PESCAN.IO - Analysis Report Basic |
|||||||
| File Structure |
|
PE Chart Code
Header PE (light blue)
Executable sections (pink)
Non-executable sections (black)
External injected code (red)
File Structure in red = malformed or corrupted header
Chart Code For Other Files
Printable characters (blue)
Non-printable characters (black)
| Information |
| Size: 1,02 MB SHA-256 Hash: 5413F30F7871145351DC2BEC908174DBC6E740E9B7E99290982B498C58A12728 SHA-1 Hash: F436FABFD88742CB99E04C92C2EBECB3D6758686 MD5 Hash: A1095F0D91186BC2311AE9406F4D6B4B Imphash: 419180D002D61D56D9020AA986F85633 MajorOSVersion: 6 MinorOSVersion: 0 CheckSum: 00000000 EntryPoint (rva): 2BC210 SizeOfHeaders: 400 SizeOfImage: 2CF000 ImageBase: 0000000180000000 Architecture: x64 ExportTable: 2BDAB0 ImportTable: 2BD6E0 Characteristics: 2022 TimeDateStamp: 6AA88593 Date: 14/09/2026 23:38:59 File Type: DLL Number Of Sections: 3 ASLR: Disabled Section Names (Optional Header): WUS0, WUS1, .rsrc Number Of Executable Sections: 2 Subsystem: Windows GUI [Incomplete Binary or Compressor Packer - 1,79 MB Missing] |
| Sections Info |
| Section Name | Flags | ROffset | RSize | VOffset | VSize | Entropy | Chi2 |
|---|---|---|---|---|---|---|---|
| WUS0 | 0xE0000080 Uninitialized Data Executable Readable Writeable |
400 | 0 | 1000 | 1CB000 |
|
|
| WUS1 | 0xE0000040 Initialized Data Executable Readable Writeable |
400 | F0600 | 1CC000 | F1000 |
|
|
| .rsrc | 0xC0000040 Initialized Data Readable Writeable |
F0A00 | 11800 | 2BD000 | 12000 |
|
|
| Description |
| OriginalFilename: steam_api.dll CompanyName: Valve Corporation LegalCopyright: Copyright (C) NisCkxU544c ProductName: Steam Client API FileVersion: 01.0.1.72 FileDescription: Steam Client API (buildbot_winslave007@WUS) ProductVersion: 01.00.00.01 Language: English (United States) (ID=0x409) CodePage: Unicode (UTF-16 LE) (0x4B0) |
| Entry Point |
The section number (2) have the Entry Point Information -> EntryPoint (calculated) - F0610 Code -> 48894C240848895424104C8944241880FA010F858202000053565755488D35CDFDF0FF488DBE0050E3FF5731DB31C94883CD Assembler |MOV QWORD PTR [RSP + 8], RCX |MOV QWORD PTR [RSP + 0X10], RDX |MOV QWORD PTR [RSP + 0X18], R8 |CMP DL, 1 |JNE 0X1802BC4AA |PUSH RBX |PUSH RSI |PUSH RDI |PUSH RBP |LEA RSI, [RIP - 0XF0233] |LEA RDI, [RSI - 0X1CB000] |PUSH RDI |XOR EBX, EBX |XOR ECX, ECX |
| Signatures |
| Rich Signature Analyzer: Code -> ACB14FFFE8D021ACE8D021ACE8D021AC915124AD2CD021AC915122ADCCD021ACCF165AACEAD021AC615BDCACE9D021AC615B22ADE2D021AC615B25ADF9D021AC615B24ADA5D021AC915125ADAAD021AC915127ADE9D021AC495D24ADECD021AC495D25AD46D021AC915120ADF7D021ACE8D020AC77D121AC495D29ADBED021AC495D21ADE9D021AC495DDEACE9D021AC495D23ADE9D021AC52696368E8D021AC Footprint md5 Hash -> 1AA4E70B99F1134471F242122E68F1D4 • The Rich header apparently has not been modified Certificate - Digital Signature: • The file is signed but has been modified |
| Packer/Compiler |
| Detect It Easy (die) • PE+(64): packer: UPX(3.91+)[modified] • PE+(64): linker: Microsoft Linker(14.51**)[-] • PE+(64): Sign tool: Windows Authenticode(2.0)[PKCS 7] • Entropy: 7.91365 |
| Suspicious Functions |
| Library | Function | Description |
|---|---|---|
| KERNEL32.DLL | LoadLibraryA | Loads the specified module into the address space of the calling process. |
| KERNEL32.DLL | GetProcAddress | Retrieves the address of an exported function or variable from the specified dynamic-link library (DLL). |
| KERNEL32.DLL | VirtualProtect | Changes memory protection attributes. |
| Ws2_32.DLL | connect | Establish a connection to a specified socket. |
| ET Functions (carving) |
| Original Name -> steam_api64.dll GetHSteamPipe GetHSteamUser SteamAPI_GetHSteamPipe SteamAPI_GetHSteamUser SteamAPI_GetSteamInstallPath SteamAPI_ISteamAppList_GetAppBuildId SteamAPI_ISteamAppList_GetAppInstallDir SteamAPI_ISteamAppList_GetAppName SteamAPI_ISteamAppList_GetInstalledApps SteamAPI_ISteamAppList_GetNumInstalledApps SteamAPI_ISteamApps_BGetDLCDataByIndex SteamAPI_ISteamApps_BIsAppInstalled SteamAPI_ISteamApps_BIsCybercafe SteamAPI_ISteamApps_BIsDlcInstalled SteamAPI_ISteamApps_BIsLowViolence SteamAPI_ISteamApps_BIsSubscribed SteamAPI_ISteamApps_BIsSubscribedApp SteamAPI_ISteamApps_BIsSubscribedFromFamilySharing SteamAPI_ISteamApps_BIsSubscribedFromFreeWeekend SteamAPI_ISteamApps_BIsTimedTrial SteamAPI_ISteamApps_BIsVACBanned SteamAPI_ISteamApps_GetAppBuildId SteamAPI_ISteamApps_GetAppInstallDir SteamAPI_ISteamApps_GetAppOwner SteamAPI_ISteamApps_GetAvailableGameLanguages SteamAPI_ISteamApps_GetBetaInfo SteamAPI_ISteamApps_GetCurrentBetaName SteamAPI_ISteamApps_GetCurrentGameLanguage SteamAPI_ISteamApps_GetDLCCount SteamAPI_ISteamApps_GetDlcDownloadProgress SteamAPI_ISteamApps_GetEarliestPurchaseUnixTime SteamAPI_ISteamApps_GetFileDetails SteamAPI_ISteamApps_GetInstalledDepots SteamAPI_ISteamApps_GetLaunchCommandLine SteamAPI_ISteamApps_GetLaunchQueryParam SteamAPI_ISteamApps_GetNumBetas SteamAPI_ISteamApps_InstallDLC SteamAPI_ISteamApps_MarkContentCorrupt SteamAPI_ISteamApps_RequestAllProofOfPurchaseKeys SteamAPI_ISteamApps_RequestAppProofOfPurchaseKey SteamAPI_ISteamApps_SetActiveBeta SteamAPI_ISteamApps_SetDlcContext SteamAPI_ISteamApps_SetGamePerformanceSetting SteamAPI_ISteamApps_SetGameRenderResolution SteamAPI_ISteamApps_UninstallDLC SteamAPI_ISteamClient_BReleaseSteamPipe SteamAPI_ISteamClient_BShutdownIfAllPipesClosed SteamAPI_ISteamClient_ConnectToGlobalUser SteamAPI_ISteamClient_CreateLocalUser SteamAPI_ISteamClient_CreateSteamPipe SteamAPI_ISteamClient_GetIPCCallCount SteamAPI_ISteamClient_GetISteamAppList SteamAPI_ISteamClient_GetISteamApps SteamAPI_ISteamClient_GetISteamController SteamAPI_ISteamClient_GetISteamFriends SteamAPI_ISteamClient_GetISteamGameSearch SteamAPI_ISteamClient_GetISteamGameServer SteamAPI_ISteamClient_GetISteamGameServerStats SteamAPI_ISteamClient_GetISteamGenericInterface SteamAPI_ISteamClient_GetISteamHTMLSurface SteamAPI_ISteamClient_GetISteamHTTP SteamAPI_ISteamClient_GetISteamInput SteamAPI_ISteamClient_GetISteamInventory SteamAPI_ISteamClient_GetISteamMatchmaking SteamAPI_ISteamClient_GetISteamMatchmakingServers SteamAPI_ISteamClient_GetISteamMusic SteamAPI_ISteamClient_GetISteamMusicRemote SteamAPI_ISteamClient_GetISteamNetworking SteamAPI_ISteamClient_GetISteamParentalSettings SteamAPI_ISteamClient_GetISteamParties SteamAPI_ISteamClient_GetISteamRemotePlay SteamAPI_ISteamClient_GetISteamRemoteStorage SteamAPI_ISteamClient_GetISteamScreenshots SteamAPI_ISteamClient_GetISteamUGC SteamAPI_ISteamClient_GetISteamUnifiedMessages SteamAPI_ISteamClient_GetISteamUser SteamAPI_ISteamClient_GetISteamUserStats SteamAPI_ISteamClient_GetISteamUtils SteamAPI_ISteamClient_GetISteamVideo SteamAPI_ISteamClient_ReleaseUser SteamAPI_ISteamClient_SetLocalIPBinding SteamAPI_ISteamClient_SetWarningMessageHook SteamAPI_ISteamController_ActivateActionSet SteamAPI_ISteamController_ActivateActionSetLayer SteamAPI_ISteamController_DeactivateActionSetLayer SteamAPI_ISteamController_DeactivateAllActionSetLayers SteamAPI_ISteamController_GetActionOriginFromXboxOrigin SteamAPI_ISteamController_GetActionSetHandle SteamAPI_ISteamController_GetActiveActionSetLayers SteamAPI_ISteamController_GetAnalogActionData SteamAPI_ISteamController_GetAnalogActionHandle SteamAPI_ISteamController_GetAnalogActionOrigins SteamAPI_ISteamController_GetConnectedControllers SteamAPI_ISteamController_GetControllerBindingRevision SteamAPI_ISteamController_GetControllerForGamepadIndex SteamAPI_ISteamController_GetCurrentActionSet SteamAPI_ISteamController_GetDigitalActionData SteamAPI_ISteamController_GetDigitalActionHandle SteamAPI_ISteamController_GetDigitalActionOrigins SteamAPI_ISteamController_GetGamepadIndexForController SteamAPI_ISteamController_GetGlyphForActionOrigin SteamAPI_ISteamController_GetGlyphForXboxOrigin SteamAPI_ISteamController_GetInputTypeForHandle SteamAPI_ISteamController_GetMotionData SteamAPI_ISteamController_GetStringForActionOrigin SteamAPI_ISteamController_GetStringForXboxOrigin SteamAPI_ISteamController_Init SteamAPI_ISteamController_RunFrame SteamAPI_ISteamController_SetLEDColor SteamAPI_ISteamController_ShowAnalogActionOrigins SteamAPI_ISteamController_ShowBindingPanel SteamAPI_ISteamController_ShowDigitalActionOrigins SteamAPI_ISteamController_Shutdown SteamAPI_ISteamController_StopAnalogActionMomentum SteamAPI_ISteamController_TranslateActionOrigin SteamAPI_ISteamController_TriggerHapticPulse SteamAPI_ISteamController_TriggerRepeatedHapticPulse SteamAPI_ISteamController_TriggerVibration SteamAPI_ISteamFriends_ActivateGameOverlay SteamAPI_ISteamFriends_ActivateGameOverlayInviteDialog SteamAPI_ISteamFriends_ActivateGameOverlayInviteDialogConnectString SteamAPI_ISteamFriends_ActivateGameOverlayRemotePlayTogetherInviteDialog SteamAPI_ISteamFriends_ActivateGameOverlayToStore SteamAPI_ISteamFriends_ActivateGameOverlayToUser SteamAPI_ISteamFriends_ActivateGameOverlayToWebPage SteamAPI_ISteamFriends_BHasEquippedProfileItem SteamAPI_ISteamFriends_ClearRichPresence SteamAPI_ISteamFriends_CloseClanChatWindowInSteam SteamAPI_ISteamFriends_DownloadClanActivityCounts SteamAPI_ISteamFriends_EnumerateFollowingList SteamAPI_ISteamFriends_GetChatMemberByIndex SteamAPI_ISteamFriends_GetClanActivityCounts SteamAPI_ISteamFriends_GetClanByIndex SteamAPI_ISteamFriends_GetClanChatMemberCount SteamAPI_ISteamFriends_GetClanChatMessage SteamAPI_ISteamFriends_GetClanCount SteamAPI_ISteamFriends_GetClanName SteamAPI_ISteamFriends_GetClanOfficerByIndex SteamAPI_ISteamFriends_GetClanOfficerCount SteamAPI_ISteamFriends_GetClanOwner SteamAPI_ISteamFriends_GetClanTag SteamAPI_ISteamFriends_GetCoplayFriend SteamAPI_ISteamFriends_GetCoplayFriendCount SteamAPI_ISteamFriends_GetFollowerCount SteamAPI_ISteamFriends_GetFriendByIndex SteamAPI_ISteamFriends_GetFriendCoplayGame SteamAPI_ISteamFriends_GetFriendCoplayTime SteamAPI_ISteamFriends_GetFriendCount SteamAPI_ISteamFriends_GetFriendCountFromSource SteamAPI_ISteamFriends_GetFriendFromSourceByIndex SteamAPI_ISteamFriends_GetFriendGamePlayed SteamAPI_ISteamFriends_GetFriendMessage SteamAPI_ISteamFriends_GetFriendPersonaName SteamAPI_ISteamFriends_GetFriendPersonaNameHistory SteamAPI_ISteamFriends_GetFriendPersonaState SteamAPI_ISteamFriends_GetFriendRelationship SteamAPI_ISteamFriends_GetFriendRichPresence SteamAPI_ISteamFriends_GetFriendRichPresenceKeyByIndex SteamAPI_ISteamFriends_GetFriendRichPresenceKeyCount SteamAPI_ISteamFriends_GetFriendSteamLevel SteamAPI_ISteamFriends_GetFriendsGroupCount SteamAPI_ISteamFriends_GetFriendsGroupIDByIndex SteamAPI_ISteamFriends_GetFriendsGroupMembersCount SteamAPI_ISteamFriends_GetFriendsGroupMembersList SteamAPI_ISteamFriends_GetFriendsGroupName SteamAPI_ISteamFriends_GetLargeFriendAvatar SteamAPI_ISteamFriends_GetMediumFriendAvatar SteamAPI_ISteamFriends_GetNumChatsWithUnreadPriorityMessages SteamAPI_ISteamFriends_GetPersonaName SteamAPI_ISteamFriends_GetPersonaState SteamAPI_ISteamFriends_GetPlayerNickname SteamAPI_ISteamFriends_GetProfileItemPropertyString SteamAPI_ISteamFriends_GetProfileItemPropertyUint SteamAPI_ISteamFriends_GetSmallFriendAvatar SteamAPI_ISteamFriends_GetUserRestrictions SteamAPI_ISteamFriends_HasFriend SteamAPI_ISteamFriends_InviteUserToGame SteamAPI_ISteamFriends_IsClanChatAdmin SteamAPI_ISteamFriends_IsClanChatWindowOpenInSteam SteamAPI_ISteamFriends_IsClanOfficialGameGroup SteamAPI_ISteamFriends_IsClanPublic SteamAPI_ISteamFriends_IsFollowing SteamAPI_ISteamFriends_IsUserInSource SteamAPI_ISteamFriends_JoinClanChatRoom SteamAPI_ISteamFriends_LeaveClanChatRoom SteamAPI_ISteamFriends_OpenClanChatWindowInSteam SteamAPI_ISteamFriends_RegisterProtocolInOverlayBrowser SteamAPI_ISteamFriends_ReplyToFriendMessage SteamAPI_ISteamFriends_RequestClanOfficerList SteamAPI_ISteamFriends_RequestEquippedProfileItems SteamAPI_ISteamFriends_RequestFriendRichPresence SteamAPI_ISteamFriends_RequestUserInformation SteamAPI_ISteamFriends_SendClanChatMessage SteamAPI_ISteamFriends_SetInGameVoiceSpeaking SteamAPI_ISteamFriends_SetListenForFriendsMessages SteamAPI_ISteamFriends_SetPersonaName SteamAPI_ISteamFriends_SetPlayedWith SteamAPI_ISteamFriends_SetRichPresence SteamAPI_ISteamGameSearch_AcceptGame SteamAPI_ISteamGameSearch_AddGameSearchParams SteamAPI_ISteamGameSearch_CancelRequestPlayersForGame SteamAPI_ISteamGameSearch_DeclineGame SteamAPI_ISteamGameSearch_EndGame SteamAPI_ISteamGameSearch_EndGameSearch SteamAPI_ISteamGameSearch_HostConfirmGameStart SteamAPI_ISteamGameSearch_RequestPlayersForGame SteamAPI_ISteamGameSearch_RetrieveConnectionDetails SteamAPI_ISteamGameSearch_SearchForGameSolo SteamAPI_ISteamGameSearch_SearchForGameWithLobby SteamAPI_ISteamGameSearch_SetConnectionDetails SteamAPI_ISteamGameSearch_SetGameHostParams SteamAPI_ISteamGameSearch_SubmitPlayerResult SteamAPI_ISteamGameServerStats_ClearUserAchievement SteamAPI_ISteamGameServerStats_GetUserAchievement SteamAPI_ISteamGameServerStats_GetUserStat SteamAPI_ISteamGameServerStats_GetUserStat0 SteamAPI_ISteamGameServerStats_GetUserStatFloat SteamAPI_ISteamGameServerStats_GetUserStatInt32 SteamAPI_ISteamGameServerStats_RequestUserStats SteamAPI_ISteamGameServerStats_SetUserAchievement SteamAPI_ISteamGameServerStats_SetUserStat SteamAPI_ISteamGameServerStats_SetUserStat0 SteamAPI_ISteamGameServerStats_SetUserStatFloat SteamAPI_ISteamGameServerStats_SetUserStatInt32 SteamAPI_ISteamGameServerStats_StoreUserStats SteamAPI_ISteamGameServerStats_UpdateUserAvgRateStat SteamAPI_ISteamGameServer_AssociateWithClan SteamAPI_ISteamGameServer_BLoggedOn SteamAPI_ISteamGameServer_BSecure SteamAPI_ISteamGameServer_BUpdateUserData SteamAPI_ISteamGameServer_BeginAuthSession SteamAPI_ISteamGameServer_CancelAuthTicket SteamAPI_ISteamGameServer_ClearAllKeyValues SteamAPI_ISteamGameServer_ComputeNewPlayerCompatibility SteamAPI_ISteamGameServer_CreateUnauthenticatedUserConnection SteamAPI_ISteamGameServer_EnableHeartbeats SteamAPI_ISteamGameServer_EndAuthSession SteamAPI_ISteamGameServer_ForceHeartbeat SteamAPI_ISteamGameServer_GetAuthSessionTicket SteamAPI_ISteamGameServer_GetGameplayStats SteamAPI_ISteamGameServer_GetNextOutgoingPacket SteamAPI_ISteamGameServer_GetPublicIP SteamAPI_ISteamGameServer_GetServerReputation SteamAPI_ISteamGameServer_GetSteamID SteamAPI_ISteamGameServer_HandleIncomingPacket SteamAPI_ISteamGameServer_InitGameServer SteamAPI_ISteamGameServer_LogOff SteamAPI_ISteamGameServer_LogOn SteamAPI_ISteamGameServer_LogOnAnonymous SteamAPI_ISteamGameServer_RequestUserGroupStatus SteamAPI_ISteamGameServer_SendUserConnectAndAuthenticate SteamAPI_ISteamGameServer_SendUserConnectAndAuthenticate_DEPRECATED SteamAPI_ISteamGameServer_SendUserDisconnect SteamAPI_ISteamGameServer_SendUserDisconnect_DEPRECATED SteamAPI_ISteamGameServer_SetAdvertiseServerActive SteamAPI_ISteamGameServer_SetBotPlayerCount SteamAPI_ISteamGameServer_SetDedicatedServer SteamAPI_ISteamGameServer_SetGameData SteamAPI_ISteamGameServer_SetGameDescription SteamAPI_ISteamGameServer_SetGameTags SteamAPI_ISteamGameServer_SetHeartbeatInterval SteamAPI_ISteamGameServer_SetKeyValue SteamAPI_ISteamGameServer_SetMapName SteamAPI_ISteamGameServer_SetMaxPlayerCount SteamAPI_ISteamGameServer_SetModDir SteamAPI_ISteamGameServer_SetPasswordProtected SteamAPI_ISteamGameServer_SetProduct SteamAPI_ISteamGameServer_SetRegion SteamAPI_ISteamGameServer_SetServerName SteamAPI_ISteamGameServer_SetSpectatorPort SteamAPI_ISteamGameServer_SetSpectatorServerName SteamAPI_ISteamGameServer_UserHasLicenseForApp SteamAPI_ISteamGameServer_WasRestartRequested SteamAPI_ISteamHTMLSurface_AddHeader SteamAPI_ISteamHTMLSurface_AllowStartRequest SteamAPI_ISteamHTMLSurface_CopyToClipboard SteamAPI_ISteamHTMLSurface_CreateBrowser SteamAPI_ISteamHTMLSurface_DestructISteamHTMLSurface SteamAPI_ISteamHTMLSurface_ExecuteJavascript SteamAPI_ISteamHTMLSurface_FileLoadDialogResponse SteamAPI_ISteamHTMLSurface_Find SteamAPI_ISteamHTMLSurface_GetLinkAtPosition SteamAPI_ISteamHTMLSurface_GoBack SteamAPI_ISteamHTMLSurface_GoForward SteamAPI_ISteamHTMLSurface_Init SteamAPI_ISteamHTMLSurface_JSDialogResponse SteamAPI_ISteamHTMLSurface_KeyChar SteamAPI_ISteamHTMLSurface_KeyDown SteamAPI_ISteamHTMLSurface_KeyUp SteamAPI_ISteamHTMLSurface_LoadURL SteamAPI_ISteamHTMLSurface_MouseDoubleClick SteamAPI_ISteamHTMLSurface_MouseDown SteamAPI_ISteamHTMLSurface_MouseMove SteamAPI_ISteamHTMLSurface_MouseUp SteamAPI_ISteamHTMLSurface_MouseWheel SteamAPI_ISteamHTMLSurface_OpenDeveloperTools SteamAPI_ISteamHTMLSurface_PasteFromClipboard SteamAPI_ISteamHTMLSurface_Reload SteamAPI_ISteamHTMLSurface_RemoveBrowser SteamAPI_ISteamHTMLSurface_SetBackgroundMode SteamAPI_ISteamHTMLSurface_SetCookie SteamAPI_ISteamHTMLSurface_SetDPIScalingFactor SteamAPI_ISteamHTMLSurface_SetHorizontalScroll SteamAPI_ISteamHTMLSurface_SetKeyFocus SteamAPI_ISteamHTMLSurface_SetPageScaleFactor SteamAPI_ISteamHTMLSurface_SetSize SteamAPI_ISteamHTMLSurface_SetVerticalScroll SteamAPI_ISteamHTMLSurface_Shutdown SteamAPI_ISteamHTMLSurface_StopFind SteamAPI_ISteamHTMLSurface_StopLoad SteamAPI_ISteamHTMLSurface_ViewSource SteamAPI_ISteamHTTP_CreateCookieContainer SteamAPI_ISteamHTTP_CreateHTTPRequest SteamAPI_ISteamHTTP_DeferHTTPRequest SteamAPI_ISteamHTTP_GetHTTPDownloadProgressPct SteamAPI_ISteamHTTP_GetHTTPRequestWasTimedOut SteamAPI_ISteamHTTP_GetHTTPResponseBodyData SteamAPI_ISteamHTTP_GetHTTPResponseBodySize SteamAPI_ISteamHTTP_GetHTTPResponseHeaderSize SteamAPI_ISteamHTTP_GetHTTPResponseHeaderValue SteamAPI_ISteamHTTP_GetHTTPStreamingResponseBodyData SteamAPI_ISteamHTTP_PrioritizeHTTPRequest SteamAPI_ISteamHTTP_ReleaseCookieContainer SteamAPI_ISteamHTTP_ReleaseHTTPRequest SteamAPI_ISteamHTTP_SendHTTPRequest SteamAPI_ISteamHTTP_SendHTTPRequestAndStreamResponse SteamAPI_ISteamHTTP_SetCookie SteamAPI_ISteamHTTP_SetHTTPRequestAbsoluteTimeoutMS SteamAPI_ISteamHTTP_SetHTTPRequestContextValue SteamAPI_ISteamHTTP_SetHTTPRequestCookieContainer SteamAPI_ISteamHTTP_SetHTTPRequestGetOrPostParameter SteamAPI_ISteamHTTP_SetHTTPRequestHeaderValue SteamAPI_ISteamHTTP_SetHTTPRequestNetworkActivityTimeout SteamAPI_ISteamHTTP_SetHTTPRequestRawPostBody SteamAPI_ISteamHTTP_SetHTTPRequestRequiresVerifiedCertificate SteamAPI_ISteamHTTP_SetHTTPRequestUserAgentInfo SteamAPI_ISteamInput_ActivateActionSet SteamAPI_ISteamInput_ActivateActionSetLayer SteamAPI_ISteamInput_BNewDataAvailable SteamAPI_ISteamInput_BWaitForData SteamAPI_ISteamInput_DeactivateActionSetLayer SteamAPI_ISteamInput_DeactivateAllActionSetLayers SteamAPI_ISteamInput_EnableActionEventCallbacks SteamAPI_ISteamInput_EnableDeviceCallbacks SteamAPI_ISteamInput_GetActionOriginFromXboxOrigin SteamAPI_ISteamInput_GetActionSetHandle SteamAPI_ISteamInput_GetActiveActionSetLayers SteamAPI_ISteamInput_GetAnalogActionData SteamAPI_ISteamInput_GetAnalogActionHandle SteamAPI_ISteamInput_GetAnalogActionOrigins SteamAPI_ISteamInput_GetConnectedControllers SteamAPI_ISteamInput_GetControllerForGamepadIndex SteamAPI_ISteamInput_GetCurrentActionSet SteamAPI_ISteamInput_GetDeviceBindingRevision SteamAPI_ISteamInput_GetDigitalActionData SteamAPI_ISteamInput_GetDigitalActionHandle SteamAPI_ISteamInput_GetDigitalActionOrigins SteamAPI_ISteamInput_GetGamepadIndexForController SteamAPI_ISteamInput_GetGlyphForActionOrigin SteamAPI_ISteamInput_GetGlyphForActionOrigin_Legacy SteamAPI_ISteamInput_GetGlyphForXboxOrigin SteamAPI_ISteamInput_GetGlyphPNGForActionOrigin SteamAPI_ISteamInput_GetGlyphSVGForActionOrigin SteamAPI_ISteamInput_GetInputTypeForHandle SteamAPI_ISteamInput_GetMotionData SteamAPI_ISteamInput_GetRemotePlaySessionID SteamAPI_ISteamInput_GetSessionInputConfigurationSettings SteamAPI_ISteamInput_GetStringForActionOrigin SteamAPI_ISteamInput_GetStringForAnalogActionName SteamAPI_ISteamInput_GetStringForDigitalActionName SteamAPI_ISteamInput_GetStringForXboxOrigin SteamAPI_ISteamInput_Init SteamAPI_ISteamInput_Legacy_TriggerHapticPulse SteamAPI_ISteamInput_Legacy_TriggerRepeatedHapticPulse SteamAPI_ISteamInput_RunFrame SteamAPI_ISteamInput_SetDualSenseTriggerEffect SteamAPI_ISteamInput_SetInputActionManifestFilePath SteamAPI_ISteamInput_SetLEDColor SteamAPI_ISteamInput_ShowBindingPanel SteamAPI_ISteamInput_Shutdown SteamAPI_ISteamInput_StopAnalogActionMomentum SteamAPI_ISteamInput_TranslateActionOrigin SteamAPI_ISteamInput_TriggerHapticPulse SteamAPI_ISteamInput_TriggerRepeatedHapticPulse SteamAPI_ISteamInput_TriggerSimpleHapticEvent SteamAPI_ISteamInput_TriggerVibration SteamAPI_ISteamInput_TriggerVibrationExtended SteamAPI_ISteamInventory_AddPromoItem SteamAPI_ISteamInventory_AddPromoItems SteamAPI_ISteamInventory_CheckResultSteamID SteamAPI_ISteamInventory_ConsumeItem SteamAPI_ISteamInventory_DeserializeResult SteamAPI_ISteamInventory_DestroyResult SteamAPI_ISteamInventory_ExchangeItems SteamAPI_ISteamInventory_GenerateItems SteamAPI_ISteamInventory_GetAllItems SteamAPI_ISteamInventory_GetEligiblePromoItemDefinitionIDs SteamAPI_ISteamInventory_GetItemDefinitionIDs SteamAPI_ISteamInventory_GetItemDefinitionProperty SteamAPI_ISteamInventory_GetItemPrice • EXPORT FUNCTIONS > 400 |
| File Access |
| steam_api64.dll WS2_32.dll WINMM.dll VERSION.dll USER32.dll SHLWAPI.dll SHELL32.dll SETUPAPI.dll PSAPI.DLL OLEAUT32.dll ole32.dll KERNEL32.DLL IMM32.dll GDI32.dll CFGMGR32.dll ADVAPI32.dll 64.dll Temp |
| File Access (UNICODE) |
| steam_api.dll |
| Interest's Words |
| Spam Encrypt Decrypt PassWord exec attrib start pause shutdown ping dism setx |
| URLs |
| http://ocsp.digicert.com http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl http://cacerts.digicert.com/DigiCertTrustedRootG4.crt http://crl3.digicert.com/DigiCertTrustedRootG4.crl http://www.digicert.com/CPS0 http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt http://cacerts.digicert.com/DigiCertTrustedG4TimeStampingRSA4096SHA2562025CA1.crt http://crl3.digicert.com/DigiCertTrustedG4TimeStampingRSA4096SHA2562025CA1.crl |
| Strings/Hex Code Found With The File Rules |
| Rule Type | Encoding | Matched (Word) |
|---|---|---|
| Text | Ascii | Keyboard Key (Scroll) |
| Text | Ascii | Signal sent from an infected system to a command and control server (Beacon) |
| Text | Ascii | Unauthorized movement of funds or data (Transfer) |
| Entry Point | Hex Pattern | Microsoft Visual C++ 8.0 (DLL) |
| Entry Point | Hex Pattern | Microsoft Visual C++ 8 |
| Entry Point | Hex Pattern | VC8 - Microsoft Corporation |
| Resources |
| Path | DataRVA | Size | FileOffset | Code | Text |
|---|---|---|---|---|---|
| \VERSION\1\0 | 2BD074 | 370 | F0A74 | 700334000000560053005F00560045005200530049004F004E005F0049004E0046004F0000000000BD04EFFE000001000000 | p.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O............... |
| \VERSION\1\1033 | 2BD3E8 | 2F8 | F0DE8 | F80234000000560053005F00560045005200530049004F004E005F0049004E0046004F0000000000BD04EFFE000001000000 | ..4...V.S._.V.E.R.S.I.O.N._.I.N.F.O............... |
| Intelligent String |
| • steam_api.dll • .ThY • 01.0.1.72 • 01.00.00.01 • :060U00Uq]dL.g?O0U0E1-Q!m0U0y+m0k0$+0http://ocsp.digicert.com0C+07http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0EU>0<0:864http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0U |
| Flow Anomalies |
| Offset | FlowVA | Section | Description |
|---|---|---|---|
| 40F | N/A | WUS1 | CALL QWORD PTR [RIP+0x1CB62F] |
| 5430 | N/A | WUS1 | CALL QWORD PTR [RIP+0xC13ACA66] |
| 629B | N/A | WUS1 | CALL QWORD PTR [RIP+0x1BAE7F] |
| 6C25 | N/A | WUS1 | CALL QWORD PTR [RIP+0x781B9DA1] |
| 926E | N/A | WUS1 | CALL QWORD PTR [RIP+0x4298CC92] |
| D028 | N/A | WUS1 | CALL QWORD PTR [RIP+0x1ADBAE] |
| 10DED | N/A | WUS1 | JMP QWORD PTR [RIP+0x4174A1CE] |
| 15420 | N/A | WUS1 | JMP QWORD PTR [RIP+0xEF239B82] |
| 16CF8 | N/A | WUS1 | JMP QWORD PTR [RIP+0xFCFC8432] |
| 17BF6 | N/A | WUS1 | JMP QWORD PTR [RIP+0xED324815] |
| 1ADA2 | N/A | WUS1 | JMP QWORD PTR [RIP+0x4F2A54A9] |
| 1B820 | N/A | WUS1 | CALL QWORD PTR [RIP+0xBE6927FE] |
| 20B8B | N/A | WUS1 | JMP QWORD PTR [RIP+0xE70C748] |
| 2A442 | N/A | WUS1 | CALL QWORD PTR [RIP+0x878D1C2A] |
| 2B7F3 | N/A | WUS1 | CALL QWORD PTR [RIP+0x4AFAE976] |
| 2E43F | N/A | WUS1 | CALL QWORD PTR [RIP+0x9B6EC763] |
| 329EA | N/A | WUS1 | CALL QWORD PTR [RIP+0x4816FF58] |
| 368A6 | N/A | WUS1 | CALL QWORD PTR [RIP+0x80372C50] |
| 3A382 | N/A | WUS1 | CALL QWORD PTR [RIP+0xB0C9E15B] |
| 4C4BF | N/A | WUS1 | CALL QWORD PTR [RIP+0x5C4AA567] |
| 4E08B | N/A | WUS1 | CALL QWORD PTR [RIP+0x37AE16B4] |
| 5530B | N/A | WUS1 | JMP QWORD PTR [RIP+0x8C272CA5] |
| 5BEEF | N/A | WUS1 | CALL QWORD PTR [RIP+0x842DA6A4] |
| 643BC | N/A | WUS1 | JMP QWORD PTR [RIP+0xE8668E91] |
| 6BC1F | N/A | WUS1 | CALL QWORD PTR [RIP+0xFFC2F88C] |
| 7D95F | N/A | WUS1 | CALL QWORD PTR [RIP+0x542E78ED] |
| 8066B | N/A | WUS1 | CALL QWORD PTR [RIP+0x3F10D60] |
| 80E1A | N/A | WUS1 | CALL QWORD PTR [RIP+0xC0A75342] |
| 88F9F | N/A | WUS1 | CALL QWORD PTR [RIP+0xA506CE25] |
| 8A11B | N/A | WUS1 | CALL QWORD PTR [RIP+0xC3CB8AB8] |
| 8EDAB | N/A | WUS1 | CALL QWORD PTR [RIP+0xED088DD4] |
| 9FAD8 | N/A | WUS1 | JMP QWORD PTR [RIP+0x5869CB37] |
| A06EB | N/A | WUS1 | JMP QWORD PTR [RIP+0xC0196AAB] |
| A2B5D | N/A | WUS1 | CALL QWORD PTR [RIP+0xCA64CC18] |
| A2CA4 | N/A | WUS1 | CALL QWORD PTR [RIP+0x2C8AC691] |
| A47D7 | N/A | WUS1 | CALL QWORD PTR [RIP+0xE6E78838] |
| A598D | N/A | WUS1 | CALL QWORD PTR [RIP+0x2F80210] |
| AB252 | N/A | WUS1 | CALL QWORD PTR [RIP+0xE4D0CEC0] |
| AB76A | N/A | WUS1 | CALL QWORD PTR [RIP+0x18374C1A] |
| AFCAB | N/A | WUS1 | JMP QWORD PTR [RIP+0xA0AAE18] |
| B4E51 | N/A | WUS1 | CALL QWORD PTR [RIP+0x39AC3342] |
| B5BAB | N/A | WUS1 | CALL QWORD PTR [RIP+0x19D5AD56] |
| BCF65 | N/A | WUS1 | CALL QWORD PTR [RIP+0xAF0D66EE] |
| BF01F | N/A | WUS1 | CALL QWORD PTR [RIP+0xDE91FFFF] |
| BFF41 | N/A | WUS1 | CALL QWORD PTR [RIP+0x96D909BE] |
| C009A | N/A | WUS1 | CALL QWORD PTR [RIP+0x551EBA5F] |
| C12B5 | N/A | WUS1 | JMP QWORD PTR [RIP+0xE011FAB1] |
| C28B8 | N/A | WUS1 | JMP QWORD PTR [RIP+0xD03E2AF6] |
| C3F1A | N/A | WUS1 | CALL QWORD PTR [RIP+0x173E3CFF] |
| C598A | N/A | WUS1 | JMP QWORD PTR [RIP+0x893FFF97] |
| CEC34 | N/A | WUS1 | JMP QWORD PTR [RIP+0x94216303] |
| D0A6A | N/A | WUS1 | CALL QWORD PTR [RIP+0x304706AB] |
| DD022 | N/A | WUS1 | JMP QWORD PTR [RIP+0x1E5A361B] |
| DEC71 | N/A | WUS1 | JMP QWORD PTR [RIP+0x31A3371F] |
| DF4A2 | N/A | WUS1 | JMP QWORD PTR [RIP+0xEBEDED2E] |
| E02DA | N/A | WUS1 | JMP QWORD PTR [RIP+0x8E5B5EF0] |
| E40BD | N/A | WUS1 | CALL QWORD PTR [RIP+0xDF015624] |
| F07BE | N/A | WUS1 | CALL QWORD PTR [RIP+0x149C] |
| F07E8 | N/A | WUS1 | CALL QWORD PTR [RIP+0x147A] |
| F2B80 | N/A | .rsrc | JMP QWORD PTR [RIP+0x2625002C] |
| 400-F09FF | 1CC000 | WUS1 | Executable section anomaly, first bytes: FFBEFFFF4883EC28 |
| 102200 | N/A | *Overlay* | 982C00000002020030822C8C06092A864886F70D | .,......0.,...*.H... |
| Extra Analysis |
| Metric | Value | Percentage |
|---|---|---|
| Ascii Code | 761447 | 71,2501% |
| Null Byte Code | 13781 | 1,2895% |
© 2026 All rights reserved.