wsprintfA
SetWindowPos
IsWindowVisible
DialogBoxParamA

shell32

CommandLineToArgvW

wininet

HttpQueryInfoW
HttpSendRequestW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetSetOptionW
InternetQueryDataAvailable
InternetReadFile
InternetConnectW
InternetCloseHandle
InternetCrackUrlW
InternetOpenW

Exports

Exports

Breakpad_SetSteamID
CreateInterface
g_dwDllEntryThreadId

Sections

.text
Size: 319KB - Virtual size: 319KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Archive/d3dcompiler_46.dll
.dll windows:6 windows x86 arch:x86

Password: archive

876b48ac5a1cad7160b32c8df9ab9938

Code Sign

33:00:00:00:88:59:0e:3c:51:1f:e2:6a:67:00:01:00:00:00:88
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

26/07/2012, 20:50

Not After

26/10/2013, 20:50

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:02:8e:42:00:00:00:00:00:1f
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

09/01/2012, 22:25

Not After

09/04/2013, 22:25

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ee:15:3e:2c:66:21:b8:92:81:de:f4:46:5a:0c:6b:75:ed:d9:c1:78:60:6b:49:bd:b5:6e:90:86:c9:d5:74:9c
Signer

Actual PE Digest

ee:15:3e:2c:66:21:b8:92:81:de:f4:46:5a:0c:6b:75:ed:d9:c1:78:60:6b:49:bd:b5:6e:90:86:c9:d5:74:9c

Digest Algorithm

sha256

PE Digest Matches

true

e5:7a:17:c6:92:b3:05:15:01:cb:16:53:25:2e:4c:43:b6:42:04:37
Signer

Actual PE Digest

e5:7a:17:c6:92:b3:05:15:01:cb:16:53:25:2e:4c:43:b6:42:04:37

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D3DCompiler_46.pdb

Imports

msvcrt

_onexit
__dllonexit
_unlock
_lock
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_initterm
_amsg_exit
_XcptFilter
_vsnprintf
_strtoui64
sscanf
_isnan
strtoul
isxdigit
atof
setlocale
_strdup
_mbstrlen
_vsnwprintf
ceil
modf
strrchr
isalnum
_finite
_clearfp
_controlfp
malloc
_strnicmp
_fpclass
_purecall
strncmp
isspace
strstr
strchr
free
_stricmp
memmove
qsort
isalpha
toupper
atoi
isdigit
tolower
??2@YAPAXI@Z
getenv
??3@YAXPAX@Z
_except_handler4_common
wcsncpy_s
_wcsicmp
memcpy
memset
fclose
strcpy_s
strcat_s
bsearch
_CxxThrowException
_snwprintf_s
wcschr
iswdigit
__unDName
fread
fseek
_wfsopen
vsprintf_s
strncpy_s
wcstol
_wcsnicmp
_wsplitpath_s
towlower
wcscpy_s
??_U@YAPAXI@Z
??_V@YAXPAX@Z
swprintf_s
wcsncat_s
wcsrchr
_wmakepath_s
time
_wfullpath
_wcsdup
_wgetenv
_chsize
_close
_read
_write
_lseeki64
_get_osfhandle
_open_osfhandle
wcscat_s
ftell
sprintf_s
_mbscmp
_memicmp
wcsncmp
_wsopen
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
__CxxFrameHandler3
_ftol2
_ftol2_sse
floor

advapi32

CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
RegOpenKeyExW
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW

kernel32

SetLastError
LeaveCriticalSection
EnterCriticalSection
LocalFree
LocalAlloc
GetVersion
InterlockedDecrement
InterlockedIncrement
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
LCMapStringW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlCaptureContext
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
GetFileSize
CreateFileA
GetSystemInfo
VirtualAlloc
VirtualFree
DeleteCriticalSection
InitializeCriticalSection
GetFileAttributesW
SetFileAttributesW
CopyFileExW
DeleteFileW
GetFileType
DeviceIoControl
ExpandEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
SetFilePointer
FlushViewOfFile
MapViewOfFileEx
GetCurrentProcessId
GetModuleFileNameA
DisableThreadLibraryCalls
CreateFileW
GetLastError
GetFileSizeEx
ReadFile
CloseHandle
WriteFile
WideCharToMultiByte
FreeLibrary
lstrcmpiA
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
HeapCreate
HeapDestroy
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
Sleep
TlsAlloc
InterlockedExchange
TlsSetValue
TlsGetValue
TlsFree
GetFullPathNameW
GetFullPathNameA
GetEnvironmentVariableA
LoadLibraryExW
GetProcAddress

rpcrt4

UuidCreate

Exports

Exports

D3DAssemble
D3DCompile
D3DCompile2
D3DCompileFromFile
D3DCompressShaders
D3DCreateBlob
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DDisassemble11Trace
D3DDisassembleRegion
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DGetTraceInstructionOffsets
D3DPreprocess
D3DReadFileToBlob
D3DReflect
D3DReturnFailure1
D3DSetBlobPart
D3DStripShader
D3DWriteBlobToFile
DebugSetMute

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Archive/d3dcompiler_46_64.dll
.dll windows:6 windows x64 arch:x64

Password: archive

dbf56f70ee344f39500f2f3cafb3ea13

Code Sign

33:00:00:00:9d:1e:8d:27:ae:b8:f3:d8:38:00:01:00:00:00:9d
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/09/2012, 21:42

Not After

04/03/2013, 21:42

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/09/2012, 21:12

Not After

04/12/2013, 21:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:16:11:04:b4:88:38:8c:be:c3:00:00:00:00:00:16
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

30/08/2012, 17:49

Not After

30/11/2013, 17:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d6:98:68:09:b0:d3:8f:2e:5a:a3:cc:7d:cf:b8:84:e9:9f:77:0b:1b:e9:cd:ab:f5:20:95:f2:8d:25:20:9b:44
Signer

Actual PE Digest

d6:98:68:09:b0:d3:8f:2e:5a:a3:cc:7d:cf:b8:84:e9:9f:77:0b:1b:e9:cd:ab:f5:20:95:f2:8d:25:20:9b:44

Digest Algorithm

sha256

PE Digest Matches

true

d6:33:8f:ba:6f:aa:0f:71:25:56:1f:d7:ab:5f:ac:ff:52:9d:b5:cb
Signer

Actual PE Digest

d6:33:8f:ba:6f:aa:0f:71:25:56:1f:d7:ab:5f:ac:ff:52:9d:b5:cb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D3DCompiler_46.pdb

Imports

msvcrt

__dllonexit
_unlock
_lock
?terminate@@YAXXZ
??1type_info@@UEAA@XZ
__C_specific_handler
_initterm
_amsg_exit
_XcptFilter
_strtoui64
sscanf
_vsnprintf
_isnan
strtoul
isxdigit
atof
setlocale
_strdup
_mbstrlen
_vsnwprintf
modf
strrchr
isalnum
_finite
_clearfp
_controlfp
malloc
_strnicmp
_fpclass
_purecall
strncmp
isspace
strstr
strchr
free
_stricmp
memmove
qsort
isalpha
toupper
atoi
isdigit
tolower
??2@YAPEAX_K@Z
getenv
??3@YAXPEAX@Z
wcsncmp
_onexit
_wcsicmp
memcpy
memset
fclose
strcpy_s
strcat_s
bsearch
_CxxThrowException
memcmp
_snwprintf_s
wcschr
iswdigit
__unDName
fread
fseek
_wfsopen
vsprintf_s
strncpy_s
wcstol
_wcsnicmp
_wsplitpath_s
towlower
wcscpy_s
??_U@YAPEAX_K@Z
??_V@YAXPEAX@Z
swprintf_s
wcsncat_s
wcsrchr
_wfullpath
_wmakepath_s
_time64
_chsize
_close
_read
_write
_lseeki64
_get_osfhandle
_open_osfhandle
_wcsdup
wcscat_s
ftell
sprintf_s
_mbscmp
_memicmp
_wgetenv
wcsncpy_s
_wsopen
__CxxFrameHandler3
acos
asin
atan
atan2
ceil
cos
cosh
exp
floor
floorf
fmod
log
pow
sin
sinh
sqrt
tan
tanh

advapi32

CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
RegOpenKeyExW
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW

kernel32

LeaveCriticalSection
EnterCriticalSection
LocalFree
LocalAlloc
GetVersion
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetLastError
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
GetModuleFileNameA
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
GetFileSize
CreateFileA
GetSystemInfo
VirtualAlloc
VirtualFree
DeleteCriticalSection
InitializeCriticalSection
LCMapStringW
GetFileAttributesW
SetFileAttributesW
CopyFileExW
DeleteFileW
GetFileType
DeviceIoControl
ExpandEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
SetFilePointer
FlushViewOfFile
MapViewOfFileEx
SetUnhandledExceptionFilter
RtlLookupFunctionEntry
DisableThreadLibraryCalls
CreateFileW
GetLastError
GetFileSizeEx
ReadFile
CloseHandle
WriteFile
WideCharToMultiByte
FreeLibrary
lstrcmpiA
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
HeapCreate
HeapDestroy
HeapAlloc
GetProcessHeap
HeapFree
Sleep
TlsAlloc
TlsSetValue
TlsGetValue
TlsFree
GetFullPathNameW
GetFullPathNameA
GetEnvironmentVariableA
LoadLibraryExW
GetProcAddress

rpcrt4

UuidCreate

Exports

Exports

D3DAssemble
D3DCompile
D3DCompile2
D3DCompileFromFile
D3DCompressShaders
D3DCreateBlob
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DDisassemble11Trace
D3DDisassembleRegion
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DGetTraceInstructionOffsets
D3DPreprocess
D3DReadFileToBlob
D3DReflect
D3DReturnFailure1
D3DSetBlobPart
D3DStripShader
D3DWriteBlobToFile
DebugSetMute

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Archive/dav1d.dll
.dll windows:6 windows x86 arch:x86

Password: archive

311b3b7cb919ba363729236b7a6fb798

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeConditionVariable
SleepConditionVariableSRW
InitializeSRWLock
InitializeConditionVariable
WakeAllConditionVariable
CloseHandle
InitOnceBeginInitialize
InitOnceComplete
WaitForSingleObject
GetCurrentThread
GetModuleHandleW
GetProcAddress
GetThreadGroupAffinity
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
EncodePointer
RaiseException
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
HeapAlloc
HeapFree
LCMapStringW
GetStdHandle
GetFileType
HeapReAlloc
HeapSize
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetStdHandle
GetFileSizeEx
SetFilePointerEx
GetStringTypeW
CreateFileW
WriteConsoleW
DecodePointer

Exports

Exports

dav1d_apply_grain
dav1d_close
dav1d_data_create
dav1d_data_props_unref
dav1d_data_unref
dav1d_data_wrap
dav1d_data_wrap_user_data
dav1d_default_settings
dav1d_flush
dav1d_get_decode_error_data_props
dav1d_get_event_flags
dav1d_get_frame_delay
dav1d_get_picture
dav1d_open
dav1d_parse_sequence_header
dav1d_picture_unref
dav1d_send_data
dav1d_set_cpu_flags_mask
dav1d_version

Sections

.text
Size: 881KB - Virtual size: 881KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Archive/fossilize_engine_filters.json
Archive/package/bins_webhelpers_win32_win10-64.zip.vz.d2b3e24420958c08bdff94f70e7fa0d569dd3034_2963951
Archive/package/bins_webhelpers_win32_win7.zip.vz.af12407e0ddd4eea45ef705331bc35c32ed0047c_2604192
Archive/package/resources_hidpi_all.zip.vz.3de815c3117712cb9eeb7ea4c8b275faf481dcfd_56342
Archive/package/resources_misc_all.zip.vz.e86a975545f3ab21a77373870cb311ef93934b8c_2224876
Archive/package/strings_all.zip.vz.3b383251b8bf5cca5bd408c9d2864bc078e6d5b2_1993958
Archive/package/strings_en_all.zip.8ebfe5f184cbfe30df39a3dde48e35ccbe8f2da9
.zip
Archive/public/RefreshLoginDialog.res
Archive/public/ScreenshotErrorNotification.res
Archive/public/ScreenshotNotification.res
Archive/public/SubExtraFactorRecover.res
Archive/public/SupportQueryProgress.res
Archive/public/UseOfflineMode.res
Archive/public/UseOfflineModeChosen.res
Archive/public/c1.tga
Archive/public/c2.tga
Archive/public/c3.tga
Archive/public/c4.tga
Archive/public/c5.tga
Archive/public/c6.tga
Archive/public/psnaccountsetupdialog.res
Archive/public/ssa/eula_brazilian_bigpicture.html
.html
Archive/public/ssa/eula_english_bigpicture.html
.html
Archive/public/ssa/eula_french_bigpicture.html
.html
Archive/public/ssa/eula_german_bigpicture.html
.html
Archive/public/ssa/eula_italian_bigpicture.html
.html
Archive/public/ssa/eula_japanese_bigpicture.html
Archive/public/ssa/eula_korean_bigpicture.html
.html
Archive/public/ssa/eula_koreana_bigpicture.html
.html
Archive/public/ssa/eula_portuguese_bigpicture.html
.html
Archive/public/ssa/eula_russian_bigpicture.html
.html
Archive/public/ssa/eula_sc_schinese_bigpicture.html
.html
Archive/public/ssa/eula_schinese_bigpicture.html
.html
Archive/public/ssa/eula_spanish_bigpicture.html
.html
Archive/public/ssa/ppa_brazilian_bigpicture.html
Archive/public/ssa/ppa_english_bigpicture.html
Archive/public/ssa/ppa_french_bigpicture.html
Archive/public/ssa/ppa_german_bigpicture.html
Archive/public/ssa/ppa_italian_bigpicture.html
Archive/public/ssa/ppa_japanese_bigpicture.html
Archive/public/ssa/ppa_portuguese_bigpicture.html
Archive/public/ssa/ppa_russian_bigpicture.html
Archive/public/ssa/ppa_spanish_bigpicture.html
Archive/public/ssa/ssa_bigpicture.css
Archive/public/ssa/ssa_brazilian_bigpicture.html
.html
Archive/public/ssa/ssa_english_bigpicture.html
.html
Archive/public/ssa/ssa_french_bigpicture.html
.html
Archive/public/ssa/ssa_german_bigpicture.html
.html
Archive/public/ssa/ssa_italian_bigpicture.html
.html
Archive/public/ssa/ssa_japanese_bigpicture.html
.html
Archive/public/ssa/ssa_portuguese_bigpicture.html
.html
Archive/public/ssa/ssa_russian_bigpicture.html
.html
Archive/public/ssa/ssa_spanish_bigpicture.html
.html
Archive/public/steambootstrapper_brazilian.txt
Archive/public/steambootstrapper_bulgarian.txt
Archive/public/steambootstrapper_czech.txt
Archive/public/steambootstrapper_danish.txt
Archive/public/steambootstrapper_dutch.txt
Archive/public/steambootstrapper_english.txt
Archive/public/steambootstrapper_finnish.txt
Archive/public/steambootstrapper_french.txt
Archive/public/steambootstrapper_german.txt
Archive/public/steambootstrapper_greek.txt
Archive/public/steamclean_english.txt
Archive/public/subpanelchoosedefaultcachedir.res
Archive/public/url_list.txt
Archive/resource/0_star.png
.png
Archive/resource/1_star.png
.png
Archive/resource/2_star.png
.png
Archive/resource/3_star.png
.png
Archive/resource/4_star.png
.png
Archive/resource/5_star.png
.png
Archive/resource/CreateTokenDialog.res
Archive/resource/EasyNotification.res
Archive/resource/EditTokenDialog.res
Archive/resource/FileCopyDialog.res
Archive/resource/FileCopyOverwritePrompt.res
Archive/resource/FileOpenDialog.res
Archive/resource/LocalizationDialog.res
Archive/resource/SMPStatsDialog.res
Archive/resource/SharedLibraryNotification.res
Archive/resource/TimedTrialNotification.res
Archive/resource/battery_border.tga
Archive/resource/battery_bright.tga
Archive/resource/battery_dim.tga
Archive/resource/chatty.tga
Archive/resource/controller_cradle.png
.png
Archive/resource/dlc_generic_header.png
.png
Archive/resource/dlc_installed.png
.png
Archive/resource/dlc_overlay.png
.png
Archive/resource/familyview.png
.png
Archive/resource/filter_banned_brazilian.txt.gz
.gz
Archive/resource/filter_banned_bulgarian.txt.gz
.gz
Archive/resource/filter_banned_czech.txt.gz
.gz
Archive/resource/filter_banned_danish.txt.gz
.gz
Archive/resource/filter_banned_dutch.txt.gz
.gz
Archive/resource/filter_banned_english.txt.gz
.gz
Archive/resource/filter_banned_english_cached.txt
Archive/resource/filter_banned_english_cached_timestamp.txt
Archive/resource/filter_banned_finnish.txt.gz
.gz
Archive/resource/filter_banned_french.txt.gz
.gz
Archive/resource/filter_banned_german.txt.gz
.gz
Archive/resource/filter_banned_greek.txt.gz
.gz
Archive/resource/filter_banned_hungarian.txt.gz
.gz
Archive/resource/filter_banned_indonesian.txt.gz
.gz
Archive/resource/filter_banned_italian.txt.gz
.gz
Archive/resource/filter_banned_japanese.txt.gz
.gz
Archive/resource/filter_banned_koreana.txt.gz
.gz
Archive/resource/filter_banned_latam.txt.gz
.gz
Archive/resource/filter_banned_norwegian.txt.gz
.gz
Archive/resource/filter_banned_polish.txt.gz
.gz
Archive/resource/filter_banned_portuguese.txt.gz
.gz
Archive/resource/filter_banned_romanian.txt.gz
.gz
Archive/resource/filter_banned_russian.txt.gz
.gz
Archive/resource/filter_banned_russian_cached.txt
Archive/resource/filter_banned_russian_cached_timestamp.txt
Archive/resource/filter_banned_schinese.txt.gz
.gz
Archive/resource/filter_banned_spanish.txt.gz
.gz
Archive/resource/filter_banned_swedish.txt.gz
.gz
Archive/resource/filter_banned_tchinese.txt.gz
.gz
Archive/resource/filter_banned_thai.txt.gz
.gz
Archive/resource/filter_banned_turkish.txt.gz
.gz
Archive/resource/filter_banned_ukrainian.txt.gz
.gz
Archive/resource/filter_banned_vietnamese.txt.gz
.gz
Archive/resource/filter_clean_brazilian.txt.gz
.gz
Archive/resource/filter_clean_bulgarian.txt.gz
.gz
Archive/resource/filter_clean_czech.txt.gz
.gz
Archive/resource/filter_clean_danish.txt.gz
.gz
Archive/resource/filter_clean_dutch.txt.gz
.gz
Archive/resource/filter_clean_english.txt.gz
.gz
Archive/resource/filter_clean_finnish.txt.gz
.gz
Archive/resource/filter_clean_french.txt.gz
.gz
Archive/resource/filter_clean_german.txt.gz
.gz
Archive/resource/filter_clean_greek.txt.gz
.gz
Archive/resource/filter_clean_hungarian.txt.gz
.gz
Archive/resource/filter_clean_italian.txt.gz
.gz
Archive/resource/filter_clean_japanese.txt.gz
.gz
Archive/resource/filter_clean_koreana.txt.gz
.gz
Archive/resource/filter_clean_latam.txt.gz
.gz
Archive/resource/filter_clean_norwegian.txt.gz
.gz
Archive/resource/filter_clean_polish.txt.gz
.gz
Archive/resource/filter_clean_portuguese.txt.gz
.gz
Archive/resource/filter_clean_romanian.txt.gz
.gz
Archive/resource/filter_clean_russian.txt.gz
.gz
Archive/resource/filter_clean_schinese.txt.gz
.gz
Archive/resource/filter_clean_spanish.txt.gz
.gz
Archive/resource/filter_clean_swedish.txt.gz
.gz
Archive/resource/filter_clean_tchinese.txt.gz
.gz
Archive/resource/filter_clean_thai.txt.gz
.gz
Archive/resource/filter_clean_turkish.txt.gz
.gz
Archive/resource/filter_clean_ukrainian.txt.gz
.gz
Archive/resource/filter_clean_vietnamese.txt.gz
.gz
Archive/resource/filter_legal_legalcn.txt.gz
.gz
Archive/resource/filter_profanity_brazilian.txt.gz
.gz
Archive/resource/filter_profanity_bulgarian.txt.gz
.gz
Archive/resource/filter_profanity_czech.txt.gz
.gz
Archive/resource/filter_profanity_danish.txt.gz
.gz
Archive/resource/filter_profanity_dutch.txt.gz
.gz
Archive/resource/filter_profanity_english.txt.gz
.gz
Archive/resource/filter_profanity_english_cached.txt
Archive/resource/filter_profanity_english_cached_timestamp.txt
Archive/resource/filter_profanity_finnish.txt.gz
.gz
Archive/resource/filter_profanity_french.txt.gz
.gz
Archive/resource/filter_profanity_german.txt.gz
.gz
Archive/resource/filter_profanity_greek.txt.gz
.gz
Archive/resource/filter_profanity_hungarian.txt.gz
.gz
Archive/resource/filter_profanity_indonesian.txt.gz
.gz
Archive/resource/filter_profanity_italian.txt.gz
.gz
Archive/resource/filter_profanity_japanese.txt.gz
.gz
Archive/resource/filter_profanity_koreana.txt.gz
.gz
Archive/resource/filter_profanity_latam.txt.gz
.gz
Archive/resource/filter_profanity_norwegian.txt.gz
.gz
Archive/resource/filter_profanity_polish.txt.gz
.gz
Archive/resource/filter_profanity_portuguese.txt.gz
.gz
Archive/resource/filter_profanity_romanian.txt.gz
.gz
Archive/resource/filter_profanity_russian.txt.gz
.gz
Archive/resource/filter_profanity_russian_cached.txt
Archive/resource/filter_profanity_russian_cached_timestamp.txt
Archive/resource/filter_profanity_schinese.txt.gz
.gz
Archive/resource/filter_profanity_spanish.txt.gz
.gz
Archive/resource/filter_profanity_swedish.txt.gz
.gz
Archive/resource/filter_profanity_tchinese.txt.gz
.gz
Archive/resource/filter_profanity_thai.txt.gz
.gz
Archive/resource/filter_profanity_turkish.txt.gz
.gz
Archive/resource/filter_profanity_ukrainian.txt.gz
.gz
Archive/resource/filter_profanity_vietnamese.txt.gz
.gz
Archive/resource/fonts/marlett.ttf
Archive/resource/icon_blank.tga
Archive/resource/icon_clear_field.tga
Archive/resource/icon_community_preview.tga
Archive/resource/icon_error_red.tga
Archive/resource/icon_file.tga
Archive/resource/icon_folder.tga
Archive/resource/icon_folder_selected.tga
Archive/resource/icon_folderup.tga
Archive/resource/icon_gift.tga
Archive/resource/icon_hlicon1.tga
Archive/resource/icon_hlicon2.tga
Archive/resource/icon_info.tga
Archive/resource/icon_newfolder.tga
Archive/resource/icon_password.tga
Archive/resource/icon_steam.tga
Archive/resource/icon_steam_disabled.tga
Archive/resource/icon_steam_vr.png
.png
Archive/resource/icon_steamvr_desktop.png
.png
Archive/resource/icon_trade_request.tga
Archive/resource/icon_warning.tga
Archive/resource/icon_warning_yellow.tga
Archive/resource/invite.tga
Archive/resource/layout/announcement_text.layout
Archive/resource/layout/authorizelocaldevice.layout
Archive/resource/layout/blecontrollerfirmware.layout
Archive/resource/layout/chattitlepanel.layout
Archive/resource/layout/choosepurchaseorauthorization.layout
Archive/resource/layout/cloud_conflict_dialog.layout
Archive/resource/layout/cloud_pending_sessions_dialog.layout
Archive/resource/layout/debugstats.layout
Archive/resource/layout/deletecustomimagedialog.layout
Archive/resource/layout/downloadsummarypanel.layout
Archive/resource/layout/editfriendsgroups.layout
Archive/resource/layout/friendpanel.layout
Archive/resource/layout/friendpanel_compact.layout
Archive/resource/layout/friendpanel_rightaligned.layout
Archive/resource/layout/gameargsprompt.layout
Archive/resource/layout/gameproperties_general.layout
Archive/resource/layout/gameproperties_updates.layout
Archive/resource/layout/gamespage_details_achievements.layout
Archive/resource/layout/gamespage_details_achievements_locked.layout
Archive/resource/layout/gamespage_details_achievements_most_recent.layout
Archive/resource/layout/gamespage_details_cloud.layout
Archive/resource/layout/gamespage_details_cloud_file.layout
Archive/resource/layout/gamespage_details_community_file.layout
Archive/resource/layout/gamespage_details_communityfiles.layout
Archive/resource/layout/gamespage_details_compat_subheader.layout
Archive/resource/layout/gamespage_details_dlc.layout
Archive/resource/layout/gamespage_details_friends.layout
Archive/resource/layout/gamespage_details_friends_list.layout
Archive/resource/layout/gamespage_details_gametitleheader.layout
Archive/resource/layout/gamespage_details_news.layout
Archive/resource/layout/gamespage_details_news_item.layout
Archive/resource/layout/gamespage_details_nonsteam.layout
Archive/resource/layout/gamespage_details_rental.layout
Archive/resource/layout/gamespage_details_screenshots.layout
Archive/resource/layout/gamespage_details_screenshots_list.layout
Archive/resource/layout/gamespage_details_subheader.layout
Archive/resource/layout/gamespage_details_subheader_labels.layout
Archive/resource/layout/gamespage_details_subheaderright.layout
Archive/resource/layout/gamespage_details_subheaderright_labels.layout
Archive/resource/layout/gamespage_details_turnnotifications.layout
Archive/resource/layout/gamespage_details_turnnotifications_item.layout
Archive/resource/layout/gamespage_details_welcome.layout
Archive/resource/layout/gamespage_details_workshop_details.layout
Archive/resource/layout/gamespage_grid.layout
Archive/resource/layout/gamespage_grid_chrome.layout
Archive/resource/layout/gamespage_grid_loaded.layout
Archive/resource/layout/gamespage_grid_loadfailed.layout
Archive/resource/layout/gamespage_grid_loading.layout
Archive/resource/layout/htmlfindbar.layout
Archive/resource/layout/htmlimebar.layout
Archive/resource/layout/htmlpopup.layout
Archive/resource/layout/ingamefpsbanner.layout
Archive/resource/layout/joingamedialog.layout
Archive/resource/layout/layoutdebugdialog.layout
Archive/resource/layout/layoutdebugdialog_details.layout
Archive/resource/layout/login_dialog.layout
Archive/resource/layout/pagedragframe.layout
Archive/resource/layout/pagination_panel.layout
Archive/resource/layout/parentallockdialog.layout
Archive/resource/layout/parentalunlockdialog.layout
Archive/resource/layout/remotecontrolauthorization.layout
Archive/resource/layout/remotedeviceauthorization.layout
Archive/resource/layout/requestdeviceauthorization.layout
Archive/resource/layout/rescuedialog.layout
Archive/resource/layout/setcustomimagedialog.layout
Archive/resource/layout/settingsdialog.layout
Archive/resource/layout/settingssubbroadcast.layout
Archive/resource/layout/settingssubstreaming.layout
Archive/resource/layout/settingssubstreaming_advanced_client.layout
Archive/resource/layout/settingssubstreaming_advanced_host.layout
Archive/resource/layout/settingssubstreaming_pin.layout
Archive/resource/layout/sitelicenselockdialog.layout
Archive/resource/layout/subpaneloptionsbrowser.layout
Archive/resource/layout/subpaneloptionscloud.layout
Archive/resource/layout/subpaneloptionscompat.layout
Archive/resource/layout/subpaneloptionscontroller.layout
Archive/resource/layout/subpaneloptionsdownloads.layout
Archive/resource/layout/subpaneloptionsfamily.layout
Archive/resource/layout/subpaneloptionsingame.layout
Archive/resource/layout/subpaneloptionslibrary.layout
Archive/resource/layout/subpaneloptionsshadercache.layout
Archive/resource/layout/toolwindow.layout
Archive/resource/layout/ugcdownloadpanel.layout
Archive/resource/layout/uistatuspanel.layout
Archive/resource/layout/updatecontrollerfirmware.layout
Archive/resource/layout/webpopout.layout
Archive/resource/menus/friends.menu
Archive/resource/menus/steam.menu
Archive/resource/mic_meter_dead.tga
Archive/resource/mic_meter_live.tga
Archive/resource/multiple_screenshots.tga
Archive/resource/new_badge.tga
Archive/resource/notfamilyview.png
.png
Archive/resource/overlay_brazilian.txt
Archive/resource/overlay_bulgarian.txt
Archive/resource/overlay_czech.txt
Archive/resource/overlay_danish.txt
Archive/resource/overlay_dutch.txt
Archive/resource/overlay_english.txt
Archive/resource/overlay_finnish.txt
Archive/resource/overlay_french.txt
Archive/resource/overlay_german.txt
Archive/resource/overlay_greek.txt
Archive/resource/overlay_hungarian.txt
Archive/resource/overlay_italian.txt
Archive/resource/overlay_japanese.txt
Archive/resource/overlay_korean.txt
Archive/resource/overlay_koreana.txt
Archive/resource/overlay_latam.txt
Archive/resource/overlay_norwegian.txt
Archive/resource/overlay_polish.txt
Archive/resource/overlay_portuguese.txt
Archive/resource/overlay_romanian.txt
Archive/resource/overlay_russian.txt
Archive/resource/overlay_sc_schinese.txt
Archive/resource/overlay_schinese.txt
Archive/resource/overlay_spanish.txt
Archive/resource/overlay_swedish.txt
Archive/resource/overlay_tchinese.txt
Archive/resource/overlay_thai.txt
Archive/resource/overlay_turkish.txt
Archive/resource/overlay_ukrainian.txt
Archive/resource/overlay_vietnamese.txt
Archive/resource/platform_brazilian.txt
Archive/resource/platform_bulgarian.txt
Archive/resource/platform_czech.txt
Archive/resource/platform_danish.txt
Archive/resource/platform_dutch.txt
Archive/resource/platform_english.txt
Archive/resource/platform_finnish.txt
Archive/resource/platform_french.txt
Archive/resource/platform_german.txt
Archive/resource/platform_greek.txt
Archive/resource/platform_hungarian.txt
Archive/resource/platform_indonesian.txt
Archive/resource/platform_italian.txt
Archive/resource/platform_japanese.txt
Archive/resource/platform_korean.txt
Archive/resource/platform_koreana.txt
Archive/resource/platform_latam.txt
Archive/resource/platform_norwegian.txt
Archive/resource/platform_polish.txt
Archive/resource/platform_portuguese.txt
Archive/resource/platform_romanian.txt
Archive/resource/platform_russian.txt
Archive/resource/platform_sc_schinese.txt
Archive/resource/platform_schinese.txt
Archive/resource/platform_spanish.txt
Archive/resource/platform_swedish.txt
Archive/resource/platform_tchinese.txt
Archive/resource/platform_thai.txt
Archive/resource/platform_turkish.txt
Archive/resource/platform_ukrainian.txt
Archive/resource/platform_vietnamese.txt
Archive/resource/registrykeys.vdf
Archive/resource/screenshots_none_selected.tga
Archive/resource/shader_minibanner.png
.png
Archive/resource/[email protected]
.png
Archive/resource/sourceinit.dat
.dll windows:4 windows x86 arch:x86

e63d372434ac1b64449ae7776fa05a21

Code Sign

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

29/01/1996, 00:00

Not After

01/08/2028, 23:59

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

7b:f6:32:6f:70:cb:ec:34:0b:f2:d1:86:8f:e6:5b:1e
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

25/11/2009, 00:00

Not After

23/11/2012, 23:59

Subject

CN=Valve,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Valve,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

38:b0:01:1c:d5:c8:df:ae:a2:0a:4b:5a:d6:3c:2a:63:05:f9:f6:65
Signer

Actual PE Digest

38:b0:01:1c:d5:c8:df:ae:a2:0a:4b:5a:d6:3c:2a:63:05:f9:f6:65

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
SetFilePointer
ReadProcessMemory
ReadFile
CloseHandle
OpenSemaphoreA
VirtualQueryEx
OpenProcess
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
GetCurrentProcess
FlushInstructionCache
VirtualProtect
GetVersionExA
FreeLibrary
LoadLibraryA
PeekNamedPipe
WaitForSingleObject
SetEvent
WriteFile
TerminateThread
GetLastError
GetExitCodeThread
CreateThread
QueryDosDeviceA
GetLogicalDriveStringsA
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
ExitProcess
GetStdHandle
GetModuleFileNameA
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetConsoleCP
GetConsoleMode
InitializeCriticalSection
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers

Exports

Exports

DwStatus
Enter3
Shutdown
Startup2
Startup3
StartupData

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Archive/resource/sourceinit_macos.dat
.bundle macos arch:x86
Archive/resource/steam_logo.tga
Archive/resource/steam_logo_big.tga
Archive/resource/steam_splash_fallback.tga
Archive/resource/steamchina_logo_overlay.tga
Archive/resource/steamscheme.res
Archive/resource/styles/gameoverlay.styles
Archive/resource/styles/steam.styles
Archive/resource/valve_logo.tga
Archive/resource/valve_logo_welcome.tga
Archive/resource/vgui_brazilian.txt
Archive/resource/vgui_bulgarian.txt
Archive/resource/vgui_czech.txt
Archive/resource/vgui_danish.txt
Archive/resource/vgui_dutch.txt
Archive/resource/vgui_english.txt
Archive/resource/vgui_finnish.txt
Archive/resource/vgui_french.txt
Archive/resource/vgui_german.txt
Archive/resource/vgui_greek.txt
Archive/resource/vgui_hungarian.txt
Archive/resource/vgui_indonesian.txt
Archive/resource/vgui_italian.txt
Archive/resource/vgui_japanese.txt
Archive/resource/vgui_korean.txt
Archive/resource/vgui_koreana.txt
Archive/resource/vgui_latam.txt
Archive/resource/vgui_norwegian.txt
Archive/resource/vgui_polish.txt
Archive/resource/vgui_portuguese.txt
Archive/resource/vgui_romanian.txt
Archive/resource/vgui_russian.txt
Archive/resource/vgui_sc_schinese.txt
Archive/resource/vgui_schinese.txt
Archive/resource/vgui_spanish.txt
Archive/resource/vgui_swedish.txt
Archive/resource/vgui_tchinese.txt
Archive/resource/vgui_thai.txt
Archive/resource/vgui_turkish.txt
Archive/resource/vgui_ukrainian.txt
Archive/resource/vgui_vietnamese.txt
Archive/resource/voice_busy.wav
Archive/resource/voice_dialing.wav
Archive/resource/voice_ringing.wav
Archive/resource/vprofpanel.res
Archive/resource/warning.wav
Archive/resource/webkit.css
Archive/resource/workshop_banner.png
.png
Archive/resource/workshop_minibanner.png
.png

Sharing

General

Malware Config

Signatures

Files

Password: archive

Password: archive

dc33390e11f40d35aacb3b7595b60d08

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39Certificate

Key Usages

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

08:4c:af:4d:f4:99:14:1d:40:4b:71:99:aa:2c:21:31Certificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

7b:b1:01:21:ff:0d:6b:21:e2:db:68:ef:fb:a5:ce:d5:6d:be:ae:a5Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

dbghelp

kernel32

advapi32

Exports

Exports

Sections

.text Size: 73KB - Virtual size: 73KB

.rdata Size: 18KB - Virtual size: 18KB

.data Size: 4KB - Virtual size: 17KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 8KB - Virtual size: 7KB

Password: archive

8c7ff060cb78c3e8c05369cec97a3996

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4Certificate

Extended Key Usages

Key Usages

6f:88:57:d4:a7:0d:08:ee:3f:b1:af:a9:94:49:a8:c6:e1:b7:d2:f5:0d:eb:f2:96:7b:68:43:d9:79:48:dd:6fSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

winmm

imm32

cfgmgr32

psapi

Exports

Exports

Sections

.text Size: 833KB - Virtual size: 832KB

.rdata Size: 230KB - Virtual size: 230KB

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

08:4c:af:4d:f4:99:14:1d:40:4b:71:99:aa:2c:21:31
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

7b:b1:01:21:ff:0d:6b:21:e2:db:68:ef:fb:a5:ce:d5:6d:be:ae:a5
Signer

.text
Size: 73KB - Virtual size: 73KB

.rdata
Size: 18KB - Virtual size: 18KB

.data
Size: 4KB - Virtual size: 17KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 8KB - Virtual size: 7KB

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4
Certificate

6f:88:57:d4:a7:0d:08:ee:3f:b1:af:a9:94:49:a8:c6:e1:b7:d2:f5:0d:eb:f2:96:7b:68:43:d9:79:48:dd:6f
Signer

.text
Size: 833KB - Virtual size: 832KB

.rdata
Size: 230KB - Virtual size: 230KB

.data
Size: 20KB - Virtual size: 172KB

.rsrc
Size: 44KB - Virtual size: 43KB

.reloc
Size: 62KB - Virtual size: 61KB

.text
Size: 7.6MB - Virtual size: 7.6MB

.rdata
Size: 8.6MB - Virtual size: 8.6MB

.data
Size: 375KB - Virtual size: 549KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 409KB - Virtual size: 409KB

.symtab
Size: 512B - Virtual size: 4B

.rsrc
Size: 58KB - Virtual size: 58KB

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4
Certificate

ef:98:d5:fb:fa:ac:7e:dd:b6:0f:ba:e0:26:4f:ef:2d:bd:7e:68:96:71:c7:29:53:48:c8:13:c0:b2:51:3e:83
Signer

.text
Size: 255KB - Virtual size: 254KB

.rdata
Size: 76KB - Virtual size: 75KB

.data
Size: 4KB - Virtual size: 305KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 12KB - Virtual size: 11KB

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate