{"report_id":"5bc1398a-9a55-493e-80f3-4ffdc3470de1","version":6,"status":"done","tags":[],"date":"2025-01-18T06:18:23Z","url":{"schema":"http","addr":"github.com/Detanup01/gbe_fork/releases/latest/download/emu-win-release.7z","fqdn":"github.com","domain":"github.com","tld":"com"},"ip":{"addr":"140.82.121.4","port":0,"asn":36459,"as":"GITHUB","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"about:privatebrowsing"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-03-29T06:18:08Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"github.com","ip":{"addr":"140.82.121.3","port":443,"asn":36459,"as":"GITHUB","country":"Germany","country_code":"DE"},"domain_registered":"2007-10-09","domain_rank":1423,"first_seen":"2016-07-13T12:28:22Z","last_seen":"2025-01-15T02:17:23.86894Z","alert_count":0,"request_count":2,"received_data":8914,"sent_data":1504,"comment":"","tags":null,"fingerprints":null},{"fqdn":"objects.githubusercontent.com","ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":134060,"first_seen":"2021-11-01T21:34:29Z","last_seen":"2025-01-15T04:21:22.80518Z","alert_count":1,"request_count":1,"received_data":10404669,"sent_data":961,"comment":"","tags":null,"fingerprints":null}],"files":[{"md5":"286ce60dee4412957189d95bae7efbcd","sha1":"00066db6aa05fbd8d9ad1437213f794e004f0db7","sha256":"daf5388f8d9a9090867e65c3c9420ae76629d5e99a369cae99f371800ee9001a","sha512":"211abfe343f101a4dc15a5c337fcf33485b18bd326a30b7d9366781cab78afd4c21069adee5440863fd96b6bc0a24e0629b6c7423e9eb2985e9726f217bb2045","magic":"7-zip archive data, version 0.4","size":10403872,"url":{"schema":"https","addr":"objects.githubusercontent.com/github-production-release-asset-2e65be/830127839/30f54f2d-6baa-4138-90b6-f0d14faabe62?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=releaseassetproduction%2F20250118%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20250118T061743Z\u0026X-Amz-Expires=300\u0026X-Amz-Signature=177d318e324d57a48bf1bd85eea40d65752663d78b06088610fbc9fe8dae01fa\u0026X-Amz-SignedHeaders=host\u0026response-content-disposition=attachment%3B%20filename%3Demu-win-release.7z\u0026response-content-type=application%2Foctet-stream","fqdn":"objects.githubusercontent.com","domain":"objects.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"archive":[{"path":"release/steamclient_experimental/dll_injection.EXAMPLE/extra_dlls.EXAMPLE/1_my_first_dll.dll","filename":"1_my_first_dll.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"","size":0,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steamclient_experimental/dll_injection.EXAMPLE/extra_dlls.EXAMPLE/2_my_second_dll.dll","filename":"2_my_second_dll.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"","size":0,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steamclient_experimental/dll_injection.EXAMPLE/extra_dlls.EXAMPLE/dlls_subdir/3_my_third_dll.dll","filename":"3_my_third_dll.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"","size":0,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/mods.EXAMPLE/12345/mod_file1","filename":"mod_file1","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"","size":0,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/mods.EXAMPLE/12345/mod_file2","filename":"mod_file2","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"","size":0,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/mods.EXAMPLE/12345/random_mod_file","filename":"random_mod_file","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"","size":0,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/CHANGELOG.md","filename":"CHANGELOG.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with very long lines (327)","size":60727,"md5":"f97f1c87310fe42e24879bf876d9fbe0","sha1":"d5ab5b28532d7fc9d1eafa7ceab9043ad6659d5b","sha256":"15d296e4753a8c1d25321a20e732dda2a97fb92652ab43a68a39a0ec15226cd3","sha512":"fda6efa63ba4d6bc752d56e781da3bb6f15f8b57bd9d4f3c5910c1d63bf5e2960f2b70cea18a7761e8c291dee5fe2040169edeee0ed8adf1c23ae40cfc61f126","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/CREDITS.md","filename":"CREDITS.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with very long lines (460), with CRLF line terminators","size":125780,"md5":"b65fa3c1e7249bf2c3ada6004e530bd2","sha1":"fcdfcd8d4ffda44e79acc1b082383afb915a013b","sha256":"78cf1d93ac0595362c06e339bbc5b7bbd3998a758ed7701c2bccb271cdd1296c","sha512":"ae29b1ee8d73b859cd63ee907e30ffeef0430a6b429d4c8eed3631b82bedda9217a6fd271ed7b00a0af79858e9557be8dcf2dc98e5713bb9768b3e0b49502c53","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/experimental/README.experimental.md","filename":"README.experimental.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with very long lines (328)","size":2020,"md5":"84a702366d809a778e691d672daa7062","sha1":"e157614937c936f9f62c3a67494f33cf7565b202","sha256":"22f721ffdbe66eefcfe0d8e52a442991c7e049194b5ba4d3a715422f50d65aef","sha512":"59acf32487d80333693b25ed3820d672ea61d9011421d1da1bb809996b8640d2efa3ef352dff5ebf7d0b73bd56e89377837912ecbafb729b82787deb702869bd","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/README.release.md","filename":"README.release.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":16340,"md5":"e9887e46154bd716a3615067f678a141","sha1":"0e04f922d8126f225d67dc6ec4be8a137e409f20","sha256":"e83dd10353e8bbf4bafa34811d48c52b09f6a739b950c1b05f1a89f3fd958a8b","sha512":"d28946dce6d4ed20cefe8a3aa70b68ecf1b1e8456e03c42f264a641bd6d2fc6ce77f0387b2e5ce6955d713a91c84d7fdd23238789b1cddedd491ca0ec2227860","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steamclient_experimental/ColdClientLoader.ini","filename":"ColdClientLoader.ini","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with CRLF line terminators","size":2260,"md5":"916b23d0fec1b429b08fc3f18fc343a2","sha1":"250b77d34b09db00968ab8a74cbec1837a81e04b","sha256":"02575d18cd74b957f4979128b16f5c91d8af0c3afbe493a09cf4d716e397a9a4","sha512":"376192c9cb216e95f3009c95ce2ae8766dfb6a714c4e505f269518d88633233f379f19df2692a9c81df25ee29c52359087fc6c1bcdb79ca654546a569e2b1f43","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steamclient_experimental/dll_injection.EXAMPLE/extra_dlls.EXAMPLE/load_order.txt","filename":"load_order.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with CRLF line terminators","size":55,"md5":"03ffb4264d3db11cb8edf61ce913c6a4","sha1":"af73ab23a44129df6208a70cc25d4c3528a5fd30","sha256":"202a79ef1d3209ef74346ba11705c34896c1e01e0c539d179182d190d4c24a24","sha512":"25084944e771ae96c9bcd1465511a4d6ac5b7ce6619cc59315f18dac30511b5b0bba08aad1dfc7c56d5b3c58b102d62027f4c39f904882e70f31e45a8cfffe6f","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steamclient_experimental/dll_injection.EXAMPLE/README.md","filename":"README.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":178,"md5":"55207eebe61cd5339750f43b81dfe522","sha1":"1722bba24f12f17558fa24911f4d1ca1cdd893bb","sha256":"8b3319cef035b3bb0003eb36e5498b48dcc04aecdafb65c7c054804667f34bd4","sha512":"7af44ef3624d229b60c64b900ea51873f6d9a770980631e708cfafd4ff8f9a0025fac64fc0e117c844711e61c7b66a75c7f16ccba3fe7e768347773dbef275d7","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steamclient_experimental/README.experimental_steamclient.md","filename":"README.experimental_steamclient.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":6415,"md5":"015105173ef0a27f92aa43624291b3d7","sha1":"79272d9d12f25894050f661476366ef5599f6a66","sha256":"49a3d8276373efd0f9214558b4b1f3adb34428c3367af3cd3786b4d09c6f6fac","sha512":"d187f55357d801a482dc144da318b4d31459746a71cee892f821dcd0946ca0207135cef15aa908b9d4288f15e9e58b4c0ebff75c404427314899c071fd1548fa","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/account_avatar.EXAMPLE.jpg","filename":"account_avatar.EXAMPLE.jpg","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 184x184, components 3","size":3409,"md5":"fafa340202b7f16015984c90062f7b2a","sha1":"1408fed0c29ecac789028f2e12ca81d15a4bfe92","sha256":"58f08592a940bcd85a9620b52c262b6ce1cd7a4b6cb6a3b6494028614794d2b2","sha512":"e1fdde11fa7f03690655acde81d9d621e1ee3e08c4af7527057caef04b38dbcc60f9acec47161d6c6127faceca49b59bb9bd51fb3801a1545c80de59e318df53","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/achievements_EXAMPLE.json","filename":"achievements_EXAMPLE.json","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"JSON text data","size":67275,"md5":"43f5f12838b2b05a0a08e4ce681b08ba","sha1":"dfe48606af2042bb82463546c242840f55283662","sha256":"c90b571bd159618a8837f6e5f77ae254985d90df3634acda7f79f0d382bc75c8","sha512":"3121a8f1c58a254d4abd748acf05003b9364bb3be5577fbfe94d4a91291a23760fd2918133b9e194f0cdeeef9a9482a600e01f9cfe773ae0fd25e24acb7494d9","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/auto_accept_invite.EXAMPLE.txt","filename":"auto_accept_invite.EXAMPLE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":54,"md5":"73676ec8f00e2e2f68e039883b95bd89","sha1":"39ae93eb3c0dd9472a4d475ee2fba5a94d47cc53","sha256":"ca8428b326b45e8137fa135a94ba95f721e4b01afcb086a18de3bf2ef345ffdc","sha512":"a4fa9e05e3e3270a9a7cbca687cdede895e7d9653fe6e18c009393343931ddbb30b06a353c10595b0a5c2f20cee079f4244b6086ff29f82554ea110e24c1ffe6","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/branches.EXAMPLE.json","filename":"branches.EXAMPLE.json","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"JSON text data","size":709,"md5":"c4958997bb99e2dd111ac9b6db0c0c0c","sha1":"fb9e38e4356d5a4030b1ed6d5fd63cda40a3372b","sha256":"09c56dabdb5d4d8e65f5e7810bcd3779929417d6b3d46a85dc88d5c4b0c4a473","sha512":"ec4400987351ddc72d156f56f9c7b7473e6c0f632b2d730fa047cef058644362800ac8d39d2793d833f2d6a495d4c63d5b550eba531ecfe96c6901f02d062782","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/configs.app.EXAMPLE.ini","filename":"configs.app.EXAMPLE.ini","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":1184,"md5":"9154c9b54986644820c9c81211bfee40","sha1":"8b06d95e0976e41ce0e5c4a62037906d6e980c2f","sha256":"162436d3d00e56178d752fcda4dd09ae98cf3af709e2c17bd4f1fe4321f6e803","sha512":"1df7f50f565e1fc8cbda139104b20a1b417c7367e56867a29d597e23c745c5e736acbf08f4e92c3965d15bdde9e5abf6b96421e157c2090a77838f4285542815","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/configs.main.EXAMPLE.ini","filename":"configs.main.EXAMPLE.ini","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":7111,"md5":"5b22b7e281d9e5468ccac13c95c6ca1b","sha1":"21cff123f3d8598138972703eb2dc4266774bdc6","sha256":"7aea2234e87ad55e1426d82869981e3da12c879e80eb8b38f7e4b55327931424","sha512":"f58f03cb11b1c25ed8a6a11ae9e6af99cd8d7908ce9e43aaa6e7d6930ef28045b31013af8ff748867b1abd6f24632f9d26ede5cae2751c64cd78ca10bd0a8c47","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/configs.overlay.EXAMPLE.ini","filename":"configs.overlay.EXAMPLE.ini","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"magic text fragment for file(1) cmd, 1st line \"# ----------------------------\", 2nd line \"# XXXXXXXXXXXXXXXXXXXXXXXXXXXX\"","size":4769,"md5":"b5d2d660667aa066cc3f85c7dae92afe","sha1":"afd0160ab97cc1e3b5a60b7f1eee22f593c8210f","sha256":"c095de2a9c4c364eb96adbf12faf2a9993d2aa5082af2752c5cd1136461f606c","sha512":"cbb302cacba7e572e5f99adaa06ea8bbdd19ca0db1a27f5e0296f735aa0c01af0525235ba90edaeeb9cbc4ff18ae52696d666e88bc6cf4a4e84b87aade0008f8","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/configs.user.EXAMPLE.ini","filename":"configs.user.EXAMPLE.ini","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":1618,"md5":"7ce8123327ba379d3acb62020cc7fa10","sha1":"8e4c2903b456ecb6b89304942956dd3b5ddd1eb1","sha256":"923eebf6a078c8a8ac84ead6b117888245ee700058660c8d78e3c0e5d1f98912","sha512":"2dde653eca1a448e604acb1f65a96c5b3ae6e245fdadef1c97ef98f7e6870242a33e695faf7280f7b4efe375a886b3796e87bf5bbc932a955e94e30a74e7a379","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/button_a.png","filename":"button_a.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":9456,"md5":"82edcac3c186dd2366101130cb565fb5","sha1":"fbc579afa1b96f6d4f2b24403b848f66a0e439b9","sha256":"aad85589c65f4624c283f3c0cc86b31bb230bc26a9fed29412191c8fb53d339c","sha512":"bbec1237bbfaeda043ea60d47fd147b17a5bff9d6f39288b8a5bcfcd0e048d173eda6587ed0a301727ad4e1a47831a2c979fd77ab99628d51912c023d0b5c149","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/button_b.png","filename":"button_b.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":8556,"md5":"388324635d98c7d64d17748b7d9ddeb1","sha1":"398a09995ce23f6fb8ca43fdf9fe3c51920dc1c2","sha256":"40193d449c6992c00454cd6844986007cd361e46c12a5e175cdd9fc1d61b3df7","sha512":"82a6ad9e23ae13e5f34405ee5215f9b902bbb27b973ff32b7ce0af31181f814c7036c156280499658072d2048a48d86118e110b90524bc67e398be5b58362398","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/button_x.png","filename":"button_x.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":10713,"md5":"fabb09eb751085a0aab83058e049f9ee","sha1":"024fc68ce1bc6804b97322acd9dd8cbac05bcdbf","sha256":"d48cfbe44767c432b70a25771a8be0162e5644270047497b423cf8078a03378f","sha512":"304ca994d2fd6905a05200493306fb21c5c12673a3342397ed9b4f6118a7acb73cbe632e1cf2e12151e6382649cc6940f152543b56e291650802ae08d4c79460","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/button_y.png","filename":"button_y.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":9184,"md5":"2d996ebd75689dce767625edfee08ced","sha1":"ab4c9216c12f1e717184aaa8c3c55f3de171c657","sha256":"7710d3113955f6e1933c07e1495c412a4e1ab2deeba30b9ec8ed7a19e20a891f","sha512":"99313db2cba17c737bdf4acfa32104608391fb9ed0c6121e840f3235b253bf04e4755cb4c73bbf561883a96dde96c76fbd377d94562d514b290b4956ce03e45b","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/shoulder_l.png","filename":"shoulder_l.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":2711,"md5":"e1aa5b8a915e4efd00f3db34219ff018","sha1":"06f27fe2f0faaa74d5f36db78ede0e24bb6a8419","sha256":"06f4007ee74ed82e1327cb1b03cb740b0f4d23fd1de4c242e47b10493396f286","sha512":"fbabac0c9f9f80d2c10481c84816db11e7460cfb8ddbb208ce9aaf4155b9c18898aef5c98d94f3a4817aa2a6f2c0591c51efae623a87c2afc5a065cb78ff6240","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/shoulder_r.png","filename":"shoulder_r.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":3119,"md5":"ad42aed0b371c0aea2bb3575314c459b","sha1":"c24785d464297727a8b221b97123919f38e8c0ae","sha256":"d00995974d66bb5e2bd83cd3a4990dff3ec108b9eb86dc4fd4f31a2fb33b40f9","sha512":"7bd722e323106cbb9f763852161c1ec2325b6924baa15e979d73189c6211f16346045e0befd8f0fc3818c2f966894ca5663e10b8890ac0ebb541ef6b84f700a2","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/stick_dpad_e.png","filename":"stick_dpad_e.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":5994,"md5":"ece817dc57251713560b3e716d5ba3c9","sha1":"9fcf9f53ea8ed2ab30d0f5f92b0fd52d7f99285a","sha256":"63da80cff089402decbaf2afbfbee4841830cfd0d117751f68336ef542dcbf42","sha512":"71ad3053eef780ec860ab66a1cf97466a3e800bfad95f327406e1d96e02993ddaf51397d47bb1903a8bb97879464ac8c8692e70de3c23f2ff9033a9607dd8a6b","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/stick_dpad_n.png","filename":"stick_dpad_n.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":6034,"md5":"2f6d9618d389513dc86a260bee683b22","sha1":"70348453de63326aab7b6123fad5f1d98c1a422c","sha256":"4d284e811156f0376e1b39b9ffd86ae15f0639c1da67719fd56b96ce1eb93790","sha512":"8022c6779c0202244a2bdca15e717dfa33499862d857e71c6deb4977d916fe5edba6fbe0cf11d0c5839059d167f6e506f358cbf4fbfa6eaec59c7c4c17606ba8","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/stick_dpad_s.png","filename":"stick_dpad_s.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":5985,"md5":"d36699e9277a79d6d4836414aad5b04e","sha1":"2657c0dd8f5aa62bda9e252a6e48b9544c4c9ea7","sha256":"57c1b3ff038f50b3e4eea9f6db752058891ce4c0e7551ae5fbf7bcc2658cd6e0","sha512":"aa1a8bec069f8b92b70077bc0e29c8c9e3071edc7a5121aebaa1bfb5819231fa18b02b4f48b79580450aca642e2ad246a967a6eeb4f1ff499cafff7da2176405","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/stick_dpad_w.png","filename":"stick_dpad_w.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":6001,"md5":"31166b5985ac5820165806e05f61f84b","sha1":"f7f646ef77d4cef540e8fe392d571870a8672fdc","sha256":"cd7042919525b3d720a76d85679547e837ada74a89d59f8d05b266c2f349d50e","sha512":"d630ca4c2101fd0c73a8417ab2139e0fd044b113bb88902ad71307de0688ab7d7d26bd6d6439f91d51666b35b09061a40cf68e3ca2033dad45b69061e1949508","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/stick_l_click.png","filename":"stick_l_click.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":6381,"md5":"0a12bc4299c9503bdd275588e384f85d","sha1":"1644be30af4b070c7f60e116fd376781ebab2da8","sha256":"5d69ea410b79b27c73572954057e706c4bc2959bb1da385fa453fff023a94d5b","sha512":"e0ccb7763eec3cffbb23f2a67cce63dbdd2289ffd2b65dd42f6ddb56827b1ca2c158845beb5860944cf276c1bd297a123ba8bf3141b46f6536223d0cdaf970f9","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/stick_l_move.png","filename":"stick_l_move.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":5147,"md5":"0c3fbb94fd1141818dc2d4490e141904","sha1":"3e9f392bd14fb375b8fa56d08d1c47f159bade7d","sha256":"11c1aceb28739081290a0c86494d7df43ad975dc8ff942147b894bf558de5a12","sha512":"2b9ae76aaed9acb07adb7e03065555720deb4d36310a282386d1d4e8d2630155d99582ad0db4bd52421c250936e6131260d9a7b698072710561abcdd8b063b99","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/stick_r_click.png","filename":"stick_r_click.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":7036,"md5":"ab9d13d190576d35a08bb68894510fbf","sha1":"7d12204049326772b52fc92a03861c4420d82bb6","sha256":"44db68034534cc61e818302747b8c98d8fe65c52b1159f76ed24896695e35f73","sha512":"9204abd01b795857e6578831008d016504d42db50255c64cca80b349edaa56feaae5026131b70b6cebbb771cb550e64b4cc853ede078cfd6eaef342f63fb469e","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/stick_r_move.png","filename":"stick_r_move.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":5798,"md5":"e9e22da4b33830abf1dd8c8bb48b38e8","sha1":"c0021118a23c2646403722d56eb5e0515b61bc28","sha256":"00fae2212e2a54896b0fc18ab7d267e39ad6cdacd62b055da3063f081f1a518c","sha512":"e0333a23f4d23fa2d192aa5e60048fac10885d28baa73549ed1544e2dfd4eb99a3a7c0fb4289c3e49fca582c4a7f5c9548c4f24ee585b8487b9175d02fac4053","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/trigger_l_click.png","filename":"trigger_l_click.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":1802,"md5":"404786bf294387522822db6c1621f20e","sha1":"ff70f8e505936549f1949d11e31c4f2e4df8b2f8","sha256":"f6f9b7869c0835ad1de706e51d1f4da474eb1d646301f6e920d3bcdc3284252a","sha512":"f83a26e6b9f551ae92d152dc4a87a2b5096beb5212331472dbbeb74ada8d2c2c910e71d6b495d1d10ef5399f2e9d87854a1fab516fbdbfba587ef8ccee934071","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/trigger_l_pull.png","filename":"trigger_l_pull.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":1802,"md5":"404786bf294387522822db6c1621f20e","sha1":"ff70f8e505936549f1949d11e31c4f2e4df8b2f8","sha256":"f6f9b7869c0835ad1de706e51d1f4da474eb1d646301f6e920d3bcdc3284252a","sha512":"f83a26e6b9f551ae92d152dc4a87a2b5096beb5212331472dbbeb74ada8d2c2c910e71d6b495d1d10ef5399f2e9d87854a1fab516fbdbfba587ef8ccee934071","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/trigger_r_click.png","filename":"trigger_r_click.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":2396,"md5":"25080b78852bc865c04f195d8423a82a","sha1":"459a49ea04541238038ff8910069b4840e018490","sha256":"66184fa95f5a564410e943011ae913d5f169e511dadec02b6a1e35583702fa82","sha512":"54e6f7e9f2865ec6205d0cbeb7dc1468c9622f6975bcfa7d153d77e39fe521548b299c2019516779c0d503d60108b09cb9f6dbea1581bdc9d785f0f6bd7b26b8","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/trigger_r_pull.png","filename":"trigger_r_pull.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":2396,"md5":"25080b78852bc865c04f195d8423a82a","sha1":"459a49ea04541238038ff8910069b4840e018490","sha256":"66184fa95f5a564410e943011ae913d5f169e511dadec02b6a1e35583702fa82","sha512":"54e6f7e9f2865ec6205d0cbeb7dc1468c9622f6975bcfa7d153d77e39fe521548b299c2019516779c0d503d60108b09cb9f6dbea1581bdc9d785f0f6bd7b26b8","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/xbox_button_dpad_e.png","filename":"xbox_button_dpad_e.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":5994,"md5":"904b6ec32e34107a6faa94ad1c40a5bf","sha1":"cd9c496099ef4a183b420e7288256a87f2757067","sha256":"723b52602aeb0dc3b7a403245d867b86bac4cb1906c4c59d1d029ea5af2d05d6","sha512":"3cfcce8885a5666ecb3cb085f2dbe7588ec80f9f5df0976cb0ec07d8f2fe4fb9e7cc61e5591907789eaf5188e6169c0ef3d1b4e25a83ffee68a68c19b1940736","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/xbox_button_dpad_move.png","filename":"xbox_button_dpad_move.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":5013,"md5":"5012a82d6c684d28163419810d3d48f8","sha1":"1446dd66e8207b036397adefa68f45f4a4bc2298","sha256":"ca1f4678c542cbe15de5c2276e69617ca7d41b886a2aba68f7972d0e26051f00","sha512":"34cca7dfe77f4ecd58276f9995d12f033d0d6b72c4a37e143154cdd28797f2ebe6bbfe292bf8c848b92ab848835af3531fd79a9aed242940069ae0be3cdb00b7","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/xbox_button_dpad_n.png","filename":"xbox_button_dpad_n.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":5881,"md5":"e02b8eaa9ab4874a71bc63b24da9effb","sha1":"05d2379b95f64543d61c7017d6c898518d4d3398","sha256":"99526d88d69e47ff9d15b9c669001db3f85046d0e0adb6aeb71a3a5d3a0a4ceb","sha512":"136f9e882dfa0e1b56b3bee65bdd6cbac8c6f75f0e7c083fe8670d81db3356fb06e6e82390060793378c874f522c59f149b937d4e1aaa785e137cdd9a456628f","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/xbox_button_dpad_s.png","filename":"xbox_button_dpad_s.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":5915,"md5":"5ae0de37372666b1bba5d04be113f7d3","sha1":"50487455de61420b6f4cd24cdd584bae0e44b113","sha256":"edef3da4507d5840e5fe18860407678b464fbf78ba3256df86022ba13e246756","sha512":"e684d6c79bb9b08fe6eccdc7c44503688798e973539a48334c9eec5f78b4a01a913b556ce586b33fd58ff69d3097f02cd51b1dc67e0ffdfbea846b482cece8d4","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/xbox_button_dpad_w.png","filename":"xbox_button_dpad_w.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":5966,"md5":"0c7afee16f408b11c236919c8d2e36c0","sha1":"aa0027cd12da8b6984442de34af0612a2e90f7d2","sha256":"5ae6a9a01369833ead651f12a571e3a8e998c83d8a27e2b115ea293586d8be7c","sha512":"2afde45dab749eb99ea431d61dbf2fa7a735dc1c07b692559a4461f7d7c7cc962ade9ceafb26e44f5b17fc396712ad599fcaceafc5ab07cdfa9ab7f08d1d0649","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/xbox_button_select.png","filename":"xbox_button_select.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":3871,"md5":"36343c70dc1321a371b24be06aa7ff44","sha1":"a37c5c5aa06b3ef0b2ca25b81d568dda9fde2a8c","sha256":"702b06e046779234c8ecb2ba6db1c4d533c89cf4bdbc92a00660c11e976af573","sha512":"a7bd92bb66e95312db80082d3f8c838592df2e29ba2549fa27c3660dc3847378d70ee352f2ec78b793a496709a6c64f80e0a33d9c8bc993bef6004d5ad98ef42","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/xbox_button_start.png","filename":"xbox_button_start.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":3927,"md5":"894c0f75570b457cf12e18ac3cf6cc30","sha1":"e2a8827209cbb7087d08bbec92bdf7851a0586ba","sha256":"199923784d9b2838d96b3aba842f685973881a29c7ad6140d14c34691a41dba2","sha512":"f81c4ae213ffb2ef7508df7a0508654f2f5a0442c1096d04baae694dfccd026c741a6bdac80d9b540b71119dfb26c0274a0f79c623ea9d8bf0ec4b0bb3a44300","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/InGameControls.txt","filename":"InGameControls.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":339,"md5":"d91839f4a9769454503cfdf294f0a427","sha1":"0aa37830481f71ced14e4a362869ef4ddb17c24a","sha256":"ca5a23baedd6052c43a7cab37b203e808a2606f15b7006f7675d111a28e1fcce","sha512":"c0a72e66a6c72b49df1d648768da628baad25c49a0a6ca6fc2c6f74723850125b29dbc7d90e9021a3ad0c720db2bcb0062e6b062d418537631a8cc26b6de22e4","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/MenuControls.txt","filename":"MenuControls.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":291,"md5":"ed8f5f1732d99f7e81d9ea38d9cfa73a","sha1":"f360906165048e6b6b01ff2a71c4085b563988fe","sha256":"93bcc5f7196c64b113ed6866f66d12e27722f0cb5a23549f56b05cfc8f810bc2","sha512":"451e7dd287ecdf5ecc95831216aafe22fdff96bcd3fe9254e659ec49c68d3c84bd57062b73d9b224fc6b3601c631a319534bb504e3d168e1bb0be968e9b7ca5e","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/custom_broadcasts.EXAMPLE.txt","filename":"custom_broadcasts.EXAMPLE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":79,"md5":"ec00ab82710e7340b12f1c29a138e269","sha1":"6edcabe7972e0c1fff835af093d16f74ad817fc8","sha256":"14eb092ed54144afbde5ed76fc5d5011be891b14e4b3448333e82c2b6978099e","sha512":"446b1648047f9106c537acfc11606a45f55eb3deb5b35d9a1e4cffa3bfa1c8aa585cd1091d89363a3fa67a1a4c488cbf64a10d924f4d9c673390bfe43af7e96f","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/default_items.EXAMPLE.json","filename":"default_items.EXAMPLE.json","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"JSON text data","size":28,"md5":"4e6a079263073d6eab3baf11104e8645","sha1":"4484c999427717c76609b44fc2ea45a09a065f74","sha256":"f576a560e1a492540d11c6b80d5616a67f1f906af82356d7b279e40f7ddd7cb0","sha512":"a5dfb9c9cd2c109b38a63f318c0df6ecf1f4e49541d3e4271db70d4819b3b8857e746c45b8a2990c7d58d1109e168d5568689a68d87315fab68e4a03e3f6424d","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/depots.EXAMPLE.txt","filename":"depots.EXAMPLE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":43,"md5":"73234bfaaa538824cc6b0dc062fbf34c","sha1":"3e0632663b82001e7fe91640bae459fb3b5aee30","sha256":"8d5b3caa72f0ebf5e6155e0e129e63a244f6e880a5a2e23193bc215db27dce58","sha512":"7ba2ec11885a2fe7eb60dacb5e3b98b9e596e1bc84d69209a75d700ef9022f0fccb123ed8892f4457444f166cfde5f2cbbc123a8c2d0afaa28f109f69a69a183","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/fonts.EXAMPLE/README.md","filename":"README.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with no line terminators","size":93,"md5":"aebfda63f3a1e7c4d1f9842dfaae143b","sha1":"a67f29ffe7ea89b362c84fc8c2d733ae5d81fa9b","sha256":"44c948a84ef5b96868aaf7fd4623412173ca0a6671bedc2c93208001b925377f","sha512":"aa3db753d3080d8d16cda20f42d2fe5276f2e846fe080e868b2ecfadf315209e05815e9d70b18bc86dbdc68adfbad1002fe463f28154e8f71b259be9b1c505fc","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/fonts.EXAMPLE/Roboto-Medium-LICENSE.txt","filename":"Roboto-Medium-LICENSE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with CRLF line terminators","size":11560,"md5":"d273d63619c9aeaf15cdaf76422c4f87","sha1":"47b573e3824cd5e02a1a3ae99e2735b49e0256e4","sha256":"3ddf9be5c28fe27dad143a5dc76eea25222ad1dd68934a047064e56ed2fa40c5","sha512":"4cc5a12bfe984c0a50bf7943e2d70a948d520ef423677c77629707aace3a95aa378d205de929105d644680679e70ef2449479b360ad44896b75bafed66613272","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/fonts.EXAMPLE/Roboto-Medium.ttf","filename":"Roboto-Medium.ttf","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.137; 2017Roboto-Med","size":168644,"md5":"68ea4734cf86bd544650aee05137d7bb","sha1":"3c6a09fcc6a454924c81af7dff94fc6d399ed79b","sha256":"9d0d55a303bfd13b79a87721f65185e93f235e2d77fe398b2dca67ac519915f5","sha512":"5d55a41b845f3a3ae9b08cee5258348dfd83dac5f0a0e48159cd85c141c614a02f8f474fa683d2bfbc451d49dd3b749820662d403b2e3fd3f16a242eaca64115","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/http.EXAMPLE/accounts.starbreeze.com/iam/oauth/token","filename":"token","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"JSON text data","size":473,"md5":"080cccc1a57f943293be2a1ce3f90f77","sha1":"4f33c2d7c165c64f80d479cb6a23a796e9315076","sha256":"9c14016bf474e932ab5efb001f299986557041a3cc742598b485bd12f3a247e1","sha512":"59f679986462a47759322425e0c05279f7ea0e171c619653f5e53d9c1994de863f6feaa0cd977979fdc5b0106b38ffeffa4ba572db03ed38a22cb18b32b68a97","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/installed_app_ids.EXAMPLE.txt","filename":"installed_app_ids.EXAMPLE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":462,"md5":"3645e67d53159353bcbfeff3e3600191","sha1":"a68be706cb4f65232e6abb6e9bf5f5bfcf146d7c","sha256":"444d2869ae60aa76464d8c1fea8a29d13a241f171de7dd7d162d1acefb6a6827","sha512":"a2883e33739230783672da5062fb854b3cb19c0fd3f1e2af9ebf243c25ca5e52ae290702c10ee78f41f1540a43046d47a37d49e4fd6d364440b41d302acb844a","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/items.EXAMPLE.json","filename":"items.EXAMPLE.json","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"JSON text data","size":3812,"md5":"1d50b0c39df6f24efebd45b0e00654ca","sha1":"513af4cf2257de760a9a552a4bba936e4c398fc0","sha256":"ad61a38229d67c69d167d0bd08da9d171e9586281b14d3b676c37e2be69da7f9","sha512":"5fa50ba007477ead096d1f507a20f4614189c4127f123a998c3c11bd4f1f3bfc4628a6e7b27cf69639b0e713ef6ddd4bf02d1e2b62526378dc228f4f8520536e","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/leaderboards.EXAMPLE.txt","filename":"leaderboards.EXAMPLE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":54,"md5":"b7753638a0b72c45212818a725751f88","sha1":"549d6a4d50f678709b4a9208a369d7e8127d2a3f","sha256":"fea5d094c743ae66081cc3d30a6dd9cb1dddc65023584061b4d366bbe7ef4419","sha512":"2d94e7a348ba7e4da1c4b6957eebd399215a02411b9201211e0478e9ee6dd7466b1d39c349c0f652e04882fccae28a7760a1bfb894011bbefe8a8e91cc1afc80","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/mods.EXAMPLE/12345/Readme.txt","filename":"Readme.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with no line terminators","size":93,"md5":"c2d8aa8668b7ba353b43ee4957b1c98b","sha1":"aa029758b8b95313e2a1c62faf1137cec8d404c8","sha256":"87988d7e9f983d16c90fec7f6e84012357cb87007ac38247e0c62613d3f120e7","sha512":"e8fdc647415faa9edd60c22fab06e041b226e5fc523d5766de10165a65d703da9c31608e33502f23c9c1718b3fb0fbc5ac02d9f5e20558ba6596da4d2c75aa69","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/mods.EXAMPLE.json","filename":"mods.EXAMPLE.json","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"JSON text data","size":1826,"md5":"c08cbc97cbec55a97b535804b76f8e30","sha1":"a1cdbfcc1fcf97081fdbf605d883cab82e92865c","sha256":"31ce3938d89fac14d61b7e0b4bb8bbdeec849e15e5e5d0c9737b1b85fbbc721d","sha512":"635b97c4b383d968893bde882f696948c274e870d054fb938f53ef8694f18f07e976716656d0ac4f6a9119d1898048632e3c6c51da979a5851fb091b4e88a8ea","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/mod_images.EXAMPLE/12345/my_preview_image.jpg","filename":"my_preview_image.jpg","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 184x184, components 3","size":3409,"md5":"fafa340202b7f16015984c90062f7b2a","sha1":"1408fed0c29ecac789028f2e12ca81d15a4bfe92","sha256":"58f08592a940bcd85a9620b52c262b6ce1cd7a4b6cb6a3b6494028614794d2b2","sha512":"e1fdde11fa7f03690655acde81d9d621e1ee3e08c4af7527057caef04b38dbcc60f9acec47161d6c6127faceca49b59bb9bd51fb3801a1545c80de59e318df53","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/mod_images.EXAMPLE/12345/README.md","filename":"README.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with no line terminators","size":95,"md5":"0062022f5417093802b84e175aa6cac6","sha1":"83eefe6a6e308fa4fcc723abe3990f6b8a6c04f1","sha256":"b50177dfd67f57617b9b5b8801f9642c73eb9990b0e32eb7edefbf026cb8550e","sha512":"645a54965771266a21f427a63f1ce7d91469128d3cf45844276938db3e2788ea5e64b740f6ad3c96a1825a339c461fbc050422e468583db3cb5e245db12edc66","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/sounds.EXAMPLE/LICENSE.md","filename":"LICENSE.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":293,"md5":"12321751c38e35f4722a9961fcd82748","sha1":"8d879617089fcf6b68646c0678f082beddde6a7a","sha256":"9e8e842e01b28c4d23a7fc99efdae8fbd908f38f7b5780b8b4bcfdf24745dcaa","sha512":"528f1c1292db749318675e169963044d92b301edaa73553a5d96ebf025c19393dd114a27d547cb95e2876a2c4ecd75238d1b38aa73a222b2acbd9cded0184920","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/sounds.EXAMPLE/README.md","filename":"README.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":265,"md5":"2699586e15c76a73c8fe97300b757fc9","sha1":"f01c0639717fdbd0d3460152b293383817334462","sha256":"fad5cfb25630bfd9d323342d1c129e706d5f7d7fc4b7564c5e0343ad55ef3dcc","sha512":"1c41198e243c555fe324e0f154de090231edff5c57e2414f098a0b22e1015a8bcbd929351e8ded5bd4863c2f57841ecc08a1cf6171daf42bf68e1ed24808903b","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/stats.EXAMPLE.txt","filename":"stats.EXAMPLE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":181,"md5":"ec53c81e294487435f705f1fe473da79","sha1":"6e7c7419723ccfacbee33c73fdd2d5a63315bdf9","sha256":"80e65652f506cb145eeb1d29a7fc3cea0fc9f233bdb7429fddd9f886c99abd22","sha512":"f2b8a9e0c1cc1cd2d3c6e7ad43ed4837645ea05fd0f7d83bceae84354f74e4ce816a89ffb9e4b112f0e1e6ae8cb65f3818b00d252bb578a127be684a6a8fcbb6","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/steam_appid.EXAMPLE.txt","filename":"steam_appid.EXAMPLE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with no line terminators","size":4,"md5":"e48e13207341b6bffb7fb1622282247b","sha1":"77ba9cd915c8e359d9733edcfe9c61e5aca92afb","sha256":"5db1fee4b5703808c48078a76768b155b421b210c0761cd6a5d223f4d99f1eaa","sha512":"6f0ac65fe01188660aad900bfe16c566ebf0e56c0a7d4a15bd831049108de80bd3a2fbf1a8b91662433a40458ec208a207cab073f190bd65b889e95e4fca8e09","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/steam_interfaces.EXAMPLE.txt","filename":"steam_interfaces.EXAMPLE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with CRLF line terminators","size":573,"md5":"06a47a21f1af5a7fb5a0623c5f92325d","sha1":"d0b2c9917782d0e4fd09c07e7e36a0c1ee33ed4a","sha256":"f32a58870b3da4214e4d9c132783e6e8f2f277aa9025cf3211ddfef9a3becd5e","sha512":"e4f64390d00092239b8fe7666c160b0652937f179572a88269c8c28bf6a56b04d796a5c6bcb3b3811db9eb9d63c7dd122446f89c77d83c81113c2c0c0bc79836","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/subscribed_groups.EXAMPLE.txt","filename":"subscribed_groups.EXAMPLE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":76,"md5":"5eeccd9aa2ca04ad8b5f6d89720065b4","sha1":"546da26d9d33c40d138f29d769c2c58b60df2dff","sha256":"3625d3ff36ba9ba02e63dc997ee153647f2cfe282a761c3e65b9e1a61c420713","sha512":"f544ef5c7509cff31bee92c62e4a2c761c6776a86bf902b623e12f0a9d1b930693302692b05482d2f11166b16bdc1a52ff3026f8d2379c7f69352683a8f58af2","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/subscribed_groups_clans.EXAMPLE.txt","filename":"subscribed_groups_clans.EXAMPLE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with no line terminators","size":40,"md5":"e4b1fe99c19e2da0fefbfb2f52a05a90","sha1":"de89e84ce95a5fdd9c804d0f8f1f080a380059ed","sha256":"b0dc2d9d30a050d42643d2887161fe1e11992419a7168e00a41ace6ae402baf2","sha512":"cb818668d4aec636db320faf279b121d8b748db23bcde4872d428780b13624346756a6cc5111be1e7a2f19e2bfa69e9e619c022e0197bf8cd3349812b393995f","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/supported_languages.EXAMPLE.txt","filename":"supported_languages.EXAMPLE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":62,"md5":"087d2c701260aeb3845fca9fd9f0a580","sha1":"24b97f251eec8da15f02196418343def2f209bd0","sha256":"b4d62455b48cb1a4cc87094794b1945c78095309fdbe64e326f8668e770e063f","sha512":"e5a44b7c3cdc1d15fd4d12e57804958a0f7a3e74c647f647b43139cf587b88507c8838fc3c4ce079faee218d5618f098fbeeca23998f419d1074918931c21891","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/tools/generate_interfaces/README.generate_interfaces.md","filename":"README.generate_interfaces.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":717,"md5":"5dee8646091be6e999fb6d7cd7bf75b1","sha1":"0b738fc2c46b41030af7a1fab975984c5405d80b","sha256":"93f737ea5a4db8e8627571f48e0447b566bc7ffa113e9166c5fc8c5973b54d15","sha512":"0b886fce6e442f1272d7883cf3d28a938c506a83f01cb8656f4a842b4765c3bc1b50470746087e77210865da8410c91d365be4892a4ce799435cdf258c93d64b","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/tools/lobby_connect/README.lobby_connect.md","filename":"README.lobby_connect.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":972,"md5":"1200bbe34e6acb8e5ab77ba12de4eb28","sha1":"d9501ff61f5d0c625a61ff40db17bc67224ddc1d","sha256":"f91d7ec4d32ada67345a1ab69bc53b68178a477cd7d42140689cd3088d71cafb","sha512":"aca2965cb6971f335fe5d813923b4c5846165f9858af9ddb461f34aabee3ca4b7ff00a1c2925b77ce612f4e667861a014d08470b469248665563bc6e77b58c81","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/sounds.EXAMPLE/overlay_achievement_notification.wav","filename":"overlay_achievement_notification.wav","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz","size":302674,"md5":"4ebb633927148696d8cdc4228171c05e","sha1":"cba7f456781e49c47d200948aa19dcb290790deb","sha256":"7db2e0a85e47c75f7b64a4b89040f2a3129e2b5e2d03200d9aebea71d6b6572b","sha512":"991dd3e7431c7f15a87ac0b0cbab32fb6e81b7ff196367e7600886d217afdb079fd7e966375c35c66883449eb817b2084e3fa314e1e15f27ede65e0966832a8c","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/sounds.EXAMPLE/overlay_friend_notification.wav","filename":"overlay_friend_notification.wav","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz","size":302674,"md5":"4ebb633927148696d8cdc4228171c05e","sha1":"cba7f456781e49c47d200948aa19dcb290790deb","sha256":"7db2e0a85e47c75f7b64a4b89040f2a3129e2b5e2d03200d9aebea71d6b6572b","sha512":"991dd3e7431c7f15a87ac0b0cbab32fb6e81b7ff196367e7600886d217afdb079fd7e966375c35c66883449eb817b2084e3fa314e1e15f27ede65e0966832a8c","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/experimental/x32/steamclient.dll","filename":"steamclient.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections","size":91560,"md5":"d0a054ee206c5bd90901e5f5a6a0047d","sha1":"74d667236917fcfc45db5371925ee90ee9093748","sha256":"b463f67b6c0c42496326df1c84d78955eb072f762f052ef5716bb08cbfcb536b","sha512":"3a5443bc7c24b9c7ea75b6ed207b244f9e480902d185e32808fcea0919a9fda761885554260be2a9f91a41210304be0554dc4a2aee6ce35c2c309812fa1a9c9f","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/experimental/x32/steamclient.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}}]}},{"path":"release/experimental/x32/steam_api.dll","filename":"steam_api.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 8 sections","size":15227816,"md5":"e3dcd2cea3aebbd42185a05f75fa6b76","sha1":"fcf65943d92a6b16f16533c2b3610cc775c34126","sha256":"434c6a2465d465caab73432925dc5c2c295622690c0ab0a3953ee630e2344121","sha512":"652e39eb9a51ad29041a1ab124e34d285e8c42346bdf8ec0ca77256e815092f039daf17ce0058be99e4ed30d6b0ae049e2f40fd138e6657a4a93115e512527e3","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"win_amadey_bytecodes_oct_2023","trigger":"release/experimental/x32/steam_api.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Matthew @ Embee_Research","date":"2023-10-15","desc":"Detects bytecodes present in Amadey Bot Samples","malpedia_family":"win.amadey","rule":"win_amadey_bytecodes_oct_2023","sha_256":"4165190e60ad5abd437c7768174b12748d391b8b97c874b5bdf8d025c5e17f43","yarahub_author_twitter":"@embee_research","yarahub_license":"CC BY-NC 4.0","yarahub_reference_md5":"2ba1411c46d529f2ae6a7c154d13f029","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"19e955f9-d125-41af-981b-09957a8abbc8"}}]}},{"path":"release/experimental/x64/steamclient64.dll","filename":"steamclient64.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections","size":110504,"md5":"531849615887b14456e092448dfbbe5c","sha1":"568ffe623eedd9c24812dd4a55b8b92146e00239","sha256":"bddfd60f9bf4bf4441723c3aa93fd0fbbc45cba53b19ac3af82ca9317cdd942c","sha512":"daf694449f3cecd89fc11457c19910f2d5e73104fba7829b4d315507d69bcea88f4dc7aa62ab84557424e4f3abf7ac3c470240a52d3af9bbabd8f6b4729dff42","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/experimental/x64/steamclient64.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}}]}},{"path":"release/experimental/x64/steam_api64.dll","filename":"steam_api64.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 9 sections","size":16903080,"md5":"bbd874ac70a91f51b0577d626d60639e","sha1":"305f57c743e84b63e573b1f05bae0a10c4f785f1","sha256":"0dadcc259c394a93aedfbe25db285b7a17a3c14e68d2ddd888a8abd22e571885","sha512":"be76a4264ab738b7a963ef3c65b2837439eefea72c9f7f35e28026be8875ac3baf2ed488b390ac7686771ba2ba3a436abf37a35c8ff61426d75d6eff32bd868c","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/regular/x32/steam_api.dll","filename":"steam_api.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections","size":5002152,"md5":"1830758d8650406d992563d093d6248d","sha1":"33f6e59f63cde97a056eeaedc26d294021bec8b8","sha256":"3a26e0f203c4fc1b755f03e36b431ed56bbd48ea41e90c90815bca37e25bdff4","sha512":"bc11595d305ce18045865b4ed2de4966e134a14387010518687d18b41713b42a19333a6e9bd3a54ae7a1a0441b99bbb06350df6bf6726941ea521affbfebbc1f","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/regular/x64/steam_api64.dll","filename":"steam_api64.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections","size":6212520,"md5":"f197f1db43a355c9cf096aba5cf2644f","sha1":"581b3296bdc595da8d986bc0dd105bf1f4c00a4c","sha256":"552fde36df2681d3dc5b6a7ce34add83968db8f7dbc591592755e02284a3dd9f","sha512":"d51ce9240bf170c3459155cf68fff88ef0065b60dff387650f0f7685d5330467fec60e6907e0a2e65b97a92c8bfaac236907d8365d878f60be0e90dc0b7e5f9f","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steamclient_experimental/extra_dlls/steamclient_extra_x32.dll","filename":"steamclient_extra_x32.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 8 sections","size":236456,"md5":"e27a3a2d2766103058ef3d9ca68aec01","sha1":"889f707ed2b07f0e66f8707118d82ddd7f7eb9e3","sha256":"32ee9e4dd425ff0f1c7f26a1aa4c9b64ed13553b945fab27558b53f7106656af","sha512":"e97846ae8ef1597a00acf40d789c7abac387ccafd29e7886b6b977541d3164c2d5272ac7e93e11332394aa6034c1c1f462d56e9758f4cfbb1c40ffd44e1c6fb3","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/extra_dlls/steamclient_extra_x32.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-01-17","alert":"Scan result 1/67","trigger":"32ee9e4dd425ff0f1c7f26a1aa4c9b64ed13553b945fab27558b53f7106656af","verdict":"suspicious","severity":"","comment":"suspicious - 1/67","link":"https://www.virustotal.com/gui/file/32ee9e4dd425ff0f1c7f26a1aa4c9b64ed13553b945fab27558b53f7106656af","meta":null}]}},{"path":"release/steamclient_experimental/extra_dlls/steamclient_extra_x64.dll","filename":"steamclient_extra_x64.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 9 sections","size":291240,"md5":"414351a5400e089e6048a7f7780e4737","sha1":"9581f32b9540bc96fe5b27311fb1b669918ad3ae","sha256":"66a6205c96276be6caa2c9a9aee0843d25354f5157118726e28ee792c3228888","sha512":"b9b6ecf97e8951653792eaf76a40860eafbc5e3838232cab40858c225a979c41f9015081bdcaecb344b019fa04d460eef7a55ce7a0002c4eec85b45e353cff81","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/extra_dlls/steamclient_extra_x64.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}}]}},{"path":"release/steamclient_experimental/GameOverlayRenderer.dll","filename":"GameOverlayRenderer.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections","size":92584,"md5":"af48a054b5f5dc891e2c952af0950691","sha1":"89dcb2daabf896ce1989d85bd4c8227e595bc8ed","sha256":"126049fdc96caaf1843443821fe82bd6e95055558d51694c843d063eef3dbfbb","sha512":"d54fb05c895d50d821c48d5aa9542f2e0fc271b3f5f3b03936b13deb8ba6d586285f88e25da4b5b875cffc09db4f1ee24eada9d97d8a76cba282766362a44f62","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/GameOverlayRenderer.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}}]}},{"path":"release/steamclient_experimental/GameOverlayRenderer64.dll","filename":"GameOverlayRenderer64.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections","size":111016,"md5":"d745b9760216a89e922afb5cbf83536e","sha1":"464d554a1a93d2598e9e7e227805593b607f28b4","sha256":"0842ef81601933d072777bec0ab0e6f497629e90f166216a589d978eee8484fc","sha512":"ecf2a08df97fe825610dcbca59cafc6128b1a18abf90ed210e50be00dc36cb700a4e4da3df736a93c3ff11e418c48e932cf2205a80ba46021a3c9b877b6db06f","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/GameOverlayRenderer64.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}}]}},{"path":"release/steamclient_experimental/steamclient.dll","filename":"steamclient.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 8 sections","size":15083432,"md5":"584c22c70d32215def915af1e19975f8","sha1":"cc6ef421ba4b632a832b393128518020cdcbf7c6","sha256":"f90dca95ce2ada9b2a77dc60d9c441d01dcf4118deaefd23cb51c18ea9315a40","sha512":"b168fa84f0b2df0d58c81c6933fd54a9f1ed70ef076b5efa287a04cce9de6b726560e1995ac18c7b5f1f2d8768b48be7042703aaed6d3f95651e696387e72fa4","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"win_amadey_bytecodes_oct_2023","trigger":"release/steamclient_experimental/steamclient.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Matthew @ Embee_Research","date":"2023-10-15","desc":"Detects bytecodes present in Amadey Bot Samples","malpedia_family":"win.amadey","rule":"win_amadey_bytecodes_oct_2023","sha_256":"4165190e60ad5abd437c7768174b12748d391b8b97c874b5bdf8d025c5e17f43","yarahub_author_twitter":"@embee_research","yarahub_license":"CC BY-NC 4.0","yarahub_reference_md5":"2ba1411c46d529f2ae6a7c154d13f029","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"19e955f9-d125-41af-981b-09957a8abbc8"}}]}},{"path":"release/steamclient_experimental/steamclient64.dll","filename":"steamclient64.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 9 sections","size":16728488,"md5":"3825be29afc3eecbae7818b23f00ac11","sha1":"9bec06cc636ffba948bc56607b230d0c0369b56b","sha256":"3fda1eda02cb1e349523ddf002d150dfbf11dac022565b9b526e9024a71c8461","sha512":"8e3b4cc9769e9484ffba58c44ec862c55b20009c2cb00bd7be3bc6e945bb0017f305b8c3584c9d485a4b13dc628e709c917fbb28dddcab807a67ebc95a70bb88","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steamclient_experimental/steamclient_loader_x32.exe","filename":"steamclient_loader_x32.exe","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32 executable (GUI) Intel 80386, for MS Windows, 6 sections","size":267176,"md5":"8240a09352a3f14f4b9af4233af7767d","sha1":"224a5997b16a882537923e6de482ca5a40eb3ae0","sha256":"7c2d2eeca0a47b11e62d557bbda0ade2572c82c001f18afbac35bb8c2aa518ab","sha512":"4013b953a64f4957b1fbb63938224d9c48dd72a0e91680ae6342fe3e40f38ac3ff3ccdcdfbfe5c3ec48ccec7a51e1dae0dce397f7c8ff74aa231f83d3140d965","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/steamclient_loader_x32.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-01-17","alert":"Scan result 5/67","trigger":"7c2d2eeca0a47b11e62d557bbda0ade2572c82c001f18afbac35bb8c2aa518ab","verdict":"suspicious","severity":"","comment":"suspicious - 5/67","link":"https://www.virustotal.com/gui/file/7c2d2eeca0a47b11e62d557bbda0ade2572c82c001f18afbac35bb8c2aa518ab","meta":null}]}},{"path":"release/steamclient_experimental/steamclient_loader_x64.exe","filename":"steamclient_loader_x64.exe","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32+ executable (GUI) x86-64, for MS Windows, 7 sections","size":330664,"md5":"e0a4d4336350970798a55e9d14aada33","sha1":"718015c55251909e0177842ebef6272288fabde1","sha256":"a1ae3c57f88d59283db32ee11c80ed6e1477c8fa04b35794e7b3c5a63d4827bf","sha512":"730f67664d9db1a9b9c819d3962cbd5e0886627fcae12a912ad58d169eeff35436efa890067f9989f4b7c8a1f5e2d778051be499e91477903988dc535a5d8809","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/steamclient_loader_x64.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-01-17","alert":"Scan result 3/72","trigger":"a1ae3c57f88d59283db32ee11c80ed6e1477c8fa04b35794e7b3c5a63d4827bf","verdict":"suspicious","severity":"","comment":"suspicious - 3/72","link":"https://www.virustotal.com/gui/file/a1ae3c57f88d59283db32ee11c80ed6e1477c8fa04b35794e7b3c5a63d4827bf","meta":null}]}},{"path":"release/tools/generate_interfaces/generate_interfaces_x32.exe","filename":"generate_interfaces_x32.exe","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32 executable (console) Intel 80386, for MS Windows, 6 sections","size":225704,"md5":"5d511307f5f49342461408ce8cbf99fe","sha1":"631cff52193af227270be0acd0c02557d1fe63eb","sha256":"ac89cc7e92433e3c935a886566adb0135fc9a0f4d9ac042933bb3d7934cc7d4b","sha512":"fcd9f6386056edde8dd10fce7f332c6e0093a53a93bdcc8aee4362566a977f61f48325716a7a1526e5722140ee08327de7f51f6ae9652240acf38f999e8084d0","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/tools/generate_interfaces/generate_interfaces_x32.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-01-17","alert":"Scan result 2/72","trigger":"ac89cc7e92433e3c935a886566adb0135fc9a0f4d9ac042933bb3d7934cc7d4b","verdict":"suspicious","severity":"","comment":"suspicious - 2/72","link":"https://www.virustotal.com/gui/file/ac89cc7e92433e3c935a886566adb0135fc9a0f4d9ac042933bb3d7934cc7d4b","meta":null}]}},{"path":"release/tools/generate_interfaces/generate_interfaces_x64.exe","filename":"generate_interfaces_x64.exe","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32+ executable (console) x86-64, for MS Windows, 7 sections","size":282536,"md5":"fc476f8edaf78ef24a2570746529bfbf","sha1":"344bce776d12c4ac5a641df86bb80df6512f7b48","sha256":"ed5304d9fc25748c374558859492867d8cb1f56f7100eba3cc59eac9baf1ff49","sha512":"288c32ebe5be3734d531fc75c968406fb516fdbdb538f87b62fcd9ff6f7b4d2fd7cdbe351a2d62e3b85019a451224ede2bf457a12e41008d2cd50d7624c6a506","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/tools/generate_interfaces/generate_interfaces_x64.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-01-17","alert":"Scan result 1/72","trigger":"ed5304d9fc25748c374558859492867d8cb1f56f7100eba3cc59eac9baf1ff49","verdict":"suspicious","severity":"","comment":"suspicious - 1/72","link":"https://www.virustotal.com/gui/file/ed5304d9fc25748c374558859492867d8cb1f56f7100eba3cc59eac9baf1ff49","meta":null}]}},{"path":"release/tools/lobby_connect/lobby_connect_x32.exe","filename":"lobby_connect_x32.exe","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32 executable (console) Intel 80386, for MS Windows, 6 sections","size":4815272,"md5":"1d04f0f1d778962ec4042ddb8662f2f6","sha1":"64df38df7cc36575886fad8fbbefa49e5b9001a2","sha256":"b4031e1356e75084f2f36f10ced8d650be6f14ce433c6912ecc2f46f7a3770ad","sha512":"bc7ebcd2f50a3c7037a4eda0579f526f558a795bb1c3a2b6fe3fa4fdfca5cfa358eea53e85bf5cdc784617b39b18a310e713daf628fd6b61dd6daba26fe3c64a","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-01-13","alert":"Scan result 1/71","trigger":"b4031e1356e75084f2f36f10ced8d650be6f14ce433c6912ecc2f46f7a3770ad","verdict":"suspicious","severity":"","comment":"suspicious - 1/71","link":"https://www.virustotal.com/gui/file/b4031e1356e75084f2f36f10ced8d650be6f14ce433c6912ecc2f46f7a3770ad","meta":null}]}},{"path":"release/tools/lobby_connect/lobby_connect_x64.exe","filename":"lobby_connect_x64.exe","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32+ executable (console) x86-64, for MS Windows, 7 sections","size":5977512,"md5":"46f1fa91e2db5232914f5d198e1c204b","sha1":"4b8ed0345bc6f8fc2d946f23f3a7837df1543419","sha256":"c1b40bc7f8c7e102bae6251c78d387ce8112b7183eb26d4202005ccb0fce8a31","sha512":"043d74d13db1ce6eb5ea3192024a0a78327c8c594fd643de4010d61b47ce647cfb3049a9df9dd421b1a00dbc50e69b6e1a511c026715f2237a9c1a6d9c724dd4","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-01-10","alert":"Scan result 1/71","trigger":"c1b40bc7f8c7e102bae6251c78d387ce8112b7183eb26d4202005ccb0fce8a31","verdict":"suspicious","severity":"","comment":"suspicious - 1/71","link":"https://www.virustotal.com/gui/file/c1b40bc7f8c7e102bae6251c78d387ce8112b7183eb26d4202005ccb0fce8a31","meta":null}]}}],"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/experimental/x32/steamclient.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"win_amadey_bytecodes_oct_2023","trigger":"release/experimental/x32/steam_api.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Matthew @ Embee_Research","date":"2023-10-15","desc":"Detects bytecodes present in Amadey Bot Samples","malpedia_family":"win.amadey","rule":"win_amadey_bytecodes_oct_2023","sha_256":"4165190e60ad5abd437c7768174b12748d391b8b97c874b5bdf8d025c5e17f43","yarahub_author_twitter":"@embee_research","yarahub_license":"CC BY-NC 4.0","yarahub_reference_md5":"2ba1411c46d529f2ae6a7c154d13f029","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"19e955f9-d125-41af-981b-09957a8abbc8"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/experimental/x64/steamclient64.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/extra_dlls/steamclient_extra_x32.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/extra_dlls/steamclient_extra_x64.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/GameOverlayRenderer.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/GameOverlayRenderer64.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"win_amadey_bytecodes_oct_2023","trigger":"release/steamclient_experimental/steamclient.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Matthew @ Embee_Research","date":"2023-10-15","desc":"Detects bytecodes present in Amadey Bot Samples","malpedia_family":"win.amadey","rule":"win_amadey_bytecodes_oct_2023","sha_256":"4165190e60ad5abd437c7768174b12748d391b8b97c874b5bdf8d025c5e17f43","yarahub_author_twitter":"@embee_research","yarahub_license":"CC BY-NC 4.0","yarahub_reference_md5":"2ba1411c46d529f2ae6a7c154d13f029","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"19e955f9-d125-41af-981b-09957a8abbc8"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/steamclient_loader_x32.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/steamclient_loader_x64.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/tools/generate_interfaces/generate_interfaces_x32.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/tools/generate_interfaces/generate_interfaces_x64.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-01-10","alert":"Scan result 3/60","trigger":"daf5388f8d9a9090867e65c3c9420ae76629d5e99a369cae99f371800ee9001a","verdict":"suspicious","severity":"","comment":"suspicious - 3/60","link":"https://www.virustotal.com/gui/file/daf5388f8d9a9090867e65c3c9420ae76629d5e99a369cae99f371800ee9001a","meta":null}]}}],"artifacts":{"windows_shortcuts":null,"files":[{"md5":"286ce60dee4412957189d95bae7efbcd","sha1":"00066db6aa05fbd8d9ad1437213f794e004f0db7","sha256":"daf5388f8d9a9090867e65c3c9420ae76629d5e99a369cae99f371800ee9001a","sha512":"211abfe343f101a4dc15a5c337fcf33485b18bd326a30b7d9366781cab78afd4c21069adee5440863fd96b6bc0a24e0629b6c7423e9eb2985e9726f217bb2045","magic":"7-zip archive data, version 0.4","size":10403872,"url":{"schema":"https","addr":"objects.githubusercontent.com/github-production-release-asset-2e65be/830127839/30f54f2d-6baa-4138-90b6-f0d14faabe62?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=releaseassetproduction%2F20250118%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20250118T061743Z\u0026X-Amz-Expires=300\u0026X-Amz-Signature=177d318e324d57a48bf1bd85eea40d65752663d78b06088610fbc9fe8dae01fa\u0026X-Amz-SignedHeaders=host\u0026response-content-disposition=attachment%3B%20filename%3Demu-win-release.7z\u0026response-content-type=application%2Foctet-stream","fqdn":"objects.githubusercontent.com","domain":"objects.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"archive":[{"path":"release/steamclient_experimental/dll_injection.EXAMPLE/extra_dlls.EXAMPLE/1_my_first_dll.dll","filename":"1_my_first_dll.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"","size":0,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steamclient_experimental/dll_injection.EXAMPLE/extra_dlls.EXAMPLE/2_my_second_dll.dll","filename":"2_my_second_dll.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"","size":0,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steamclient_experimental/dll_injection.EXAMPLE/extra_dlls.EXAMPLE/dlls_subdir/3_my_third_dll.dll","filename":"3_my_third_dll.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"","size":0,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/mods.EXAMPLE/12345/mod_file1","filename":"mod_file1","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"","size":0,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/mods.EXAMPLE/12345/mod_file2","filename":"mod_file2","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"","size":0,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/mods.EXAMPLE/12345/random_mod_file","filename":"random_mod_file","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"","size":0,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/CHANGELOG.md","filename":"CHANGELOG.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with very long lines (327)","size":60727,"md5":"f97f1c87310fe42e24879bf876d9fbe0","sha1":"d5ab5b28532d7fc9d1eafa7ceab9043ad6659d5b","sha256":"15d296e4753a8c1d25321a20e732dda2a97fb92652ab43a68a39a0ec15226cd3","sha512":"fda6efa63ba4d6bc752d56e781da3bb6f15f8b57bd9d4f3c5910c1d63bf5e2960f2b70cea18a7761e8c291dee5fe2040169edeee0ed8adf1c23ae40cfc61f126","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/CREDITS.md","filename":"CREDITS.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with very long lines (460), with CRLF line terminators","size":125780,"md5":"b65fa3c1e7249bf2c3ada6004e530bd2","sha1":"fcdfcd8d4ffda44e79acc1b082383afb915a013b","sha256":"78cf1d93ac0595362c06e339bbc5b7bbd3998a758ed7701c2bccb271cdd1296c","sha512":"ae29b1ee8d73b859cd63ee907e30ffeef0430a6b429d4c8eed3631b82bedda9217a6fd271ed7b00a0af79858e9557be8dcf2dc98e5713bb9768b3e0b49502c53","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/experimental/README.experimental.md","filename":"README.experimental.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with very long lines (328)","size":2020,"md5":"84a702366d809a778e691d672daa7062","sha1":"e157614937c936f9f62c3a67494f33cf7565b202","sha256":"22f721ffdbe66eefcfe0d8e52a442991c7e049194b5ba4d3a715422f50d65aef","sha512":"59acf32487d80333693b25ed3820d672ea61d9011421d1da1bb809996b8640d2efa3ef352dff5ebf7d0b73bd56e89377837912ecbafb729b82787deb702869bd","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/README.release.md","filename":"README.release.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":16340,"md5":"e9887e46154bd716a3615067f678a141","sha1":"0e04f922d8126f225d67dc6ec4be8a137e409f20","sha256":"e83dd10353e8bbf4bafa34811d48c52b09f6a739b950c1b05f1a89f3fd958a8b","sha512":"d28946dce6d4ed20cefe8a3aa70b68ecf1b1e8456e03c42f264a641bd6d2fc6ce77f0387b2e5ce6955d713a91c84d7fdd23238789b1cddedd491ca0ec2227860","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steamclient_experimental/ColdClientLoader.ini","filename":"ColdClientLoader.ini","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with CRLF line terminators","size":2260,"md5":"916b23d0fec1b429b08fc3f18fc343a2","sha1":"250b77d34b09db00968ab8a74cbec1837a81e04b","sha256":"02575d18cd74b957f4979128b16f5c91d8af0c3afbe493a09cf4d716e397a9a4","sha512":"376192c9cb216e95f3009c95ce2ae8766dfb6a714c4e505f269518d88633233f379f19df2692a9c81df25ee29c52359087fc6c1bcdb79ca654546a569e2b1f43","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steamclient_experimental/dll_injection.EXAMPLE/extra_dlls.EXAMPLE/load_order.txt","filename":"load_order.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with CRLF line terminators","size":55,"md5":"03ffb4264d3db11cb8edf61ce913c6a4","sha1":"af73ab23a44129df6208a70cc25d4c3528a5fd30","sha256":"202a79ef1d3209ef74346ba11705c34896c1e01e0c539d179182d190d4c24a24","sha512":"25084944e771ae96c9bcd1465511a4d6ac5b7ce6619cc59315f18dac30511b5b0bba08aad1dfc7c56d5b3c58b102d62027f4c39f904882e70f31e45a8cfffe6f","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steamclient_experimental/dll_injection.EXAMPLE/README.md","filename":"README.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":178,"md5":"55207eebe61cd5339750f43b81dfe522","sha1":"1722bba24f12f17558fa24911f4d1ca1cdd893bb","sha256":"8b3319cef035b3bb0003eb36e5498b48dcc04aecdafb65c7c054804667f34bd4","sha512":"7af44ef3624d229b60c64b900ea51873f6d9a770980631e708cfafd4ff8f9a0025fac64fc0e117c844711e61c7b66a75c7f16ccba3fe7e768347773dbef275d7","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steamclient_experimental/README.experimental_steamclient.md","filename":"README.experimental_steamclient.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":6415,"md5":"015105173ef0a27f92aa43624291b3d7","sha1":"79272d9d12f25894050f661476366ef5599f6a66","sha256":"49a3d8276373efd0f9214558b4b1f3adb34428c3367af3cd3786b4d09c6f6fac","sha512":"d187f55357d801a482dc144da318b4d31459746a71cee892f821dcd0946ca0207135cef15aa908b9d4288f15e9e58b4c0ebff75c404427314899c071fd1548fa","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/account_avatar.EXAMPLE.jpg","filename":"account_avatar.EXAMPLE.jpg","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 184x184, components 3","size":3409,"md5":"fafa340202b7f16015984c90062f7b2a","sha1":"1408fed0c29ecac789028f2e12ca81d15a4bfe92","sha256":"58f08592a940bcd85a9620b52c262b6ce1cd7a4b6cb6a3b6494028614794d2b2","sha512":"e1fdde11fa7f03690655acde81d9d621e1ee3e08c4af7527057caef04b38dbcc60f9acec47161d6c6127faceca49b59bb9bd51fb3801a1545c80de59e318df53","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/achievements_EXAMPLE.json","filename":"achievements_EXAMPLE.json","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"JSON text data","size":67275,"md5":"43f5f12838b2b05a0a08e4ce681b08ba","sha1":"dfe48606af2042bb82463546c242840f55283662","sha256":"c90b571bd159618a8837f6e5f77ae254985d90df3634acda7f79f0d382bc75c8","sha512":"3121a8f1c58a254d4abd748acf05003b9364bb3be5577fbfe94d4a91291a23760fd2918133b9e194f0cdeeef9a9482a600e01f9cfe773ae0fd25e24acb7494d9","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/auto_accept_invite.EXAMPLE.txt","filename":"auto_accept_invite.EXAMPLE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":54,"md5":"73676ec8f00e2e2f68e039883b95bd89","sha1":"39ae93eb3c0dd9472a4d475ee2fba5a94d47cc53","sha256":"ca8428b326b45e8137fa135a94ba95f721e4b01afcb086a18de3bf2ef345ffdc","sha512":"a4fa9e05e3e3270a9a7cbca687cdede895e7d9653fe6e18c009393343931ddbb30b06a353c10595b0a5c2f20cee079f4244b6086ff29f82554ea110e24c1ffe6","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/branches.EXAMPLE.json","filename":"branches.EXAMPLE.json","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"JSON text data","size":709,"md5":"c4958997bb99e2dd111ac9b6db0c0c0c","sha1":"fb9e38e4356d5a4030b1ed6d5fd63cda40a3372b","sha256":"09c56dabdb5d4d8e65f5e7810bcd3779929417d6b3d46a85dc88d5c4b0c4a473","sha512":"ec4400987351ddc72d156f56f9c7b7473e6c0f632b2d730fa047cef058644362800ac8d39d2793d833f2d6a495d4c63d5b550eba531ecfe96c6901f02d062782","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/configs.app.EXAMPLE.ini","filename":"configs.app.EXAMPLE.ini","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":1184,"md5":"9154c9b54986644820c9c81211bfee40","sha1":"8b06d95e0976e41ce0e5c4a62037906d6e980c2f","sha256":"162436d3d00e56178d752fcda4dd09ae98cf3af709e2c17bd4f1fe4321f6e803","sha512":"1df7f50f565e1fc8cbda139104b20a1b417c7367e56867a29d597e23c745c5e736acbf08f4e92c3965d15bdde9e5abf6b96421e157c2090a77838f4285542815","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/configs.main.EXAMPLE.ini","filename":"configs.main.EXAMPLE.ini","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":7111,"md5":"5b22b7e281d9e5468ccac13c95c6ca1b","sha1":"21cff123f3d8598138972703eb2dc4266774bdc6","sha256":"7aea2234e87ad55e1426d82869981e3da12c879e80eb8b38f7e4b55327931424","sha512":"f58f03cb11b1c25ed8a6a11ae9e6af99cd8d7908ce9e43aaa6e7d6930ef28045b31013af8ff748867b1abd6f24632f9d26ede5cae2751c64cd78ca10bd0a8c47","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/configs.overlay.EXAMPLE.ini","filename":"configs.overlay.EXAMPLE.ini","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"magic text fragment for file(1) cmd, 1st line \"# ----------------------------\", 2nd line \"# XXXXXXXXXXXXXXXXXXXXXXXXXXXX\"","size":4769,"md5":"b5d2d660667aa066cc3f85c7dae92afe","sha1":"afd0160ab97cc1e3b5a60b7f1eee22f593c8210f","sha256":"c095de2a9c4c364eb96adbf12faf2a9993d2aa5082af2752c5cd1136461f606c","sha512":"cbb302cacba7e572e5f99adaa06ea8bbdd19ca0db1a27f5e0296f735aa0c01af0525235ba90edaeeb9cbc4ff18ae52696d666e88bc6cf4a4e84b87aade0008f8","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/configs.user.EXAMPLE.ini","filename":"configs.user.EXAMPLE.ini","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":1618,"md5":"7ce8123327ba379d3acb62020cc7fa10","sha1":"8e4c2903b456ecb6b89304942956dd3b5ddd1eb1","sha256":"923eebf6a078c8a8ac84ead6b117888245ee700058660c8d78e3c0e5d1f98912","sha512":"2dde653eca1a448e604acb1f65a96c5b3ae6e245fdadef1c97ef98f7e6870242a33e695faf7280f7b4efe375a886b3796e87bf5bbc932a955e94e30a74e7a379","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/button_a.png","filename":"button_a.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":9456,"md5":"82edcac3c186dd2366101130cb565fb5","sha1":"fbc579afa1b96f6d4f2b24403b848f66a0e439b9","sha256":"aad85589c65f4624c283f3c0cc86b31bb230bc26a9fed29412191c8fb53d339c","sha512":"bbec1237bbfaeda043ea60d47fd147b17a5bff9d6f39288b8a5bcfcd0e048d173eda6587ed0a301727ad4e1a47831a2c979fd77ab99628d51912c023d0b5c149","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/button_b.png","filename":"button_b.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":8556,"md5":"388324635d98c7d64d17748b7d9ddeb1","sha1":"398a09995ce23f6fb8ca43fdf9fe3c51920dc1c2","sha256":"40193d449c6992c00454cd6844986007cd361e46c12a5e175cdd9fc1d61b3df7","sha512":"82a6ad9e23ae13e5f34405ee5215f9b902bbb27b973ff32b7ce0af31181f814c7036c156280499658072d2048a48d86118e110b90524bc67e398be5b58362398","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/button_x.png","filename":"button_x.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":10713,"md5":"fabb09eb751085a0aab83058e049f9ee","sha1":"024fc68ce1bc6804b97322acd9dd8cbac05bcdbf","sha256":"d48cfbe44767c432b70a25771a8be0162e5644270047497b423cf8078a03378f","sha512":"304ca994d2fd6905a05200493306fb21c5c12673a3342397ed9b4f6118a7acb73cbe632e1cf2e12151e6382649cc6940f152543b56e291650802ae08d4c79460","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/button_y.png","filename":"button_y.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":9184,"md5":"2d996ebd75689dce767625edfee08ced","sha1":"ab4c9216c12f1e717184aaa8c3c55f3de171c657","sha256":"7710d3113955f6e1933c07e1495c412a4e1ab2deeba30b9ec8ed7a19e20a891f","sha512":"99313db2cba17c737bdf4acfa32104608391fb9ed0c6121e840f3235b253bf04e4755cb4c73bbf561883a96dde96c76fbd377d94562d514b290b4956ce03e45b","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/shoulder_l.png","filename":"shoulder_l.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":2711,"md5":"e1aa5b8a915e4efd00f3db34219ff018","sha1":"06f27fe2f0faaa74d5f36db78ede0e24bb6a8419","sha256":"06f4007ee74ed82e1327cb1b03cb740b0f4d23fd1de4c242e47b10493396f286","sha512":"fbabac0c9f9f80d2c10481c84816db11e7460cfb8ddbb208ce9aaf4155b9c18898aef5c98d94f3a4817aa2a6f2c0591c51efae623a87c2afc5a065cb78ff6240","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/shoulder_r.png","filename":"shoulder_r.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":3119,"md5":"ad42aed0b371c0aea2bb3575314c459b","sha1":"c24785d464297727a8b221b97123919f38e8c0ae","sha256":"d00995974d66bb5e2bd83cd3a4990dff3ec108b9eb86dc4fd4f31a2fb33b40f9","sha512":"7bd722e323106cbb9f763852161c1ec2325b6924baa15e979d73189c6211f16346045e0befd8f0fc3818c2f966894ca5663e10b8890ac0ebb541ef6b84f700a2","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/stick_dpad_e.png","filename":"stick_dpad_e.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":5994,"md5":"ece817dc57251713560b3e716d5ba3c9","sha1":"9fcf9f53ea8ed2ab30d0f5f92b0fd52d7f99285a","sha256":"63da80cff089402decbaf2afbfbee4841830cfd0d117751f68336ef542dcbf42","sha512":"71ad3053eef780ec860ab66a1cf97466a3e800bfad95f327406e1d96e02993ddaf51397d47bb1903a8bb97879464ac8c8692e70de3c23f2ff9033a9607dd8a6b","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/stick_dpad_n.png","filename":"stick_dpad_n.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":6034,"md5":"2f6d9618d389513dc86a260bee683b22","sha1":"70348453de63326aab7b6123fad5f1d98c1a422c","sha256":"4d284e811156f0376e1b39b9ffd86ae15f0639c1da67719fd56b96ce1eb93790","sha512":"8022c6779c0202244a2bdca15e717dfa33499862d857e71c6deb4977d916fe5edba6fbe0cf11d0c5839059d167f6e506f358cbf4fbfa6eaec59c7c4c17606ba8","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/stick_dpad_s.png","filename":"stick_dpad_s.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":5985,"md5":"d36699e9277a79d6d4836414aad5b04e","sha1":"2657c0dd8f5aa62bda9e252a6e48b9544c4c9ea7","sha256":"57c1b3ff038f50b3e4eea9f6db752058891ce4c0e7551ae5fbf7bcc2658cd6e0","sha512":"aa1a8bec069f8b92b70077bc0e29c8c9e3071edc7a5121aebaa1bfb5819231fa18b02b4f48b79580450aca642e2ad246a967a6eeb4f1ff499cafff7da2176405","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/stick_dpad_w.png","filename":"stick_dpad_w.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":6001,"md5":"31166b5985ac5820165806e05f61f84b","sha1":"f7f646ef77d4cef540e8fe392d571870a8672fdc","sha256":"cd7042919525b3d720a76d85679547e837ada74a89d59f8d05b266c2f349d50e","sha512":"d630ca4c2101fd0c73a8417ab2139e0fd044b113bb88902ad71307de0688ab7d7d26bd6d6439f91d51666b35b09061a40cf68e3ca2033dad45b69061e1949508","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/stick_l_click.png","filename":"stick_l_click.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":6381,"md5":"0a12bc4299c9503bdd275588e384f85d","sha1":"1644be30af4b070c7f60e116fd376781ebab2da8","sha256":"5d69ea410b79b27c73572954057e706c4bc2959bb1da385fa453fff023a94d5b","sha512":"e0ccb7763eec3cffbb23f2a67cce63dbdd2289ffd2b65dd42f6ddb56827b1ca2c158845beb5860944cf276c1bd297a123ba8bf3141b46f6536223d0cdaf970f9","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/stick_l_move.png","filename":"stick_l_move.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":5147,"md5":"0c3fbb94fd1141818dc2d4490e141904","sha1":"3e9f392bd14fb375b8fa56d08d1c47f159bade7d","sha256":"11c1aceb28739081290a0c86494d7df43ad975dc8ff942147b894bf558de5a12","sha512":"2b9ae76aaed9acb07adb7e03065555720deb4d36310a282386d1d4e8d2630155d99582ad0db4bd52421c250936e6131260d9a7b698072710561abcdd8b063b99","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/stick_r_click.png","filename":"stick_r_click.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":7036,"md5":"ab9d13d190576d35a08bb68894510fbf","sha1":"7d12204049326772b52fc92a03861c4420d82bb6","sha256":"44db68034534cc61e818302747b8c98d8fe65c52b1159f76ed24896695e35f73","sha512":"9204abd01b795857e6578831008d016504d42db50255c64cca80b349edaa56feaae5026131b70b6cebbb771cb550e64b4cc853ede078cfd6eaef342f63fb469e","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/stick_r_move.png","filename":"stick_r_move.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":5798,"md5":"e9e22da4b33830abf1dd8c8bb48b38e8","sha1":"c0021118a23c2646403722d56eb5e0515b61bc28","sha256":"00fae2212e2a54896b0fc18ab7d267e39ad6cdacd62b055da3063f081f1a518c","sha512":"e0333a23f4d23fa2d192aa5e60048fac10885d28baa73549ed1544e2dfd4eb99a3a7c0fb4289c3e49fca582c4a7f5c9548c4f24ee585b8487b9175d02fac4053","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/trigger_l_click.png","filename":"trigger_l_click.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":1802,"md5":"404786bf294387522822db6c1621f20e","sha1":"ff70f8e505936549f1949d11e31c4f2e4df8b2f8","sha256":"f6f9b7869c0835ad1de706e51d1f4da474eb1d646301f6e920d3bcdc3284252a","sha512":"f83a26e6b9f551ae92d152dc4a87a2b5096beb5212331472dbbeb74ada8d2c2c910e71d6b495d1d10ef5399f2e9d87854a1fab516fbdbfba587ef8ccee934071","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/trigger_l_pull.png","filename":"trigger_l_pull.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":1802,"md5":"404786bf294387522822db6c1621f20e","sha1":"ff70f8e505936549f1949d11e31c4f2e4df8b2f8","sha256":"f6f9b7869c0835ad1de706e51d1f4da474eb1d646301f6e920d3bcdc3284252a","sha512":"f83a26e6b9f551ae92d152dc4a87a2b5096beb5212331472dbbeb74ada8d2c2c910e71d6b495d1d10ef5399f2e9d87854a1fab516fbdbfba587ef8ccee934071","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/trigger_r_click.png","filename":"trigger_r_click.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":2396,"md5":"25080b78852bc865c04f195d8423a82a","sha1":"459a49ea04541238038ff8910069b4840e018490","sha256":"66184fa95f5a564410e943011ae913d5f169e511dadec02b6a1e35583702fa82","sha512":"54e6f7e9f2865ec6205d0cbeb7dc1468c9622f6975bcfa7d153d77e39fe521548b299c2019516779c0d503d60108b09cb9f6dbea1581bdc9d785f0f6bd7b26b8","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/trigger_r_pull.png","filename":"trigger_r_pull.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":2396,"md5":"25080b78852bc865c04f195d8423a82a","sha1":"459a49ea04541238038ff8910069b4840e018490","sha256":"66184fa95f5a564410e943011ae913d5f169e511dadec02b6a1e35583702fa82","sha512":"54e6f7e9f2865ec6205d0cbeb7dc1468c9622f6975bcfa7d153d77e39fe521548b299c2019516779c0d503d60108b09cb9f6dbea1581bdc9d785f0f6bd7b26b8","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/xbox_button_dpad_e.png","filename":"xbox_button_dpad_e.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":5994,"md5":"904b6ec32e34107a6faa94ad1c40a5bf","sha1":"cd9c496099ef4a183b420e7288256a87f2757067","sha256":"723b52602aeb0dc3b7a403245d867b86bac4cb1906c4c59d1d029ea5af2d05d6","sha512":"3cfcce8885a5666ecb3cb085f2dbe7588ec80f9f5df0976cb0ec07d8f2fe4fb9e7cc61e5591907789eaf5188e6169c0ef3d1b4e25a83ffee68a68c19b1940736","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/xbox_button_dpad_move.png","filename":"xbox_button_dpad_move.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":5013,"md5":"5012a82d6c684d28163419810d3d48f8","sha1":"1446dd66e8207b036397adefa68f45f4a4bc2298","sha256":"ca1f4678c542cbe15de5c2276e69617ca7d41b886a2aba68f7972d0e26051f00","sha512":"34cca7dfe77f4ecd58276f9995d12f033d0d6b72c4a37e143154cdd28797f2ebe6bbfe292bf8c848b92ab848835af3531fd79a9aed242940069ae0be3cdb00b7","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/xbox_button_dpad_n.png","filename":"xbox_button_dpad_n.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":5881,"md5":"e02b8eaa9ab4874a71bc63b24da9effb","sha1":"05d2379b95f64543d61c7017d6c898518d4d3398","sha256":"99526d88d69e47ff9d15b9c669001db3f85046d0e0adb6aeb71a3a5d3a0a4ceb","sha512":"136f9e882dfa0e1b56b3bee65bdd6cbac8c6f75f0e7c083fe8670d81db3356fb06e6e82390060793378c874f522c59f149b937d4e1aaa785e137cdd9a456628f","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/xbox_button_dpad_s.png","filename":"xbox_button_dpad_s.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":5915,"md5":"5ae0de37372666b1bba5d04be113f7d3","sha1":"50487455de61420b6f4cd24cdd584bae0e44b113","sha256":"edef3da4507d5840e5fe18860407678b464fbf78ba3256df86022ba13e246756","sha512":"e684d6c79bb9b08fe6eccdc7c44503688798e973539a48334c9eec5f78b4a01a913b556ce586b33fd58ff69d3097f02cd51b1dc67e0ffdfbea846b482cece8d4","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/xbox_button_dpad_w.png","filename":"xbox_button_dpad_w.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":5966,"md5":"0c7afee16f408b11c236919c8d2e36c0","sha1":"aa0027cd12da8b6984442de34af0612a2e90f7d2","sha256":"5ae6a9a01369833ead651f12a571e3a8e998c83d8a27e2b115ea293586d8be7c","sha512":"2afde45dab749eb99ea431d61dbf2fa7a735dc1c07b692559a4461f7d7c7cc962ade9ceafb26e44f5b17fc396712ad599fcaceafc5ab07cdfa9ab7f08d1d0649","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/xbox_button_select.png","filename":"xbox_button_select.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":3871,"md5":"36343c70dc1321a371b24be06aa7ff44","sha1":"a37c5c5aa06b3ef0b2ca25b81d568dda9fde2a8c","sha256":"702b06e046779234c8ecb2ba6db1c4d533c89cf4bdbc92a00660c11e976af573","sha512":"a7bd92bb66e95312db80082d3f8c838592df2e29ba2549fa27c3660dc3847378d70ee352f2ec78b793a496709a6c64f80e0a33d9c8bc993bef6004d5ad98ef42","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/glyphs/xbox_button_start.png","filename":"xbox_button_start.png","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","size":3927,"md5":"894c0f75570b457cf12e18ac3cf6cc30","sha1":"e2a8827209cbb7087d08bbec92bdf7851a0586ba","sha256":"199923784d9b2838d96b3aba842f685973881a29c7ad6140d14c34691a41dba2","sha512":"f81c4ae213ffb2ef7508df7a0508654f2f5a0442c1096d04baae694dfccd026c741a6bdac80d9b540b71119dfb26c0274a0f79c623ea9d8bf0ec4b0bb3a44300","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/InGameControls.txt","filename":"InGameControls.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":339,"md5":"d91839f4a9769454503cfdf294f0a427","sha1":"0aa37830481f71ced14e4a362869ef4ddb17c24a","sha256":"ca5a23baedd6052c43a7cab37b203e808a2606f15b7006f7675d111a28e1fcce","sha512":"c0a72e66a6c72b49df1d648768da628baad25c49a0a6ca6fc2c6f74723850125b29dbc7d90e9021a3ad0c720db2bcb0062e6b062d418537631a8cc26b6de22e4","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/controller.EXAMPLE/MenuControls.txt","filename":"MenuControls.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":291,"md5":"ed8f5f1732d99f7e81d9ea38d9cfa73a","sha1":"f360906165048e6b6b01ff2a71c4085b563988fe","sha256":"93bcc5f7196c64b113ed6866f66d12e27722f0cb5a23549f56b05cfc8f810bc2","sha512":"451e7dd287ecdf5ecc95831216aafe22fdff96bcd3fe9254e659ec49c68d3c84bd57062b73d9b224fc6b3601c631a319534bb504e3d168e1bb0be968e9b7ca5e","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/custom_broadcasts.EXAMPLE.txt","filename":"custom_broadcasts.EXAMPLE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":79,"md5":"ec00ab82710e7340b12f1c29a138e269","sha1":"6edcabe7972e0c1fff835af093d16f74ad817fc8","sha256":"14eb092ed54144afbde5ed76fc5d5011be891b14e4b3448333e82c2b6978099e","sha512":"446b1648047f9106c537acfc11606a45f55eb3deb5b35d9a1e4cffa3bfa1c8aa585cd1091d89363a3fa67a1a4c488cbf64a10d924f4d9c673390bfe43af7e96f","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/default_items.EXAMPLE.json","filename":"default_items.EXAMPLE.json","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"JSON text data","size":28,"md5":"4e6a079263073d6eab3baf11104e8645","sha1":"4484c999427717c76609b44fc2ea45a09a065f74","sha256":"f576a560e1a492540d11c6b80d5616a67f1f906af82356d7b279e40f7ddd7cb0","sha512":"a5dfb9c9cd2c109b38a63f318c0df6ecf1f4e49541d3e4271db70d4819b3b8857e746c45b8a2990c7d58d1109e168d5568689a68d87315fab68e4a03e3f6424d","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/depots.EXAMPLE.txt","filename":"depots.EXAMPLE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":43,"md5":"73234bfaaa538824cc6b0dc062fbf34c","sha1":"3e0632663b82001e7fe91640bae459fb3b5aee30","sha256":"8d5b3caa72f0ebf5e6155e0e129e63a244f6e880a5a2e23193bc215db27dce58","sha512":"7ba2ec11885a2fe7eb60dacb5e3b98b9e596e1bc84d69209a75d700ef9022f0fccb123ed8892f4457444f166cfde5f2cbbc123a8c2d0afaa28f109f69a69a183","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/fonts.EXAMPLE/README.md","filename":"README.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with no line terminators","size":93,"md5":"aebfda63f3a1e7c4d1f9842dfaae143b","sha1":"a67f29ffe7ea89b362c84fc8c2d733ae5d81fa9b","sha256":"44c948a84ef5b96868aaf7fd4623412173ca0a6671bedc2c93208001b925377f","sha512":"aa3db753d3080d8d16cda20f42d2fe5276f2e846fe080e868b2ecfadf315209e05815e9d70b18bc86dbdc68adfbad1002fe463f28154e8f71b259be9b1c505fc","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/fonts.EXAMPLE/Roboto-Medium-LICENSE.txt","filename":"Roboto-Medium-LICENSE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with CRLF line terminators","size":11560,"md5":"d273d63619c9aeaf15cdaf76422c4f87","sha1":"47b573e3824cd5e02a1a3ae99e2735b49e0256e4","sha256":"3ddf9be5c28fe27dad143a5dc76eea25222ad1dd68934a047064e56ed2fa40c5","sha512":"4cc5a12bfe984c0a50bf7943e2d70a948d520ef423677c77629707aace3a95aa378d205de929105d644680679e70ef2449479b360ad44896b75bafed66613272","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/fonts.EXAMPLE/Roboto-Medium.ttf","filename":"Roboto-Medium.ttf","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.137; 2017Roboto-Med","size":168644,"md5":"68ea4734cf86bd544650aee05137d7bb","sha1":"3c6a09fcc6a454924c81af7dff94fc6d399ed79b","sha256":"9d0d55a303bfd13b79a87721f65185e93f235e2d77fe398b2dca67ac519915f5","sha512":"5d55a41b845f3a3ae9b08cee5258348dfd83dac5f0a0e48159cd85c141c614a02f8f474fa683d2bfbc451d49dd3b749820662d403b2e3fd3f16a242eaca64115","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/http.EXAMPLE/accounts.starbreeze.com/iam/oauth/token","filename":"token","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"JSON text data","size":473,"md5":"080cccc1a57f943293be2a1ce3f90f77","sha1":"4f33c2d7c165c64f80d479cb6a23a796e9315076","sha256":"9c14016bf474e932ab5efb001f299986557041a3cc742598b485bd12f3a247e1","sha512":"59f679986462a47759322425e0c05279f7ea0e171c619653f5e53d9c1994de863f6feaa0cd977979fdc5b0106b38ffeffa4ba572db03ed38a22cb18b32b68a97","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/installed_app_ids.EXAMPLE.txt","filename":"installed_app_ids.EXAMPLE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":462,"md5":"3645e67d53159353bcbfeff3e3600191","sha1":"a68be706cb4f65232e6abb6e9bf5f5bfcf146d7c","sha256":"444d2869ae60aa76464d8c1fea8a29d13a241f171de7dd7d162d1acefb6a6827","sha512":"a2883e33739230783672da5062fb854b3cb19c0fd3f1e2af9ebf243c25ca5e52ae290702c10ee78f41f1540a43046d47a37d49e4fd6d364440b41d302acb844a","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/items.EXAMPLE.json","filename":"items.EXAMPLE.json","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"JSON text data","size":3812,"md5":"1d50b0c39df6f24efebd45b0e00654ca","sha1":"513af4cf2257de760a9a552a4bba936e4c398fc0","sha256":"ad61a38229d67c69d167d0bd08da9d171e9586281b14d3b676c37e2be69da7f9","sha512":"5fa50ba007477ead096d1f507a20f4614189c4127f123a998c3c11bd4f1f3bfc4628a6e7b27cf69639b0e713ef6ddd4bf02d1e2b62526378dc228f4f8520536e","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/leaderboards.EXAMPLE.txt","filename":"leaderboards.EXAMPLE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":54,"md5":"b7753638a0b72c45212818a725751f88","sha1":"549d6a4d50f678709b4a9208a369d7e8127d2a3f","sha256":"fea5d094c743ae66081cc3d30a6dd9cb1dddc65023584061b4d366bbe7ef4419","sha512":"2d94e7a348ba7e4da1c4b6957eebd399215a02411b9201211e0478e9ee6dd7466b1d39c349c0f652e04882fccae28a7760a1bfb894011bbefe8a8e91cc1afc80","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/mods.EXAMPLE/12345/Readme.txt","filename":"Readme.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with no line terminators","size":93,"md5":"c2d8aa8668b7ba353b43ee4957b1c98b","sha1":"aa029758b8b95313e2a1c62faf1137cec8d404c8","sha256":"87988d7e9f983d16c90fec7f6e84012357cb87007ac38247e0c62613d3f120e7","sha512":"e8fdc647415faa9edd60c22fab06e041b226e5fc523d5766de10165a65d703da9c31608e33502f23c9c1718b3fb0fbc5ac02d9f5e20558ba6596da4d2c75aa69","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/mods.EXAMPLE.json","filename":"mods.EXAMPLE.json","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"JSON text data","size":1826,"md5":"c08cbc97cbec55a97b535804b76f8e30","sha1":"a1cdbfcc1fcf97081fdbf605d883cab82e92865c","sha256":"31ce3938d89fac14d61b7e0b4bb8bbdeec849e15e5e5d0c9737b1b85fbbc721d","sha512":"635b97c4b383d968893bde882f696948c274e870d054fb938f53ef8694f18f07e976716656d0ac4f6a9119d1898048632e3c6c51da979a5851fb091b4e88a8ea","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/mod_images.EXAMPLE/12345/my_preview_image.jpg","filename":"my_preview_image.jpg","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 184x184, components 3","size":3409,"md5":"fafa340202b7f16015984c90062f7b2a","sha1":"1408fed0c29ecac789028f2e12ca81d15a4bfe92","sha256":"58f08592a940bcd85a9620b52c262b6ce1cd7a4b6cb6a3b6494028614794d2b2","sha512":"e1fdde11fa7f03690655acde81d9d621e1ee3e08c4af7527057caef04b38dbcc60f9acec47161d6c6127faceca49b59bb9bd51fb3801a1545c80de59e318df53","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/mod_images.EXAMPLE/12345/README.md","filename":"README.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with no line terminators","size":95,"md5":"0062022f5417093802b84e175aa6cac6","sha1":"83eefe6a6e308fa4fcc723abe3990f6b8a6c04f1","sha256":"b50177dfd67f57617b9b5b8801f9642c73eb9990b0e32eb7edefbf026cb8550e","sha512":"645a54965771266a21f427a63f1ce7d91469128d3cf45844276938db3e2788ea5e64b740f6ad3c96a1825a339c461fbc050422e468583db3cb5e245db12edc66","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/sounds.EXAMPLE/LICENSE.md","filename":"LICENSE.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":293,"md5":"12321751c38e35f4722a9961fcd82748","sha1":"8d879617089fcf6b68646c0678f082beddde6a7a","sha256":"9e8e842e01b28c4d23a7fc99efdae8fbd908f38f7b5780b8b4bcfdf24745dcaa","sha512":"528f1c1292db749318675e169963044d92b301edaa73553a5d96ebf025c19393dd114a27d547cb95e2876a2c4ecd75238d1b38aa73a222b2acbd9cded0184920","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/sounds.EXAMPLE/README.md","filename":"README.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":265,"md5":"2699586e15c76a73c8fe97300b757fc9","sha1":"f01c0639717fdbd0d3460152b293383817334462","sha256":"fad5cfb25630bfd9d323342d1c129e706d5f7d7fc4b7564c5e0343ad55ef3dcc","sha512":"1c41198e243c555fe324e0f154de090231edff5c57e2414f098a0b22e1015a8bcbd929351e8ded5bd4863c2f57841ecc08a1cf6171daf42bf68e1ed24808903b","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/stats.EXAMPLE.txt","filename":"stats.EXAMPLE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":181,"md5":"ec53c81e294487435f705f1fe473da79","sha1":"6e7c7419723ccfacbee33c73fdd2d5a63315bdf9","sha256":"80e65652f506cb145eeb1d29a7fc3cea0fc9f233bdb7429fddd9f886c99abd22","sha512":"f2b8a9e0c1cc1cd2d3c6e7ad43ed4837645ea05fd0f7d83bceae84354f74e4ce816a89ffb9e4b112f0e1e6ae8cb65f3818b00d252bb578a127be684a6a8fcbb6","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/steam_appid.EXAMPLE.txt","filename":"steam_appid.EXAMPLE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with no line terminators","size":4,"md5":"e48e13207341b6bffb7fb1622282247b","sha1":"77ba9cd915c8e359d9733edcfe9c61e5aca92afb","sha256":"5db1fee4b5703808c48078a76768b155b421b210c0761cd6a5d223f4d99f1eaa","sha512":"6f0ac65fe01188660aad900bfe16c566ebf0e56c0a7d4a15bd831049108de80bd3a2fbf1a8b91662433a40458ec208a207cab073f190bd65b889e95e4fca8e09","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/steam_interfaces.EXAMPLE.txt","filename":"steam_interfaces.EXAMPLE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with CRLF line terminators","size":573,"md5":"06a47a21f1af5a7fb5a0623c5f92325d","sha1":"d0b2c9917782d0e4fd09c07e7e36a0c1ee33ed4a","sha256":"f32a58870b3da4214e4d9c132783e6e8f2f277aa9025cf3211ddfef9a3becd5e","sha512":"e4f64390d00092239b8fe7666c160b0652937f179572a88269c8c28bf6a56b04d796a5c6bcb3b3811db9eb9d63c7dd122446f89c77d83c81113c2c0c0bc79836","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/subscribed_groups.EXAMPLE.txt","filename":"subscribed_groups.EXAMPLE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":76,"md5":"5eeccd9aa2ca04ad8b5f6d89720065b4","sha1":"546da26d9d33c40d138f29d769c2c58b60df2dff","sha256":"3625d3ff36ba9ba02e63dc997ee153647f2cfe282a761c3e65b9e1a61c420713","sha512":"f544ef5c7509cff31bee92c62e4a2c761c6776a86bf902b623e12f0a9d1b930693302692b05482d2f11166b16bdc1a52ff3026f8d2379c7f69352683a8f58af2","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/subscribed_groups_clans.EXAMPLE.txt","filename":"subscribed_groups_clans.EXAMPLE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text, with no line terminators","size":40,"md5":"e4b1fe99c19e2da0fefbfb2f52a05a90","sha1":"de89e84ce95a5fdd9c804d0f8f1f080a380059ed","sha256":"b0dc2d9d30a050d42643d2887161fe1e11992419a7168e00a41ace6ae402baf2","sha512":"cb818668d4aec636db320faf279b121d8b748db23bcde4872d428780b13624346756a6cc5111be1e7a2f19e2bfa69e9e619c022e0197bf8cd3349812b393995f","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/supported_languages.EXAMPLE.txt","filename":"supported_languages.EXAMPLE.txt","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":62,"md5":"087d2c701260aeb3845fca9fd9f0a580","sha1":"24b97f251eec8da15f02196418343def2f209bd0","sha256":"b4d62455b48cb1a4cc87094794b1945c78095309fdbe64e326f8668e770e063f","sha512":"e5a44b7c3cdc1d15fd4d12e57804958a0f7a3e74c647f647b43139cf587b88507c8838fc3c4ce079faee218d5618f098fbeeca23998f419d1074918931c21891","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/tools/generate_interfaces/README.generate_interfaces.md","filename":"README.generate_interfaces.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":717,"md5":"5dee8646091be6e999fb6d7cd7bf75b1","sha1":"0b738fc2c46b41030af7a1fab975984c5405d80b","sha256":"93f737ea5a4db8e8627571f48e0447b566bc7ffa113e9166c5fc8c5973b54d15","sha512":"0b886fce6e442f1272d7883cf3d28a938c506a83f01cb8656f4a842b4765c3bc1b50470746087e77210865da8410c91d365be4892a4ce799435cdf258c93d64b","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/tools/lobby_connect/README.lobby_connect.md","filename":"README.lobby_connect.md","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"ASCII text","size":972,"md5":"1200bbe34e6acb8e5ab77ba12de4eb28","sha1":"d9501ff61f5d0c625a61ff40db17bc67224ddc1d","sha256":"f91d7ec4d32ada67345a1ab69bc53b68178a477cd7d42140689cd3088d71cafb","sha512":"aca2965cb6971f335fe5d813923b4c5846165f9858af9ddb461f34aabee3ca4b7ff00a1c2925b77ce612f4e667861a014d08470b469248665563bc6e77b58c81","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/sounds.EXAMPLE/overlay_achievement_notification.wav","filename":"overlay_achievement_notification.wav","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz","size":302674,"md5":"4ebb633927148696d8cdc4228171c05e","sha1":"cba7f456781e49c47d200948aa19dcb290790deb","sha256":"7db2e0a85e47c75f7b64a4b89040f2a3129e2b5e2d03200d9aebea71d6b6572b","sha512":"991dd3e7431c7f15a87ac0b0cbab32fb6e81b7ff196367e7600886d217afdb079fd7e966375c35c66883449eb817b2084e3fa314e1e15f27ede65e0966832a8c","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steam_settings.EXAMPLE/sounds.EXAMPLE/overlay_friend_notification.wav","filename":"overlay_friend_notification.wav","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz","size":302674,"md5":"4ebb633927148696d8cdc4228171c05e","sha1":"cba7f456781e49c47d200948aa19dcb290790deb","sha256":"7db2e0a85e47c75f7b64a4b89040f2a3129e2b5e2d03200d9aebea71d6b6572b","sha512":"991dd3e7431c7f15a87ac0b0cbab32fb6e81b7ff196367e7600886d217afdb079fd7e966375c35c66883449eb817b2084e3fa314e1e15f27ede65e0966832a8c","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/experimental/x32/steamclient.dll","filename":"steamclient.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections","size":91560,"md5":"d0a054ee206c5bd90901e5f5a6a0047d","sha1":"74d667236917fcfc45db5371925ee90ee9093748","sha256":"b463f67b6c0c42496326df1c84d78955eb072f762f052ef5716bb08cbfcb536b","sha512":"3a5443bc7c24b9c7ea75b6ed207b244f9e480902d185e32808fcea0919a9fda761885554260be2a9f91a41210304be0554dc4a2aee6ce35c2c309812fa1a9c9f","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/experimental/x32/steamclient.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}}]}},{"path":"release/experimental/x32/steam_api.dll","filename":"steam_api.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 8 sections","size":15227816,"md5":"e3dcd2cea3aebbd42185a05f75fa6b76","sha1":"fcf65943d92a6b16f16533c2b3610cc775c34126","sha256":"434c6a2465d465caab73432925dc5c2c295622690c0ab0a3953ee630e2344121","sha512":"652e39eb9a51ad29041a1ab124e34d285e8c42346bdf8ec0ca77256e815092f039daf17ce0058be99e4ed30d6b0ae049e2f40fd138e6657a4a93115e512527e3","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"win_amadey_bytecodes_oct_2023","trigger":"release/experimental/x32/steam_api.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Matthew @ Embee_Research","date":"2023-10-15","desc":"Detects bytecodes present in Amadey Bot Samples","malpedia_family":"win.amadey","rule":"win_amadey_bytecodes_oct_2023","sha_256":"4165190e60ad5abd437c7768174b12748d391b8b97c874b5bdf8d025c5e17f43","yarahub_author_twitter":"@embee_research","yarahub_license":"CC BY-NC 4.0","yarahub_reference_md5":"2ba1411c46d529f2ae6a7c154d13f029","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"19e955f9-d125-41af-981b-09957a8abbc8"}}]}},{"path":"release/experimental/x64/steamclient64.dll","filename":"steamclient64.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections","size":110504,"md5":"531849615887b14456e092448dfbbe5c","sha1":"568ffe623eedd9c24812dd4a55b8b92146e00239","sha256":"bddfd60f9bf4bf4441723c3aa93fd0fbbc45cba53b19ac3af82ca9317cdd942c","sha512":"daf694449f3cecd89fc11457c19910f2d5e73104fba7829b4d315507d69bcea88f4dc7aa62ab84557424e4f3abf7ac3c470240a52d3af9bbabd8f6b4729dff42","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/experimental/x64/steamclient64.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}}]}},{"path":"release/experimental/x64/steam_api64.dll","filename":"steam_api64.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 9 sections","size":16903080,"md5":"bbd874ac70a91f51b0577d626d60639e","sha1":"305f57c743e84b63e573b1f05bae0a10c4f785f1","sha256":"0dadcc259c394a93aedfbe25db285b7a17a3c14e68d2ddd888a8abd22e571885","sha512":"be76a4264ab738b7a963ef3c65b2837439eefea72c9f7f35e28026be8875ac3baf2ed488b390ac7686771ba2ba3a436abf37a35c8ff61426d75d6eff32bd868c","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/regular/x32/steam_api.dll","filename":"steam_api.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections","size":5002152,"md5":"1830758d8650406d992563d093d6248d","sha1":"33f6e59f63cde97a056eeaedc26d294021bec8b8","sha256":"3a26e0f203c4fc1b755f03e36b431ed56bbd48ea41e90c90815bca37e25bdff4","sha512":"bc11595d305ce18045865b4ed2de4966e134a14387010518687d18b41713b42a19333a6e9bd3a54ae7a1a0441b99bbb06350df6bf6726941ea521affbfebbc1f","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/regular/x64/steam_api64.dll","filename":"steam_api64.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections","size":6212520,"md5":"f197f1db43a355c9cf096aba5cf2644f","sha1":"581b3296bdc595da8d986bc0dd105bf1f4c00a4c","sha256":"552fde36df2681d3dc5b6a7ce34add83968db8f7dbc591592755e02284a3dd9f","sha512":"d51ce9240bf170c3459155cf68fff88ef0065b60dff387650f0f7685d5330467fec60e6907e0a2e65b97a92c8bfaac236907d8365d878f60be0e90dc0b7e5f9f","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steamclient_experimental/extra_dlls/steamclient_extra_x32.dll","filename":"steamclient_extra_x32.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 8 sections","size":236456,"md5":"e27a3a2d2766103058ef3d9ca68aec01","sha1":"889f707ed2b07f0e66f8707118d82ddd7f7eb9e3","sha256":"32ee9e4dd425ff0f1c7f26a1aa4c9b64ed13553b945fab27558b53f7106656af","sha512":"e97846ae8ef1597a00acf40d789c7abac387ccafd29e7886b6b977541d3164c2d5272ac7e93e11332394aa6034c1c1f462d56e9758f4cfbb1c40ffd44e1c6fb3","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/extra_dlls/steamclient_extra_x32.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-01-17","alert":"Scan result 1/67","trigger":"32ee9e4dd425ff0f1c7f26a1aa4c9b64ed13553b945fab27558b53f7106656af","verdict":"suspicious","severity":"","comment":"suspicious - 1/67","link":"https://www.virustotal.com/gui/file/32ee9e4dd425ff0f1c7f26a1aa4c9b64ed13553b945fab27558b53f7106656af","meta":null}]}},{"path":"release/steamclient_experimental/extra_dlls/steamclient_extra_x64.dll","filename":"steamclient_extra_x64.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 9 sections","size":291240,"md5":"414351a5400e089e6048a7f7780e4737","sha1":"9581f32b9540bc96fe5b27311fb1b669918ad3ae","sha256":"66a6205c96276be6caa2c9a9aee0843d25354f5157118726e28ee792c3228888","sha512":"b9b6ecf97e8951653792eaf76a40860eafbc5e3838232cab40858c225a979c41f9015081bdcaecb344b019fa04d460eef7a55ce7a0002c4eec85b45e353cff81","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/extra_dlls/steamclient_extra_x64.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}}]}},{"path":"release/steamclient_experimental/GameOverlayRenderer.dll","filename":"GameOverlayRenderer.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections","size":92584,"md5":"af48a054b5f5dc891e2c952af0950691","sha1":"89dcb2daabf896ce1989d85bd4c8227e595bc8ed","sha256":"126049fdc96caaf1843443821fe82bd6e95055558d51694c843d063eef3dbfbb","sha512":"d54fb05c895d50d821c48d5aa9542f2e0fc271b3f5f3b03936b13deb8ba6d586285f88e25da4b5b875cffc09db4f1ee24eada9d97d8a76cba282766362a44f62","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/GameOverlayRenderer.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}}]}},{"path":"release/steamclient_experimental/GameOverlayRenderer64.dll","filename":"GameOverlayRenderer64.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections","size":111016,"md5":"d745b9760216a89e922afb5cbf83536e","sha1":"464d554a1a93d2598e9e7e227805593b607f28b4","sha256":"0842ef81601933d072777bec0ab0e6f497629e90f166216a589d978eee8484fc","sha512":"ecf2a08df97fe825610dcbca59cafc6128b1a18abf90ed210e50be00dc36cb700a4e4da3df736a93c3ff11e418c48e932cf2205a80ba46021a3c9b877b6db06f","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/GameOverlayRenderer64.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}}]}},{"path":"release/steamclient_experimental/steamclient.dll","filename":"steamclient.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 8 sections","size":15083432,"md5":"584c22c70d32215def915af1e19975f8","sha1":"cc6ef421ba4b632a832b393128518020cdcbf7c6","sha256":"f90dca95ce2ada9b2a77dc60d9c441d01dcf4118deaefd23cb51c18ea9315a40","sha512":"b168fa84f0b2df0d58c81c6933fd54a9f1ed70ef076b5efa287a04cce9de6b726560e1995ac18c7b5f1f2d8768b48be7042703aaed6d3f95651e696387e72fa4","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"win_amadey_bytecodes_oct_2023","trigger":"release/steamclient_experimental/steamclient.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Matthew @ Embee_Research","date":"2023-10-15","desc":"Detects bytecodes present in Amadey Bot Samples","malpedia_family":"win.amadey","rule":"win_amadey_bytecodes_oct_2023","sha_256":"4165190e60ad5abd437c7768174b12748d391b8b97c874b5bdf8d025c5e17f43","yarahub_author_twitter":"@embee_research","yarahub_license":"CC BY-NC 4.0","yarahub_reference_md5":"2ba1411c46d529f2ae6a7c154d13f029","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"19e955f9-d125-41af-981b-09957a8abbc8"}}]}},{"path":"release/steamclient_experimental/steamclient64.dll","filename":"steamclient64.dll","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 9 sections","size":16728488,"md5":"3825be29afc3eecbae7818b23f00ac11","sha1":"9bec06cc636ffba948bc56607b230d0c0369b56b","sha256":"3fda1eda02cb1e349523ddf002d150dfbf11dac022565b9b526e9024a71c8461","sha512":"8e3b4cc9769e9484ffba58c44ec862c55b20009c2cb00bd7be3bc6e945bb0017f305b8c3584c9d485a4b13dc628e709c917fbb28dddcab807a67ebc95a70bb88","alerts":{"urlquery":null,"analyzer":null}},{"path":"release/steamclient_experimental/steamclient_loader_x32.exe","filename":"steamclient_loader_x32.exe","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32 executable (GUI) Intel 80386, for MS Windows, 6 sections","size":267176,"md5":"8240a09352a3f14f4b9af4233af7767d","sha1":"224a5997b16a882537923e6de482ca5a40eb3ae0","sha256":"7c2d2eeca0a47b11e62d557bbda0ade2572c82c001f18afbac35bb8c2aa518ab","sha512":"4013b953a64f4957b1fbb63938224d9c48dd72a0e91680ae6342fe3e40f38ac3ff3ccdcdfbfe5c3ec48ccec7a51e1dae0dce397f7c8ff74aa231f83d3140d965","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/steamclient_loader_x32.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-01-17","alert":"Scan result 5/67","trigger":"7c2d2eeca0a47b11e62d557bbda0ade2572c82c001f18afbac35bb8c2aa518ab","verdict":"suspicious","severity":"","comment":"suspicious - 5/67","link":"https://www.virustotal.com/gui/file/7c2d2eeca0a47b11e62d557bbda0ade2572c82c001f18afbac35bb8c2aa518ab","meta":null}]}},{"path":"release/steamclient_experimental/steamclient_loader_x64.exe","filename":"steamclient_loader_x64.exe","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32+ executable (GUI) x86-64, for MS Windows, 7 sections","size":330664,"md5":"e0a4d4336350970798a55e9d14aada33","sha1":"718015c55251909e0177842ebef6272288fabde1","sha256":"a1ae3c57f88d59283db32ee11c80ed6e1477c8fa04b35794e7b3c5a63d4827bf","sha512":"730f67664d9db1a9b9c819d3962cbd5e0886627fcae12a912ad58d169eeff35436efa890067f9989f4b7c8a1f5e2d778051be499e91477903988dc535a5d8809","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/steamclient_loader_x64.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-01-17","alert":"Scan result 3/72","trigger":"a1ae3c57f88d59283db32ee11c80ed6e1477c8fa04b35794e7b3c5a63d4827bf","verdict":"suspicious","severity":"","comment":"suspicious - 3/72","link":"https://www.virustotal.com/gui/file/a1ae3c57f88d59283db32ee11c80ed6e1477c8fa04b35794e7b3c5a63d4827bf","meta":null}]}},{"path":"release/tools/generate_interfaces/generate_interfaces_x32.exe","filename":"generate_interfaces_x32.exe","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32 executable (console) Intel 80386, for MS Windows, 6 sections","size":225704,"md5":"5d511307f5f49342461408ce8cbf99fe","sha1":"631cff52193af227270be0acd0c02557d1fe63eb","sha256":"ac89cc7e92433e3c935a886566adb0135fc9a0f4d9ac042933bb3d7934cc7d4b","sha512":"fcd9f6386056edde8dd10fce7f332c6e0093a53a93bdcc8aee4362566a977f61f48325716a7a1526e5722140ee08327de7f51f6ae9652240acf38f999e8084d0","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/tools/generate_interfaces/generate_interfaces_x32.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-01-17","alert":"Scan result 2/72","trigger":"ac89cc7e92433e3c935a886566adb0135fc9a0f4d9ac042933bb3d7934cc7d4b","verdict":"suspicious","severity":"","comment":"suspicious - 2/72","link":"https://www.virustotal.com/gui/file/ac89cc7e92433e3c935a886566adb0135fc9a0f4d9ac042933bb3d7934cc7d4b","meta":null}]}},{"path":"release/tools/generate_interfaces/generate_interfaces_x64.exe","filename":"generate_interfaces_x64.exe","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32+ executable (console) x86-64, for MS Windows, 7 sections","size":282536,"md5":"fc476f8edaf78ef24a2570746529bfbf","sha1":"344bce776d12c4ac5a641df86bb80df6512f7b48","sha256":"ed5304d9fc25748c374558859492867d8cb1f56f7100eba3cc59eac9baf1ff49","sha512":"288c32ebe5be3734d531fc75c968406fb516fdbdb538f87b62fcd9ff6f7b4d2fd7cdbe351a2d62e3b85019a451224ede2bf457a12e41008d2cd50d7624c6a506","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/tools/generate_interfaces/generate_interfaces_x64.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-01-17","alert":"Scan result 1/72","trigger":"ed5304d9fc25748c374558859492867d8cb1f56f7100eba3cc59eac9baf1ff49","verdict":"suspicious","severity":"","comment":"suspicious - 1/72","link":"https://www.virustotal.com/gui/file/ed5304d9fc25748c374558859492867d8cb1f56f7100eba3cc59eac9baf1ff49","meta":null}]}},{"path":"release/tools/lobby_connect/lobby_connect_x32.exe","filename":"lobby_connect_x32.exe","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32 executable (console) Intel 80386, for MS Windows, 6 sections","size":4815272,"md5":"1d04f0f1d778962ec4042ddb8662f2f6","sha1":"64df38df7cc36575886fad8fbbefa49e5b9001a2","sha256":"b4031e1356e75084f2f36f10ced8d650be6f14ce433c6912ecc2f46f7a3770ad","sha512":"bc7ebcd2f50a3c7037a4eda0579f526f558a795bb1c3a2b6fe3fa4fdfca5cfa358eea53e85bf5cdc784617b39b18a310e713daf628fd6b61dd6daba26fe3c64a","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-01-13","alert":"Scan result 1/71","trigger":"b4031e1356e75084f2f36f10ced8d650be6f14ce433c6912ecc2f46f7a3770ad","verdict":"suspicious","severity":"","comment":"suspicious - 1/71","link":"https://www.virustotal.com/gui/file/b4031e1356e75084f2f36f10ced8d650be6f14ce433c6912ecc2f46f7a3770ad","meta":null}]}},{"path":"release/tools/lobby_connect/lobby_connect_x64.exe","filename":"lobby_connect_x64.exe","modified":"0001-01-01T00:00:00Z","Modified":"","magic":"PE32+ executable (console) x86-64, for MS Windows, 7 sections","size":5977512,"md5":"46f1fa91e2db5232914f5d198e1c204b","sha1":"4b8ed0345bc6f8fc2d946f23f3a7837df1543419","sha256":"c1b40bc7f8c7e102bae6251c78d387ce8112b7183eb26d4202005ccb0fce8a31","sha512":"043d74d13db1ce6eb5ea3192024a0a78327c8c594fd643de4010d61b47ce647cfb3049a9df9dd421b1a00dbc50e69b6e1a511c026715f2237a9c1a6d9c724dd4","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-01-10","alert":"Scan result 1/71","trigger":"c1b40bc7f8c7e102bae6251c78d387ce8112b7183eb26d4202005ccb0fce8a31","verdict":"suspicious","severity":"","comment":"suspicious - 1/71","link":"https://www.virustotal.com/gui/file/c1b40bc7f8c7e102bae6251c78d387ce8112b7183eb26d4202005ccb0fce8a31","meta":null}]}}],"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/experimental/x32/steamclient.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"win_amadey_bytecodes_oct_2023","trigger":"release/experimental/x32/steam_api.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Matthew @ Embee_Research","date":"2023-10-15","desc":"Detects bytecodes present in Amadey Bot Samples","malpedia_family":"win.amadey","rule":"win_amadey_bytecodes_oct_2023","sha_256":"4165190e60ad5abd437c7768174b12748d391b8b97c874b5bdf8d025c5e17f43","yarahub_author_twitter":"@embee_research","yarahub_license":"CC BY-NC 4.0","yarahub_reference_md5":"2ba1411c46d529f2ae6a7c154d13f029","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"19e955f9-d125-41af-981b-09957a8abbc8"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/experimental/x64/steamclient64.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/extra_dlls/steamclient_extra_x32.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/extra_dlls/steamclient_extra_x64.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/GameOverlayRenderer.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/GameOverlayRenderer64.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"win_amadey_bytecodes_oct_2023","trigger":"release/steamclient_experimental/steamclient.dll","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Matthew @ Embee_Research","date":"2023-10-15","desc":"Detects bytecodes present in Amadey Bot Samples","malpedia_family":"win.amadey","rule":"win_amadey_bytecodes_oct_2023","sha_256":"4165190e60ad5abd437c7768174b12748d391b8b97c874b5bdf8d025c5e17f43","yarahub_author_twitter":"@embee_research","yarahub_license":"CC BY-NC 4.0","yarahub_reference_md5":"2ba1411c46d529f2ae6a7c154d13f029","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"19e955f9-d125-41af-981b-09957a8abbc8"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/steamclient_loader_x32.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/steamclient_experimental/steamclient_loader_x64.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/tools/generate_interfaces/generate_interfaces_x32.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-01-18","alert":"files - file ~tmp01925d3f.exe","trigger":"release/tools/generate_interfaces/generate_interfaces_x64.exe","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-01-10","alert":"Scan result 3/60","trigger":"daf5388f8d9a9090867e65c3c9420ae76629d5e99a369cae99f371800ee9001a","verdict":"suspicious","severity":"","comment":"suspicious - 3/60","link":"https://www.virustotal.com/gui/file/daf5388f8d9a9090867e65c3c9420ae76629d5e99a369cae99f371800ee9001a","meta":null}]}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"github.com/Detanup01/gbe_fork/releases/latest/download/emu-win-release.7z","fqdn":"github.com","domain":"github.com","tld":"com"},"ip":{"addr":"140.82.121.3","port":443,"asn":36459,"as":"GITHUB","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-01-18T06:17:42.662Z","timestamp":1737181062662,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"github.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 07 Mar 2024 00:00:00 GMT","end":"Fri, 07 Mar 2025 23:59:59 GMT"},"fingerprint":{"sha1":"E7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0","sha256":"FD:6E:9B:0E:F3:98:BC:D9:04:C3:B2:EC:16:7A:7B:0F:DA:72:01:C9:03:C5:3A:6A:6A:E5:D0:41:43:63:EF:65"}}},"request":{"raw":"GET /Detanup01/gbe_fork/releases/latest/download/emu-win-release.7z HTTP/1.1\r\nHost: github.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: GitHub.com\r\ndate: Sat, 18 Jan 2025 06:17:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With\r\nlocation: https://github.com/Detanup01/gbe_fork/releases/download/release-2025_01_09/emu-win-release.7z\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nx-frame-options: deny\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/\r\nset-cookie: _gh_sess=nxl6F2eMpX%2F8l8rTMS1EIt9T3U0jEyLI9IRVzIJwx%2FrpOSpgrvdbZL1Ci23pCD2ADIP1qLgwHprgP275qWcU1Xv9wCIulD3VVPr70ba1%2FJ62WPfMqVUCuEgLwazaQPKSubBUk%2BMu7lha2HUdrX9%2Ft%2BVJt1DkDIUGvgOYoy8u0jrcrRJP5fh%2FbdSN6xBWwcsij2Syg4MfxwFqrPAzSncbOk6Uixl8d%2B4RP6TSrw3iAbQsJMvS%2B3qtWP9mZy%2FZjARZ0gVwx8UsSO1jYFK%2B1Ggdgg%3D%3D--F0ZMtMH%2BDmrSNLjO--cwwpMGdjKSZaBuAp9pZmow%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax\n_octo=GH1.1.1446694463.1737181062; Path=/; Domain=github.com; Expires=Sun, 18 Jan 2026 06:17:42 GMT; Secure; SameSite=Lax\nlogged_in=no; Path=/; Domain=github.com; Expires=Sun, 18 Jan 2026 06:17:42 GMT; HttpOnly; Secure; SameSite=Lax\r\ncontent-length: 0\r\nx-github-request-id: 8037:2B3469:CCAA79:D4B42F:678B4786\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-28T17:37:38.968108Z","times_seen":15830666,"resource_available":true,"data":null}},"time_used":510,"timings":{"blocked":179,"dns":19,"connect":19,"send":0,"wait":152,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"github.com/Detanup01/gbe_fork/releases/download/release-2025_01_09/emu-win-release.7z","fqdn":"github.com","domain":"github.com","tld":"com"},"ip":{"addr":"140.82.121.3","port":443,"asn":36459,"as":"GITHUB","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-01-18T06:17:43.006Z","timestamp":1737181063006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"github.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 07 Mar 2024 00:00:00 GMT","end":"Fri, 07 Mar 2025 23:59:59 GMT"},"fingerprint":{"sha1":"E7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0","sha256":"FD:6E:9B:0E:F3:98:BC:D9:04:C3:B2:EC:16:7A:7B:0F:DA:72:01:C9:03:C5:3A:6A:6A:E5:D0:41:43:63:EF:65"}}},"request":{"raw":"GET /Detanup01/gbe_fork/releases/download/release-2025_01_09/emu-win-release.7z HTTP/1.1\r\nHost: github.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gh_sess=nxl6F2eMpX%2F8l8rTMS1EIt9T3U0jEyLI9IRVzIJwx%2FrpOSpgrvdbZL1Ci23pCD2ADIP1qLgwHprgP275qWcU1Xv9wCIulD3VVPr70ba1%2FJ62WPfMqVUCuEgLwazaQPKSubBUk%2BMu7lha2HUdrX9%2Ft%2BVJt1DkDIUGvgOYoy8u0jrcrRJP5fh%2FbdSN6xBWwcsij2Syg4MfxwFqrPAzSncbOk6Uixl8d%2B4RP6TSrw3iAbQsJMvS%2B3qtWP9mZy%2FZjARZ0gVwx8UsSO1jYFK%2B1Ggdgg%3D%3D--F0ZMtMH%2BDmrSNLjO--cwwpMGdjKSZaBuAp9pZmow%3D%3D; _octo=GH1.1.1446694463.1737181062; logged_in=no\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: GitHub.com\r\ndate: Sat, 18 Jan 2025 06:17:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With\r\nlocation: https://objects.githubusercontent.com/github-production-release-asset-2e65be/830127839/30f54f2d-6baa-4138-90b6-f0d14faabe62?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=releaseassetproduction%2F20250118%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20250118T061743Z\u0026X-Amz-Expires=300\u0026X-Amz-Signature=177d318e324d57a48bf1bd85eea40d65752663d78b06088610fbc9fe8dae01fa\u0026X-Amz-SignedHeaders=host\u0026response-content-disposition=attachment%3B%20filename%3Demu-win-release.7z\u0026response-content-type=application%2Foctet-stream\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nx-frame-options: deny\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/\r\ncontent-length: 0\r\nx-github-request-id: 8037:2B3469:CCAAEA:D4B49C:678B4786\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-28T17:37:38.968108Z","times_seen":15830666,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"objects.githubusercontent.com/github-production-release-asset-2e65be/830127839/30f54f2d-6baa-4138-90b6-f0d14faabe62?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=releaseassetproduction%2F20250118%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20250118T061743Z\u0026X-Amz-Expires=300\u0026X-Amz-Signature=177d318e324d57a48bf1bd85eea40d65752663d78b06088610fbc9fe8dae01fa\u0026X-Amz-SignedHeaders=host\u0026response-content-disposition=attachment%3B%20filename%3Demu-win-release.7z\u0026response-content-type=application%2Foctet-stream","fqdn":"objects.githubusercontent.com","domain":"objects.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-01-18T06:17:43.166Z","timestamp":1737181063166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":"GitHub, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 15 Mar 2024 00:00:00 GMT","end":"Fri, 14 Mar 2025 23:59:59 GMT"},"fingerprint":{"sha1":"97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28","sha256":"09:01:0C:CE:9B:72:21:55:C7:E6:86:B0:77:39:D3:D2:DC:06:05:DE:A1:A4:98:4A:0B:96:5E:18:77:77:26:B5"}}},"request":{"raw":"GET /github-production-release-asset-2e65be/830127839/30f54f2d-6baa-4138-90b6-f0d14faabe62?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=releaseassetproduction%2F20250118%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20250118T061743Z\u0026X-Amz-Expires=300\u0026X-Amz-Signature=177d318e324d57a48bf1bd85eea40d65752663d78b06088610fbc9fe8dae01fa\u0026X-Amz-SignedHeaders=host\u0026response-content-disposition=attachment%3B%20filename%3Demu-win-release.7z\u0026response-content-type=application%2Foctet-stream HTTP/1.1\r\nHost: objects.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Thu, 09 Jan 2025 22:19:02 GMT\r\netag: \"0x8DD30FB9F239405\"\r\nserver: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: bc18a102-b01e-0000-4de4-62e155000000\r\nx-ms-version: 2024-11-04\r\nx-ms-creation-time: Thu, 09 Jan 2025 22:19:02 GMT\r\nx-ms-lease-status: unlocked\r\nx-ms-lease-state: available\r\nx-ms-blob-type: BlockBlob\r\ncontent-disposition: attachment; filename=emu-win-release.7z\r\nx-ms-server-encrypted: true\r\nvia: 1.1 varnish, 1.1 varnish\r\nfastly-restarts: 1\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 18 Jan 2025 06:17:43 GMT\r\nx-served-by: cache-iad-kiad7000068-IAD, cache-hel1410034-HEL\r\nx-cache: HIT, MISS\r\nx-cache-hits: 638, 0\r\nx-timer: S1737181063.214750,VS0,VE107\r\ncontent-length: 10403872\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10403872,"size_decoded":10403872,"mime_type":"application/octet-stream","magic":"7-zip archive data, version 0.4","md5":"286ce60dee4412957189d95bae7efbcd","sha1":"00066db6aa05fbd8d9ad1437213f794e004f0db7","sha256":"daf5388f8d9a9090867e65c3c9420ae76629d5e99a369cae99f371800ee9001a","sha512":"211abfe343f101a4dc15a5c337fcf33485b18bd326a30b7d9366781cab78afd4c21069adee5440863fd96b6bc0a24e0629b6c7423e9eb2985e9726f217bb2045","ssdeep":"196608:/5+ndop5KpZX/b16bVs7XYrcT3s9gs2h7i3HS1Kvr3n3SoUfUk4eq:/OiY8Cor4suO4KTPUfUFd","tlshash":"66a63301b771ea60c78a40bf2c8f02c4124e6fe7b3769a0f0d8f12a55ad2d66e553d79","first_seen":"2025-01-10T11:33:55.53771Z","last_seen":"2025-02-14T13:48:40.62766Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1551,"timings":{"blocked":43,"dns":2,"connect":13,"send":0,"wait":531,"receive":934,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-01-10","alert":"Scan result 3/60","trigger":"daf5388f8d9a9090867e65c3c9420ae76629d5e99a369cae99f371800ee9001a","verdict":"suspicious","severity":"","comment":"suspicious - 3/60","link":"https://www.virustotal.com/gui/file/daf5388f8d9a9090867e65c3c9420ae76629d5e99a369cae99f371800ee9001a","meta":null}],"urlquery":null}}]}