OpenSteamTool-1.4.8-Release.zip
- SHA256 966654604d258d5d5383e72fec616df7957bf86f760c67eeb3d0e18cd882c710
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
OpenSteamTool.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
OpenSteamTool.dll
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
13 signatures
150 seconds
Behavioral task
behavioral3
Sample
dwmapi.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
dwmapi.dll
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
xinput1_4.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
xinput1_4.dll
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
General
- Target OpenSteamTool-1.4.8-Release.zip
- Size 1.1MB
- Sample260620-b2a7bsdy91
- SHA256 966654604d258d5d5383e72fec616df7957bf86f760c67eeb3d0e18cd882c710
- MD5 1bb38151bdc68d5da346293136e3dd41
- SHA1 8f419c4dd018c7e78ae34e2d34525b123e0cd56a
- SHA512 af078bc58a32fc17181b27c1e841522bde5d1a6742103b845b116d84c66af3f1442ce030f2f34c8e1f40165452a4dfaaae47e41227f337159ba76cdb83954fbb
- SSDEEP 24576:mVdSGJevGJpa/fOB5jvJ3EIv7WpaOmVYrbwCX9jwfO5XrLLiQvv41y7:mV9JgGJp9jlnfVBk82Br3o47
- TLSH T17F3533398BA61CC67B072EF56A2078D523BF4A45CCBE0C66B100FB78114BF937E51996
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/OpenSteamTool.dll unpack001/dwmapi.dll unpack001/xinput1_4.dll
File Explorer
-
OpenSteamTool-1.4.8-Release.zip.zip 1.1MB
-
OpenSteamTool.dll.dll 1.4MB
-
dwmapi.dll.dll 107KB
-
dwmapi.exp11KB
-
dwmapi.lib20KB
-
lua_static.lib1.1MB
-
xinput1_4.dll.dll 120KB
-
xinput1_4.exp2KB
-
xinput1_4.lib4KB
OpenSteamTool.dll
- IMPHASH 8fd380dd752ff3d90ab32fe1e3986f8f
- SHA256 b2ed24e0b4e2d0dae4caa8817ed4c0c34af8fdf056f356fd697ae1356ea22581
- MD5 70ffe1eadd69b24fb3e438a7ed297525
- SHA1 c57774caf1e3645f6c57e25812dd5b65ad71e2b6
- SHA512 bd76b43df35de319a9aa9d40d2f79be262642bb83eabe7850830a055d7978af8327367ae449dbc468265a8f0d804c05a5cf34b3aaf989d7500c17dd75088abe6
- SSDEEP 24576:tz3tbBmdZ3PQz38cZnH9nUoLDncSUq9gcZkK+xxh0lhSMXlXwxml5lnw:tz3tbU4zscpH9U0z/9g9WQxmB
- TLSH T1F5659E16A6A900BDD177D178CE5B4A07E7B2780103709BEF03E15AA66F27BE51A3F701
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
745392
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
winhttp
WinHttpCloseHandle
WinHttpConnect
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpSetTimeouts
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpOpen
WinHttpQueryHeaders
WinHttpReceiveResponse
bcrypt
BCryptGetProperty
BCryptCloseAlgorithmProvider
BCryptCreateHash
BCryptHashData
BCryptFinishHash
BCryptDestroyHash
BCryptOpenAlgorithmProvider
kernel32
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
SetEndOfFile
SetStdHandle
DeleteFileW
GetTimeZoneInformation
CreatePipe
GetExitCodeProcess
HeapReAlloc
DisableThreadLibraryCalls
MultiByteToWideChar
GetCurrentDirectoryW
GetLastError
SetLastError
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryW
CloseHandle
CreateThread
GetCurrentThread
CreateFileW
GetOverlappedResult
CancelIo
CreateEventW
WaitForMultipleObjects
ReadDirectoryChangesW
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
GetCurrentProcess
FlushInstructionCache
VirtualProtect
K32GetModuleInformation
ReadFile
GetProcessHeap
GetProcessTimes
OpenProcess
GetWindowsDirectoryW
ReadProcessMemory
QueryFullProcessImageNameW
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
GetFileSizeEx
CancelIoEx
ResetEvent
SetFilePointerEx
WaitForSingleObject
CreateRemoteThread
GetExitCodeThread
VirtualAllocEx
WriteProcessMemory
VirtualFreeEx
IsWow64Process
WideCharToMultiByte
FreeLibrary
GetModuleFileNameA
LoadLibraryExA
FormatMessageA
FindClose
FindFirstFileW
FindNextFileW
GetCurrentThreadId
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
VirtualAlloc
VirtualFree
VirtualQuery
LoadLibraryExW
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
HeapSize
HeapQueryInformation
WriteConsoleW
LocalFree
GetLocaleInfoEx
CreateDirectoryW
FindFirstFileExW
GetFileAttributesExW
GetTempPathW
CreateFile2
AreFileApisANSI
MoveFileExW
GetFileInformationByHandleEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WaitForSingleObjectEx
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimePreciseAsFileTime
RtlPcToFileHeader
RaiseException
InitOnceBeginInitialize
InitOnceComplete
WakeAllConditionVariable
SleepConditionVariableSRW
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlLookupFunctionEntry
RtlUnwindEx
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
RtlUnwind
ExitThread
FreeLibraryAndExitThread
IsProcessorFeaturePresent
DuplicateHandle
CreateProcessW
ExitProcess
TerminateProcess
SetEnvironmentVariableW
GetFileType
GetConsoleMode
ReadConsoleW
WriteFile
GetConsoleOutputCP
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapFree
HeapAlloc
GetStdHandle
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
user32
MessageBoxA
advapi32
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegGetValueW
Name
.text
Size
964KB
Virtual Size
963KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
356KB
Virtual Size
356KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
19KB
Virtual Size
208KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
53KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourd
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=225, id=261, version=33145,
count=38, id=260, version=33145,
count=22, id=259, version=33145,
count=1, id=253, version=35721,
count=17, id=260, version=35721,
count=14, id=259, version=35721,
count=103, id=261, version=35721,
count=11, id=257, version=33145,
count=217, id=1, productName=Unmarked objects,
count=32, id=260, version=36246,
count=73, id=261, version=36246,
count=1, id=255, version=36246,
count=1, id=258, version=36246,
dwmapi.dll
- IMPHASH e44a8b52d6c96b6d42123e58873167aa
- SHA256 cc086189e9ae5f6fec1b9839110fd5ec5836e86989cb5f15cab80bb813df44f8
- MD5 80fc4b6cdcc37e5c749278b5c35fc9dc
- SHA1 a6b6dd051bb3f6ece0bd00d5bea8243095b64d7f
- SHA512 3f828982d018225608a537fb33ed608344e792671146bb52f1edaa66cafaf16070eaeb8dedc0fa8d94f8fae26ce005b39e7fb3963994c447a9414eb2cc3057a2
- SSDEEP 3072:npbk8BFOYWOdmElKa0b6Go8rVYPbwIgAio3a1FdQas0:nbFp7/Kaq6G7XvdQ
- TLSH T1F7B34B5777A900BBE2328A78C4930A05D772B82247619FFF43A4461A1F237D59D3EBB1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
5696
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
DisableThreadLibraryCalls
GetModuleFileNameA
LoadLibraryA
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
RtlLookupFunctionEntry
EncodePointer
RaiseException
RtlPcToFileHeader
GetCurrentProcess
ExitProcess
TerminateProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
GetModuleFileNameW
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
VirtualProtect
LoadLibraryExW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
DllCanUnloadNow
DllGetClassObject
DwmAttachMilContent
DwmDefWindowProc
DwmDetachMilContent
DwmEnableBlurBehindWindow
DwmEnableComposition
DwmEnableMMCSS
DwmExtendFrameIntoClientArea
DwmFlush
DwmGetColorizationColor
DwmGetCompositionTimingInfo
DwmGetGraphicsStreamClient
DwmGetGraphicsStreamTransformHint
DwmGetTransportAttributes
DwmGetUnmetTabRequirements
DwmGetWindowAttribute
DwmInvalidateIconicBitmaps
DwmIsCompositionEnabled
DwmModifyPreviousDxFrameDuration
DwmQueryThumbnailSourceSize
DwmRegisterThumbnail
DwmRenderGesture
DwmSetDxFrameDuration
DwmSetIconicLivePreviewBitmap
DwmSetIconicThumbnail
DwmSetPresentParameters
DwmSetWindowAttribute
DwmShowContact
DwmTetherContact
DwmTetherTextContact
DwmTransitionOwnedWindow
DwmUnregisterThumbnail
DwmUpdateThumbnailProperties
DwmpAllocateSecurityDescriptor
DwmpDxGetWindowSharedSurface
DwmpDxUpdateWindowSharedSurface
DwmpDxgiIsThreadDesktopComposited
DwmpEnableDDASupport
DwmpFreeSecurityDescriptor
DwmpGetColorizationParameters
DwmpRenderFlick
DwmpSetColorizationParameters
DwmpUpdateProxyWindowForCapture
Name
.text
Size
53KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=138, id=261, version=33145,
count=12, id=260, version=33145,
count=6, id=259, version=33145,
count=9, id=259, version=35721,
count=14, id=260, version=35721,
count=31, id=261, version=35721,
count=3, id=257, version=33145,
count=90, id=1, productName=Unmarked objects,
count=1, id=261, version=36246,
count=1, id=256, version=36246,
count=1, id=255, version=36246,
count=1, id=258, version=36246,
dwmapi.exp
- SHA256 595c0d743b04315cc345c14b2924ecbef355ddca8ca4e48f160f9d165ec50797
- MD5 8e17847168efa90b9fc848fd44f5bd2a
- SHA1 ce71ef38b842cc0518873870d2285a630d2222ce
- SHA512 782d55ee02967d3d78d1a53132fa3346aca4f3ec2b5cab9e99035f1e0e394bb04d5e75e9627cb87dbffb2bed86e9bc1eebd32c853d6abc8b2cc68f24e2081e84
- SSDEEP 192:pNlVEj4+600iLQPRXLKNZ3DHsAyhOHfgFio7lJm3Ga+WSIv4RFRg7:pNTE0iLQmzMAyhGYgga
- TLSH T10A32CD929FE27C11CB76BCF4D6CD37438074FF2689698B0A948059275EB72EB3E12161
- MD5 SHA1 SHA512 SSDEEP TLSH
dwmapi.lib
- SHA256 e3810acab0339d2564e201c3512a09fd7db7603ab79b1f3c9bc86c200c53425a
- MD5 bcda2d901f5de7f04c3210ac8e6c6f23
- SHA1 c905ee9f809414101f028fd00ba15145bd502355
- SHA512 28ea870a9e339ed070e0aff00a55df95fde663ec88c49aa9077aa9b8e65c4410e79aa013da5010ed93a6f00594f0d39fa3010811d4b828bffd8801016e32da46
- SSDEEP 192:uF6gO649DRRSTr4dq2hTLO4SLuw2nGk6lT4xFRgh4sL78Echd0Zy3BdykyX4vtsD:uFYdqeTLf25TlV44IicD7Vu7ES
- TLSH T1EE928B3550364C2ED3BEA2B9CDB790F9817C54342B3AE467790C7892CFB6536BA42588
- MD5 SHA1 SHA512 SSDEEP TLSH
lua_static.lib
- SHA256 2b69bef462110c254e578cf843df0a64981194e0df62a154dbe7c42f1d911b92
- MD5 318ba96902cf7afd0c97302aa38ad366
- SHA1 5f4e5d6080f299bfe93a02099435305600c513f8
- SHA512 364293b20217e3e8d47020f04d35d1deb1defb459f2d91ba77710afeaa41321df87eb7f8254e341fbb6a6a875b237bf62d592fec6e0a270a9aaf88891ccf065e
- SSDEEP 6144:EEJgY8GWs+Z5f078XndhBqHZRPIbKRUln5JFbizkrUrQwtXNM5GXklevElmSrN8r:ngYahZZ7E5+b3bOkdiklNtA0i5Ttt1
- TLSH T1DA4572987BE95D8AFF3DC1F588E75127D3A1F1A766B1834B331810213A6B9D0BD93920
- MD5 SHA1 SHA512 SSDEEP TLSH
xinput1_4.dll
- IMPHASH 87194fb66fd9eb48cc95932309166b02
- SHA256 730d6e3c1216228392cf336127ad663564cafdb560faf3ae8bdfcc8ca6f38a27
- MD5 22217f8809ad9a3373a5696c8e866cf3
- SHA1 9f2725085beeeaaeb33e1cb3707d39e84c46368e
- SHA512 7dbacedebc08c55bdd39c0870ee81f799013b1c18ddeb61e507ba0d886335c6e974c1593690047825a918489c3aab565981ba5740f280cbfa4f7af4a8ab518ff
- SSDEEP 3072:ybjc2ovPSEPyHFdhiMTRaXqpZU6sieRppppppOR:yqq8yFpTRaaMi
- TLSH T10DC33A97B2B901BBE173867CC4934A05EB76B8254760AFEF0760065A1F277D48D3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
9424
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
GetSystemDirectoryA
DisableThreadLibraryCalls
GetModuleFileNameA
GetProcAddress
LoadLibraryA
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EncodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
GetCurrentProcess
ExitProcess
TerminateProcess
FreeLibrary
GetModuleHandleExW
GetModuleFileNameW
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
VirtualProtect
LoadLibraryExW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
XInputEnable
XInputGetAudioDeviceIds
XInputGetBatteryInformation
XInputGetCapabilities
XInputGetKeystroke
XInputGetState
XInputSetState
Name
.text
Size
66KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=138, id=261, version=33145,
count=12, id=260, version=33145,
count=7, id=259, version=33145,
count=9, id=259, version=35721,
count=14, id=260, version=35721,
count=35, id=261, version=35721,
count=3, id=257, version=33145,
count=91, id=1, productName=Unmarked objects,
count=1, id=261, version=36246,
count=1, id=256, version=36246,
count=1, id=255, version=36246,
count=1, id=258, version=36246,
xinput1_4.exp
- SHA256 5eb00ee62e6c4ccaba7eaa94f281496364299244c7f68fbb0f2c436226bf1edb
- MD5 a586a59aa58a61c6b75a0343c143f0a1
- SHA1 ac7d4bdbfa54d955498f6b03fe954940e06ec499
- SHA512 531b076e6c89bb4b25d10241b620caafccff3488d70e6ce5df125a7ec08b6f5d51305404c738e5f45bdb67ebf6470b14d0acd7d5ec88b8c4dc4720660d494464
- TLSH T1ED51A870A7C01C07C62DA67DD6CC23036670FB43726A1B772DA598322D5E6868336F6B
- MD5 SHA1 SHA512 TLSH
xinput1_4.lib
- SHA256 33050da27abbdb8f31aaf1cf293825c179d2bf968460241dfc695bd7072af14d
- MD5 70c2a276b1506b7fe684daf98629ed70
- SHA1 f081a529e6ddfe4e14b5dc4f45a9be6580cc3c9d
- SHA512 1ea6f1dfd2d4efbd6cd4f31fbb102d0ea476c90e1e2f532dcfca6ab5ede6ee37d8c2a831760bf71ca9fe54a81f4fd57d85c1255869e8160cc8f5fa7066ee7da8
- SSDEEP 48:/MHZ2c5pAZXp/vYAKvpyAOT/AKZCWAK4Cr967sO:0HZ15pAZuAK8AKZAKjr9HO
- TLSH T100918E3263920DADC57CD23CA1E9B5A5613C820B212D66763DEC6C636F5F4188376F13
- MD5 SHA1 SHA512 SSDEEP TLSH