OverwolfLauncher[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
OverwolfLauncher.exe
Size 1.9MB
Sample260808-ypg6fatelf
SHA256 24ae15795636c00d6c095d92e887398c257f949077fb5a5e37c0e75d2d2cd11b
MD5 6d5b60a4cb15015333d67622c2610f87
SHA1 633df184fcdb177508eefbba26ef26cd4ba77d31
SHA512 a141dd356926ea394ad11aba9e31121b97db19635562def12b82cd5549cd9b9c674cfa87cca92189f66c43589e6b9b588bc21d72ddfe463185abe9a14ce04d24
SSDEEP 49152:aIh8BP59+FTlM95TjP2m/RdtiZX9A0Q8Aj+hXB5k:aF59+5iPP2adI00Q
TLSH
T1BB958D1AF7A801F8D16BC27889968617F7B278150B718BDF12A1176E2F336E15E3E311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

OverwolfLauncher.exe

.exe 1.9MB

OverwolfLauncher.exe

IMPHASH bf93abef8dcfadecce4d349b9e81fb78
SHA256 24ae15795636c00d6c095d92e887398c257f949077fb5a5e37c0e75d2d2cd11b
MD5 6d5b60a4cb15015333d67622c2610f87
SHA1 633df184fcdb177508eefbba26ef26cd4ba77d31
SHA512 a141dd356926ea394ad11aba9e31121b97db19635562def12b82cd5549cd9b9c674cfa87cca92189f66c43589e6b9b588bc21d72ddfe463185abe9a14ce04d24
SSDEEP 49152:aIh8BP59+FTlM95TjP2m/RdtiZX9A0Q8Aj+hXB5k:aF59+5iPP2adI00Q
TLSH
T1BB958D1AF7A801F8D16BC27889968617F7B278150B718BDF12A1176E2F336E15E3E311
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

c9:03:71:d3:46:44:6d:f6:3e:23:15:26:ce:29:73:30:bf:9b:dc:38:69:1b:84:65:ff:58:ea:0b:e9:e5:a6:21

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

May 26, 2026

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

09:87:88:89:88:36:53:78:54:3e:81:be:d4:39:bb:a8

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 27, 2026 - May 31, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

1018128

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\src\overlay-new\src\Output\Release\x64\OverwolfLauncher.pdb

shlwapi

PathRemoveFileSpecW ord12

windowscodecs

WICConvertBitmapSource

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

kernel32

CreateToolhelp32Snapshot Process32FirstW CloseHandle Process32NextW GetTickCount WaitForSingleObject GetExitCodeProcess CreateEventW ExitProcess GetProcessId ResetEvent Sleep SetLastError CreateThread LocalFree SetErrorMode ExitThread RtlUnwind CreateFileMappingW FormatMessageA GetSystemTime GetModuleFileNameW LockFileEx GlobalFree HeapDestroy HeapCompact DeleteFileA CreateProcessW CreateFileA FlushViewOfFile GetFileAttributesA GetDiskFreeSpaceA GetTempPathA HeapValidate CreateMutexW UnlockFileEx GetFullPathNameA SetFilePointer LockFile GetDiskFreeSpaceW HeapCreate MapViewOfFile OpenFileMappingA UnmapViewOfFile OpenEventA CreateEventA OpenMutexA ReleaseMutex GlobalUnlock GlobalLock GlobalAlloc OutputDebugStringW LocalAlloc FormatMessageW UnlockFile FindResourceW LoadResource LockResource SizeofResource MultiByteToWideChar OpenProcess CreateMutexA WaitForMultipleObjects GetFileAttributesW LoadLibraryA GetCommandLineW GetModuleHandleW DeleteCriticalSection GetProcAddress DecodePointer RaiseException GetLastError InitializeCriticalSectionEx WideCharToMultiByte FreeLibraryAndExitThread GetFileSize InitOnceExecuteOnce AcquireSRWLockExclusive ReleaseSRWLockExclusive WriteConsoleW HeapSize GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage HeapReAlloc GetTimeZoneInformation SetStdHandle ReadConsoleW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetTimeFormatW GetDateFormatW GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetFileSizeEx HeapAlloc HeapFree WriteFile GetStdHandle GetModuleHandleExW SetEnvironmentVariableW GetFullPathNameW GetFileType LoadLibraryExW OutputDebugStringA ReadFile RemoveDirectoryW GetTempPathW CreateFileW SetFileAttributesW GetFileAttributesExW DeleteFileW CopyFileW GetCurrentProcess LoadLibraryW GetCurrentProcessId FreeLibrary QueryFullProcessImageNameW FindFirstFileW FindNextFileW FindClose ExpandEnvironmentStringsW TryEnterCriticalSection EnterCriticalSection LeaveCriticalSection InitializeCriticalSection CompareFileTime VirtualFree VirtualAlloc CreateDirectoryW GetTempFileNameW SystemTimeToFileTime GetSystemTimeAsFileTime GetExitCodeThread GetSystemInfo ReadProcessMemory lstrcmpiW VirtualQueryEx GetStringTypeW FindFirstFileExW SetEndOfFile SetFilePointerEx AreFileApisANSI InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree EncodePointer CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo SetEvent WaitForSingleObjectEx RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId InitializeSListHead RtlUnwindEx RtlPcToFileHeader

user32

ReleaseDC FindWindowW SendMessageTimeoutW wsprintfW GetWindowLongW SetWindowLongW PostQuitMessage DefWindowProcW IsWindowVisible MonitorFromPoint GetMonitorInfoW GetDC SetWindowPos IsRectEmpty GetWindowRect InvalidateRect CreateWindowExW LoadIconW GetLastInputInfo LoadCursorW RegisterClassW MsgWaitForMultipleObjects KillTimer UpdateLayeredWindow SetTimer ShowWindow AllowSetForegroundWindow PostMessageW GetMessageW TranslateMessage DispatchMessageW MessageBoxW UnregisterClassW

gdi32

SelectObject CreateCompatibleDC GetObjectW DeleteObject CreateDIBSection DeleteDC

advapi32

CryptAcquireContextW CryptCreateHash CryptHashData CryptDestroyHash CryptGetHashParam CryptReleaseContext SetSecurityDescriptorDacl InitializeSecurityDescriptor OpenProcessToken RegEnumValueW RegCreateKeyExW RegQueryInfoKeyW LookupAccountSidW RegSetValueExW RegOpenKeyW RegCloseKey RegOpenKeyExW RegQueryValueExW GetTokenInformation

shell32

CommandLineToArgvW SHGetFolderPathW SHGetSpecialFolderPathW ShellExecuteW SHCreateDirectoryExW

ole32

OleRun CoTaskMemFree CoInitializeEx CreateStreamOnHGlobal CoCreateInstance CoUninitialize CoInitialize

oleaut32

SysFreeString GetErrorInfo SysAllocString VariantCopy VariantClear VariantChangeType VariantInit

psapi

EnumProcessModules GetModuleBaseNameW

gdiplus

GdipGetImageHeight GdiplusStartup GdipDrawLine GdipSetTextRenderingHint GdipDeleteGraphics GdipCreateFromHDC GdipGetFontHeightGivenDPI GdipDrawImageRect GdipMeasureString GdipDrawString GdipDeleteStringFormat GdipCreateStringFormat GdipDeletePen GdipCreatePen1 GdipCreateSolidFill GdipCloneBrush GdipDeleteBrush GdipDeleteFontFamily GdipCreateFontFamilyFromName GdipCreateFont GdipGetGenericFontFamilySansSerif GdipFree GdipAlloc GdipDisposeImage GdipCloneImage GdipCreateBitmapFromStream GdipPrivateAddMemoryFont GdipDeletePrivateFontCollection GdipCloneFontFamily GdipNewPrivateFontCollection GdipDeleteFont GdipGetFontCollectionFamilyCount GdipGetImageWidth GdipGetFontCollectionFamilyList

crypt32

CryptUnprotectData CryptProtectData

??0CharReader@Json@@QEAA@AEBV01@@Z ??0CharReader@Json@@QEAA@XZ ??0CharReaderBuilder@Json@@QEAA@AEBV01@@Z ??0CharReaderBuilder@Json@@QEAA@XZ ??0CriticalSection@base@@QEAA@XZ ??0Exception@Json@@QEAA@AEBV01@@Z ??0Exception@Json@@QEAA@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0Factory@CharReader@Json@@QEAA@AEBV012@@Z ??0Factory@CharReader@Json@@QEAA@XZ ??0Factory@StreamWriter@Json@@QEAA@AEBV012@@Z ??0Factory@StreamWriter@Json@@QEAA@XZ ??0FastWriter@Json@@QEAA@AEBV01@@Z ??0FastWriter@Json@@QEAA@XZ ??0Features@Json@@QEAA@XZ ??0LogicError@Json@@QEAA@$$QEAV01@@Z ??0LogicError@Json@@QEAA@AEBV01@@Z ??0LogicError@Json@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0Path@Json@@QEAA@$$QEAV01@@Z ??0Path@Json@@QEAA@AEBV01@@Z ??0Path@Json@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVPathArgument@1@1111@Z ??0PathArgument@Json@@QEAA@$$QEAV01@@Z ??0PathArgument@Json@@QEAA@AEBV01@@Z ??0PathArgument@Json@@QEAA@I@Z ??0PathArgument@Json@@QEAA@PEBD@Z ??0PathArgument@Json@@QEAA@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0PathArgument@Json@@QEAA@XZ ??0Reader@Json@@QEAA@$$QEAV01@@Z ??0Reader@Json@@QEAA@AEBV01@@Z ??0Reader@Json@@QEAA@AEBVFeatures@1@@Z ??0Reader@Json@@QEAA@XZ ??0RuntimeError@Json@@QEAA@$$QEAV01@@Z ??0RuntimeError@Json@@QEAA@AEBV01@@Z ??0RuntimeError@Json@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0StaticString@Json@@QEAA@PEBD@Z ??0StreamWriter@Json@@QEAA@AEBV01@@Z ??0StreamWriter@Json@@QEAA@XZ ??0StreamWriterBuilder@Json@@QEAA@AEBV01@@Z ??0StreamWriterBuilder@Json@@QEAA@XZ ??0StyledStreamWriter@Json@@QEAA@AEBV01@@Z ??0StyledStreamWriter@Json@@QEAA@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0StyledWriter@Json@@QEAA@AEBV01@@Z ??0StyledWriter@Json@@QEAA@XZ ??0Value@Json@@QEAA@$$QEAV01@@Z ??0Value@Json@@QEAA@AEBV01@@Z ??0Value@Json@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0Value@Json@@QEAA@AEBVStaticString@1@@Z ??0Value@Json@@QEAA@H@Z ??0Value@Json@@QEAA@I@Z ??0Value@Json@@QEAA@N@Z ??0Value@Json@@QEAA@PEBD0@Z ??0Value@Json@@QEAA@PEBD@Z ??0Value@Json@@QEAA@W4ValueType@1@@Z ??0Value@Json@@QEAA@_J@Z ??0Value@Json@@QEAA@_K@Z ??0Value@Json@@QEAA@_N@Z ??0ValueConstIterator@Json@@AEAA@AEBV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json@@V23@@std@@@std@@@std@@@std@@@Z ??0ValueConstIterator@Json@@QEAA@AEBVValueIterator@1@@Z ??0ValueConstIterator@Json@@QEAA@XZ ??0ValueIterator@Json@@AEAA@AEBV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json@@V23@@std@@@std@@@std@@@std@@@Z ??0ValueIterator@Json@@QEAA@AEBV01@@Z ??0ValueIterator@Json@@QEAA@AEBVValueConstIterator@1@@Z ??0ValueIterator@Json@@QEAA@XZ ??0ValueIteratorBase@Json@@QEAA@AEBV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json@@V23@@std@@@std@@@std@@@std@@@Z ??0ValueIteratorBase@Json@@QEAA@XZ ??0Writer@Json@@QEAA@AEBV01@@Z ??0Writer@Json@@QEAA@XZ ??1CharReader@Json@@UEAA@XZ ??1CharReaderBuilder@Json@@UEAA@XZ ??1CriticalSection@base@@UEAA@XZ ??1Exception@Json@@UEAA@XZ ??1Factory@CharReader@Json@@UEAA@XZ ??1Factory@StreamWriter@Json@@UEAA@XZ ??1FastWriter@Json@@UEAA@XZ ??1LogicError@Json@@UEAA@XZ ??1Path@Json@@QEAA@XZ ??1PathArgument@Json@@QEAA@XZ ??1Reader@Json@@QEAA@XZ ??1RuntimeError@Json@@UEAA@XZ ??1StreamWriter@Json@@UEAA@XZ ??1StreamWriterBuilder@Json@@UEAA@XZ ??1StyledStreamWriter@Json@@QEAA@XZ ??1StyledWriter@Json@@UEAA@XZ ??1Value@Json@@QEAA@XZ ??1Writer@Json@@UEAA@XZ ??4CharReader@Json@@QEAAAEAV01@AEBV01@@Z ??4CharReaderBuilder@Json@@QEAAAEAV01@AEBV01@@Z ??4CriticalSection@base@@QEAAAEAV01@AEBV01@@Z ??4Exception@Json@@QEAAAEAV01@AEBV01@@Z ??4Factory@CharReader@Json@@QEAAAEAV012@AEBV012@@Z ??4Factory@StreamWriter@Json@@QEAAAEAV012@AEBV012@@Z ??4FastWriter@Json@@QEAAAEAV01@AEBV01@@Z ??4Features@Json@@QEAAAEAV01@$$QEAV01@@Z ??4Features@Json@@QEAAAEAV01@AEBV01@@Z ??4LogicError@Json@@QEAAAEAV01@$$QEAV01@@Z ??4LogicError@Json@@QEAAAEAV01@AEBV01@@Z ??4Path@Json@@QEAAAEAV01@$$QEAV01@@Z ??4Path@Json@@QEAAAEAV01@AEBV01@@Z ??4PathArgument@Json@@QEAAAEAV01@$$QEAV01@@Z ??4PathArgument@Json@@QEAAAEAV01@AEBV01@@Z ??4Reader@Json@@QEAAAEAV01@$$QEAV01@@Z ??4Reader@Json@@QEAAAEAV01@AEBV01@@Z ??4RuntimeError@Json@@QEAAAEAV01@$$QEAV01@@Z ??4RuntimeError@Json@@QEAAAEAV01@AEBV01@@Z ??4StaticString@Json@@QEAAAEAV01@$$QEAV01@@Z ??4StaticString@Json@@QEAAAEAV01@AEBV01@@Z ??4StreamWriter@Json@@QEAAAEAV01@AEBV01@@Z ??4StreamWriterBuilder@Json@@QEAAAEAV01@AEBV01@@Z ??4StyledStreamWriter@Json@@QEAAAEAV01@AEBV01@@Z ??4StyledWriter@Json@@QEAAAEAV01@AEBV01@@Z ??4Value@Json@@QEAAAEAV01@$$QEAV01@@Z ??4Value@Json@@QEAAAEAV01@AEBV01@@Z ??4ValueConstIterator@Json@@QEAAAEAV01@$$QEAV01@@Z ??4ValueConstIterator@Json@@QEAAAEAV01@AEBV01@@Z ??4ValueConstIterator@Json@@QEAAAEAV01@AEBVValueIteratorBase@1@@Z ??4ValueIterator@Json@@QEAAAEAV01@AEBV01@@Z ??4ValueIteratorBase@Json@@QEAAAEAV01@$$QEAV01@@Z ??4ValueIteratorBase@Json@@QEAAAEAV01@AEBV01@@Z ??4Writer@Json@@QEAAAEAV01@AEBV01@@Z ??5Json@@YAAEAV?$basic_istream@DU?$char_traits@D@std@@@std@@AEAV12@AEAVValue@0@@Z ??6Json@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AEAV12@AEBVValue@0@@Z ??8Value@Json@@QEBA_NAEBV01@@Z ??8ValueIteratorBase@Json@@QEBA_NAEBV01@@Z ??9Value@Json@@QEBA_NAEBV01@@Z ??9ValueIteratorBase@Json@@QEBA_NAEBV01@@Z ??ACharReaderBuilder@Json@@QEAAAEAVValue@1@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AStreamWriterBuilder@Json@@QEAAAEAVValue@1@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AValue@Json@@QEAAAEAV01@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AValue@Json@@QEAAAEAV01@AEBVStaticString@1@@Z ??AValue@Json@@QEAAAEAV01@H@Z ??AValue@Json@@QEAAAEAV01@I@Z ??AValue@Json@@QEAAAEAV01@PEBD@Z ??AValue@Json@@QEBAAEBV01@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AValue@Json@@QEBAAEBV01@H@Z ??AValue@Json@@QEBAAEBV01@I@Z ??AValue@Json@@QEBAAEBV01@PEBD@Z ??BStaticString@Json@@QEBAPEBDXZ ??BValue@Json@@QEBA_NXZ ??CValueConstIterator@Json@@QEBAPEBVValue@1@XZ ??CValueIterator@Json@@QEAAPEAVValue@1@XZ ??DValueConstIterator@Json@@QEBAAEBVValue@1@XZ ??DValueIterator@Json@@QEAAAEAVValue@1@XZ ??EValueConstIterator@Json@@QEAA?AV01@H@Z ??EValueConstIterator@Json@@QEAAAEAV01@XZ ??EValueIterator@Json@@QEAA?AV01@H@Z ??EValueIterator@Json@@QEAAAEAV01@XZ ??FValueConstIterator@Json@@QEAA?AV01@H@Z ??FValueConstIterator@Json@@QEAAAEAV01@XZ ??FValueIterator@Json@@QEAA?AV01@H@Z ??FValueIterator@Json@@QEAAAEAV01@XZ ??GValueIteratorBase@Json@@QEBAHAEBV01@@Z ??MValue@Json@@QEBA_NAEBV01@@Z ??NValue@Json@@QEBA_NAEBV01@@Z ??OValue@Json@@QEBA_NAEBV01@@Z ??PValue@Json@@QEBA_NAEBV01@@Z ??_7CharReader@Json@@6B@ ??_7CharReaderBuilder@Json@@6B@ ??_7CriticalSection@base@@6B@ ??_7Exception@Json@@6B@ ??_7Factory@CharReader@Json@@6B@ ??_7Factory@StreamWriter@Json@@6B@ ??_7FastWriter@Json@@6B@ ??_7LogicError@Json@@6B@ ??_7RuntimeError@Json@@6B@ ??_7StreamWriter@Json@@6B@ ??_7StreamWriterBuilder@Json@@6B@ ??_7StyledWriter@Json@@6B@ ??_7Writer@Json@@6B@ ??_FStyledStreamWriter@Json@@QEAAXXZ ??_FValue@Json@@QEAAXXZ ?Lock@CriticalSection@base@@QEAAXXZ ?TryLock@CriticalSection@base@@QEAA_NXZ ?Unlock@CriticalSection@base@@QEAAXXZ ?addComment@Reader@Json@@AEAAXPEBD0W4CommentPlacement@2@@Z ?addError@Reader@Json@@AEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAVToken@12@PEBD@Z ?addErrorAndRecover@Reader@Json@@AEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAVToken@12@W4TokenType@12@@Z ?addPathInArg@Path@Json@@AEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$vector@PEBVPathArgument@Json@@V?$allocator@PEBVPathArgument@Json@@@std@@@4@AEAV?$_Vector_const_iterator@V?$_Vector_val@U?$_Simple_types@PEBVPathArgument@Json@@@std@@@std@@@4@W4Kind@PathArgument@2@@Z ?all@Features@Json@@SA?AV12@XZ ?append@Value@Json@@QEAAAEAV12@$$QEAV12@@Z ?append@Value@Json@@QEAAAEAV12@AEBV12@@Z ?asBool@Value@Json@@QEBA_NXZ ?asCString@Value@Json@@QEBAPEBDXZ ?asDouble@Value@Json@@QEBANXZ ?asFloat@Value@Json@@QEBAMXZ ?asInt64@Value@Json@@QEBA_JXZ ?asInt@Value@Json@@QEBAHXZ ?asLargestInt@Value@Json@@QEBA_JXZ ?asLargestUInt@Value@Json@@QEBA_KXZ ?asString@Value@Json@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?asUInt64@Value@Json@@QEBA_KXZ ?asUInt@Value@Json@@QEBAIXZ ?begin@Value@Json@@QEAA?AVValueIterator@2@XZ ?begin@Value@Json@@QEBA?AVValueConstIterator@2@XZ ?c_str@StaticString@Json@@QEBAPEBDXZ ?clear@Value@Json@@QEAAXXZ ?compare@Value@Json@@QEBAHAEBV12@@Z ?computeDistance@ValueIteratorBase@Json@@IEBAHAEBV12@@Z ?containsNewLine@Reader@Json@@CA_NPEBD0@Z ?copy@Value@Json@@QEAAXAEBV12@@Z ?copy@ValueIteratorBase@Json@@IEAAXAEBV12@@Z ?copyPayload@Value@Json@@QEAAXAEBV12@@Z ?currentValue@Reader@Json@@AEAAAEAVValue@2@XZ ?decodeDouble@Reader@Json@@AEAA_NAEAVToken@12@@Z ?decodeDouble@Reader@Json@@AEAA_NAEAVToken@12@AEAVValue@2@@Z ?decodeNumber@Reader@Json@@AEAA_NAEAVToken@12@@Z ?decodeNumber@Reader@Json@@AEAA_NAEAVToken@12@AEAVValue@2@@Z ?decodeString@Reader@Json@@AEAA_NAEAVToken@12@@Z ?decodeString@Reader@Json@@AEAA_NAEAVToken@12@AEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?decodeUnicodeCodePoint@Reader@Json@@AEAA_NAEAVToken@12@AEAPEBDPEBDAEAI@Z ?decodeUnicodeEscapeSequence@Reader@Json@@AEAA_NAEAVToken@12@AEAPEBDPEBDAEAI@Z ?decrement@ValueIteratorBase@Json@@IEAAXXZ ?defaultRealPrecision@Value@Json@@2IB ?demand@Value@Json@@QEAAPEAV12@PEBD0@Z ?deref@ValueIteratorBase@Json@@IEAAAEAVValue@2@XZ ?deref@ValueIteratorBase@Json@@IEBAAEBVValue@2@XZ ?dropNullPlaceholders@FastWriter@Json@@QEAAXXZ ?dupMeta@Value@Json@@AEAAXAEBV12@@Z ?dupPayload@Value@Json@@AEAAXAEBV12@@Z ?empty@Value@Json@@QEBA_NXZ ?enableYAMLCompatibility@FastWriter@Json@@QEAAXXZ ?end@Value@Json@@QEAA?AVValueIterator@2@XZ ?end@Value@Json@@QEBA?AVValueConstIterator@2@XZ ?find@Value@Json@@QEBAPEBV12@PEBD0@Z ?get@Value@Json@@QEBA?AV12@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV12@@Z ?get@Value@Json@@QEBA?AV12@IAEBV12@@Z ?get@Value@Json@@QEBA?AV12@PEBD0AEBV12@@Z ?get@Value@Json@@QEBA?AV12@PEBDAEBV12@@Z ?getComment@Value@Json@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4CommentPlacement@2@@Z ?getFormatedErrorMessages@Reader@Json@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?getFormattedErrorMessages@Reader@Json@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?getLocationLineAndColumn@Reader@Json@@AEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD@Z ?getLocationLineAndColumn@Reader@Json@@AEBAXPEBDAEAH1@Z ?getMemberNames@Value@Json@@QEBA?AV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ ?getNextChar@Reader@Json@@AEAADXZ ?getOffsetLimit@Value@Json@@QEBA_JXZ ?getOffsetStart@Value@Json@@QEBA_JXZ ?getString@Value@Json@@QEBA_NPEAPEBD0@Z ?getStructuredErrors@Reader@Json@@QEBA?AV?$vector@UStructuredError@Reader@Json@@V?$allocator@UStructuredError@Reader@Json@@@std@@@std@@XZ ?good@Reader@Json@@QEBA_NXZ ?hasComment@Value@Json@@QEBA_NW4CommentPlacement@2@@Z ?hasCommentForValue@StyledStreamWriter@Json@@CA_NAEBVValue@2@@Z ?hasCommentForValue@StyledWriter@Json@@CA_NAEBVValue@2@@Z ?increment@ValueIteratorBase@Json@@IEAAXXZ ?indent@StyledStreamWriter@Json@@AEAAXXZ ?indent@StyledWriter@Json@@AEAAXXZ ?index@ValueIteratorBase@Json@@QEBAIXZ ?initBasic@Value@Json@@AEAAXW4ValueType@2@_N@Z ?insert@Value@Json@@QEAA_NI$$QEAV12@@Z ?insert@Value@Json@@QEAA_NIAEBV12@@Z ?invalidPath@Path@Json@@CAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z ?isAllocated@Value@Json@@AEBA_NXZ ?isArray@Value@Json@@QEBA_NXZ ?isBool@Value@Json@@QEBA_NXZ ?isConvertibleTo@Value@Json@@QEBA_NW4ValueType@2@@Z ?isDouble@Value@Json@@QEBA_NXZ ?isEqual@ValueIteratorBase@Json@@IEBA_NAEBV12@@Z ?isInt64@Value@Json@@QEBA_NXZ ?isInt@Value@Json@@QEBA_NXZ ?isIntegral@Value@Json@@QEBA_NXZ ?isMember@Value@Json@@QEBA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?isMember@Value@Json@@QEBA_NPEBD0@Z ?isMember@Value@Json@@QEBA_NPEBD@Z ?isMultilineArray@StyledStreamWriter@Json@@AEAA_NAEBVValue@2@@Z ?isMultilineArray@StyledWriter@Json@@AEAA_NAEBVValue@2@@Z ?isNull@Value@Json@@QEBA_NXZ ?isNumeric@Value@Json@@QEBA_NXZ ?isObject@Value@Json@@QEBA_NXZ ?isString@Value@Json@@QEBA_NXZ ?isUInt64@Value@Json@@QEBA_NXZ ?isUInt@Value@Json@@QEBA_NXZ ?isValidIndex@Value@Json@@QEBA_NI@Z ?key@ValueIteratorBase@Json@@QEBA?AVValue@2@XZ ?make@Path@Json@@QEBAAEAVValue@2@AEAV32@@Z ?makePath@Path@Json@@AEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$vector@PEBVPathArgument@Json@@V?$allocator@PEBVPathArgument@Json@@@std@@@4@@Z ?match@Reader@Json@@AEAA_NPEBDH@Z ?maxInt64@Value@Json@@2_JB ?maxInt@Value@Json@@2HB ?maxLargestInt@Value@Json@@2_JB ?maxLargestUInt@Value@Json@@2_KB ?maxUInt64@Value@Json@@2_KB ?maxUInt64AsDouble@Value@Json@@2NB ?maxUInt@Value@Json@@2IB ?memberName@ValueIteratorBase@Json@@QEBAPEBDPEAPEBD@Z ?memberName@ValueIteratorBase@Json@@QEBAPEBDXZ ?minInt64@Value@Json@@2_JB ?minInt@Value@Json@@2HB ?minLargestInt@Value@Json@@2_JB ?name@ValueIteratorBase@Json@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?newCharReader@CharReaderBuilder@Json@@UEBAPEAVCharReader@2@XZ ?newStreamWriter@StreamWriterBuilder@Json@@UEBAPEAVStreamWriter@2@XZ ?normalizeEOL@Reader@Json@@CA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD0@Z ?null@Value@Json@@2AEBV12@EB ?nullRef@Value@Json@@2AEBV12@EB ?nullSingleton@Value@Json@@SAAEBV12@XZ ?omitEndingLineFeed@FastWriter@Json@@QEAAXXZ ?parse@Reader@Json@@QEAA_NAEAV?$basic_istream@DU?$char_traits@D@std@@@std@@AEAVValue@2@_N@Z ?parse@Reader@Json@@QEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAVValue@2@_N@Z ?parse@Reader@Json@@QEAA_NPEBD0AEAVValue@2@_N@Z ?parseFromStream@Json@@YA_NAEBVFactory@CharReader@1@AEAV?$basic_istream@DU?$char_traits@D@std@@@std@@PEAVValue@1@PEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@@Z ?pushError@Reader@Json@@QEAA_NAEBVValue@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z ?pushError@Reader@Json@@QEAA_NAEBVValue@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?pushValue@StyledStreamWriter@Json@@AEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?pushValue@StyledWriter@Json@@AEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?readArray@Reader@Json@@AEAA_NAEAVToken@12@@Z ?readCStyleComment@Reader@Json@@AEAA_NXZ ?readComment@Reader@Json@@AEAA_NXZ ?readCppStyleComment@Reader@Json@@AEAA_NXZ ?readNumber@Reader@Json@@AEAAXXZ ?readObject@Reader@Json@@AEAA_NAEAVToken@12@@Z ?readString@Reader@Json@@AEAA_NXZ ?readToken@Reader@Json@@AEAA_NAEAVToken@12@@Z ?readValue@Reader@Json@@AEAA_NXZ ?recoverFromError@Reader@Json@@AEAA_NW4TokenType@12@@Z ?releasePayload@Value@Json@@AEAAXXZ ?removeIndex@Value@Json@@QEAA_NIPEAV12@@Z ?removeMember@Value@Json@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?removeMember@Value@Json@@QEAAXPEBD@Z ?removeMember@Value@Json@@QEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEAV12@@Z ?removeMember@Value@Json@@QEAA_NPEBD0PEAV12@@Z ?removeMember@Value@Json@@QEAA_NPEBDPEAV12@@Z ?resize@Value@Json@@QEAAXI@Z ?resolve@Path@Json@@QEBA?AVValue@2@AEBV32@0@Z ?resolve@Path@Json@@QEBAAEBVValue@2@AEBV32@@Z ?resolveReference@Value@Json@@AEAAAEAV12@PEBD0@Z ?resolveReference@Value@Json@@AEAAAEAV12@PEBD@Z ?setComment@Value@Json@@QEAAXPEBDW4CommentPlacement@2@@Z ?setComment@Value@Json@@QEAAXPEBD_KW4CommentPlacement@2@@Z ?setComment@Value@Json@@QEAAXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4CommentPlacement@2@@Z ?setDefaults@CharReaderBuilder@Json@@SAXPEAVValue@2@@Z ?setDefaults@StreamWriterBuilder@Json@@SAXPEAVValue@2@@Z ?setIsAllocated@Value@Json@@AEAAX_N@Z ?setOffsetLimit@Value@Json@@QEAAX_J@Z ?setOffsetStart@Value@Json@@QEAAX_J@Z ?setType@Value@Json@@AEAAXW4ValueType@2@@Z ?size@Value@Json@@QEBAIXZ ?skipCommentTokens@Reader@Json@@AEAAXAEAVToken@12@@Z ?skipSpaces@Reader@Json@@AEAAXXZ ?strictMode@CharReaderBuilder@Json@@SAXPEAVValue@2@@Z ?strictMode@Features@Json@@SA?AV12@XZ ?swap@Value@Json@@QEAAXAEAV12@@Z ?swapPayload@Value@Json@@QEAAXAEAV12@@Z ?toStyledString@Value@Json@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?type@Value@Json@@QEBA?AW4ValueType@2@XZ ?unindent@StyledStreamWriter@Json@@AEAAXXZ ?unindent@StyledWriter@Json@@AEAAXXZ ?validate@CharReaderBuilder@Json@@QEBA_NPEAVValue@2@@Z ?validate@StreamWriterBuilder@Json@@QEBA_NPEAVValue@2@@Z ?valueToQuotedString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NIW4PrecisionType@1@@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_K@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z ?what@Exception@Json@@UEBAPEBDXZ ?write@FastWriter@Json@@UEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVValue@2@@Z ?write@StyledStreamWriter@Json@@QEAAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AEBVValue@2@@Z ?write@StyledWriter@Json@@UEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVValue@2@@Z ?writeArrayValue@StyledStreamWriter@Json@@AEAAXAEBVValue@2@@Z ?writeArrayValue@StyledWriter@Json@@AEAAXAEBVValue@2@@Z ?writeCommentAfterValueOnSameLine@StyledStreamWriter@Json@@AEAAXAEBVValue@2@@Z ?writeCommentAfterValueOnSameLine@StyledWriter@Json@@AEAAXAEBVValue@2@@Z ?writeCommentBeforeValue@StyledStreamWriter@Json@@AEAAXAEBVValue@2@@Z ?writeCommentBeforeValue@StyledWriter@Json@@AEAAXAEBVValue@2@@Z ?writeIndent@StyledStreamWriter@Json@@AEAAXXZ ?writeIndent@StyledWriter@Json@@AEAAXXZ ?writeString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVFactory@StreamWriter@1@AEBVValue@1@@Z ?writeValue@FastWriter@Json@@AEAAXAEBVValue@2@@Z ?writeValue@StyledStreamWriter@Json@@AEAAXAEBVValue@2@@Z ?writeValue@StyledWriter@Json@@AEAAXAEBVValue@2@@Z ?writeWithIndent@StyledStreamWriter@Json@@AEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?writeWithIndent@StyledWriter@Json@@AEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

Name

.text

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

419KB

Virtual Size

418KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

63KB

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gehcont

Size

512B

Virtual Size

36B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

169KB

Virtual Size

168KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

OverwolfLauncher.exe

shlwapi

windowscodecs

version

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

psapi

gdiplus

crypt32

generic