steam_content_emu_poc[.]rar

resource
unpack001/MSVCR71.dll
unpack001/emulator.exe
unpack001/fixed_exe/Steam.exe
unpack001/python24.dll
unpack001/w9xpopen.exe

steam_content_emu_poc.rar

SHA256 70580f9fa8445de1d8afdd75d3395c93adc5260a63098cdd658a90466379f7fc
MD5 381f36c37f09c03474531fe7e3a8abe3
SHA1 1d82671689ed53d5953d7fcb4e9ae20ab3b7d631
SHA512 e8954b8161dd5bf9022bed201e6ab4a50348230ddc25f60b38d75be43207596dcb1d3acc81a7397516895919e84852024efc1da6163bb4587592824324b77f70
SSDEEP 196608:QWve1XjofWKlaMvujEpTmNvrgiKDRVn0j7IkWN+KiFKOxZxpa6dHtIdOMGROvsp:QW0XjXKbmjEpcHEVnmk3N+jFKOTxoQag
TLSH
T1E5C6336CC91DA12BC5640CF0455DFABCFAE1211F67922B2809BBB45E65F6C40DB0E9F2
MD5 SHA1 SHA512 SSDEEP TLSH

MSVCR71.dll

IMPHASH 7acc8c379c768a1ecd81ec502ff5f33e
SHA256 8094af5ee310714caebccaeee7769ffb08048503ba478b879edfef5f1a24fefe
MD5 86f1895ae8c5e8b17d99ece768a70732
SHA1 d5502a1d00787d68f548ddeebbde1eca5e2b38ca
SHA512 3b7ce2b67056b6e005472b73447d2226677a8cadae70428873f7efa5ed11a3b3dbf6b1a42c5b05b1f2b1d8e06ff50dfc6532f043af8452ed87687eefbf1791da
SSDEEP 6144:OcV9z83OtqxnEYmt3NEnvfF+Tbmbw6An8FMciFMNrb3YgxxpbCAOxO2ElvlE:Ooz83OtIEzW+/m/AyF7bCrO/E
TLSH
T10374C012B1A3CCB3D0B6007449596B599BBFE43046798A73BFE80E4E4F746D1D726A23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8863

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcr71.pdb

kernel32

GetModuleFileNameA GetModuleFileNameW ExitProcess GetProcAddress GetModuleHandleA TerminateProcess GetCurrentProcess WriteFile GetStdHandle GetCurrentThreadId GetCommandLineA GetVersionExA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection ExitThread CloseHandle GetLastError ResumeThread CreateThread TlsAlloc SetLastError GetCurrentThread TlsFree TlsSetValue TlsGetValue FindNextFileA FindFirstFileA FindClose FindNextFileW FindFirstFileW HeapAlloc HeapFree GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc IsBadWritePtr SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP GetCPInfo LoadLibraryA MultiByteToWideChar GetCommandLineW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW InitializeCriticalSection RtlUnwind UnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetConsoleCtrlHandler InterlockedExchange VirtualQuery QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetEnvironmentVariableA SetEnvironmentVariableW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale IsValidCodePage GetLocaleInfoW GetTimeFormatA GetDateFormatA GetTimeZoneInformation HeapSize VirtualProtect GetSystemInfo FlushFileBuffers SetFilePointer SetStdHandle CompareStringA CompareStringW Sleep Beep FileTimeToSystemTime FileTimeToLocalFileTime GetDiskFreeSpaceA GetLogicalDrives SetErrorMode GetFileAttributesA GetCurrentDirectoryA SetCurrentDirectoryA SetFileAttributesA GetFullPathNameA GetDriveTypeA CreateDirectoryA RemoveDirectoryA DeleteFileA GetFileAttributesW GetCurrentDirectoryW SetCurrentDirectoryW SetFileAttributesW GetFullPathNameW CreateDirectoryW DeleteFileW MoveFileW RemoveDirectoryW GetDriveTypeW MoveFileA RaiseException IsBadReadPtr SetUnhandledExceptionFilter IsBadCodePtr GetExitCodeProcess WaitForSingleObject FreeLibrary CreateProcessA CreateProcessW HeapValidate HeapCompact HeapWalk ReadConsoleA SetConsoleMode GetConsoleMode IsDBCSLeadByteEx GetConsoleCP ReadConsoleW SetEndOfFile WriteConsoleA GetConsoleOutputCP WriteConsoleW DuplicateHandle GetFileInformationByHandle PeekNamedPipe ReadConsoleInputA PeekConsoleInputA GetNumberOfConsoleInputEvents ReadConsoleInputW LockFile UnlockFile CreateFileA CreatePipe ReadFile CreateFileW SetFileTime LocalFileTimeToFileTime SystemTimeToFileTime GetLocalTime SetLocalTime

$I10_OUTPUT ??0__non_rtti_object@@QAE@ABV0@@Z ??0__non_rtti_object@@QAE@PBD@Z ??0bad_cast@@AAE@PBQBD@Z ??0bad_cast@@QAE@ABQBD@Z ??0bad_cast@@QAE@ABV0@@Z ??0bad_cast@@QAE@PBD@Z ??0bad_typeid@@QAE@ABV0@@Z ??0bad_typeid@@QAE@PBD@Z ??0exception@@QAE@ABQBD@Z ??0exception@@QAE@ABV0@@Z ??0exception@@QAE@XZ ??1__non_rtti_object@@UAE@XZ ??1bad_cast@@UAE@XZ ??1bad_typeid@@UAE@XZ ??1exception@@UAE@XZ ??1type_info@@UAE@XZ ??2@YAPAXI@Z ??3@YAXPAX@Z ??4__non_rtti_object@@QAEAAV0@ABV0@@Z ??4bad_cast@@QAEAAV0@ABV0@@Z ??4bad_typeid@@QAEAAV0@ABV0@@Z ??4exception@@QAEAAV0@ABV0@@Z ??8type_info@@QBEHABV0@@Z ??9type_info@@QBEHABV0@@Z ??_7__non_rtti_object@@6B@ ??_7bad_cast@@6B@ ??_7bad_typeid@@6B@ ??_7exception@@6B@ ??_Fbad_cast@@QAEXXZ ??_Fbad_typeid@@QAEXXZ ??_U@YAPAXI@Z ??_V@YAXPAX@Z ?_query_new_handler@@YAP6AHI@ZXZ ?_query_new_mode@@YAHXZ ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z ?_set_new_mode@@YAHH@Z ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z ?before@type_info@@QBEHABV1@@Z ?name@type_info@@QBEPBDXZ ?raw_name@type_info@@QBEPBDXZ ?set_new_handler@@YAP6AXXZP6AXXZ@Z ?set_terminate@@YAP6AXXZP6AXXZ@Z ?set_unexpected@@YAP6AXXZP6AXXZ@Z ?swprintf@@YAHPAGIPBGZZ ?swprintf@@YAHPA_WIPB_WZZ ?terminate@@YAXXZ ?unexpected@@YAXXZ ?vswprintf@@YAHPAGIPBGPAD@Z ?vswprintf@@YAHPA_WIPB_WPAD@Z ?what@exception@@UBEPBDXZ _CIacos _CIasin _CIatan _CIatan2 _CIcos _CIcosh _CIexp _CIfmod _CIlog _CIlog10 _CIpow _CIsin _CIsinh _CIsqrt _CItan _CItanh _CRT_RTC_INIT _CxxThrowException _EH_prolog _Getdays _Getmonths _Gettnames _HUGE _Strftime _XcptFilter __CppXcptFilter __CxxCallUnwindDtor __CxxCallUnwindVecDtor __CxxDetectRethrow __CxxExceptionFilter __CxxFrameHandler __CxxLongjmpUnwind __CxxQueryExceptionSize __CxxRegisterExceptionObject __CxxUnregisterExceptionObject __DestructExceptionObject __RTCastToVoid __RTDynamicCast __RTtypeid __STRINGTOLD ___lc_codepage_func ___lc_collate_cp_func ___lc_handle_func ___mb_cur_max_func ___setlc_active_func ___unguarded_readlc_active_add_func __argc __argv __badioinfo __buffer_overrun __crtCompareStringA __crtCompareStringW __crtGetLocaleInfoW __crtGetStringTypeW __crtLCMapStringA __crtLCMapStringW __dllonexit __doserrno __fpecode __getmainargs __initenv __iob_func __isascii __iscsym __iscsymf __lc_clike __lc_codepage __lc_collate_cp __lc_handle __lconv_init __mb_cur_max __p___argc __p___argv __p___initenv __p___mb_cur_max __p___wargv __p___winitenv __p__acmdln __p__amblksiz __p__commode __p__daylight __p__dstbias __p__environ __p__fileinfo __p__fmode __p__iob __p__mbcasemap __p__mbctype __p__osver __p__pctype __p__pgmptr __p__pwctype __p__timezone __p__tzname __p__wcmdln __p__wenviron __p__winmajor __p__winminor __p__winver __p__wpgmptr __pctype_func __pioinfo __pwctype_func __pxcptinfoptrs __security_error_handler __set_app_type __set_buffer_overrun_handler __setlc_active __setusermatherr __threadhandle __threadid __toascii __unDName __unDNameEx __uncaught_exception __unguarded_readlc_active __wargv __wcserror __wgetmainargs __winitenv _abnormal_termination _access _acmdln _adj_fdiv_m16i _adj_fdiv_m32 _adj_fdiv_m32i _adj_fdiv_m64 _adj_fdiv_r _adj_fdivr_m16i _adj_fdivr_m32 _adj_fdivr_m32i _adj_fdivr_m64 _adj_fpatan _adj_fprem _adj_fprem1 _adj_fptan _adjust_fdiv _aexit_rtn _aligned_free _aligned_malloc _aligned_offset_malloc _aligned_offset_realloc _aligned_realloc _amsg_exit _assert _atodbl _atoi64 _atoldbl _beep _beginthread _beginthreadex _c_exit _cabs _callnewh _cexit _cgets _cgetws _chdir _chdrive _chgsign _chkesp _chmod _chsize _clearfp _close _commit _commode _control87 _controlfp _copysign _cprintf _cputs _cputws _creat _cscanf _ctime64 _cwait _cwprintf _cwscanf _daylight _dstbias _dup _dup2 _ecvt _endthread _endthreadex _environ _eof _errno _except_handler2 _except_handler3 _execl _execle _execlp _execlpe _execv _execve _execvp _execvpe _exit _expand _fcloseall _fcvt _fdopen _fgetchar _fgetwchar _filbuf _fileinfo _filelength _filelengthi64 _fileno _findclose _findfirst _findfirst64 _findfirsti64 _findnext _findnext64 _findnexti64 _finite _flsbuf _flushall _fmode _fpclass _fpieee_flt _fpreset _fputchar _fputwchar _fsopen _fstat _fstat64 _fstati64 _ftime _ftime64 _ftol _fullpath _futime _futime64 _gcvt _get_heap_handle _get_osfhandle _get_sbh_threshold _getch _getche _getcwd _getdcwd _getdiskfree _getdllprocaddr _getdrive _getdrives _getmaxstdio _getmbcp _getpid _getsystime _getw _getwch _getwche _getws _global_unwind2 _gmtime64 _heapadd _heapchk _heapmin _heapset _heapused _heapwalk _hypot _i64toa _i64tow _initterm _inp _inpd _inpw _iob _isatty _isctype _ismbbalnum _ismbbalpha _ismbbgraph _ismbbkalnum _ismbbkana _ismbbkprint _ismbbkpunct _ismbblead _ismbbprint _ismbbpunct _ismbbtrail _ismbcalnum _ismbcalpha _ismbcdigit _ismbcgraph _ismbchira _ismbckata _ismbcl0 _ismbcl1 _ismbcl2 _ismbclegal _ismbclower _ismbcprint _ismbcpunct _ismbcspace _ismbcsymbol _ismbcupper _ismbslead _ismbstrail _isnan _itoa _itow _j0 _j1 _jn _kbhit _lfind _loaddll _local_unwind2 _localtime64 _lock _locking _logb _longjmpex _lrotl _lrotr _lsearch _lseek _lseeki64 _ltoa _ltow _makepath _mbbtombc _mbbtype _mbcasemap _mbccpy _mbcjistojms _mbcjmstojis _mbclen _mbctohira _mbctokata _mbctolower _mbctombb _mbctoupper _mbctype _mbsbtype _mbscat _mbschr _mbscmp _mbscoll _mbscpy _mbscspn _mbsdec _mbsdup _mbsicmp _mbsicoll _mbsinc _mbslen _mbslwr _mbsnbcat _mbsnbcmp _mbsnbcnt _mbsnbcoll _mbsnbcpy _mbsnbicmp _mbsnbicoll _mbsnbset _mbsncat _mbsnccnt _mbsncmp _mbsncoll _mbsncpy _mbsnextc _mbsnicmp _mbsnicoll _mbsninc _mbsnset _mbspbrk _mbsrchr _mbsrev _mbsset _mbsspn _mbsspnp _mbsstr _mbstok _mbstrlen _mbsupr _memccpy _memicmp _mkdir _mktemp _mktime64 _msize _nextafter _onexit _open _open_osfhandle _osplatform _osver _outp _outpd _outpw _pclose _pctype _pgmptr _pipe _popen _purecall _putch _putenv _putw _putwch _putws _pwctype _read _resetstkoflw _rmdir _rmtmp _rotl _rotr _safe_fdiv _safe_fdivr _safe_fprem _safe_fprem1 _scalb _scprintf _scwprintf _searchenv _seh_longjmp_unwind _set_SSE2_enable _set_error_mode _set_purecall_handler _set_sbh_threshold _set_security_error_handler _seterrormode _setjmp _setjmp3 _setmaxstdio _setmbcp _setmode _setsystime _sleep _snprintf _snscanf _snwprintf _snwscanf _sopen _spawnl _spawnle _spawnlp _spawnlpe _spawnv _spawnve _spawnvp _spawnvpe _splitpath _stat _stat64 _stati64 _statusfp _strcmpi _strdate _strdup _strerror _stricmp _stricoll _strlwr _strncoll _strnicmp _strnicoll _strnset _strrev _strset _strtime _strtoi64 _strtoui64 _strupr _swab _sys_errlist _sys_nerr _tell _telli64 _tempnam _time64 _timezone _tolower _toupper _tzname _tzset _ui64toa _ui64tow _ultoa _ultow _umask _ungetch _ungetwch _unlink _unloaddll _unlock _utime _utime64 _vscprintf _vscwprintf _vsnprintf _vsnwprintf _waccess _wasctime _wchdir _wchmod _wcmdln _wcreat _wcsdup _wcserror _wcsicmp _wcsicoll _wcslwr _wcsncoll _wcsnicmp _wcsnicoll _wcsnset _wcsrev _wcsset _wcstoi64 _wcstoui64 _wcsupr _wctime _wctime64 _wctype _wenviron _wexecl _wexecle _wexeclp _wexeclpe _wexecv _wexecve _wexecvp _wexecvpe _wfdopen _wfindfirst _wfindfirst64 _wfindfirsti64 _wfindnext _wfindnext64 _wfindnexti64 _wfopen _wfreopen _wfsopen _wfullpath _wgetcwd _wgetdcwd _wgetenv _winmajor _winminor _winver _wmakepath _wmkdir _wmktemp _wopen _wperror _wpgmptr _wpopen _wputenv _wremove _wrename _write _wrmdir _wsearchenv _wsetlocale _wsopen _wspawnl _wspawnle _wspawnlp _wspawnlpe _wspawnv _wspawnve _wspawnvp _wspawnvpe _wsplitpath _wstat _wstat64 _wstati64 _wstrdate _wstrtime _wsystem _wtempnam _wtmpnam _wtof _wtoi _wtoi64 _wtol _wunlink _wutime _wutime64 _y0 _y1 _yn abort abs acos asctime asin atan atan2 atexit atof atoi atol bsearch calloc ceil clearerr clock cos cosh ctime difftime div exit exp fabs fclose feof ferror fflush fgetc fgetpos fgets fgetwc fgetws floor fmod fopen fprintf fputc fputs fputwc fputws fread free freopen frexp fscanf fseek fsetpos ftell fwprintf fwrite fwscanf getc getchar getenv gets getwc getwchar gmtime is_wctype isalnum isalpha iscntrl isdigit isgraph isleadbyte islower isprint ispunct isspace isupper iswalnum iswalpha iswascii iswcntrl iswctype iswdigit iswgraph iswlower iswprint iswpunct iswspace iswupper iswxdigit isxdigit labs ldexp ldiv localeconv localtime log log10 longjmp malloc mblen mbstowcs mbtowc memchr memcmp memcpy memmove memset mktime modf perror pow printf putc putchar puts putwc putwchar qsort raise rand realloc remove rename rewind scanf setbuf setlocale setvbuf signal sin sinh sprintf sqrt srand sscanf strcat strchr strcmp strcoll strcpy strcspn strerror strftime strlen strncat strncmp strncpy strpbrk strrchr strspn strstr strtod strtok strtol strtoul strxfrm swprintf swscanf system tan tanh time tmpfile tmpnam tolower toupper towlower towupper ungetc ungetwc vfprintf vfwprintf vprintf vsprintf vswprintf vwprintf wcscat wcschr wcscmp wcscoll wcscpy wcscspn wcsftime wcslen wcsncat wcsncmp wcsncpy wcspbrk wcsrchr wcsspn wcsstr wcstod wcstok wcstol wcstombs wcstoul wcsxfrm wctomb wprintf wscanf

emulator.exe

IMPHASH 6f07296858b8587a2dca2929346c502b
SHA256 5f010c9cecd1fce7a780867b2d72afd219317c873626810618812534f76f49e1
MD5 84e989e173e85879e526fb6684aa537a
SHA1 cf3c1d22322b4988342ccb0ad0f7053e76310d93
SHA512 7bedf34d7aa161496f2bd02b1520e4893378827038d09387f1a98651a6ea2a1fc89bbc41841dc8173dece72d1685e3f0ff295a21b8505dbd35ae16adb82fd34f
SSDEEP 384:77eu6gkCClf/1SWJ+IXLBVFBVXTbSsrL2RjPWehd6T5hDda4H/2:77eu6ECJ1SqBVFBVXHSJhWehdAnDdfu
TLSH
T13C72F9866FD09C6BE3A4453542E9466F8B33F3B3A31199D3CA2C697619942C4CD7C3CA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

9642

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

emulator.ini

SHA256 851a72217f8591c389d91dd40333b36126580f54c7c56c2f3bf5981139eb4737
MD5 ddce3a9029c2acc41f4cdf11bfaf5afc
SHA1 fb96914c66a4bbfa6c6fd54d1a03e9d660ebc921
SHA512 e4a1463144abb304b7ee3403584d1301aee29f6d17bab4ca31ea6281019b15d85d458bcb8eaf98101cf55aaf5015334470abaa74210ae808b95dfb2b60f00b46
TLSH
T152C09B56595D0865C951D869103530615779C167704FE002177BBB8D29FE52907904F7
MD5 SHA1 SHA512 TLSH

files/SteamUI_273.pkg

SHA256 644ea6f25a07b4696095aaf908a6b5a60fcd65f2e417361cb91cd1234c5364e6
MD5 20f17de35ce6c4ec66cb85c5c536edfa
SHA1 679083ae255ea8983650f986e2b7c425debc9290
SHA512 12bfc730c448af75083bd182f0ab89e6dd94bd606e2cc53a4e31bd2e8fa7c0af5353691a612a421eb82c7b8285c1dff58f5d12a9febbc70fa28a93e830678585
SSDEEP 196608:IvId69x30i520V+VjYBUoKvsDa9jx9bv9rT:IAjYBKku9vRT
TLSH
T1C8763321F9615B48EDBF8675BE5E1C9818F3E33885727C5CA23970064C2ED18A934F7A
MD5 SHA1 SHA512 SSDEEP TLSH

macos

files/Steam_21.pkg

SHA256 178dd2de26fc4dd08025ffc9ef9dc3df8fecc33f82e6a1ffa3d76a45551a6e07
MD5 6bd6e3d30d746ec4d8a7e23849d6847f
SHA1 da830b551f27ed37e5bc538225d4ce7147b1e204
SHA512 d3f4d235df87da484f44756d775251c4e7dc5d935970a27d855793d67176776b9dd6625a117faa69d92214fb71853bf53e8fd6577ac58272fbabab20e31ddd1a
SSDEEP 12288:xj+6eXA4bauEBvZmg2HZHJQSd3XEIq7pNVTwBpoLLQNz9:xjLeXARvgXHvQSdQlTwfNJ
TLSH
T1FDC4234FEF380BD7A8BBD749EFBC0F54816A769AD08215652FB4052FD081EE448B5B81
MD5 SHA1 SHA512 SSDEEP TLSH

macos

files/firstblob.py

SHA256 4e0865a3231f5b42c3f0d5091801f5f71b180d4f74a242143df4c68dbf9d5966
MD5 5f822ce004da2d1cc6d5e646c286e8e0
SHA1 cd6a6c29bbb9bc9fab285f4f39adc49080fe8de5
SHA512 dd57964c293907ab0132057bd69466f1c25e0572dd31c1915f18bffcf877be328a34d132936147f4ff4e89a6425a4b471fd559a6400821761efce2a7d02c49d9
TLSH
T15F01D4C34DA78E290AB5D90AAD343D6CAE5C83A7C6472F82B5F89007EBF061380C4470
MD5 SHA1 SHA512 TLSH

files/login_part1.bin

SHA256 1d1508851554b0179407f72ce51f8215a3e1d55db8474945e77f1b1c1d9f0b4b
MD5 83b412ad469febaf7acd4eea85e0e47f
SHA1 4d0f1c0a061c2100fdfe57f9650ada4600cab45d
SHA512 ef6773b5d1bc09a84e7f495f88fce3a20a8410273448bbafd1463f07094282110fcdf565bdd5cdb070ab3a069596c3aa52d04b4331bb6508a148eb4c36b729d3
MD5 SHA1 SHA512

files/manifests/7_78.manifest

SHA256 6544607cb0e6766695c8a9101ec62a1084e22137aa3ac30965c49569581018f2
MD5 44d57eb3b8a10a8f98b88c71a534d697
SHA1 592330b1d3ed4ac1f371ef9c13eeb6143ad40e23
SHA512 f0b9bbe1f670b497f55f1cdc163dc50aaa32026bc193473615400efefff06ec9dfa415a6f1d1426388e260bd7ecec83e3695c42423aa26873f13fac6424aadc1
SSDEEP 768:a67AbRv2MbazpGmQS2HoPI2JooWUPNyoQfVa:jUFmzTQS2HoP/OfVa
TLSH
T116E27447BF84AD33CE2966709DBF4866B714C5B72FA8476B3E3EE21C1C6A314984160D
MD5 SHA1 SHA512 SSDEEP TLSH

files/secondblob.py

SHA256 8bb131dea6334f2605717aa5ea2333eab2d7233a9a3674f92654ee2b6129a785
MD5 0a0abf761d30b154b30e9f83c56fff46
SHA1 0fc46d506ae06429f2c6ab653e24e253b1fa568c
SHA512 2b41eef1a110b4c3f627bcb9c7b2fa5127d9ab70bd4e89d1c8180a7497a7ec1a0b07b68b230baa82981d2bb3f49d6d0f23a26e1d44d33e68e63b457c9a99d307
SSDEEP 1536:Dili8MxUCOQPmhUqZuSo5xfiuRJNrlEgvKwMfsuc66pudub3EIVu2w/:Wl4YbUqcJNrlEgvKYpu0EIVu2q
TLSH
T175E59AD70CA35A6A06F5D61AAD387D6CEE0C87ABD4872F8276BCA517DFF16034080935
MD5 SHA1 SHA512 SSDEEP TLSH

files/storages/7.checksums

SHA256 b6899580cee25017f5cb6380d1bfffb0eb803c918a38e8dada90ecee73a60a49
MD5 eae50193e3bdfa2308e1a8c4174b9c42
SHA1 10af570647630cdfb3b1391e4e2cbfadc3390693
SHA512 69329a6e7ebc7a1512ca1703a2056e9f7aad1faab5d41fb0e4f62f722c3a67dc075a4fadef59cc68a04291f1f02d7e22447fc41f0ac7f0e0ba4be24c1a9a1bbf
SSDEEP 768:xvEb71ADh/cj5sY1hzaIgvI5mc+q++4UMb:ybJ8MsYHzk8OqF4UMb
TLSH
T1FED24E9E8F58EE6BCA2D42F155FE03553131C28593038B073E69B5316DC639A2E8E54D
MD5 SHA1 SHA512 SSDEEP TLSH

files/storages/7.data

SHA256 e58e1843c728ad382bdda947ab7f3db0ba0cfc4b04c73e468ca318b58bb5454a
MD5 b047a20393f41663031ccdf99bd4bd63
SHA1 482cbdac7af3909e4299e381e8dc82857e1489c3
SHA512 3cacbbcbd1d13008074ff85461d478bab2264706ecac4d903676aac59a48024e7f2333d85af2756881aca798d2edab8bab37e21a7656b55666ecb7fdf043951c
SSDEEP 49152:wLl/os+2M6o6yy0kM6+pRczupDCVuSvmo+ErWH13/5EJGmrLmcJv/pjskqnj:8os+B6rUHczupKBvxSHZhOGyHppjsf
TLSH
T160E533318CF67EADF576DFC19A2C45038A88E51E256449383ABF4970029EFDAD72D24C
MD5 SHA1 SHA512 SSDEEP TLSH

files/storages/7.index

SHA256 523539ecf34649546e0938593ee96340202f6c8f1fb5600890ad59091a2fc325
MD5 cd2601b158fe53e9cba859ed6be95949
SHA1 c803a7abd041df1b40d0bb2980c96dd100414a27
SHA512 06e2fc85f9513844ab0362bad7d546d8cf9c98796d6e6abcbc447eedcd9dab695dbe5d4045845e45266e4ca4d7204ff40bf63223b2ccf1f410da234b7c7988d6
SSDEEP 192:U4HpcnbktKd8MHXRgcXUZp0xJl4Rvq+LXksstx9PU2eV9:lcnbktYRUzA4Rfv+xHa9
TLSH
T16B424C65D3388160CEB8D136C9C8C381B357D0C945AA764E55BCD066BB1B0CC6FEE6E2
MD5 SHA1 SHA512 SSDEEP TLSH

files/users.txt

SHA256 047d364c0561a6ac259a8eff3123ac2c93adce087b061461703aa79da24148a4
MD5 e23236f27ff8ddf0937a3725289a3ac9
SHA1 f15c507377a58a62e022aa55598e6d2b37ea50cc
SHA512 83f972e74033be7fc3488c5760576ecc9638c51f552c285ebc9fb8b8468284ae976b8cec8a44b001cf5a5f7b036b24c4569bb6eab92279851feef8a1547a7842
MD5 SHA1 SHA512

files/users/steamtest.py

SHA256 cf62d7e915fb5c623f9d1cf5ec98205e3ecdff73ee38895d1c94af5e08bbf58e
MD5 ef6b32579c1e58cc2ab29f868d301f04
SHA1 13ca61fb44acf41579dcfab187a1c1c44317c06d
SHA512 1a0b99c376cee2e52b3de5ae4e408356b7c1a37037ab9f2a84002174ab87ecdb80779ce32fefd01147ded001188e4d8f56b227fd8a4bd91668d29ed0bb508185
TLSH
T149512AC70CA30A2526F5D61AAD3A7D2CEE1D479798C72F8276BC9503CFF12230280929
MD5 SHA1 SHA512 TLSH

fixed_exe/Steam.exe

IMPHASH d2a0b4d4df60c98696f432ec98e6134b
SHA256 c7ff6fcec1aa978dba05fe95572e1354149d3e889a0d3293fc980f1b485fbc3a
MD5 7b424e35e502cd92104277f8c0b7ed4b
SHA1 b9eec9b07247edac6467a2cf6993d8bf5b6c6992
SHA512 2a9dc0a0119e6ea3a9d2af4e20335aa83074735436b997c82e71846b3ba3ab0a923236bd5797ad0673c5401a4035e3dc44c7f7ea87c4547fed65d2268aa556b6
SSDEEP 24576:PVC1vz33ISg0Qdii2Rg+uAvTlx/xItDtIXGiyLUt:PVC1vc0QdiPRvuAOtmGiyLW
TLSH
T1C0455921B6E3C076D69214380B7FE779527DBF854F219EC7B3B8EA1C597A2C04436229
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

514904

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

u:\p4clients\rel_beta\Projects\GazelleProto\Client\BootStrapper\VC70_Release_Static\BootStrapper.pdb

ws2_32

bind select __WSAFDIsSet recvfrom sendto WSAGetLastError recv connect socket ntohs ioctlsocket htonl gethostname gethostbyname inet_addr WSASend WSARecv shutdown WSASetLastError setsockopt getsockname closesocket WSACleanup WSAStartup send htons

kernel32

SetLastError MulDiv GlobalAddAtomA lstrcpynA lstrcmpW lstrcatA GlobalFindAtomA GlobalGetAtomNameA GlobalFlags WritePrivateProfileStringA GlobalReAlloc GlobalHandle TlsGetValue TlsAlloc TlsSetValue LocalReAlloc TlsFree WriteFile FlushFileBuffers LockFile UnlockFile DuplicateHandle GetVolumeInformationA GetCPInfo GlobalUnlock FileTimeToSystemTime SetErrorMode GetTickCount FileTimeToLocalFileTime GetFileTime HeapAlloc HeapFree HeapReAlloc IsBadReadPtr GetSystemTimeAsFileTime ExitProcess TerminateProcess SetEnvironmentVariableA ExitThread CreateThread GetDriveTypeA GetStartupInfoA RtlUnwind HeapSize HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr SetHandleCount GetStdHandle GetFileType SetEnvironmentVariableW LCMapStringA LCMapStringW UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetStringTypeA GetStringTypeW GetTimeZoneInformation GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetStdHandle VirtualProtect VirtualQuery GetLocaleInfoW FreeResource GlobalFree GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA GetTempFileNameA QueryPerformanceCounter QueryPerformanceFrequency SetUnhandledExceptionFilter SetThreadPriority GetSystemInfo LocalFree LocalAlloc GetCurrentThread SetEndOfFile SetFilePointer ReadFile GetFileSize CreateMutexA DeleteFileA SetFileAttributesA GetLongPathNameA RemoveDirectoryA CopyFileA CreateDirectoryA WaitForMultipleObjectsEx TerminateThread ResumeThread ResetEvent FormatMessageA InterlockedIncrement MapViewOfFile CreateFileMappingA UnmapViewOfFile SetCurrentDirectoryA GetCurrentDirectoryA GetFileAttributesA GetFullPathNameA FlushViewOfFile IsBadCodePtr GetCurrentProcess CreateFileA GetCurrentThreadId GetCurrentProcessId GetTempPathA RaiseException GetModuleFileNameA GetVersion GetVersionExA CompareStringA GetThreadLocale lstrcmpiA InterlockedExchange MultiByteToWideChar GetACP CompareStringW WideCharToMultiByte GetLocaleInfoA lstrlenA SizeofResource LockResource LoadResource FindResourceA GetModuleHandleA FreeLibrary GetProcAddress LoadLibraryA GetExitCodeProcess WaitForSingleObject SetEvent OpenEventA GetExitCodeThread GetCommandLineA InterlockedDecrement FindClose FindNextFileA FindFirstFileA SystemTimeToFileTime GetSystemTime CreateProcessA Sleep WaitForMultipleObjects CreateEventA CloseHandle LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection GetLastError GetOEMCP

user32

RegisterClipboardFormatA PostThreadMessageA ReleaseCapture LoadCursorA SetCapture MoveWindow SetWindowTextA IsDialogMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA SetFocus IsChild GetWindowTextA GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA MapWindowPoints UpdateWindow GetMenu GetSubMenu GetMenuItemID GetMenuItemCount AdjustWindowRectEx EqualRect GetClassInfoA RegisterClassA UnregisterClassA DefWindowProcA CallWindowProcA SetWindowLongA SystemParametersInfoA GetWindowPlacement GetWindowRect PtInRect IntersectRect GetLastActivePopup SetCursor SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA IsWindowVisible GetKeyState PeekMessageA GetCursorPos SetMenuItemBitmaps GetFocus ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA GetSysColor EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA GetActiveWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetWindowLongA IsWindowEnabled GetNextDlgTabItem EndDialog GetWindow SetWindowContextHelpId GetParent MapDialogRect SetWindowPos GetDlgItem PostQuitMessage ReleaseDC GetDC CopyRect SetForegroundWindow ShowWindow wsprintfA CharUpperA EnableWindow SendMessageA GetDesktopWindow KillTimer DestroyMenu GetSysColorBrush MessageBeep GetNextDlgGroupItem SendMessageW DrawIcon GetSystemMetrics IsIconic SetTimer LoadImageA DrawTextW OffsetRect InflateRect GetClientRect FindWindowA MessageBoxW MessageBoxA RegisterWindowMessageA PostMessageA InvalidateRgn InvalidateRect CopyAcceleratorTableA SetRect IsRectEmpty GetDlgCtrlID CharNextA ValidateRect

gdi32

GetDeviceCaps GetMapMode GetTextColor GetRgnBox SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible BitBlt GetWindowExtEx GetViewportExtEx GetObjectA ScaleWindowExtEx SetWindowExtEx GetClipBox SetMapMode SetTextColor SetBkMode SetBkColor RestoreDC SaveDC GetStockObject CreateCompatibleDC CreateBitmap DeleteDC ExtSelectClipRgn CreateRectRgnIndirect DeleteObject GetBkColor CreateSolidBrush ScaleViewportExtEx

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

comdlg32

GetFileTitleA

advapi32

RegQueryValueA RegEnumValueA RegQueryInfoKeyA RegEnumKeyA RegDeleteValueA RegQueryValueExA RegDeleteKeyA RegCreateKeyExA RegOpenKeyExA RegCloseKey RegSetValueExA RegOpenKeyA

shell32

Shell_NotifyIconW Shell_NotifyIconA

ole32

CLSIDFromProgID CLSIDFromString CoTaskMemFree CoTaskMemAlloc CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal CoRegisterMessageFilter CoFreeUnusedLibraries OleInitialize OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject OleUninitialize

oleaut32

SysAllocString VariantCopy SafeArrayDestroy SystemTimeToVariantTime OleCreateFontIndirect SysAllocStringByteLen SysStringLen VariantInit VariantChangeType VariantClear SysAllocStringLen SysFreeString

shlwapi

PathFindExtensionA PathFindFileNameA PathStripToRootA SHDeleteKeyA PathIsUNCA

comctl32

ord17

oledlg

ord8

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

oleacc

CreateStdAccessibleObject LresultFromObject

library.zip

SHA256 e6a4e21c63031c1c2b5c7d1a4bef2f9e59fd58d4b808a4549a5d726f89632b14
MD5 dceb5d9fc45f4d8c1384f4faffe04335
SHA1 126b574ba0cbcff54fbb58634f69f08bed4c9a28
SHA512 1c82efd26a15d236c2628d8c83736906f7dddcacfb303741f7efb18aba7d467b237213132ff1b46b448a818f4d5fbd8e1d1b3f3a00aab55ec48df2861cd3dde0
SSDEEP 12288:Af3IsQTXwEsDuqY6ceSEcFkh0NQNsMMaiN6BbZMifL6JPxSCV2p:A/sTXPsu5exF0SNXBbHT6JJSpp
TLSH
T1D7C42330A6914682CEF532B428D7860FAA326319276DD7DF08DFA3E159872C4E7326C5
MD5 SHA1 SHA512 SSDEEP TLSH

python24.dll

IMPHASH 5f16412dcd9d6c93371e429a9bd67165
SHA256 6db17fd717e0fe72f5da76923ca29ace799b0b861dd0e3024928953d33a36b60
MD5 504854548a67fcc1383d841ecea5f075
SHA1 a811fa7e0b6c8169bec4b2aed7513ad7ec2e7b1b
SHA512 359c1d802aa2d553b360de413d6e30c05a3cf2a7afe4e0190ff1179eec41fc08fd3c1a9aee2a13ab11233307d8557ed8a9ae66189275adcde75f9e34aa979461
SSDEEP 24576:WwVON0FoSNYuEZeh1BNbi/yhOSjj3e/74ulduIagdl/hmNNffHvSznmM+PlxzHIv:L1ve/yhOzNRaFNhfHvCnmM+PlxU4fZ
TLSH
T169857C45F7828575C49585BD53B76E7A7A375E72232FF4E3CA2439808B321E0873E289
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

798506

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\loewis\release\python\PCbuild\python24.pdb

kernel32

LoadLibraryExA GetFullPathNameA LocalFree SetEndOfFile FindClose FindFirstFileA GetSystemInfo UnmapViewOfFile GetFileSize MapViewOfFile CreateFileMappingA SetFilePointer FlushViewOfFile Sleep FindNextFileA FindNextFileW FindFirstFileW GetFullPathNameW GetEnvironmentVariableA GetProcessTimes FormatMessageA OutputDebugStringA GetVersionExA GetConsoleOutputCP GetConsoleCP InterlockedExchange CreateEventA GetCurrentThreadId InterlockedIncrement SetEvent InterlockedDecrement ReleaseSemaphore CreateSemaphoreA SetConsoleCtrlHandler ResetEvent MultiByteToWideChar WideCharToMultiByte GetCurrentProcessId GetTickCount ExitProcess FreeLibrary GetProcAddress GetModuleFileNameA GetVersion WaitForSingleObject GetExitCodeProcess CreateProcessA CreatePipe DuplicateHandle GetCurrentProcess GetStdHandle GetLastError CloseHandle GetACP GetLocaleInfoA QueryPerformanceFrequency GetModuleHandleA QueryPerformanceCounter GetSystemTimeAsFileTime

user32

wsprintfA LoadStringA

advapi32

RegSetValueExA RegSetValueA RegSaveKeyA RegQueryValueExA RegQueryValueA RegOpenKeyExA RegLoadKeyA RegFlushKey RegEnumValueA RegQueryInfoKeyA RegEnumKeyA RegDeleteValueA RegDeleteKeyA RegCreateKeyA RegConnectRegistryA RegCloseKey RegEnumKeyExA

shell32

ShellExecuteA

msvcr71

_putenv memmove fclose fgetc free malloc ungetc fopen isdigit fflush fwrite isalpha islower isupper setlocale localeconv strcoll wcscoll strxfrm time tolower isalnum realloc fputs _mbstrlen printf exit fprintf _iob fread clearerr strchr _errno ceil floor isspace strncpy _CIsinh _CIcosh _hypot _tzname memchr sprintf _CIpow strncat getc strtol modf localtime gmtime strncmp _sys_errlist _sys_nerr wcslen strrchr strerror _wfopen setvbuf fsetpos fgetpos _lseeki64 _get_osfhandle ftell fgets frexp _isnan _finite _CIfmod ldexp getenv fseek _setmode putc acos asin atan atan2 cos cosh exp fabs fmod pow sin sinh sqrt tan tanh log log10 _heapmin _locking _open_osfhandle _kbhit _getch _getche _putch _ungetch _vsnprintf __p__environ wcscpy _waccess _wchdir _wchmod _commit _wgetcwd wcsncpy _wmkdir rename _wrename _wrmdir _stati64 _wstati64 system _wunlink _wutime _exit _spawnv _spawnve _stricmp _cwait _wopen _fstati64 _tempnam tmpfile tmpnam abort _fdopen strtod strpbrk atoi rewind _except_handler3 signal fputc toupper isxdigit vfprintf _endthread _beginthread clock strftime asctime ctime mktime strstr qsort __security_error_handler _initterm _adjust_fdiv __CppXcptFilter __dllonexit _onexit _daylight _timezone _tzset _HUGE _fileno _getcwd _stat _isatty _fstat _lseek _open _unlink _strnicmp _access _chdir _chmod _mkdir _rmdir _umask _utime _execv _execve _getpid _close _dup _dup2 _read _write _ftime

PyArg_Parse PyArg_ParseTuple PyArg_ParseTupleAndKeywords PyArg_UnpackTuple PyArg_VaParse PyArg_VaParseTupleAndKeywords PyBaseObject_Type PyBaseString_Type PyBool_FromLong PyBool_Type PyBuffer_FromMemory PyBuffer_FromObject PyBuffer_FromReadWriteMemory PyBuffer_FromReadWriteObject PyBuffer_New PyBuffer_Type PyCFunction_Call PyCFunction_Fini PyCFunction_GetFlags PyCFunction_GetFunction PyCFunction_GetSelf PyCFunction_New PyCFunction_NewEx PyCFunction_Type PyCObject_AsVoidPtr PyCObject_FromVoidPtr PyCObject_FromVoidPtrAndDesc PyCObject_GetDesc PyCObject_Import PyCObject_SetVoidPtr PyCObject_Type PyCallIter_New PyCallIter_Type PyCallable_Check PyCell_Get PyCell_New PyCell_Set PyCell_Type PyClassMethod_New PyClassMethod_Type PyClass_IsSubclass PyClass_New PyClass_Type PyCode_Addr2Line PyCode_New PyCode_Type PyCodec_BackslashReplaceErrors PyCodec_Decode PyCodec_Decoder PyCodec_Encode PyCodec_Encoder PyCodec_IgnoreErrors PyCodec_LookupError PyCodec_Register PyCodec_RegisterError PyCodec_ReplaceErrors PyCodec_StreamReader PyCodec_StreamWriter PyCodec_StrictErrors PyCodec_XMLCharRefReplaceErrors PyComplex_AsCComplex PyComplex_FromCComplex PyComplex_FromDoubles PyComplex_ImagAsDouble PyComplex_RealAsDouble PyComplex_Type PyDescr_NewClassMethod PyDescr_NewGetSet PyDescr_NewMember PyDescr_NewMethod PyDescr_NewWrapper PyDictProxy_New PyDict_Clear PyDict_Contains PyDict_Copy PyDict_DelItem PyDict_DelItemString PyDict_GetItem PyDict_GetItemString PyDict_Items PyDict_Keys PyDict_Merge PyDict_MergeFromSeq2 PyDict_New PyDict_Next PyDict_SetItem PyDict_SetItemString PyDict_Size PyDict_Type PyDict_Update PyDict_Values PyEnum_Type PyErr_BadArgument PyErr_BadInternalCall PyErr_CheckSignals PyErr_Clear PyErr_Display PyErr_ExceptionMatches PyErr_Fetch PyErr_Format PyErr_GivenExceptionMatches PyErr_NewException PyErr_NoMemory PyErr_NormalizeException PyErr_Occurred PyErr_Print PyErr_PrintEx PyErr_ProgramText PyErr_Restore PyErr_SetExcFromWindowsErr PyErr_SetExcFromWindowsErrWithFilename PyErr_SetExcFromWindowsErrWithFilenameObject PyErr_SetExcFromWindowsErrWithUnicodeFilename PyErr_SetFromErrno PyErr_SetFromErrnoWithFilename PyErr_SetFromErrnoWithFilenameObject PyErr_SetFromErrnoWithUnicodeFilename PyErr_SetFromWindowsErr PyErr_SetFromWindowsErrWithFilename PyErr_SetFromWindowsErrWithUnicodeFilename PyErr_SetInterrupt PyErr_SetNone PyErr_SetObject PyErr_SetString PyErr_SyntaxLocation PyErr_Warn PyErr_WarnExplicit PyErr_WriteUnraisable PyEval_AcquireLock PyEval_AcquireThread PyEval_CallFunction PyEval_CallMethod PyEval_CallObject PyEval_CallObjectWithKeywords PyEval_EvalCode PyEval_EvalCodeEx PyEval_EvalFrame PyEval_GetBuiltins PyEval_GetCallStats PyEval_GetFrame PyEval_GetFuncDesc PyEval_GetFuncName PyEval_GetGlobals PyEval_GetLocals PyEval_GetRestricted PyEval_InitThreads PyEval_MergeCompilerFlags PyEval_ReInitThreads PyEval_ReleaseLock PyEval_ReleaseThread PyEval_RestoreThread PyEval_SaveThread PyEval_SetProfile PyEval_SetTrace PyEval_ThreadsInitialized PyExc_ArithmeticError PyExc_AssertionError PyExc_AttributeError PyExc_DeprecationWarning PyExc_EOFError PyExc_EnvironmentError PyExc_Exception PyExc_FloatingPointError PyExc_FutureWarning PyExc_IOError PyExc_ImportError PyExc_IndentationError PyExc_IndexError PyExc_KeyError PyExc_KeyboardInterrupt PyExc_LookupError PyExc_MemoryError PyExc_MemoryErrorInst PyExc_NameError PyExc_NotImplementedError PyExc_OSError PyExc_OverflowError PyExc_OverflowWarning PyExc_PendingDeprecationWarning PyExc_ReferenceError PyExc_RuntimeError PyExc_RuntimeWarning PyExc_StandardError PyExc_StopIteration PyExc_SyntaxError PyExc_SyntaxWarning PyExc_SystemError PyExc_SystemExit PyExc_TabError PyExc_TypeError PyExc_UnboundLocalError PyExc_UnicodeDecodeError PyExc_UnicodeEncodeError PyExc_UnicodeError PyExc_UnicodeTranslateError PyExc_UserWarning PyExc_ValueError PyExc_Warning PyExc_WindowsError PyExc_ZeroDivisionError PyFile_AsFile PyFile_FromFile PyFile_FromString PyFile_GetLine PyFile_Name PyFile_SetBufSize PyFile_SetEncoding PyFile_SoftSpace PyFile_Type PyFile_WriteObject PyFile_WriteString PyFloat_AsDouble PyFloat_AsReprString PyFloat_AsString PyFloat_Fini PyFloat_FromDouble PyFloat_FromString PyFloat_Type PyFrame_BlockPop PyFrame_BlockSetup PyFrame_FastToLocals PyFrame_Fini PyFrame_LocalsToFast PyFrame_New PyFrame_Type PyFrozenSet_Type PyFunction_GetClosure PyFunction_GetCode PyFunction_GetDefaults PyFunction_GetGlobals PyFunction_GetModule PyFunction_New PyFunction_SetClosure PyFunction_SetDefaults PyFunction_Type PyGC_Collect PyGILState_Ensure PyGILState_GetThisThreadState PyGILState_Release PyGen_New PyGen_Type PyImport_AddModule PyImport_AppendInittab PyImport_Cleanup PyImport_ExecCodeModule PyImport_ExecCodeModuleEx PyImport_ExtendInittab PyImport_FrozenModules PyImport_GetMagicNumber PyImport_GetModuleDict PyImport_Import PyImport_ImportFrozenModule PyImport_ImportModule PyImport_ImportModuleEx PyImport_Inittab PyImport_ReloadModule PyInstance_New PyInstance_NewRaw PyInstance_Type PyInt_AsLong PyInt_AsUnsignedLongLongMask PyInt_AsUnsignedLongMask PyInt_Fini PyInt_FromLong PyInt_FromString PyInt_FromUnicode PyInt_GetMax PyInt_Type PyInterpreterState_Clear PyInterpreterState_Delete PyInterpreterState_Head PyInterpreterState_New PyInterpreterState_Next PyInterpreterState_ThreadHead PyIter_Next PyList_Append PyList_AsTuple PyList_Fini PyList_GetItem PyList_GetSlice PyList_Insert PyList_New PyList_Reverse PyList_SetItem PyList_SetSlice PyList_Size PyList_Sort PyList_Type PyLong_AsDouble PyLong_AsLong PyLong_AsLongLong PyLong_AsUnsignedLong PyLong_AsUnsignedLongLong PyLong_AsUnsignedLongLongMask PyLong_AsUnsignedLongMask PyLong_AsVoidPtr PyLong_FromDouble PyLong_FromLong PyLong_FromLongLong PyLong_FromString PyLong_FromUnicode PyLong_FromUnsignedLong PyLong_FromUnsignedLongLong PyLong_FromVoidPtr PyLong_Type PyMapping_Check PyMapping_GetItemString PyMapping_HasKey PyMapping_HasKeyString PyMapping_Length PyMapping_SetItemString PyMapping_Size PyMarshal_ReadLastObjectFromFile PyMarshal_ReadLongFromFile PyMarshal_ReadObjectFromFile PyMarshal_ReadObjectFromString PyMarshal_ReadShortFromFile PyMarshal_WriteLongToFile PyMarshal_WriteObjectToFile PyMarshal_WriteObjectToString PyMem_Free PyMem_Malloc PyMem_Realloc PyMember_Get PyMember_GetOne PyMember_Set PyMember_SetOne PyMethod_Class PyMethod_Fini PyMethod_Function PyMethod_New PyMethod_Self PyMethod_Type PyModule_AddIntConstant PyModule_AddObject PyModule_AddStringConstant PyModule_GetDict PyModule_GetFilename PyModule_GetName PyModule_New PyModule_Type PyNode_AddChild PyNode_Compile PyNode_CompileFlags PyNode_CompileSymtable PyNode_Free PyNode_Future PyNode_ListTree PyNode_New PyNumber_Absolute PyNumber_Add PyNumber_And PyNumber_Check PyNumber_Coerce PyNumber_CoerceEx PyNumber_Divide PyNumber_Divmod PyNumber_Float PyNumber_FloorDivide PyNumber_InPlaceAdd PyNumber_InPlaceAnd PyNumber_InPlaceDivide PyNumber_InPlaceFloorDivide PyNumber_InPlaceLshift PyNumber_InPlaceMultiply PyNumber_InPlaceOr PyNumber_InPlacePower PyNumber_InPlaceRemainder PyNumber_InPlaceRshift PyNumber_InPlaceSubtract PyNumber_InPlaceTrueDivide PyNumber_InPlaceXor PyNumber_Int PyNumber_Invert PyNumber_Long PyNumber_Lshift PyNumber_Multiply PyNumber_Negative PyNumber_Or PyNumber_Positive PyNumber_Power PyNumber_Remainder PyNumber_Rshift PyNumber_Subtract PyNumber_TrueDivide PyNumber_Xor PyOS_AfterFork PyOS_CheckStack PyOS_FiniInterrupts PyOS_InitInterrupts PyOS_InputHook PyOS_InterruptOccurred PyOS_Readline PyOS_ReadlineFunctionPointer PyOS_ascii_atof PyOS_ascii_formatd PyOS_ascii_strtod PyOS_getsig PyOS_setsig PyOS_snprintf PyOS_strtol PyOS_strtoul PyOS_vsnprintf PyObject_AsCharBuffer PyObject_AsFileDescriptor PyObject_AsReadBuffer PyObject_AsWriteBuffer PyObject_Call PyObject_CallFunction PyObject_CallFunctionObjArgs PyObject_CallMethod PyObject_CallMethodObjArgs PyObject_CallObject PyObject_CheckReadBuffer PyObject_ClearWeakRefs PyObject_Cmp PyObject_Compare PyObject_DelItem PyObject_DelItemString PyObject_Dir PyObject_Free PyObject_GC_Del PyObject_GC_Track PyObject_GC_UnTrack PyObject_GenericGetAttr PyObject_GenericSetAttr PyObject_GetAttr PyObject_GetAttrString PyObject_GetItem PyObject_GetIter PyObject_HasAttr PyObject_HasAttrString PyObject_Hash PyObject_Init PyObject_InitVar PyObject_IsInstance PyObject_IsSubclass PyObject_IsTrue PyObject_Length PyObject_Malloc PyObject_Not PyObject_Print PyObject_Realloc PyObject_Repr PyObject_RichCompare PyObject_RichCompareBool PyObject_SelfIter PyObject_SetAttr PyObject_SetAttrString PyObject_SetItem PyObject_Size PyObject_Str PyObject_Type PyObject_Unicode PyParser_ParseFile PyParser_ParseFileFlags PyParser_ParseString PyParser_ParseStringFlags PyParser_ParseStringFlagsFilename PyParser_SetError PyParser_SimpleParseFile PyParser_SimpleParseFileFlags PyParser_SimpleParseString PyParser_SimpleParseStringFlags PyParser_SimpleParseStringFlagsFilename PyProperty_Type PyRange_New PyRange_Type PyReversed_Type PyRun_AnyFile PyRun_AnyFileEx PyRun_AnyFileExFlags PyRun_AnyFileFlags PyRun_File PyRun_FileEx PyRun_FileExFlags PyRun_FileFlags PyRun_InteractiveLoop PyRun_InteractiveLoopFlags PyRun_InteractiveOne PyRun_InteractiveOneFlags PyRun_SimpleFile PyRun_SimpleFileEx PyRun_SimpleFileExFlags PyRun_SimpleString PyRun_SimpleStringFlags PyRun_String PyRun_StringFlags PySeqIter_New PySeqIter_Type PySequence_Check PySequence_Concat PySequence_Contains PySequence_Count PySequence_DelItem PySequence_DelSlice PySequence_Fast PySequence_GetItem PySequence_GetSlice PySequence_In PySequence_InPlaceConcat PySequence_InPlaceRepeat PySequence_Index PySequence_Length PySequence_List PySequence_Repeat PySequence_SetItem PySequence_SetSlice PySequence_Size PySequence_Tuple PySet_Type PySlice_GetIndices PySlice_GetIndicesEx PySlice_New PySlice_Type PyStaticMethod_New PyStaticMethod_Type PyString_AsDecodedObject PyString_AsDecodedString PyString_AsEncodedObject PyString_AsEncodedString PyString_AsString PyString_AsStringAndSize PyString_Concat PyString_ConcatAndDel PyString_Decode PyString_DecodeEscape PyString_Encode PyString_Fini PyString_Format PyString_FromFormat PyString_FromFormatV PyString_FromString PyString_FromStringAndSize PyString_InternFromString PyString_InternImmortal PyString_InternInPlace PyString_Repr PyString_Size PyString_Type PyStructSequence_InitType PyStructSequence_New PySuper_Type PySymtableEntry_New PySymtableEntry_Type PySymtable_Free PySys_AddWarnOption PySys_GetFile PySys_GetObject PySys_ResetWarnOptions PySys_SetArgv PySys_SetObject PySys_SetPath PySys_WriteStderr PySys_WriteStdout PyThreadState_Clear PyThreadState_Delete PyThreadState_DeleteCurrent PyThreadState_Get PyThreadState_GetDict PyThreadState_New PyThreadState_Next PyThreadState_SetAsyncExc PyThreadState_Swap PyThread_acquire_lock PyThread_allocate_lock PyThread_create_key PyThread_delete_key PyThread_delete_key_value PyThread_exit_thread PyThread_free_lock PyThread_get_key_value PyThread_get_thread_ident PyThread_init_thread PyThread_release_lock PyThread_set_key_value PyThread_start_new_thread PyToken_OneChar PyToken_ThreeChars PyToken_TwoChars PyTraceBack_Here PyTraceBack_Print PyTraceBack_Type PyTuple_Fini PyTuple_GetItem PyTuple_GetSlice PyTuple_New PyTuple_Pack PyTuple_SetItem PyTuple_Size PyTuple_Type PyType_GenericAlloc PyType_GenericNew PyType_IsSubtype PyType_Ready PyType_Type PyUnicodeDecodeError_Create PyUnicodeDecodeError_GetEncoding PyUnicodeDecodeError_GetEnd PyUnicodeDecodeError_GetObject PyUnicodeDecodeError_GetReason PyUnicodeDecodeError_GetStart PyUnicodeDecodeError_SetEnd PyUnicodeDecodeError_SetReason PyUnicodeDecodeError_SetStart PyUnicodeEncodeError_Create PyUnicodeEncodeError_GetEncoding PyUnicodeEncodeError_GetEnd PyUnicodeEncodeError_GetObject PyUnicodeEncodeError_GetReason PyUnicodeEncodeError_GetStart PyUnicodeEncodeError_SetEnd PyUnicodeEncodeError_SetReason PyUnicodeEncodeError_SetStart PyUnicodeTranslateError_Create PyUnicodeTranslateError_GetEnd PyUnicodeTranslateError_GetObject PyUnicodeTranslateError_GetReason PyUnicodeTranslateError_GetStart PyUnicodeTranslateError_SetEnd PyUnicodeTranslateError_SetReason PyUnicodeTranslateError_SetStart PyUnicodeUCS2_AsASCIIString PyUnicodeUCS2_AsCharmapString PyUnicodeUCS2_AsEncodedObject PyUnicodeUCS2_AsEncodedString PyUnicodeUCS2_AsLatin1String PyUnicodeUCS2_AsRawUnicodeEscapeString PyUnicodeUCS2_AsUTF16String PyUnicodeUCS2_AsUTF8String PyUnicodeUCS2_AsUnicode PyUnicodeUCS2_AsUnicodeEscapeString PyUnicodeUCS2_AsWideChar PyUnicodeUCS2_Compare PyUnicodeUCS2_Concat PyUnicodeUCS2_Contains PyUnicodeUCS2_Count PyUnicodeUCS2_Decode PyUnicodeUCS2_DecodeASCII PyUnicodeUCS2_DecodeCharmap PyUnicodeUCS2_DecodeLatin1 PyUnicodeUCS2_DecodeRawUnicodeEscape PyUnicodeUCS2_DecodeUTF16 PyUnicodeUCS2_DecodeUTF16Stateful PyUnicodeUCS2_DecodeUTF8 PyUnicodeUCS2_DecodeUTF8Stateful PyUnicodeUCS2_DecodeUnicodeEscape PyUnicodeUCS2_Encode PyUnicodeUCS2_EncodeASCII PyUnicodeUCS2_EncodeCharmap PyUnicodeUCS2_EncodeDecimal PyUnicodeUCS2_EncodeLatin1 PyUnicodeUCS2_EncodeRawUnicodeEscape PyUnicodeUCS2_EncodeUTF16 PyUnicodeUCS2_EncodeUTF8 PyUnicodeUCS2_EncodeUnicodeEscape PyUnicodeUCS2_Find PyUnicodeUCS2_Format PyUnicodeUCS2_FromEncodedObject PyUnicodeUCS2_FromObject PyUnicodeUCS2_FromOrdinal PyUnicodeUCS2_FromUnicode PyUnicodeUCS2_FromWideChar PyUnicodeUCS2_GetDefaultEncoding PyUnicodeUCS2_GetMax PyUnicodeUCS2_GetSize PyUnicodeUCS2_Join PyUnicodeUCS2_RSplit PyUnicodeUCS2_Replace PyUnicodeUCS2_Resize PyUnicodeUCS2_SetDefaultEncoding PyUnicodeUCS2_Split PyUnicodeUCS2_Splitlines PyUnicodeUCS2_Tailmatch PyUnicodeUCS2_Translate PyUnicodeUCS2_TranslateCharmap PyUnicode_AsMBCSString PyUnicode_DecodeMBCS PyUnicode_DecodeUTF7 PyUnicode_EncodeMBCS PyUnicode_EncodeUTF7 PyUnicode_Type PyWeakref_GetObject PyWeakref_NewProxy PyWeakref_NewRef PyWrapperDescr_Type PyWrapper_New Py_AddPendingCall Py_AtExit Py_BuildValue Py_CompileString Py_CompileStringFlags Py_DebugFlag Py_DecRef Py_DivisionWarningFlag Py_EndInterpreter Py_Exit Py_FatalError Py_FdIsInteractive Py_FileSystemDefaultEncoding Py_Finalize Py_FindMethod Py_FindMethodInChain Py_FlushLine Py_FrozenFlag Py_GetBuildInfo Py_GetCompiler Py_GetCopyright Py_GetExecPrefix Py_GetPath Py_GetPlatform Py_GetPrefix Py_GetProgramFullPath Py_GetProgramName Py_GetPythonHome Py_GetRecursionLimit Py_GetVersion Py_IgnoreEnvironmentFlag Py_IncRef Py_InitModule4 Py_Initialize Py_InitializeEx Py_InteractiveFlag Py_IsInitialized Py_Main Py_MakePendingCalls Py_NewInterpreter Py_NoSiteFlag Py_OptimizeFlag Py_ReprEnter Py_ReprLeave Py_SetProgramName Py_SetPythonHome Py_SetRecursionLimit Py_SymtableString Py_TabcheckFlag Py_UnicodeFlag Py_UseClassExceptionsFlag Py_VaBuildValue Py_VerboseFlag _PyArg_NoKeywords _PyBuiltin_Init _PyCodec_Lookup _PyErr_BadInternalCall _PyEval_CallTracing _PyEval_SliceIndex _PyExc_Fini _PyExc_Init _PyFloat_Pack4 _PyFloat_Pack8 _PyFloat_Unpack4 _PyFloat_Unpack8 _PyFrame_Init _PyImportHooks_Init _PyImport_FindExtension _PyImport_FindModule _PyImport_Fini _PyImport_FixupExtension _PyImport_Init _PyImport_IsScript _PyImport_ReInitLock _PyInstance_Lookup _PyInt_Init _PyList_Extend _PyLong_AsByteArray _PyLong_AsScaledDouble _PyLong_Copy _PyLong_FromByteArray _PyLong_New _PyLong_NumBits _PyLong_Sign _PyModule_Clear _PyOS_ReadlineTState _PyObject_Dump _PyObject_GC_Malloc _PyObject_GC_New _PyObject_GC_NewVar _PyObject_GC_Resize _PyObject_GetDictPtr _PyObject_New _PyObject_NewVar _PyParser_TokenNames _PySequence_IterSearch _PyString_Eq _PyString_FormatLong _PyString_Join _PyString_Resize _PySys_Init _PyThreadState_Current _PyThreadState_GetFrame _PyTime_DoubleToTimet _PyTrash_delete_later _PyTrash_delete_nesting _PyTrash_deposit_object _PyTrash_destroy_chain _PyTuple_Resize _PyType_Lookup _PyUnicodeUCS2_AsDefaultEncodedString _PyUnicodeUCS2_IsAlpha _PyUnicodeUCS2_IsDecimalDigit _PyUnicodeUCS2_IsDigit _PyUnicodeUCS2_IsLinebreak _PyUnicodeUCS2_IsLowercase _PyUnicodeUCS2_IsNumeric _PyUnicodeUCS2_IsTitlecase _PyUnicodeUCS2_IsUppercase _PyUnicodeUCS2_IsWhitespace _PyUnicodeUCS2_ToDecimalDigit _PyUnicodeUCS2_ToDigit _PyUnicodeUCS2_ToLowercase _PyUnicodeUCS2_ToNumeric _PyUnicodeUCS2_ToTitlecase _PyUnicodeUCS2_ToUppercase _PyUnicode_XStrip _PyWeakref_CallableProxyType _PyWeakref_ClearRef _PyWeakref_GetWeakrefCount _PyWeakref_ProxyType _PyWeakref_RefType _Py_CheckInterval _Py_CheckRecursionLimit _Py_CheckRecursiveCall _Py_EllipsisObject _Py_HashDouble _Py_HashPointer _Py_Mangle _Py_NoneStruct _Py_NotImplementedStruct _Py_PackageContext _Py_QnewFlag _Py_ReleaseInternedStrings _Py_SwappedOp _Py_Ticker _Py_TrueStruct _Py_ZeroStruct _Py_c_diff _Py_c_neg _Py_c_pow _Py_c_prod _Py_c_quot _Py_c_sum

readme.txt

SHA256 da176c14fb71f28283bc5710988c6a696ac0fad259667aa88c59cec7e4947ded
MD5 ac39936f0c333bcda7036d226eb1f656
SHA1 74e9cf817f9883827acea9f4ea9797de18bb6b61
SHA512 d1f4541a99ca4f34be1e8b6d4a93e577c481465714bd2ebbbf2734c538af59a721f2a15375acbd6823236b274468c13495f7e5364ca4e668c05f595fb74c7176
TLSH
T1B821336FEE22C33110A0D045611FA793F61EE063A326069A7CD7829C3573682857E8EA
MD5 SHA1 SHA512 TLSH

source/Steam2/manifest.py

SHA256 b5232210eaf1dc3864577ee5af04ea24e85da212bdb2a9439532e69ddd3facff
MD5 d3ecad2b416999c2e0efa15fadf5e756
SHA1 0a6d9510e29b8ddd3a144d506f9d3d24061378c4
SHA512 af4b727ef9304ce24a3e36ba0853b7f6e581eb59e9f0c10034df72f97fb860be896869e0cb0631db8dd58e36836b1da33b65e19001df8eefffd6992f26977ee5
TLSH
T1AE316829594F44559733EE2A94D93E9BC78F1A07160F141A39BDB2806FB012232F8DF8
MD5 SHA1 SHA512 TLSH

source/emulator.py

SHA256 0ca23623fcd88cf5ef98a88809eea8e6666f4d7ec2d48fdea68638300dfcae9a
MD5 acf6dd7a007d31f9abc25941f77f4fae
SHA1 7696c3be0d78ac1d0a359dc15365f5e4ea5d0fa7
SHA512 1bbb50dbb0b706365e79f1ac01fd87514f61b2ecf5f3cd7e5e5c5adb49cde3c8a97eee041fe82f100b8cfdb353e3cb373c8930d2778e5c6ff8fccd263fe1e6c8
TLSH
T115411803887DA96F13A6CF53E00A97526B1EABCB170C511872FCD6D72B47C288196CA6
MD5 SHA1 SHA512 TLSH

source/setup.py

SHA256 5de38927ea7e81a9863ae9359a2939105e4a6afec859b98ad0799e3200ef55a3
MD5 bf34e01198a9508dd697881ef13d1b12
SHA1 161d66852993c24d3552339ae61517ed5f47f138
SHA512 f704cb5aa6b13200949be0e6fae0e9715dae3147ff2facc4534150ef1522672f914180ea727333e9dce5aacc7156672eff2dc50eb3a794b8d3e6b55733d55ae9
TLSH
T16BC0C0570CD1841125F0F0FC0E07016FAED1A3007734B2C3B23C435D0BE4C80C984001
MD5 SHA1 SHA512 TLSH

source/steam.py

SHA256 4dfed66318d512035f61b44d8afa503828da718e932218013556d29e6282cdc5
MD5 15d86f74dc5c6cffb480fbb7d3808626
SHA1 5c553b08982d37a5cf3e25750c830554657740cc
SHA512 33c8f3641fe8fed9a5fed74a13766fa8144e1864a359aa10b014abc06eae354bda2697f7d7fe21c1e5a47c8095debbac2811f9ca95b2bdaf7add2428e7b504a1
SSDEEP 768:oS/BOBbtdAoSKoFDMOMr043Q2eG82IGtKlZyKkCER3rolNlQLy://M0MRV3SG82IGtEAolNlQLy
TLSH
T1ADE294426D7628859703906FA4D6B4136B2B369F131C9E617AEC52E46F8403897F2FF8
MD5 SHA1 SHA512 SSDEEP TLSH

source/steamemu/authserver.py

SHA256 d59ea4f46a07936d28cfffbf2b1b6554670f5e4e80c76789623f01ce412c984b
MD5 3009d75bd4a9cbd6e8ae1470bf6e9b68
SHA1 fd79284a18bc022312d8a62ab77004dba23d9020
SHA512 7c534407887afcbc93029b17347b957c4d0233ff86c41a65bff6dbf72cabf193d7ebf865eb073f030478a3b83571b407633f1bbe64a22ae041a6ffb85b723903
SSDEEP 96:jTN3K98Mzb2zkMinZltlyBC4DlWkKEc0Ojs0T0YyQgWLRu9wTTp7Gxiab3o5D5Aw:AGmb2zninjyBrDjQQC/Wias5GUCI
TLSH
T19AE15202EEBF4C93635749ADC461E0026AB71B4303540E22B77DABC85F9553887F0DBA
MD5 SHA1 SHA512 SSDEEP TLSH

source/steamemu/config.py

SHA256 4c9b774a73d6b54f70c19ccb3fc43f6e4b755a8a8e09b9e42d79a01809d2c6f1
MD5 91bb06338a9f5a3516d3ca072a5c06b3
SHA1 aa344459711675ca0741dac48aff87ac9e92be0b
SHA512 b500b45d1e92406200e97bea305b7e6d358cc527107f6e5a1618b243bf9673f46a72ffe061018a8be8ce26dc9d0ea94101a447185cb2485d0cdf221c43a18d22
TLSH
T120D0A71FAC89144B052505C9CE5FA9196EE413139001D8CC3A8CB5406F2DC1D8024548
MD5 SHA1 SHA512 TLSH

source/steamemu/configserver.py

SHA256 04b4c4c5fac433f1cec8563debe89fbb239304b4d875beffcd0ad84a1d84b48c
MD5 9c8303f06f3001131b59b52433f4dd52
SHA1 7195dce17f00f6f8e8074fd94ed1a9630974efef
SHA512 ab9ca75af22352ba11ac4b092d31fdab3c62099a023133417b2acb420d9b2b7962b48c2d3f1484faec95a4fa4d30ee25767bb780e1eeb3434b57cb0aeef29b2d
TLSH
T13581CD1387EF00A3523B855DC097F0027A37169723155A6E776CAFD9BF5846483B1CBA
MD5 SHA1 SHA512 TLSH

source/steamemu/contentlistserver.py

SHA256 e61ed8e170171dd2e7633c86121de1144585f9da7a7db020835d6148dae1b500
MD5 e19f742d6c3f7c620c0bdac99ae65899
SHA1 9540580344f1ee920a929db5cab1e1432ef5e4a0
SHA512 95bca5b8e2ab2b4043f8d34c6de04170efd958e914cf0a009d33c217705f8a4fcc16ca4c65b03f1880e9895729a9f63bf84af8584f86addf89ebcfa420118901
TLSH
T1BA41231386EE0057E267CE59C0627402773F7BA702D90516366C65D97FA04B482F2DE5
MD5 SHA1 SHA512 TLSH

source/steamemu/directoryserver.py

SHA256 8064abfc3eb36b39b653b1bc3284e155e87fac8416a481d4b0ca9c4e9ce8381b
MD5 387cc46878b7b2e1de8b3b8c39972ef7
SHA1 f6336e3dcdda75084816d2f04c1b8bec5523623d
SHA512 382666d2bb402fa9f24ec01fdb203b1963cf20a0b4b23c5e6b5d5c786d518eb544e4904b0c7a183f627987200d2f791049ea098e6e20048c9c19d4ab0942a9ee
TLSH
T1A151BD0351EF4453279B4D1DC4739105AB3A8697420DA96F3F2C6AAA7F6253582F0C9B
MD5 SHA1 SHA512 TLSH

source/steamemu/dummyserver.py

SHA256 8881d4f403f3f3a05ec820f1a3b16dc4112951c9a160ec2849aab9210e1d93f4
MD5 8e3c2525f8849c72891c3b5b5e02f5e2
SHA1 d2dfd0b4db23d39f9299c239009604ee8d4e3546
SHA512 d21460bceb38e641e853223bf90944f5ef2bf6068dd75ee57e060cd1477fdfd628e7b47977c9bcf3003e431bd71f7867830c4bc4738a7a1a04d0fe5190650cb6
TLSH
T17EF0A60346AF448352338C02C023B12A7E2B0EC3131DE52934BCA19E4F39838C0E1DBA
MD5 SHA1 SHA512 TLSH

source/steamemu/fileserver.py

SHA256 8bf1165f0cf12b5e9ae955651b09a9afb62fe7cfb72b32b6ca4341951fc0c1cb
MD5 244214a403dc13374bdbd4bb4365796b
SHA1 d4f093d978620434fc2f8fe7124b277229aae023
SHA512 3dd631d39931d21499c63db98af34122273d7d5da23aff8cf07ed57ed4b11d0fd5c9d5e1be0b8956023dc1331ddda121368a6d084836e4c1e5eeb153e8fd88de
SSDEEP 192:VS02sdZgJ6C2+Bg3Y3YbgsFFXCoX3fR3i:esdZcwL3Y3Kgy8oX3p3i
TLSH
T14B4221014DBE58669723846DE0977013E77A171B220F596536EEA6E83F9813903F0EFD
MD5 SHA1 SHA512 SSDEEP TLSH

source/steamemu/logger.py

SHA256 84b2b2bc89d3e349f0466dcef39e5df620cffea3d676de70eeae40632df4e326
MD5 046ead8c526c4fe82ec8dbbc467a28cb
SHA1 f8dc2c7b90ba1c1c105f35e18943cb4adf64ae37
SHA512 08e16d00700a15a5fbb7c8dd21c33c4a95a624f056be833a3f778e609f835648bf11799bc71cc513a6fcb4cbe9e1d2c59d56092a61568638f1bfae9eef60023f
TLSH
T119F02215CC9E1824500165CE8E2C5B0EBF3A84529C00F0AA3A9CF3A453BDD29609F30B
MD5 SHA1 SHA512 TLSH

w9xpopen.exe

IMPHASH 3fa43cf6494afaa362b5996b590f5baa
SHA256 2d6f3e128080528d2d72d9a05efeef7644d44572ddf30f0a3a8720a9960dcf0b
MD5 8af926c8a066737b802b867168b71961
SHA1 4fe24a115a01b3bbd7ff2f6712caf6376b52d3c2
SHA512 9f0f46af120606df02fc79c2504e369afb8152abf8fd7727e5b4816cf0a97b9b294307de5b07966d94758ef69e4f646c8c3089261945bac01aa2b0acba697610
SSDEEP 48:KylhUiVqy2vo+CjyQFBu7yj5SsTmk9Fx62YTHZvV7LaHlig:vZ0CjtDuOwsTR9Fx62OUHN
TLSH
T14D91E76BF4A0C4B3EB6F05711D261881E3B354775B6102A15F7352CD52F1B285E7539C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4557

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

steam_content_emu_poc.rar

MSVCR71.dll

kernel32

generic

emulator.exe

msvcr71

kernel32

generic

emulator.ini

files/SteamUI_273.pkg

files/Steam_21.pkg

files/firstblob.py

files/login_part1.bin

files/manifests/7_78.manifest

files/secondblob.py

files/storages/7.checksums

files/storages/7.data

files/storages/7.index

files/users.txt

files/users/steamtest.py

fixed_exe/Steam.exe

ws2_32

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

oledlg

version

oleacc

generic

library.zip

python24.dll

kernel32

user32

advapi32

shell32

msvcr71

generic

readme.txt

source/Steam2/manifest.py

source/emulator.py

source/setup.py

source/steam.py

source/steamemu/authserver.py

source/steamemu/config.py

source/steamemu/configserver.py

source/steamemu/contentlistserver.py

source/steamemu/directoryserver.py

source/steamemu/dummyserver.py

source/steamemu/fileserver.py

source/steamemu/logger.py

w9xpopen.exe

kernel32

user32

msvcr71

generic