gwater2[.]zip | Triage

Resubmissions

06/07/2024, 18:08

240706-wq337a1aje 3

06/07/2024, 18:07

240706-wp9vcayamj 4

06/07/2024, 18:05

240706-wn6rasxhrj 3

28/06/2024, 02:47

240628-c93rzsxcnb 7

Sharing

Copy URL Twitter E-mail

General

Target

gwater2.zip
Size

1.8MB
MD5

2b439f9d61ff9d59508075a9a08d358f
SHA1

e425615886cf982d255cde309f8a55903f235b43
SHA256

ba2f7156704bacdddf33198a0f19b28f52834e19b952bdbf3a93273c691c2931
SHA512

adf36da8e0f621567430bc5b1ea23da967edc4bc407fdcbc8ad5765e54b9dde6a95e9ce4ca8a64996076fd36a537bc82f6cef9f3637a8c301cb3f63c046ca661
SSDEEP

49152:adJruMKXWJlJwvXLmU0lqIz9En7eGN7lhDUqGP8X/:c0SlYL0A97eghYqGEX/

Score

3^/10

Malware Config

Signatures

Unsigned PE 9 IoCs

Checks for missing Authenticode signature.

resource
unpack001/gwater2/GFSDK_Aftermath_Lib.x64.dll
unpack001/gwater2/GFSDK_Aftermath_Lib.x86.dll
unpack001/gwater2/amd_ags_x64.dll
unpack001/gwater2/amd_ags_x86.dll
unpack001/gwater2/garrysmod/lua/bin/gmcl_gwater2_main_win32.dll
unpack001/gwater2/garrysmod/lua/bin/gmcl_gwater2_win32.dll
unpack001/gwater2/garrysmod/lua/bin/gmcl_gwater2_win64.dll
unpack001/gwater2/nvToolsExt32_1.dll
unpack001/gwater2/nvToolsExt64_1.dll

Files

gwater2.zip
.zip
gwater2/GFSDK_Aftermath_Lib.x64.dll
.dll windows:6 windows x64 arch:x64

11d2010ec90c8de0e46228e77331830d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\P4\p4sw\sw\devrel\libdev\Aftermath\dev\x64\Release\GFSDK_Aftermath_Lib.x64.pdb

Imports

vcruntime140

memset
wcsrchr
wcsstr
__C_specific_handler
__std_type_info_destroy_list

api-ms-win-crt-string-l1-1-0

_wcsicmp
isdigit
_wcsupr
_wcsnicmp
isalpha

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initialize_onexit_table
_initterm_e
_register_onexit_function
_cexit
_initterm
_crt_atexit
_execute_onexit_table

kernel32

FreeLibrary
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
VerSetConditionMask
VerifyVersionInfoW
GetFullPathNameW
LoadLibraryExW
SetLastError
GetLastError
LocalFree
GetProcAddress
Sleep
LocalAlloc
GetSystemDirectoryW
GetFileAttributesW

Exports

Exports

??4GFSDK_Aftermath_ContextData@@QEAAAEAU0@$$QEAU0@@Z
??4GFSDK_Aftermath_ContextData@@QEAAAEAU0@AEBU0@@Z
?getErrorCode@GFSDK_Aftermath_ContextData@@QEAA?AW4GFSDK_Aftermath_Result@@XZ
GFSDK_Aftermath_DX11_GetData
GFSDK_Aftermath_DX11_Initialize
GFSDK_Aftermath_DX11_SetEventMarker
GFSDK_Aftermath_DX12_GetData
GFSDK_Aftermath_DX12_Initialize
GFSDK_Aftermath_DX12_SetEventMarker

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gwater2/GFSDK_Aftermath_Lib.x86.dll
.dll windows:6 windows x86 arch:x86

90e51886c3d6b1895d867d9abe225a1e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\P4\p4sw\sw\devrel\libdev\Aftermath\dev\Win32\Release\GFSDK_Aftermath_Lib.x86.pdb

Imports

vcruntime140

wcsrchr
wcsstr
__std_type_info_destroy_list
memset
_except_handler4_common

api-ms-win-crt-string-l1-1-0

isalpha
wcslen
_wcsnicmp
_wcsicmp
isdigit
_wcsupr
wcscmp

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_register_onexit_function
_initterm_e
_initterm
_execute_onexit_table
_cexit
_crt_atexit

kernel32

Sleep
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoW
GetFullPathNameW
ExpandEnvironmentStringsW
lstrcmpW
LoadLibraryExW
GetModuleHandleA
GetCurrentProcess
SetLastError
LocalFree
GetLastError
GetFileAttributesW
GetProcAddress
FreeLibrary
InterlockedDecrement
InterlockedIncrement
LocalAlloc
GetSystemDirectoryW

Exports

Exports

??4GFSDK_Aftermath_ContextData@@QAEAAU0@$$QAU0@@Z
??4GFSDK_Aftermath_ContextData@@QAEAAU0@ABU0@@Z
?getErrorCode@GFSDK_Aftermath_ContextData@@QAE?AW4GFSDK_Aftermath_Result@@XZ
GFSDK_Aftermath_DX11_GetData
GFSDK_Aftermath_DX11_Initialize
GFSDK_Aftermath_DX11_SetEventMarker
GFSDK_Aftermath_DX12_GetData
GFSDK_Aftermath_DX12_Initialize
GFSDK_Aftermath_DX12_SetEventMarker

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gwater2/NvFlexExtReleaseD3D_x64.dll
.dll windows:6 windows x64 arch:x64

01c642daec0b3d54a62781921d9e414f

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

14:78:1b:c8:62:e8:dc:50:3a:55:93:46:f5:dc:c5:18
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/07/2015, 00:00

Not After

26/07/2018, 23:59

Subject

CN=NVIDIA Corporation,O=NVIDIA Corporation,L=SANTA CLARA,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:da:1d:ca:5f:84:70:43:71:49:ed:73:01:38:37:9c:5b:85:61:c1
Signer

Actual PE Digest

45:da:1d:ca:5f:84:70:43:71:49:ed:73:01:38:37:9c:5b:85:61:c1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\b\13d29b3d4b63c706\sw\devrel\libdev\flex\dev\main\bin\win64\NvFlexExtReleaseD3D_x64.dll.pdb

Imports

nvflexreleased3d_x64

NvFlexSetNormals
NvFlexGetRigids
NvFlexSetActiveCount
NvFlexMap
NvFlexSetInflatables
NvFlexGetNormals
NvFlexUnmap
NvFlexSetRigids
NvFlexSetSprings
NvFlexSetRestParticles
NvFlexAllocBuffer
NvFlexUpdateSolver
NvFlexSetParticles
NvFlexSetPhases
NvFlexSetVelocities
NvFlexFreeBuffer
NvFlexSetDynamicTriangles
NvFlexRestoreContext
NvFlexAcquireContext
NvFlexGetParticles
NvFlexSetActive
NvFlexGetVelocities
NvFlexGetBounds
NvFlexGetPhases
NvFlexGetSolverLibrary
NvFlexGetDeviceAndContext
NvFlexRegisterSolverCallback

kernel32

GetFileType
CreateFileW
WriteConsoleW
SetStdHandle
CloseHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
OutputDebugStringW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapReAlloc
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
FreeLibrary
SetConsoleCtrlHandler
GetModuleFileNameW
EncodePointer
DecodePointer
GetCommandLineA
GetCurrentThreadId
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
GetLastError
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsProcessorFeaturePresent
HeapFree
HeapAlloc
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetLastError
GetCurrentThread
GetProcessHeap
GetStdHandle
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetModuleHandleW
CreateSemaphoreW
FatalAppExitA
WriteFile

Exports

Exports

NvFlexExtAllocParticles
NvFlexExtCreateClothFromMesh
NvFlexExtCreateContainer
NvFlexExtCreateForceFieldCallback
NvFlexExtCreateInstance
NvFlexExtCreateRigidFromMesh
NvFlexExtCreateSoftFromMesh
NvFlexExtCreateSoftJoint
NvFlexExtCreateSoftMeshSkinning
NvFlexExtCreateTearingClothFromMesh
NvFlexExtCreateWeldedMeshIndices
NvFlexExtDestroyAsset
NvFlexExtDestroyContainer
NvFlexExtDestroyForceFieldCallback
NvFlexExtDestroyInstance
NvFlexExtDestroySoftJoint
NvFlexExtDestroyTearingCloth
NvFlexExtFreeParticles
NvFlexExtGetActiveList
NvFlexExtMapParticleData
NvFlexExtMapShapeData
NvFlexExtMapTriangleData
NvFlexExtMovingFrameApply
NvFlexExtMovingFrameInit
NvFlexExtMovingFrameUpdate
NvFlexExtNotifyAssetChanged
NvFlexExtPullFromDevice
NvFlexExtPushToDevice
NvFlexExtSetForceFields
NvFlexExtSoftJointSetTransform
NvFlexExtTearClothMesh
NvFlexExtTickContainer
NvFlexExtUnmapParticleData
NvFlexExtUnmapShapeData
NvFlexExtUnmapTriangleData
NvFlexExtUpdateInstances
NvFlexMakePhase
NvFlexMakePhaseWithChannels
NvFlexMakeShapeFlags
NvFlexMakeShapeFlagsWithChannels

Sections

.text
Size: 311KB - Virtual size: 311KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gwater2/NvFlexExtReleaseD3D_x86.dll
.dll windows:6 windows x86 arch:x86

52da370fb408714c8d9137fda77e7344

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

14:78:1b:c8:62:e8:dc:50:3a:55:93:46:f5:dc:c5:18
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/07/2015, 00:00

Not After

26/07/2018, 23:59

Subject

CN=NVIDIA Corporation,O=NVIDIA Corporation,L=SANTA CLARA,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6e:19:08:53:b6:72:23:a9:ed:33:87:33:92:7b:4c:fb:bd:5e:da:80
Signer

Actual PE Digest

6e:19:08:53:b6:72:23:a9:ed:33:87:33:92:7b:4c:fb:bd:5e:da:80

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\buildAgent\work\13d29b3d4b63c706\sw\devrel\libdev\flex\dev\main\bin\win32\NvFlexExtReleaseD3D_x86.dll.pdb

Imports

nvflexreleased3d_x86

NvFlexSetNormals
NvFlexGetRigids
NvFlexSetActiveCount
NvFlexMap
NvFlexSetInflatables
NvFlexGetNormals
NvFlexUnmap
NvFlexSetRigids
NvFlexSetSprings
NvFlexSetRestParticles
NvFlexAllocBuffer
NvFlexUpdateSolver
NvFlexSetParticles
NvFlexSetPhases
NvFlexSetVelocities
NvFlexFreeBuffer
NvFlexSetDynamicTriangles
NvFlexRestoreContext
NvFlexAcquireContext
NvFlexGetParticles
NvFlexSetActive
NvFlexGetVelocities
NvFlexGetBounds
NvFlexGetPhases
NvFlexGetSolverLibrary
NvFlexGetDeviceAndContext
NvFlexRegisterSolverCallback

kernel32

GetFileType
CreateFileW
WriteConsoleW
SetStdHandle
CloseHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
OutputDebugStringW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapReAlloc
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
FreeLibrary
SetConsoleCtrlHandler
GetModuleFileNameW
EncodePointer
DecodePointer
GetCommandLineA
GetCurrentThreadId
RaiseException
RtlUnwind
IsProcessorFeaturePresent
GetLastError
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapSize
HeapFree
HeapAlloc
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetLastError
GetCurrentThread
GetProcessHeap
GetStdHandle
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetModuleHandleW
CreateSemaphoreW
FatalAppExitA
WriteFile

Exports

Exports

NvFlexExtAllocParticles
NvFlexExtCreateClothFromMesh
NvFlexExtCreateContainer
NvFlexExtCreateForceFieldCallback
NvFlexExtCreateInstance
NvFlexExtCreateRigidFromMesh
NvFlexExtCreateSoftFromMesh
NvFlexExtCreateSoftJoint
NvFlexExtCreateSoftMeshSkinning
NvFlexExtCreateTearingClothFromMesh
NvFlexExtCreateWeldedMeshIndices
NvFlexExtDestroyAsset
NvFlexExtDestroyContainer
NvFlexExtDestroyForceFieldCallback
NvFlexExtDestroyInstance
NvFlexExtDestroySoftJoint
NvFlexExtDestroyTearingCloth
NvFlexExtFreeParticles
NvFlexExtGetActiveList
NvFlexExtMapParticleData
NvFlexExtMapShapeData
NvFlexExtMapTriangleData
NvFlexExtMovingFrameApply
NvFlexExtMovingFrameInit
NvFlexExtMovingFrameUpdate
NvFlexExtNotifyAssetChanged
NvFlexExtPullFromDevice
NvFlexExtPushToDevice
NvFlexExtSetForceFields
NvFlexExtSoftJointSetTransform
NvFlexExtTearClothMesh
NvFlexExtTickContainer
NvFlexExtUnmapParticleData
NvFlexExtUnmapShapeData
NvFlexExtUnmapTriangleData
NvFlexExtUpdateInstances
NvFlexMakePhase
NvFlexMakePhaseWithChannels
NvFlexMakeShapeFlags
NvFlexMakeShapeFlagsWithChannels

Sections

.text
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gwater2/NvFlexReleaseD3D_x64.dll
.dll windows:6 windows x64 arch:x64

9b9dfad3362e669003da77ce608620e9

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

14:78:1b:c8:62:e8:dc:50:3a:55:93:46:f5:dc:c5:18
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/07/2015, 00:00

Not After

26/07/2018, 23:59

Subject

CN=NVIDIA Corporation,O=NVIDIA Corporation,L=SANTA CLARA,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0c:2e:9a:a6:f9:c6:d6:43:64:8e:96:48:e1:ae:93:3f:da:9f:bf:e6
Signer

Actual PE Digest

0c:2e:9a:a6:f9:c6:d6:43:64:8e:96:48:e1:ae:93:3f:da:9f:bf:e6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\b\13d29b3d4b63c706\sw\devrel\libdev\flex\dev\main\bin\win64\NvFlexReleaseD3D_x64.dll.pdb

Imports

kernel32

GetProcessHeap
CreateEventA
CloseHandle
SetStdHandle
FlushFileBuffers
SetFilePointerEx
GetConsoleCP
WaitForSingleObject
GetConsoleMode
ReadFile
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
HeapFree
HeapAlloc
GetProcAddress
GetModuleHandleW
GetModuleHandleExA
ReadConsoleW
WideCharToMultiByte
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapReAlloc
SetConsoleCtrlHandler
FatalAppExitA
GetCPInfo
RaiseException
GetLastError
FreeLibrary
LoadLibraryExA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
Sleep
LocalAlloc
GetSystemDirectoryW
GetFileAttributesW
CreateFileW
LocalFree
lstrcmpA
SetLastError
LoadLibraryExW
GetFullPathNameW
VerifyVersionInfoW
VerSetConditionMask
OutputDebugStringW
CreateProcessW
CreateProcessA
EncodePointer
DecodePointer
GetCommandLineA
GetCurrentThreadId
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
HeapSize
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentThread
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
CreateSemaphoreW
IsValidCodePage
GetACP
GetOEMCP
WriteConsoleW

user32

UnregisterClassA
LoadIconA
RegisterClassExA
DestroyWindow
DefWindowProcA
LoadCursorA
AdjustWindowRect
CreateWindowExA

nvtoolsext64_1

nvtxRangePushA
nvtxRangePop
nvtxRangePushW

gfsdk_aftermath_lib.x64

GFSDK_Aftermath_DX12_GetData
GFSDK_Aftermath_DX12_Initialize
GFSDK_Aftermath_DX11_SetEventMarker
GFSDK_Aftermath_DX11_GetData
GFSDK_Aftermath_DX11_Initialize
GFSDK_Aftermath_DX12_SetEventMarker

amd_ags_x64

agsDeInit
agsDriverExtensionsDX11_DeInit
agsDriverExtensionsDX11_Init
agsDriverExtensionsDX12_Init
agsDriverExtensionsDX12_DeInit
agsInit

Exports

Exports

?NvFlexGetMaxDiffuseParticles@@YAHPEBUNvFlexSolver@@@Z
?NvFlexGetMaxNeighborsPerParticle@@YAHPEBUNvFlexSolver@@@Z
?NvFlexGetMaxNumParticles@@YAHPEBUNvFlexSolver@@@Z
?NvFlexGetNumDynamicTriangles@@YAHPEBUNvFlexSolver@@@Z
?NvFlexGetNumParticles@@YAHPEBUNvFlexSolver@@@Z
?NvFlexGetNumRigids@@YAHPEBUNvFlexSolver@@@Z
?NvFlexGetNumShapes@@YAHPEBUNvFlexSolver@@@Z
?NvFlexGetNumSprings@@YAHPEBUNvFlexSolver@@@Z
?NvFlexGetTriangleMeshNumTriangles@@YAHPEAUNvFlexLibrary@@I@Z
?NvFlexGetTriangleMeshNumVertices@@YAHPEAUNvFlexLibrary@@I@Z
NvFlexAcquireContext
NvFlexAllocBuffer
NvFlexComputeWaitForGraphics
NvFlexCopyDeviceToHost
NvFlexCopySolver
NvFlexCreateConvexMesh
NvFlexCreateDistanceField
NvFlexCreateSolver
NvFlexCreateTriangleMesh
NvFlexDestroyConvexMesh
NvFlexDestroyDistanceField
NvFlexDestroySolver
NvFlexDestroyTriangleMesh
NvFlexFlush
NvFlexFreeBuffer
NvFlexGetActive
NvFlexGetActiveCount
NvFlexGetAnisotropy
NvFlexGetBounds
NvFlexGetContacts
NvFlexGetConvexMeshBounds
NvFlexGetConvexMeshes
NvFlexGetDataAftermath
NvFlexGetDensities
NvFlexGetDetailTimers
NvFlexGetDeviceAndContext
NvFlexGetDeviceLatency
NvFlexGetDeviceName
NvFlexGetDiffuseParticles
NvFlexGetDistanceFields
NvFlexGetDynamicTriangles
NvFlexGetNeighbors
NvFlexGetNormals
NvFlexGetParams
NvFlexGetParticles
NvFlexGetPhases
NvFlexGetRestParticles
NvFlexGetRigids
NvFlexGetShapeBVH
NvFlexGetSmoothParticles
NvFlexGetSolverDesc
NvFlexGetSolverLibrary
NvFlexGetSolvers
NvFlexGetSprings
NvFlexGetTimers
NvFlexGetTriangleMeshBounds
NvFlexGetTriangleMeshes
NvFlexGetVelocities
NvFlexGetVersion
NvFlexInit
NvFlexMakePhase
NvFlexMakePhaseWithChannels
NvFlexMakeShapeFlags
NvFlexMakeShapeFlagsWithChannels
NvFlexMap
NvFlexRegisterD3DBuffer
NvFlexRegisterSolverCallback
NvFlexRestoreContext
NvFlexSetActive
NvFlexSetActiveCount
NvFlexSetDebug
NvFlexSetDiffuseParticles
NvFlexSetDynamicTriangles
NvFlexSetInflatables
NvFlexSetNormals
NvFlexSetParams
NvFlexSetParticles
NvFlexSetPhases
NvFlexSetRestParticles
NvFlexSetRigids
NvFlexSetShapes
NvFlexSetSolverDescDefaults
NvFlexSetSprings
NvFlexSetVelocities
NvFlexShutdown
NvFlexUnmap
NvFlexUnregisterD3DBuffer
NvFlexUnregisterOGLBuffer
NvFlexUpdateConvexMesh
NvFlexUpdateDistanceField
NvFlexUpdateSolver
NvFlexUpdateTriangleMesh
NvFlexWait

Sections

.text
Size: 538KB - Virtual size: 537KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 753KB - Virtual size: 753KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gwater2/NvFlexReleaseD3D_x86.dll
.dll windows:6 windows x86 arch:x86

a2e60a5ec916d802825dfb1facbb5bd9

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

14:78:1b:c8:62:e8:dc:50:3a:55:93:46:f5:dc:c5:18
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/07/2015, 00:00

Not After

26/07/2018, 23:59

Subject

CN=NVIDIA Corporation,O=NVIDIA Corporation,L=SANTA CLARA,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3f:03:df:fd:ae:23:81:55:3e:e2:df:f8:b5:5f:71:70:73:b0:34:56
Signer

Actual PE Digest

3f:03:df:fd:ae:23:81:55:3e:e2:df:f8:b5:5f:71:70:73:b0:34:56

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\buildAgent\work\13d29b3d4b63c706\sw\devrel\libdev\flex\dev\main\bin\win32\NvFlexReleaseD3D_x86.dll.pdb

Imports

kernel32

GetProcessHeap
CreateEventA
CloseHandle
SetStdHandle
FlushFileBuffers
SetFilePointerEx
GetConsoleCP
WaitForSingleObject
GetConsoleMode
ReadFile
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
HeapFree
HeapAlloc
GetProcAddress
GetModuleHandleW
GetModuleHandleExA
ReadConsoleW
WideCharToMultiByte
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapReAlloc
SetConsoleCtrlHandler
FatalAppExitA
GetCPInfo
RaiseException
GetLastError
FreeLibrary
LoadLibraryExA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
Sleep
InterlockedDecrement
InterlockedIncrement
InterlockedExchangeAdd
LocalAlloc
GetSystemDirectoryW
GetFileAttributesW
CreateFileW
LocalFree
lstrcmpA
SetLastError
GetCurrentProcess
GetModuleHandleA
LoadLibraryExW
OutputDebugStringW
lstrcmpW
ExpandEnvironmentStringsW
GetFullPathNameW
VerifyVersionInfoW
VerSetConditionMask
CreateProcessW
CreateProcessA
EncodePointer
DecodePointer
GetCommandLineA
GetCurrentThreadId
RtlUnwind
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
HeapSize
IsDebuggerPresent
GetCurrentThread
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
CreateSemaphoreW
IsValidCodePage
GetACP
GetOEMCP
WriteConsoleW

user32

UnregisterClassA
LoadIconA
RegisterClassExA
DestroyWindow
DefWindowProcA
LoadCursorA
AdjustWindowRect
CreateWindowExA

nvtoolsext32_1

nvtxRangePushA
nvtxRangePop
nvtxRangePushW

gfsdk_aftermath_lib.x86

GFSDK_Aftermath_DX12_GetData
GFSDK_Aftermath_DX12_Initialize
GFSDK_Aftermath_DX11_SetEventMarker
GFSDK_Aftermath_DX11_GetData
GFSDK_Aftermath_DX11_Initialize
GFSDK_Aftermath_DX12_SetEventMarker

amd_ags_x86

agsDeInit
agsDriverExtensionsDX11_DeInit
agsDriverExtensionsDX11_Init
agsDriverExtensionsDX12_Init
agsDriverExtensionsDX12_DeInit
agsInit

Exports

Exports

?NvFlexGetMaxDiffuseParticles@@YAHPBUNvFlexSolver@@@Z
?NvFlexGetMaxNeighborsPerParticle@@YAHPBUNvFlexSolver@@@Z
?NvFlexGetMaxNumParticles@@YAHPBUNvFlexSolver@@@Z
?NvFlexGetNumDynamicTriangles@@YAHPBUNvFlexSolver@@@Z
?NvFlexGetNumParticles@@YAHPBUNvFlexSolver@@@Z
?NvFlexGetNumRigids@@YAHPBUNvFlexSolver@@@Z
?NvFlexGetNumShapes@@YAHPBUNvFlexSolver@@@Z
?NvFlexGetNumSprings@@YAHPBUNvFlexSolver@@@Z
?NvFlexGetTriangleMeshNumTriangles@@YAHPAUNvFlexLibrary@@I@Z
?NvFlexGetTriangleMeshNumVertices@@YAHPAUNvFlexLibrary@@I@Z
NvFlexAcquireContext
NvFlexAllocBuffer
NvFlexComputeWaitForGraphics
NvFlexCopyDeviceToHost
NvFlexCopySolver
NvFlexCreateConvexMesh
NvFlexCreateDistanceField
NvFlexCreateSolver
NvFlexCreateTriangleMesh
NvFlexDestroyConvexMesh
NvFlexDestroyDistanceField
NvFlexDestroySolver
NvFlexDestroyTriangleMesh
NvFlexFlush
NvFlexFreeBuffer
NvFlexGetActive
NvFlexGetActiveCount
NvFlexGetAnisotropy
NvFlexGetBounds
NvFlexGetContacts
NvFlexGetConvexMeshBounds
NvFlexGetConvexMeshes
NvFlexGetDataAftermath
NvFlexGetDensities
NvFlexGetDetailTimers
NvFlexGetDeviceAndContext
NvFlexGetDeviceLatency
NvFlexGetDeviceName
NvFlexGetDiffuseParticles
NvFlexGetDistanceFields
NvFlexGetDynamicTriangles
NvFlexGetNeighbors
NvFlexGetNormals
NvFlexGetParams
NvFlexGetParticles
NvFlexGetPhases
NvFlexGetRestParticles
NvFlexGetRigids
NvFlexGetShapeBVH
NvFlexGetSmoothParticles
NvFlexGetSolverDesc
NvFlexGetSolverLibrary
NvFlexGetSolvers
NvFlexGetSprings
NvFlexGetTimers
NvFlexGetTriangleMeshBounds
NvFlexGetTriangleMeshes
NvFlexGetVelocities
NvFlexGetVersion
NvFlexInit
NvFlexMakePhase
NvFlexMakePhaseWithChannels
NvFlexMakeShapeFlags
NvFlexMakeShapeFlagsWithChannels
NvFlexMap
NvFlexRegisterD3DBuffer
NvFlexRegisterSolverCallback
NvFlexRestoreContext
NvFlexSetActive
NvFlexSetActiveCount
NvFlexSetDebug
NvFlexSetDiffuseParticles
NvFlexSetDynamicTriangles
NvFlexSetInflatables
NvFlexSetNormals
NvFlexSetParams
NvFlexSetParticles
NvFlexSetPhases
NvFlexSetRestParticles
NvFlexSetRigids
NvFlexSetShapes
NvFlexSetSolverDescDefaults
NvFlexSetSprings
NvFlexSetVelocities
NvFlexShutdown
NvFlexUnmap
NvFlexUnregisterD3DBuffer
NvFlexUnregisterOGLBuffer
NvFlexUpdateConvexMesh
NvFlexUpdateDistanceField
NvFlexUpdateSolver
NvFlexUpdateTriangleMesh
NvFlexWait

Sections

.text
Size: 498KB - Virtual size: 497KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 670KB - Virtual size: 670KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gwater2/amd_ags_x64.dll
.dll windows:6 windows x64 arch:x64

d038ad5b521e4868024fcd5da7483828

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

VerifyVersionInfoW
LoadLibraryA
LoadLibraryW
CloseHandle
WriteConsoleW
GetProcAddress
FreeLibrary
SetEnvironmentVariableW
VerSetConditionMask
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
RtlPcToFileHeader
RaiseException
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
MultiByteToWideChar
GetProcessHeap
ExitProcess
GetModuleHandleExW
WideCharToMultiByte
GetStdHandle
WriteFile
GetModuleFileNameW
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
LCMapStringW
LoadLibraryExW
OutputDebugStringW
HeapReAlloc
HeapSize
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
CreateFileW

user32

EnumDisplayDevicesW

gdi32

DeleteDC
CreateDCW
ExtEscape

Exports

Exports

agsDeInit
agsDriverExtensionsDX11_BeginUAVOverlap
agsDriverExtensionsDX11_CreateBuffer
agsDriverExtensionsDX11_CreateTexture1D
agsDriverExtensionsDX11_CreateTexture2D
agsDriverExtensionsDX11_CreateTexture3D
agsDriverExtensionsDX11_DeInit
agsDriverExtensionsDX11_EndUAVOverlap
agsDriverExtensionsDX11_IASetPrimitiveTopology
agsDriverExtensionsDX11_Init
agsDriverExtensionsDX11_MultiDrawIndexedInstancedIndirect
agsDriverExtensionsDX11_MultiDrawIndexedInstancedIndirectCountIndirect
agsDriverExtensionsDX11_MultiDrawInstancedIndirect
agsDriverExtensionsDX11_MultiDrawInstancedIndirectCountIndirect
agsDriverExtensionsDX11_NotifyResourceBeginAllAccess
agsDriverExtensionsDX11_NotifyResourceEndAllAccess
agsDriverExtensionsDX11_NotifyResourceEndWrites
agsDriverExtensionsDX11_SetDepthBounds
agsDriverExtensionsDX12_DeInit
agsDriverExtensionsDX12_Init
agsGetCrossfireGPUCount
agsGetEyefinityConfigInfo
agsGetGPUMemorySize
agsGetTotalGPUCount
agsInit

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gwater2/amd_ags_x86.dll
.dll windows:6 windows x86 arch:x86

6cb76594131d02161daf334010d75cf7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VerifyVersionInfoW
LoadLibraryA
LoadLibraryW
CloseHandle
WriteConsoleW
GetProcAddress
FreeLibrary
SetEnvironmentVariableW
VerSetConditionMask
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
RaiseException
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
MultiByteToWideChar
GetProcessHeap
ExitProcess
GetModuleHandleExW
WideCharToMultiByte
GetStdHandle
WriteFile
GetModuleFileNameW
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
LCMapStringW
LoadLibraryExW
OutputDebugStringW
RtlUnwind
HeapReAlloc
HeapSize
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
CreateFileW

user32

EnumDisplayDevicesW

gdi32

DeleteDC
CreateDCW
ExtEscape

Exports

Exports

agsDeInit
agsDriverExtensionsDX11_BeginUAVOverlap
agsDriverExtensionsDX11_CreateBuffer
agsDriverExtensionsDX11_CreateTexture1D
agsDriverExtensionsDX11_CreateTexture2D
agsDriverExtensionsDX11_CreateTexture3D
agsDriverExtensionsDX11_DeInit
agsDriverExtensionsDX11_EndUAVOverlap
agsDriverExtensionsDX11_IASetPrimitiveTopology
agsDriverExtensionsDX11_Init
agsDriverExtensionsDX11_MultiDrawIndexedInstancedIndirect
agsDriverExtensionsDX11_MultiDrawIndexedInstancedIndirectCountIndirect
agsDriverExtensionsDX11_MultiDrawInstancedIndirect
agsDriverExtensionsDX11_MultiDrawInstancedIndirectCountIndirect
agsDriverExtensionsDX11_NotifyResourceBeginAllAccess
agsDriverExtensionsDX11_NotifyResourceEndAllAccess
agsDriverExtensionsDX11_NotifyResourceEndWrites
agsDriverExtensionsDX11_SetDepthBounds
agsDriverExtensionsDX12_DeInit
agsDriverExtensionsDX12_Init
agsGetCrossfireGPUCount
agsGetEyefinityConfigInfo
agsGetGPUMemorySize
agsGetTotalGPUCount
agsInit

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gwater2/garrysmod/addons/gwater2/LICENSE.txt
gwater2/garrysmod/addons/gwater2/lua/autorun/client/gwater_menu2.lua
gwater2/garrysmod/addons/gwater2/lua/autorun/gwater2_init.lua
.js
gwater2/garrysmod/addons/gwater2/lua/autorun/gwater2_menufix.lua
gwater2/garrysmod/addons/gwater2/lua/gwater2_patrons.lua
.vbs
gwater2/garrysmod/addons/gwater2/lua/gwater2_shaders.lua
gwater2/garrysmod/addons/gwater2/lua/starfall/libs_cl/gwater2module.lua
gwater2/garrysmod/addons/gwater2/lua/weapons/weapon_gw2_watergun.lua
gwater2/garrysmod/addons/gwater2/materials/gwater2/diffuse.vmt
gwater2/garrysmod/addons/gwater2/materials/gwater2/finalpass.vmt
gwater2/garrysmod/addons/gwater2/materials/gwater2/normals.vmt
gwater2/garrysmod/addons/gwater2/materials/gwater2/smooth.vmt
gwater2/garrysmod/addons/gwater2/materials/gwater2/volumetric.vmt
gwater2/garrysmod/addons/gwater2/resource/fonts/SpaceMonoRegular.ttf
gwater2/garrysmod/addons/gwater2/resource/fonts/TitilliumWeb-Regular.ttf
gwater2/garrysmod/addons/gwater2/resource/fonts/coolvetica.ttf
gwater2/garrysmod/lua/bin/gmcl_gwater2_main_win32.dll
.dll windows:6 windows x86 arch:x86

90724d0e94cb01ef75819bc37a30c49a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

tier0

GetThreadedLoadLibraryFunc
?DevWarning@@YAXPBDZZ
Plat_IsInDebugSession
ReleaseThreadHandle
CommandLine_Tier0
ThreadWaitForObjects
CreateSimpleThread
Error

nvflexreleased3d_x86

NvFlexCreateTriangleMesh
NvFlexUpdateTriangleMesh
NvFlexDestroyConvexMesh
NvFlexDestroyTriangleMesh
NvFlexMap
NvFlexAllocBuffer
NvFlexCreateConvexMesh
NvFlexFreeBuffer
NvFlexUpdateConvexMesh
NvFlexSetActive
NvFlexSetVelocities
NvFlexGetDiffuseParticles
NvFlexSetParticles
NvFlexGetVelocities
NvFlexInit
NvFlexShutdown
NvFlexSetSolverDescDefaults
NvFlexUpdateSolver
NvFlexGetActive
NvFlexSetShapes
NvFlexSetPhases
NvFlexGetAnisotropy
NvFlexSetActiveCount
NvFlexGetSmoothParticles
NvFlexSetParams
NvFlexDestroySolver
NvFlexCreateSolver
NvFlexGetParticles
NvFlexGetPhases
NvFlexUnmap

kernel32

TerminateProcess
WriteConsoleW
CreateFileW
HeapSize
SetFilePointerEx
GetFileSizeEx
SetStdHandle
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
GetStringTypeW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
GetFileType
GetStdHandle
GetModuleHandleA
GetProcAddress
LCMapStringW
HeapAlloc
HeapFree
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
GetCurrentDirectoryW
GetFullPathNameW
LoadLibraryExA
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
DecodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetDriveTypeW

Exports

Exports

CreateInterface
NvFlexMakePhase
NvFlexMakePhaseWithChannels
NvFlexMakeShapeFlags
NvFlexMakeShapeFlagsWithChannels
gmod13_close
gmod13_open

Sections

.text
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gwater2/garrysmod/lua/bin/gmcl_gwater2_win32.dll
.dll windows:6 windows x86 arch:x86

9f24aa026f814de7680dbe1e0adba7d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

tier0

GetThreadedLoadLibraryFunc
?DevWarning@@YAXPBDZZ
Plat_IsInDebugSession
ReleaseThreadHandle
CommandLine
StackToolsNotify_LoadedLibrary
CreateSimpleThread
g_pMemAlloc
Warning
Error

nvflexreleased3d_x86

NvFlexUnmap
NvFlexCreateTriangleMesh
NvFlexDestroyConvexMesh
NvFlexDestroyTriangleMesh
NvFlexMap
NvFlexAllocBuffer
NvFlexCreateConvexMesh
NvFlexFreeBuffer
NvFlexUpdateConvexMesh
NvFlexSetActive
NvFlexSetVelocities
NvFlexGetDiffuseParticles
NvFlexGetVelocities
NvFlexSetActiveCount
NvFlexGetPhases
NvFlexGetParticles
NvFlexCreateSolver
NvFlexDestroySolver
NvFlexSetShapes
NvFlexSetParams
NvFlexInit
NvFlexShutdown
NvFlexSetSolverDescDefaults
NvFlexUpdateSolver
NvFlexGetActive
NvFlexGetSmoothParticles
NvFlexSetPhases
NvFlexGetAnisotropy
NvFlexSetParticles
NvFlexUpdateTriangleMesh

kernel32

GetModuleHandleW
WriteConsoleW
CreateFileW
HeapSize
SetFilePointerEx
GetFileSizeEx
SetStdHandle
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
GetStringTypeW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
GetFileType
GetStdHandle
GetModuleHandleA
GetProcAddress
LCMapStringW
HeapAlloc
HeapFree
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
GetCurrentDirectoryW
GetFullPathNameW
GetDriveTypeW
LoadLibraryExW
TlsFree
TlsSetValue
LoadLibraryExA
WaitForSingleObject
CloseHandle
CreateFileMappingA
GetCurrentProcessId
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
DecodePointer
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue

Exports

Exports

CreateInterface
NvFlexMakePhase
NvFlexMakePhaseWithChannels
NvFlexMakeShapeFlags
NvFlexMakeShapeFlagsWithChannels
gmod13_close
gmod13_open

Sections

.text
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gwater2/garrysmod/lua/bin/gmcl_gwater2_win64.dll
.dll windows:6 windows x64 arch:x64

a6ec0fa6018d483b01ad62aa3f5dadb9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

tier0

GetThreadedLoadLibraryFunc
?DevWarning@@YAXPEBDZZ
Plat_IsInDebugSession
ReleaseThreadHandle
CommandLine
StackToolsNotify_LoadedLibrary
CreateSimpleThread
g_pMemAlloc
Warning
Error

nvflexreleased3d_x64

NvFlexUnmap
NvFlexCreateTriangleMesh
NvFlexDestroyConvexMesh
NvFlexDestroyTriangleMesh
NvFlexMap
NvFlexAllocBuffer
NvFlexCreateConvexMesh
NvFlexFreeBuffer
NvFlexUpdateConvexMesh
NvFlexSetActive
NvFlexSetVelocities
NvFlexGetDiffuseParticles
NvFlexGetVelocities
NvFlexSetActiveCount
NvFlexGetPhases
NvFlexGetParticles
NvFlexCreateSolver
NvFlexDestroySolver
NvFlexSetParams
NvFlexSetShapes
NvFlexGetSmoothParticles
NvFlexInit
NvFlexShutdown
NvFlexSetSolverDescDefaults
NvFlexUpdateSolver
NvFlexGetActive
NvFlexSetParticles
NvFlexSetPhases
NvFlexGetAnisotropy
NvFlexUpdateTriangleMesh

kernel32

GetModuleHandleW
WriteConsoleW
CreateFileW
HeapSize
SetFilePointerEx
GetFileSizeEx
SetStdHandle
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
GetStringTypeW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
GetFileType
GetStdHandle
GetModuleHandleA
GetProcAddress
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
HeapAlloc
HeapFree
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
GetCurrentDirectoryW
GetFullPathNameW
GetDriveTypeW
RtlUnwind
LoadLibraryExA
WaitForSingleObject
CloseHandle
CreateFileMappingA
GetCurrentProcessId
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW

Exports

Exports

CreateInterface
NvFlexMakePhase
NvFlexMakePhaseWithChannels
NvFlexMakeShapeFlags
NvFlexMakeShapeFlagsWithChannels
gmod13_close
gmod13_open

Sections

.text
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gwater2/garrysmod/shaders/fxc/GWaterFinalpass_ps30.vcs
gwater2/garrysmod/shaders/fxc/GWaterFinalpass_vs30.vcs
gwater2/garrysmod/shaders/fxc/GWaterNormals_ps30.vcs
gwater2/garrysmod/shaders/fxc/GWaterNormals_vs30.vcs
gwater2/garrysmod/shaders/fxc/GWaterSmooth_ps30.vcs
gwater2/garrysmod/shaders/fxc/GWaterVolumetric_ps30.vcs
gwater2/garrysmod/shaders/fxc/GWaterVolumetric_vs30.vcs
gwater2/nvToolsExt32_1.dll
.dll windows:5 windows x86 arch:x86

0ab9c21eda47621bfe1e43f2a754406a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\bld\lib\nvtx\dev\_bin\win32_x86_release\nvToolsExt32_1.pdb

Imports

kernel32

GetEnvironmentVariableW
FreeLibrary
LoadLibraryW
InterlockedExchange
GetProcAddress
SwitchToThread
GetCurrentThreadId
DecodePointer
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetLastError
InterlockedDecrement
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
WriteFile
GetModuleFileNameW
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize
IsProcessorFeaturePresent

Exports

Exports

nvtxGetExportTable
nvtxMarkA
nvtxMarkEx
nvtxMarkW
nvtxNameCategoryA
nvtxNameCategoryW
nvtxNameClCommandQueueA
nvtxNameClCommandQueueW
nvtxNameClContextA
nvtxNameClContextW
nvtxNameClDeviceA
nvtxNameClDeviceW
nvtxNameClEventA
nvtxNameClEventW
nvtxNameClMemObjectA
nvtxNameClMemObjectW
nvtxNameClProgramA
nvtxNameClProgramW
nvtxNameClSamplerA
nvtxNameClSamplerW
nvtxNameCuContextA
nvtxNameCuContextW
nvtxNameCuDeviceA
nvtxNameCuDeviceW
nvtxNameCuEventA
nvtxNameCuEventW
nvtxNameCuStreamA
nvtxNameCuStreamW
nvtxNameCudaDeviceA
nvtxNameCudaDeviceW
nvtxNameCudaEventA
nvtxNameCudaEventW
nvtxNameCudaStreamA
nvtxNameCudaStreamW
nvtxNameOsThreadA
nvtxNameOsThreadW
nvtxRangeEnd
nvtxRangePop
nvtxRangePushA
nvtxRangePushEx
nvtxRangePushW
nvtxRangeStartA
nvtxRangeStartEx
nvtxRangeStartW

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gwater2/nvToolsExt64_1.dll
.dll windows:5 windows x64 arch:x64

0a58f558339c5681aa34c9c02fc145aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\bld\lib\nvtx\dev\_bin\win32_x64_release\nvToolsExt64_1.pdb

Imports

kernel32

GetEnvironmentVariableW
FreeLibrary
LoadLibraryW
GetProcAddress
SwitchToThread
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
EncodePointer
FlsGetValue
FlsFree
SetLastError
GetLastError
FlsAlloc
HeapFree
Sleep
GetModuleHandleW
ExitProcess
DecodePointer
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
WriteFile
GetModuleFileNameW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize

Exports

Exports

nvtxGetExportTable
nvtxMarkA
nvtxMarkEx
nvtxMarkW
nvtxNameCategoryA
nvtxNameCategoryW
nvtxNameClCommandQueueA
nvtxNameClCommandQueueW
nvtxNameClContextA
nvtxNameClContextW
nvtxNameClDeviceA
nvtxNameClDeviceW
nvtxNameClEventA
nvtxNameClEventW
nvtxNameClMemObjectA
nvtxNameClMemObjectW
nvtxNameClProgramA
nvtxNameClProgramW
nvtxNameClSamplerA
nvtxNameClSamplerW
nvtxNameCuContextA
nvtxNameCuContextW
nvtxNameCuDeviceA
nvtxNameCuDeviceW
nvtxNameCuEventA
nvtxNameCuEventW
nvtxNameCuStreamA
nvtxNameCuStreamW
nvtxNameCudaDeviceA
nvtxNameCudaDeviceW
nvtxNameCudaEventA
nvtxNameCudaEventW
nvtxNameCudaStreamA
nvtxNameCudaStreamW
nvtxNameOsThreadA
nvtxNameOsThreadW
nvtxRangeEnd
nvtxRangePop
nvtxRangePushA
nvtxRangePushEx
nvtxRangePushW
nvtxRangeStartA
nvtxRangeStartEx
nvtxRangeStartW

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 458B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

11d2010ec90c8de0e46228e77331830d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 14KB

.pdata Size: 2KB - Virtual size: 1KB

.gfids Size: 512B - Virtual size: 16B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 24B

90e51886c3d6b1895d867d9abe225a1e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 7KB

.gfids Size: 512B - Virtual size: 20B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1KB - Virtual size: 1KB

01c642daec0b3d54a62781921d9e414f

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7Certificate

Key Usages

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14Certificate

Extended Key Usages

Key Usages

14:78:1b:c8:62:e8:dc:50:3a:55:93:46:f5:dc:c5:18Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

45:da:1d:ca:5f:84:70:43:71:49:ed:73:01:38:37:9c:5b:85:61:c1Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

nvflexreleased3d_x64

kernel32

Exports

Exports

Sections

.text Size: 311KB - Virtual size: 311KB

.rdata Size: 79KB - Virtual size: 79KB

.data Size: 7KB - Virtual size: 16KB

.pdata Size: 17KB - Virtual size: 17KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 2KB - Virtual size: 2KB

52da370fb408714c8d9137fda77e7344

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7Certificate

Key Usages

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 14KB

.pdata
Size: 2KB - Virtual size: 1KB

.gfids
Size: 512B - Virtual size: 16B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 24B

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 7KB

.gfids
Size: 512B - Virtual size: 20B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1KB - Virtual size: 1KB

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

14:78:1b:c8:62:e8:dc:50:3a:55:93:46:f5:dc:c5:18
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

45:da:1d:ca:5f:84:70:43:71:49:ed:73:01:38:37:9c:5b:85:61:c1
Signer

.text
Size: 311KB - Virtual size: 311KB

.rdata
Size: 79KB - Virtual size: 79KB

.data
Size: 7KB - Virtual size: 16KB

.pdata
Size: 17KB - Virtual size: 17KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 2KB - Virtual size: 2KB

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

14:78:1b:c8:62:e8:dc:50:3a:55:93:46:f5:dc:c5:18
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

6e:19:08:53:b6:72:23:a9:ed:33:87:33:92:7b:4c:fb:bd:5e:da:80
Signer

.text
Size: 291KB - Virtual size: 291KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 5KB - Virtual size: 13KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 10KB - Virtual size: 9KB

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

14:78:1b:c8:62:e8:dc:50:3a:55:93:46:f5:dc:c5:18
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

0c:2e:9a:a6:f9:c6:d6:43:64:8e:96:48:e1:ae:93:3f:da:9f:bf:e6
Signer

.text
Size: 538KB - Virtual size: 537KB

.rdata
Size: 753KB - Virtual size: 753KB

.data
Size: 10KB - Virtual size: 24KB

.pdata
Size: 48KB - Virtual size: 47KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 3KB - Virtual size: 3KB

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

14:78:1b:c8:62:e8:dc:50:3a:55:93:46:f5:dc:c5:18
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate