filename | steamclient64.dll | |
---|---|---|
size | 304416 (0x4a520) | |
md5 | 5d3d09ad0f9cb50d70d402d752340fd7 | |
type | PE32+ executable (DLL) (GUI) x86-64, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xf8 |
Rich Header
lib id | version | times used |
---|---|---|
123 | 50727 | 2 |
225 | 20806 | 72 |
224 | 20806 | 236 |
223 | 20806 | 12 |
203 | 65501 | 15 |
1 | 0 | 153 |
228 | 40629 | 82 |
220 | 40629 | 1 |
219 | 21005 | 1 |
222 | 40629 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Sections
name | va | vsize | raw size | flags | |
---|---|---|---|---|---|
WUS0 | 0x1000 | 0x97000 | 0 | RWX UDATA | |
WUS1 | 0x98000 | 0x49000 | 0x48a00 | RWX IDATA | |
.rsrc | 0xe1000 | 0x2000 | 0x1200 | RW- IDATA |
Data Directory
module_name | hint | ord | function_name |
---|---|---|---|
ADVAPI32.dll | RegCloseKey | ||
KERNEL32.DLL | LoadLibraryA | ||
KERNEL32.DLL | GetProcAddress | ||
KERNEL32.DLL | VirtualProtect | ||
ntdll.dll | RtlUnwindEx | ||
PSAPI.DLL | EnumProcessModules | ||
SHELL32.dll | SHGetFolderPathA | ||
SHLWAPI.dll | PathFileExistsW | ||
USER32.dll | MessageBoxA | ||
WS2_32.dll | 115 |
StringTable 040904B0
LegalCopyright | Copyright (C) NisCkxU544c |
InternalName | Steam Client API |
FileVersion | 01.0.1.19 |
CompanyName | Valve Corporation |
ProductVersion | 01.00.00.01 |
FileDescription | Steam Client API (buildbot_winslave007@WUS) |
Source Control ID | 1337110 |
OriginalFilename | steam_api.dll |
ProductName | Steam Client API |
StringTable 040904B0
CompanyName | Valve Corporation |
FileDescription | Steam Client API |
FileVersion | 1, 0, 0, 1 |
InternalName | Steam Client API |
LegalCopyright | Copyright (C) 2007 |
OriginalFilename | steam_api.dll |
ProductName | Steam Client API |
ProductVersion | 1, 0, 0, 1 |
VS_FIXEDFILEINFO
FileVersion | 1.0.1.19 |
ProductVersion | 1.0.0.1 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x17 |
FileFlags | 0 |
FileOS | 4 |
FileType | 2 |
FileSubtype | 0 |
VS_FIXEDFILEINFO
FileVersion | 1.0.0.1 |
ProductVersion | 1.0.0.1 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x17 |
FileFlags | 0 |
FileOS | 4 |
FileType | 2 |
FileSubtype | 0 |
Signers (1)
issuer: /CN=\x00W\x00U\x00S\x00!
serial: -4DAD9447B8843358B1FA068CFF8F6239
Certificates (1)
Certificate: Data: Version: 3 (0x2) Serial Number: (Negative)4d:ad:94:47:b8:84:33:58:b1:fa:06:8c:ff:8f:62:39 Signature Algorithm: sha1WithRSA Issuer: CN=\x00W\x00U\x00S\x00! Validity Not Before: Jul 1 00:00:00 2014 GMT Not After : Jan 1 00:00:00 2088 GMT Subject: CN=\x00W\x00U\x00S\x00! Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f3:98:16:4d:60:69:2b:03:7d:bf:c6:c4:8e: 33:bb:bc:42:63:33:26:b8:c5:63:fa:6a:20:d4:38: 95:c5:d1:22:53:07:81:27:ea:3e:05:33:7a:f7:0c: 11:85:41:d0:12:58:60:3a:83:dd:52:43:c8:56:04: 5b:c9:ac:26:b9:8a:95:34:47:da:5c:14:fd:88:c1: 34:ee:8b:5a:f9:3a:9b:70:db:9f:ca:f2:f6:da:b4: 02:99:7d:4c:c2:88:80:89:fd:fe:0f:4d:75:06:eb: 78:e8:a6:09:89:59:25:c5:c9:f9:a1:44:ca:07:38: 7f:9c:47:12:7b:8a:05:67:b5:b3:3f:07:1c:2c:18: 33:49:bd:ec:2a:4e:76:48:b0:d4:31:02:9b:10:88: c4:64:7c:5b:1b:3b:b7:d8:3c:eb:80:ea:1f:ac:b9: 2c:59:89:33:eb:6a:c1:42:85:8d:06:a0:1b:aa:02: e7:ad:d5:8b:f1:8b:a0:73:e4:c5:a8:5c:26:d0:5a: 12:73:67:4b:89:cf:b8:90:34:ed:11:fc:8a:a6:52: 87:7f:29:8e:15:cc:be:0d:8c:06:54:8b:75:e0:f4: 38:27:bb:f9:e4:dc:aa:99:6b:b9:aa:6e:bc:db:c6: 75:4b:b3:cb:4d:39:fa:27:7d:f5:3b:18:c2:e6:2e: e9:21 Exponent: 65537 (0x10001) X509v3 extensions: 2.5.29.1: 0;.......e{..>...-1...0.1.0...U.....W.U.S.!...Rk.G{..N..s.p.. Signature Algorithm: sha1WithRSA 2b:8a:5c:35:bc:8d:1d:0d:50:06:e6:d9:de:0a:d8:69:ab:c7: e6:90:88:cc:a7:df:d9:55:09:5b:9e:19:aa:06:37:44:8f:3b: b8:f6:db:74:c3:6b:09:b9:58:0f:46:91:02:65:48:2d:34:3b: 5c:be:0e:e7:4f:af:aa:dd:e8:24:b7:92:7b:f1:d3:6a:0a:4f: 6d:e1:3a:c2:c0:a0:6a:80:86:08:51:f1:0e:48:a6:75:cd:05: 35:c0:2d:e2:76:95:75:40:13:8e:ac:8a:a7:ff:4a:a2:8f:17: 22:4d:64:b8:aa:94:cc:ab:cf:8f:fe:1e:a0:b8:a9:d9:9f:12: 86:cb:e1:cb:ff:14:f9:d9:20:e0:1f:d6:12:19:f3:58:37:a0: 98:9d:4f:9b:15:7c:96:f9:d9:60:bd:0a:b1:a0:a7:92:e4:91: 43:67:15:4b:45:47:11:20:4d:8d:70:e1:99:12:9e:6d:d9:a4: fe:bd:67:ac:7c:ad:25:87:a2:0e:3e:50:29:22:96:51:71:2e: e8:b4:7c:15:f3:f5:e3:da:82:da:00:c8:ad:b4:08:c4:73:f3: cf:c9:d4:7b:df:d2:85:ea:18:21:13:67:7a:58:09:2d:21:b4: 46:2f:47:e1:bb:a7:46:32:74:e6:56:93:12:51:e9:1a:cd:b9: 86:a3:99:5d
pkcs7-signedData
- 1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
- #0
- 1.3.6.1.4.1.311.2.1.15
- :
- SHA1
5a bd cd 06 b9 68 c9 ea 01 ba 17 65 e8 18 be dc |Z....h.....e....| c4 82 d3 39 |...9 |
- 1.3.6.1.4.1.311.2.1.15
- #0
- #2
- 2
- -103251830510890988845464931467663467065
- RSA-SHA1-2: nil
- CN:
00 57 00 55 00 53 00 21 |.W.U.S.! |
- 2014-07-01 00:00:00 UTC: 2088-01-01 00:00:00 UTC
- CN:
00 57 00 55 00 53 00 21 |.W.U.S.! |
- #5
- rsaEncryption: nil
- A9:F3:98:16:4D:60:69:2B:03:7D:BF:C6:C4:8E:33:BB:
BC:42:63:33:26:B8:C5:63:FA:6A:20:D4:38:95:C5:D1:
22:53:07:81:27:EA:3E:05:33:7A:F7:0C:11:85:41:D0:
12:58:60:3A:83:DD:52:43:C8:56:04:5B:C9:AC:26:B9:
8A:95:34:47:DA:5C:14:FD:88:C1:34:EE:8B:5A:F9:3A:
9B:70:DB:9F:CA:F2:F6:DA:B4:02:99:7D:4C:C2:88:80:
89:FD:FE:0F:4D:75:06:EB:78:E8:A6:09:89:59:25:C5:
C9:F9:A1:44:CA:07:38:7F:9C:47:12:7B:8A:05:67:B5:
B3:3F:07:1C:2C:18:33:49:BD:EC:2A:4E:76:48:B0:D4:
31:02:9B:10:88:C4:64:7C:5B:1B:3B:B7:D8:3C:EB:80:
EA:1F:AC:B9:2C:59:89:33:EB:6A:C1:42:85:8D:06:A0:
1B:AA:02:E7:AD:D5:8B:F1:8B:A0:73:E4:C5:A8:5C:26:
D0:5A:12:73:67:4B:89:CF:B8:90:34:ED:11:FC:8A:A6:
52:87:7F:29:8E:15:CC:BE:0D:8C:06:54:8B:75:E0:F4:
38:27:BB:F9:E4:DC:AA:99:6B:B9:AA:6E:BC:DB:C6:75:
4B:B3:CB:4D:39:FA:27:7D:F5:3B:18:C2:E6:2E:E9:21: 0x010001
- 2.5.29.1
98 2e 1a d0 7f 65 7b c1 10 3e 1e c2 10 2d 31 09 |.....e{..>...-1.|
- CN:
00 57 00 55 00 53 00 21 |.W.U.S.! |
b2 52 6b b8 47 7b cc a7 4e 05 f9 73 00 70 9d c7 |.Rk.G{..N..s.p..|
- CN:
- RSA-SHA1-2:
2b 8a 5c 35 bc 8d 1d 0d 50 06 e6 d9 de 0a d8 69 |+.\5....P......i| ab c7 e6 90 88 cc a7 df d9 55 09 5b 9e 19 aa 06 |.........U.[....| 37 44 8f 3b b8 f6 db 74 c3 6b 09 b9 58 0f 46 91 |7D.;...t.k..X.F.| 02 65 48 2d 34 3b 5c be 0e e7 4f af aa dd e8 24 |.eH-4;\...O....$| b7 92 7b f1 d3 6a 0a 4f 6d e1 3a c2 c0 a0 6a 80 |..{..j.Om.:...j.| 86 08 51 f1 0e 48 a6 75 cd 05 35 c0 2d e2 76 95 |..Q..H.u..5.-.v.| 75 40 13 8e ac 8a a7 ff 4a a2 8f 17 22 4d 64 b8 |u@......J..."Md.| aa 94 cc ab cf 8f fe 1e a0 b8 a9 d9 9f 12 86 cb |................| e1 cb ff 14 f9 d9 20 e0 1f d6 12 19 f3 58 37 a0 |...... ......X7.| 98 9d 4f 9b 15 7c 96 f9 d9 60 bd 0a b1 a0 a7 92 |..O..|...`......| e4 91 43 67 15 4b 45 47 11 20 4d 8d 70 e1 99 12 |..Cg.KEG. M.p...| 9e 6d d9 a4 fe bd 67 ac 7c ad 25 87 a2 0e 3e 50 |.m....g.|.%...>P| 29 22 96 51 71 2e e8 b4 7c 15 f3 f5 e3 da 82 da |)".Qq...|.......| 00 c8 ad b4 08 c4 73 f3 cf c9 d4 7b df d2 85 ea |......s....{....| 18 21 13 67 7a 58 09 2d 21 b4 46 2f 47 e1 bb a7 |.!.gzX.-!.F/G...| 46 32 74 e6 56 93 12 51 e9 1a cd b9 86 a3 99 5d |F2t.V..Q.......]|
- 2
- 1
- #0
- CN:
00 57 00 55 00 53 00 21 |.W.U.S.! |
- -103251830510890988845464931467663467065
- CN:
- SHA1: nil
- #2
- 1.3.6.1.4.1.311.2.1.12
- nil
- contentType: 1.3.6.1.4.1.311.2.1.4
- messageDigest:
f6 a5 d5 d8 98 5e 26 da 9c 9b 32 6f 1c 4c 1a 0c |.....^&...2o.L..| 4d 2f 1d 71 |M/.q |
- 1.3.6.1.4.1.311.2.1.12
- rsaEncryption:
15 99 78 ec c6 94 61 2d f4 ed 48 d6 6e 8f 00 2f |..x...a-..H.n../| 2c 87 f6 da f4 39 c3 71 f2 c0 7c 4a 30 d0 a1 9d |,....9.q..|J0...| 3f 61 fb ab 91 dd 0a a2 a3 77 eb 83 36 29 e5 eb |?a.......w..6)..| 35 9d f0 8f dd a7 d6 cb 39 95 eb d9 33 47 00 fa |5.......9...3G..| 4a 42 a3 69 8a 38 83 4b 33 10 3d a8 14 ff a8 78 |JB.i.8.K3.=....x| 5c 91 a6 4e 09 20 32 64 94 ec d1 94 fc b3 04 6a |\..N. 2d.......j| 45 33 d2 ff 09 1d 75 f7 a6 80 99 85 96 4d 63 a1 |E3....u......Mc.| 14 3f 73 6f 50 b1 26 f3 37 c5 43 b5 ec f8 b5 f1 |.?soP.&.7.C.....| b4 df 3a 07 81 40 9d bf 58 63 5f 93 42 53 dd 22 |..:..@..Xc_.BS."| 92 88 bf b3 ca 74 18 b4 d9 c4 62 a7 ef 59 db e7 |.....t....b..Y..| f4 a0 89 9b ad 8e a7 64 53 33 7d 75 1a a5 2c f2 |.......dS3}u..,.| 45 56 02 31 5c 6e f9 89 4d aa 56 13 8b fd 0b 17 |EV.1\n..M.V.....| 86 85 d3 00 2b 87 84 dd ef 73 34 ba 93 ee bf 77 |....+....s4....w| 1d 88 72 b6 bd 89 48 48 e1 68 c6 57 85 83 86 a3 |..r...HH.h.W....| dc f7 c8 ee c9 56 66 9a 6a f6 02 8f 43 8c 03 4c |.....Vf.j...C..L| 70 0c 56 75 34 0a 00 95 70 1e 85 18 fb 15 4d 3f |p.Vu4...p.....M?|
- #0
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
everything is OK