DLSS5_Swapper_2.2.9_ReShade_Files(1).zip
- SHA256 25fc7079bc60f0c7a4c2d734f7f76673467d60c887d0def2f069a6a3d6bf6717
Overview
overview
5Static
static
3DLSS5_Swap...1).zip
windows10-2004-x64
1DLSS5_Swap...1).zip
windows11-ltsc_2024-x64
1resources/...2.json
windows10-2004-x64
3resources/...2.json
windows11-ltsc_2024-x64
3resources/...32.bat
windows10-2004-x64
3resources/...32.bat
windows11-ltsc_2024-x64
3resources/...ed.vbs
windows10-2004-x64
5resources/...ed.vbs
windows11-ltsc_2024-x64
5resources/...ES.fxh
windows10-2004-x64
3resources/...ES.fxh
windows11-ltsc_2024-x64
3resources/...om.fxh
windows10-2004-x64
3resources/...om.fxh
windows11-ltsc_2024-x64
3resources/...se.fxh
windows10-2004-x64
3resources/...se.fxh
windows11-ltsc_2024-x64
3resources/...es.fxh
windows10-2004-x64
3resources/...es.fxh
windows11-ltsc_2024-x64
3resources/...ex.fxh
windows10-2004-x64
3resources/...ex.fxh
windows11-ltsc_2024-x64
3resources/...fs.fxh
windows10-2004-x64
3resources/...fs.fxh
windows11-ltsc_2024-x64
3resources/...th.fxh
windows10-2004-x64
3resources/...th.fxh
windows11-ltsc_2024-x64
3resources/...rs.fxh
windows10-2004-x64
3resources/...rs.fxh
windows11-ltsc_2024-x64
3resources/...ex.fxh
windows10-2004-x64
3resources/...ex.fxh
windows11-ltsc_2024-x64
3resources/...ur.fxh
windows10-2004-x64
3resources/...ur.fxh
windows11-ltsc_2024-x64
3resources/...ap.fxh
windows10-2004-x64
3resources/...ap.fxh
windows11-ltsc_2024-x64
3resources/...ls.fxh
windows10-2004-x64
3resources/...ls.fxh
windows11-ltsc_2024-x64
3Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
DLSS5_Swapper_2.2.9_ReShade_Files(1).zip
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
120 seconds
Behavioral task
behavioral2
Sample
DLSS5_Swapper_2.2.9_ReShade_Files(1).zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
120 seconds
Behavioral task
behavioral3
Sample
resources/payload/feeder/layer-x86/VkLayer_feed_vk32.json
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
120 seconds
Behavioral task
behavioral4
Sample
resources/payload/feeder/layer-x86/VkLayer_feed_vk32.json
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
120 seconds
Behavioral task
behavioral5
Sample
resources/payload/feeder/layer-x86/run-with-feed-layer32.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
120 seconds
Behavioral task
behavioral6
Sample
resources/payload/feeder/layer-x86/run-with-feed-layer32.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
120 seconds
Behavioral task
behavioral7
Sample
resources/payload/feeder/reshade-shaders/Shaders/DLSS5_Feed.vbs
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
120 seconds
Behavioral task
behavioral8
Sample
resources/payload/feeder/reshade-shaders/Shaders/DLSS5_Feed.vbs
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
120 seconds
Behavioral task
behavioral9
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_ACES.fxh
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
120 seconds
Behavioral task
behavioral10
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_ACES.fxh
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
120 seconds
Behavioral task
behavioral11
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_Bloom.fxh
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
120 seconds
Behavioral task
behavioral12
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_Bloom.fxh
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
120 seconds
Behavioral task
behavioral13
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_BlueNoise.fxh
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
120 seconds
Behavioral task
behavioral14
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_BlueNoise.fxh
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
120 seconds
Behavioral task
behavioral15
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_ColorChanges.fxh
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
120 seconds
Behavioral task
behavioral16
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_ColorChanges.fxh
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
120 seconds
Behavioral task
behavioral17
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_ColorTex.fxh
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
120 seconds
Behavioral task
behavioral18
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_ColorTex.fxh
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
120 seconds
Behavioral task
behavioral19
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_Defs.fxh
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
120 seconds
Behavioral task
behavioral20
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_Defs.fxh
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
120 seconds
Behavioral task
behavioral21
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_Depth.fxh
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
120 seconds
Behavioral task
behavioral22
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_Depth.fxh
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
120 seconds
Behavioral task
behavioral23
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_Filters.fxh
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
120 seconds
Behavioral task
behavioral24
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_Filters.fxh
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
120 seconds
Behavioral task
behavioral25
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_HDRTex.fxh
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
120 seconds
Behavioral task
behavioral26
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_HDRTex.fxh
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
120 seconds
Behavioral task
behavioral27
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_MotionBlur.fxh
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
120 seconds
Behavioral task
behavioral28
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_MotionBlur.fxh
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
120 seconds
Behavioral task
behavioral29
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_MotionBlur_Cheap.fxh
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
120 seconds
Behavioral task
behavioral30
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_MotionBlur_Cheap.fxh
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
120 seconds
Behavioral task
behavioral31
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_MotionUtils.fxh
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
120 seconds
Behavioral task
behavioral32
Sample
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_MotionUtils.fxh
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
120 seconds
General
- Target DLSS5_Swapper_2.2.9_ReShade_Files(1).zip
- Size 14.6MB
- Sample261018-zebrcaaw21
- SHA256 25fc7079bc60f0c7a4c2d734f7f76673467d60c887d0def2f069a6a3d6bf6717
- MD5 0160139158ce0ef99a508071a3398357
- SHA1 374d227d4b0323c14584debb4d2450c086596541
- SHA512 f5c45abd9a38a784953a1bf3a54ffadd45164a91640d64e63af309df5782cd9a05931f611e59cffb80e0cbe5c17745054304d54cb2826d635befa7c0357311c9
- SSDEEP 393216:2V7sQ7rcW3yKbGqOsuUQQb+vnLht3FsfA7A8UXX:2ynW7Gqdu0b+vz+AMDX
- TLSH T19EF6331447C1393E588581FBD6C2E273D1CED6CDD4AD50AEE41E0BA892AF4EF6B48C16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 10 IoCs
Checks for missing Authenticode signature.
resource unpack001/resources/overlay/dlss5-lab-overlay.addon64 unpack001/resources/payload/feeder/dlss5-feed.addon32 unpack001/resources/payload/feeder/dlss5-feed.addon64 unpack001/resources/payload/feeder/host64/renodx-dlss.addon64 unpack001/resources/payload/feeder/host64/renodx-dlss5.addon64 unpack001/resources/payload/feeder/layer-x64/VkLayer_feed_vk.dll unpack001/resources/payload/feeder/layer-x86/VkLayer_feed_vk32.dll unpack001/resources/payload/renodx-dlss5.addon64 unpack001/resources/payload/reshade-vulkan/ReShade32.dll unpack001/resources/payload/reshade-vulkan/ReShade64.dll - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/resources/payload/ReShade_Setup_6.8.0_Addon.exe
File Explorer
-
DLSS5_Swapper_2.2.9_ReShade_Files(1).zip.zip 14.6MB
-
SHA256SUMS.txt5KB
-
resources/overlay/dlss5-lab-overlay.addon64.dll 859KB
-
resources/payload/ReShade_Setup_6.8.0_Addon.exe.exe 4.1MB
-
resources/payload/feeder/Verify-DLSS5Feeder.ps1.ps1 100KB
-
resources/payload/feeder/dlss5-feed.addon32.dll 185KB
-
resources/payload/feeder/dlss5-feed.addon64.dll 322KB
-
resources/payload/feeder/host64/renodx-dlss.addon64.dll 2.8MB
-
resources/payload/feeder/host64/renodx-dlss5.addon64.dll 857KB
-
resources/payload/feeder/layer-x64/VkLayer_feed_vk.dll.dll 18KB
-
resources/payload/feeder/layer-x64/VkLayer_feed_vk.json589B
-
resources/payload/feeder/layer-x64/run-with-feed-layer.bat730B
-
resources/payload/feeder/layer-x86/VkLayer_feed_vk32.dll.dll 15KB
-
resources/payload/feeder/layer-x86/VkLayer_feed_vk32.json584B
-
resources/payload/feeder/layer-x86/run-with-feed-layer32.bat840B
-
resources/payload/feeder/reshade-shaders/Shaders/DLSS5_Feed.fx.vbs 51KB
-
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_ACES.fxh35KB
-
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_Bloom.fxh8KB
-
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_BlueNoise.fxh354B
-
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_ColorChanges.fxh12KB
-
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_ColorTex.fxh497B
-
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_Defs.fxh22KB
-
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_Depth.fxh1KB
-
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_Filters.fxh4KB
-
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_HDRTex.fxh166B
-
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_MotionBlur.fxh19KB
-
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_MotionBlur_Cheap.fxh12KB
-
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_MotionUtils.fxh5KB
-
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_MotionVectors.fxh16KB
-
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_Motion_UI.fxh4KB
-
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_OKColors.fxh15KB
-
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_Static_UI.fxh8KB
-
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_TAA.fxh5KB
-
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_Tonemap.fxh2KB
-
resources/payload/feeder/reshade-shaders/Shaders/ReShade.fxh4KB
-
resources/payload/feeder/reshade-shaders/Shaders/ReShadeUI.fxh9KB
-
resources/payload/feeder/reshade-shaders/Shaders/vort_Motion.fx2KB
-
resources/payload/feeder/reshade-shaders/Textures/vort_BlueNoise.png.png 256KB
-
resources/payload/feeder/reshade-shaders/Textures/vort_MLUT.png.png 3.7MB
-
resources/payload/renodx-dlss5.addon64.dll 857KB
-
resources/payload/reshade-vulkan/ReShade32.dll.dll 4.2MB
-
resources/payload/reshade-vulkan/ReShade32.json526B
-
resources/payload/reshade-vulkan/ReShade64.dll.dll 5.3MB
-
resources/payload/reshade-vulkan/ReShade64.json526B
SHA256SUMS.txt
- SHA256 34042afdbf610fbabd8576d233b2a782a1bd88bd4edb90344217c28c3f4b8df5
- MD5 acd80d6c4066b1b8b802d33a4e45da06
- SHA1 7c47a887887ce529922be5d17d89066c58a12ff5
- SHA512 310e8fd4321c797d23263e80ffdd205e352ba3c28241b305a29244f789b553d6addfe6b26016fe941bf036505e333f02e45e65a4779ffbe1cd7d78e3dcaba2aa
- SSDEEP 96:kBuaiHanl3Bqh/xxOY7y705uvWr/f+vxfBlp/r7uEC7qJ70GlevxefJEK:kJjSkCj/Gv/aEC7qh38IJV
- TLSH T130C11453D5ECA42DEA72E79182109D6A6903F213F827505CC726148FB4FF6FCB68252B
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/overlay/dlss5-lab-overlay.addon64
- IMPHASH e61a56e0c862b49a253fc72e48f13bde
- SHA256 1d4c71b194f9ce4900c559d9a1e9119708b2fe6f67bf5a199e928f039f95a613
- MD5 56b41bd954602db5b83390f5bc95c453
- SHA1 8e17b9eb1c13baec505322259fce5709e4286d62
- SHA512 441422ad851c566714301ae77578bacebade0d29b4af61e6dacbaa5da99d0644b6ac226479081dfd0bd6ad0e452fabee59e883d3c6bd941aa739177484ac94bc
- SSDEEP 12288:P0GS26/AQn59iKx84SXiEEDvQC/vYGfMdRb5Ilo7BhX7CFxbkY:MGS26vWXiEE71vYG0ElolhX7CFxv
- TLSH T1A7157C5771B5D2BCC83AC039524799618A31B8980364B8EF02A157743DAFFE24F7A63D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
65072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
dlss5-lab-overlay.pdb
advapi32
CryptAcquireContextW
CryptCreateHash
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptReleaseContext
api-ms-win-crt-private-l1-1-0
memchr
strstr
api-ms-win-crt-runtime-l1-1-0
__sys_nerr
_beginthreadex
_errno
_execute_onexit_table
_exit
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
abort
strerror_s
api-ms-win-crt-string-l1-1-0
_isctype_l
_iswalpha_l
_iswcntrl_l
_iswdigit_l
_iswlower_l
_iswprint_l
_iswpunct_l
_iswspace_l
_iswupper_l
_iswxdigit_l
_strcoll_l
_strdup
_stricmp
_strxfrm_l
_tolower_l
_toupper_l
_towlower_l
_towupper_l
_wcscoll_l
_wcsxfrm_l
iswctype
mbrlen
strcmp
strlen
strncmp
tolower
toupper
wcslen
kernel32
AcquireSRWLockExclusive
CancelIoEx
CloseHandle
CopyFileW
CreateEventW
CreateFileW
DeleteCriticalSection
DeleteFileW
EnterCriticalSection
FlsAlloc
FlsGetValue
FlsSetValue
FlushFileBuffers
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableW
GetFileAttributesW
GetFileSize
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetOverlappedResult
GetProcAddress
GetSystemInfo
GetSystemTimePreciseAsFileTime
GetThreadId
GetTickCount64
InitOnceExecuteOnce
InitializeCriticalSection
K32EnumProcessModules
LeaveCriticalSection
MoveFileExW
MultiByteToWideChar
PeekNamedPipe
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReleaseSRWLockExclusive
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlRestoreContext
RtlUnwindEx
RtlVirtualUnwind
Sleep
SleepConditionVariableSRW
SwitchToThread
TlsGetValue
TryAcquireSRWLockExclusive
TryEnterCriticalSection
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteFile
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
__stdio_common_vswprintf
_wfopen
fclose
fflush
fopen
fputc
fread
fseek
ftell
fwrite
setbuf
api-ms-win-crt-heap-l1-1-0
_aligned_free
_aligned_malloc
calloc
free
malloc
realloc
api-ms-win-crt-convert-l1-1-0
_strtod_l
_strtoi64_l
_strtoui64_l
mbrtowc
mbsrtowcs
strtod
strtof
strtol
strtoll
strtoul
strtoull
wcrtomb
wcrtomb_s
wcstod
wcstol
wcstoul
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
___mb_cur_max_func
__pctype_func
_configthreadlocale
_create_locale
_free_locale
localeconv
setlocale
api-ms-win-crt-time-l1-1-0
_strftime_l
api-ms-win-crt-multibyte-l1-1-0
_mbtowc_l
AUTHOR
AddonInit
AddonUninit
DESCRIPTION
NAME
Name
.text
Size
656KB
Virtual Size
655KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
160KB
Virtual Size
160KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
102B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
40B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
resources/payload/ReShade_Setup_6.8.0_Addon.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 afe4c8f13048306307983b8b3d41d5bf00a86820440b0e57dea10950e1176445
- MD5 f60d494242dd9e4af2936a5e504b0a60
- SHA1 373d1e30d64d60044a021d84c627cff76da98daf
- SHA512 399ecfc3ad428433a08873968fcaba1dcf77a260a78ab368480f557b0dbd7c40691efaa4930466a302422a8d6560f56cb087a6146c992a3c72dd2a682d45b086
- SSDEEP 98304:NcEZif4vfj7ZERmkK/EUUHeX1DR+J2gxSKr2ncFuAs:NcMiQjmRwcUUHs9SVrVQn
- TLSH T1CF163301A2D28510E4FBA779B85ACCA28AFAF44795F9C2CE36CD045C1F3638E9D95713
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
84:a4:64:45:ed:0d:12:4b:31:f4:91:b9:1e:a6:fd:89:f3:f3:fe:8b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=ReShade,1.2.840.113549.1.9.1=#0c0f696e666f40726573686164652e6d65
Chains
Aug 2, 2026
CN=ReShade,1.2.840.113549.1.9.1=#0c0f696e666f40726573686164652e6d65
Subject
CN=ReShade,1.2.840.113549.1.9.1=#0c0f696e666f40726573686164652e6d65
Serial Number
77:82:d6:29:97:92:5a:a1:46:ab:3b:81:72:65:ab:ca
Issuer
CN=ReShade,1.2.840.113549.1.9.1=#0c0f696e666f40726573686164652e6d65
Timespan
Mar 16, 2019 - Dec 31, 2039
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
4
Entry point
135842
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
125KB
Virtual Size
124KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
resources/payload/feeder/Verify-DLSS5Feeder.ps1
- SHA256 2cdb0eac0f4f8ea9da8e6290c442f846074aae9b87750425e0d2da4a820d0aca
- MD5 96f6e693f2fb253d6c1e355c5ec180ed
- SHA1 b43fd0cfb86a12350e991b6ee65249e729d7c0fa
- SHA512 99bfe0628969b1fb3f490733e1910a48819a951241a3023da5b13b209a0885d07e5b939553d80b77253cdc42703386d366fa9adccf4d49896047e55ab9966ebd
- SSDEEP 3072:uKMvzY2XgtBHMUk53E3kzIuTRc3xMUTKKcXwx4bT+5DQeWGFFMEaO/vuKVUE2:ux2hFc9P+9QbGvur
- TLSH T180A3D72BBD05A27551B3D3B1A6EE9084FF2A406B4262561078CDC1C83FF18B8D67DEE5
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/payload/feeder/dlss5-feed.addon32
- IMPHASH d91cbd3ba0fc3a1ee64164dd0879e68c
- SHA256 bfe24218be719cf5b91d829283953432907922333280931b755d83ac793fd8b2
- MD5 3a57ed06f09f96d3ecb067e981a5b3e6
- SHA1 2a5690488dad9989f28ceb2c9b58183b373aebd6
- SHA512 20c70dad16a46451606c3ecac647f6ddfcd54737a1433544ea3ea6f2e9773386104632c2147eb38c7a47547d77167af40a1d94d1b36b9072e03070af7cdaeece
- SSDEEP 3072:IEYIo88A2gYR8TcjJOZoldRund8NAcWkwgKF0VZSpgGwe+aaNp9Tz82m:rYIo88RR8uJMo+gKF0V2wVpNZ
- TLSH T1C5048E1ADA06727FCF6205B855292FF3CB2349A847B54DD3B7882CE809900E65F7E785
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
104098
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d3d11
D3D11CreateDevice
dwmapi
DwmRegisterThumbnail
DwmUnregisterThumbnail
DwmUpdateThumbnailProperties
kernel32
InitializeSListHead
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
SleepConditionVariableSRW
WakeAllConditionVariable
GetEnvironmentVariableA
SetEnvironmentVariableA
CreateFileA
FindClose
FindFirstFileA
GetFileAttributesA
GetFileAttributesExA
GetFileSize
ReadFile
WriteFile
CloseHandle
DuplicateHandle
SetUnhandledExceptionFilter
GetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
GetOverlappedResult
CancelIoEx
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
CreateEventW
Sleep
WaitForMultipleObjects
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
CreateThread
GetCurrentThreadId
CreateProcessA
GetProcessId
GetLocalTime
GetTickCount64
DisableThreadLibraryCalls
FreeLibrary
FreeLibraryAndExitThread
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetModuleHandleExW
GetProcAddress
LoadLibraryW
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
K32EnumProcessModules
VirtualAlloc
VirtualFree
VirtualQuery
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
OpenThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualProtect
CreateToolhelp32Snapshot
Thread32First
Thread32Next
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
user32
GetAsyncKeyState
GetKeyboardState
GetKeyNameTextA
ToUnicode
MapVirtualKeyA
MapVirtualKeyW
GetSystemMetrics
GetForegroundWindow
SetForegroundWindow
GetClientRect
IsIconic
AdjustWindowRect
GetCursorPos
ClientToScreen
ScreenToClient
EqualRect
PtInRect
FindWindowExW
GetClassNameA
GetWindowThreadProcessId
SystemParametersInfoW
SetWindowPos
IsWindow
PostMessageW
GetWindowRect
RegisterWindowMessageW
msvcp140
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
vcruntime140
strstr
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
memcpy
memmove
memset
_except_handler4_common
__std_type_info_destroy_list
strchr
strrchr
api-ms-win-crt-string-l1-1-0
_stricmp
strncpy_s
strncat_s
strcat_s
strcpy_s
api-ms-win-crt-heap-l1-1-0
malloc
free
_callnewh
api-ms-win-crt-convert-l1-1-0
atoi
atof
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsscanf
__stdio_common_vsnprintf_s
__stdio_common_vsprintf_s
__stdio_common_vfprintf
ftell
fseek
_fsopen
fread
fputs
fclose
fopen_s
fgets
api-ms-win-crt-math-l1-1-0
exp2f
ceil
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_cexit
_initialize_onexit_table
_initterm
DESCRIPTION
NAME
Name
.text
Size
100KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
72KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=259, version=35403,
count=10, id=260, version=35403,
count=19, id=261, version=35403,
count=4, id=257, version=35403,
count=9, id=257, version=33145,
count=162, id=1, productName=Unmarked objects,
count=1, id=261, version=35728,
count=4, id=260, version=35728,
count=1, id=256, version=35728,
count=1, id=258, version=35728,
resources/payload/feeder/dlss5-feed.addon64
- IMPHASH 823518d54b32d815c761c291f12393be
- SHA256 6854d012eac307021cd31c978bafd42f1e22c5b7b2922c80e0a0010d428a3fd7
- MD5 7c09c713d7a97413d5bdcc44c39e12e8
- SHA1 4b31bdfe3d68c184ba55407a0d535e51c28d52f3
- SHA512 299334193f3f1c9d51e7c28d89d55b3129270e42ec4929f4e4b49e93dfb9f4757427645d046d703f4751a68d723922ab19803eca0a841fefb8d998d202c334d6
- SSDEEP 6144:CDhSne3z8L6ntHax54280TAlQOuLW9K8Uqm0sbqOlX4JHTpb3A:CDwne4W6xL80Tuj9KFwsbJ58
- TLSH T14364AD1EBB9410B9E927C0B8CE42C543DBB07494171166DBBBA948602FB29F6B73DF41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
191132
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
kernel32
RtlLookupFunctionEntry
RtlVirtualUnwind
GetEnvironmentVariableA
GetEnvironmentVariableW
CreateDirectoryW
CreateFileA
CreateFileW
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
GetFileAttributesA
GetFileAttributesW
GetFileSize
ReadFile
CloseHandle
SetUnhandledExceptionFilter
GetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ResetEvent
WaitForSingleObject
CreateEventW
Sleep
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLocalTime
GetTickCount64
GetSystemDirectoryW
DisableThreadLibraryCalls
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetModuleHandleExW
GetProcAddress
GetSystemTimeAsFileTime
GetPrivateProfileStringA
WritePrivateProfileStringA
WideCharToMultiByte
K32EnumProcessModules
GetSystemInfo
VirtualAlloc
VirtualFree
VirtualQuery
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
OpenThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualProtect
CreateToolhelp32Snapshot
Thread32First
Thread32Next
VerSetConditionMask
GetFullPathNameW
SetLastError
FreeLibrary
LoadLibraryExW
LocalAlloc
LocalFree
VerifyVersionInfoW
GetStdHandle
OutputDebugStringA
AllocConsole
WriteConsoleA
SetConsoleTitleA
GetConsoleWindow
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
InitializeSListHead
LoadLibraryW
ReleaseSRWLockExclusive
user32
GetClassNameA
GetWindowThreadProcessId
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
msvcp140
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
vcruntime140
strstr
wcschr
wcsrchr
wcsstr
__std_exception_copy
strrchr
_CxxThrowException
__C_specific_handler
strchr
memcmp
memcpy
memmove
memset
__CxxFrameHandler3
__std_type_info_destroy_list
__std_terminate
__std_exception_destroy
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-string-l1-1-0
_wcsicmp
_wcsnicmp
strcmp
strncmp
_wcsdup
strlen
isdigit
_wcslwr_s
_strnicmp
_stricmp
wcsncpy_s
strncpy_s
strncat_s
wcslen
strcat_s
wcscat_s
strcpy_s
wcscpy_s
isalpha
isalnum
api-ms-win-crt-heap-l1-1-0
free
malloc
_callnewh
api-ms-win-crt-convert-l1-1-0
mbsrtowcs
atoi
api-ms-win-crt-stdio-l1-1-0
ftell
__stdio_common_vswprintf_s
__stdio_common_vsnwprintf_s
fopen_s
fclose
fgets
fputs
fread
__stdio_common_vsscanf
__acrt_iob_func
__stdio_common_vsnprintf_s
_wfsopen
fflush
__stdio_common_vfprintf_s
_fsopen
fseek
__stdio_common_vsprintf_s
__stdio_common_vfprintf
api-ms-win-crt-math-l1-1-0
ceilf
exp2f
sqrt
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initialize_narrow_environment
_initialize_onexit_table
_set_invalid_parameter_handler
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-time-l1-1-0
strftime
_localtime64_s
_time64
DESCRIPTION
NAME
Name
.text
Size
185KB
Virtual Size
185KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
123KB
Virtual Size
122KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
816B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
428B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=35403,
count=8, id=260, version=35403,
count=23, id=261, version=35403,
count=6, id=257, version=35403,
count=9, id=257, version=33145,
count=188, id=1, productName=Unmarked objects,
count=6, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
count=1, id=261, version=35728,
count=4, id=260, version=35728,
count=1, id=256, version=35728,
count=1, id=255, version=35728,
count=1, id=258, version=35728,
resources/payload/feeder/host64/renodx-dlss.addon64
- IMPHASH a3b5ed7d13f09d3f4b2f2fa4b1917caf
- SHA256 25600017cf95ad797eabb4e93de694b0dc1fce472999381c114bf44a7692ef60
- MD5 1cb0b0c688fb5edb55d7465768e74202
- SHA1 9ada556a2f76d718ce04da1e3d1ac27cabdbdd5d
- SHA512 634b1610e11833cd707f1874a24fa8ce459c2530c2feaf2c8c773ffb1408edd6eb8e6645e4b8b009d9aa49d80358b260d8ac148cfefad94206f77e2bf2427f9b
- SSDEEP 49152:gzVA3wGUMmz5B/4Q4etWEdVkHkTHrqtoQeoc:B3Yb3WEdVdSt
- TLSH T13FD58D16729660BDC467C078871B9A62EA71348A0721BAEF02D086793F77BF05F3E715
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1673712
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
renodx-dlss.pdb
advapi32
RegCloseKey
RegEnumKeyExW
RegGetValueW
RegOpenKeyExW
RegQueryInfoKeyW
kernel32
AcquireSRWLockExclusive
AcquireSRWLockShared
AreFileApisANSI
CloseHandle
CloseThreadpoolTimer
CloseThreadpoolWait
CompareStringEx
CompareStringOrdinal
CompareStringW
CopyFileW
CreateDirectoryExW
CreateDirectoryW
CreateEventExW
CreateEventW
CreateFileMappingW
CreateFileW
CreateHardLinkW
CreateMutexW
CreateSemaphoreExW
CreateSymbolicLinkW
CreateThreadpoolTimer
CreateThreadpoolWait
CreateToolhelp32Snapshot
DecodePointer
DeleteCriticalSection
DeviceIoControl
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FindClose
FindFirstFileExW
FindFirstFileW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushInstructionCache
FlushProcessWriteBuffers
FormatMessageA
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryWhenCallbackReturns
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDiskFreeSpaceExW
GetEnvironmentStringsW
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSizeEx
GetFileType
GetFinalPathNameByHandleW
GetFullPathNameW
GetLastError
GetLocaleInfoEx
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetTempPathW
GetThreadContext
GetTickCount64
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapQueryInformation
HeapReAlloc
HeapSize
InitOnceExecuteOnce
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InterlockedFlushSList
InterlockedPushEntrySList
IsDebuggerPresent
IsProcessorFeaturePresent
IsThreadAFiber
IsValidCodePage
IsValidLocale
K32EnumProcessModules
LCMapStringEx
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
MapViewOfFile
Module32FirstW
Module32NextW
MoveFileExW
MultiByteToWideChar
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReadProcessMemory
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetConsoleCtrlHandler
SetCurrentDirectoryW
SetEnvironmentVariableW
SetFileAttributesW
SetFileInformationByHandle
SetFilePointerEx
SetFileTime
SetLastError
SetStdHandle
SetThreadContext
SetThreadpoolTimer
SetThreadpoolWait
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
SuspendThread
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualProtectEx
VirtualQuery
VirtualQueryEx
WaitForSingleObject
WaitForThreadpoolTimerCallbacks
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
lstrcmpiW
user32
AdjustWindowRectEx
CreateWindowExW
DefWindowProcW
DestroyWindow
DispatchMessageW
GetClientRect
GetDesktopWindow
GetWindowRect
GetWindowThreadProcessId
IsWindow
PeekMessageW
RegisterClassExW
SetWindowPos
ShowWindow
TranslateMessage
UpdateWindow
shell32
ShellExecuteExA
version
GetFileVersionInfoExW
GetFileVersionInfoSizeExW
VerQueryValueW
DESCRIPTION
NAME
RenoDXUpdateSetting
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
623KB
Virtual Size
622KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
22KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
75KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourd
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_guard_c
Size
512B
Virtual Size
36B
Characteristics
Name
_guard_d
Size
512B
Virtual Size
36B
Characteristics
Name
memcpy_
Size
512B
Virtual Size
264B
Characteristics
Name
.rsrc
Size
1024B
Virtual Size
856B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
resources/payload/feeder/host64/renodx-dlss5.addon64
- IMPHASH cf43510e254eed9254b85b947756e11c
- SHA256 342341f669f1d64e0c70c8593a07a2fab5075e073dfae97c331c9a6776260a0a
- MD5 7d9581aa500e924cf1f551700860b91f
- SHA1 400f6141d6c2c672667dcfa0f0d6f5d75baf646c
- SHA512 be5de4a0108222e95fad6416444cac4dce124d7da7aadec10b4dc0b13f6b04b673dd6cbd85689ebfca922730e88da8dd7a1854165193f9f2adad95bb31008b62
- SSDEEP 12288:t4K2EC0hPmxivU3zW2bl42zYB1objsZi:t12EC0hPmxivUjWul42MB+
- TLSH T131156B27A7A802BDD07AD239CA879A12F772781607B157EF079049613F277E44E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
447976
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
GetLastError
SetLastError
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
Sleep
GetCurrentProcess
GetCurrentProcessId
SwitchToThread
GetCurrentThread
GetCurrentThreadId
FlushInstructionCache
VirtualProtect
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetModuleHandleExW
GetProcAddress
LoadLibraryW
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
K32EnumProcessModules
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
VirtualAlloc
VirtualFree
VirtualQuery
LoadLibraryExW
SetEndOfFile
WriteConsoleW
HeapSize
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
QueryPerformanceCounter
QueryPerformanceFrequency
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
LocalFree
FormatMessageA
GetLocaleInfoEx
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFileInformationByHandle
SetFileInformationByHandle
AreFileApisANSI
CopyFileW
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateThread
ExitThread
FreeLibraryAndExitThread
ExitProcess
HeapAlloc
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
GetTimeZoneInformation
HeapReAlloc
RtlUnwind
user32
GetKeyNameTextA
MapVirtualKeyA
GetForegroundWindow
GetWindowThreadProcessId
GetAsyncKeyState
bcrypt
BCryptCloseAlgorithmProvider
BCryptCreateHash
BCryptHashData
BCryptFinishHash
BCryptDestroyHash
BCryptOpenAlgorithmProvider
DESCRIPTION
NAME
Name
.text
Size
609KB
Virtual Size
609KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
198KB
Virtual Size
197KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourd
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=177, id=261, version=33145,
count=31, id=260, version=33145,
count=13, id=259, version=33145,
count=10, id=259, version=35207,
count=14, id=260, version=35207,
count=90, id=261, version=35207,
count=7, id=257, version=33145,
count=178, id=1, productName=Unmarked objects,
count=3, id=261, version=36252,
count=1, id=261, version=35222,
count=1, id=256, version=35222,
count=1, id=255, version=35222,
count=1, id=151,
count=1, id=258, version=35222,
resources/payload/feeder/layer-x64/VkLayer_feed_vk.dll
- IMPHASH 7e23caa71629a90ac6104664534b60c8
- SHA256 ed5978fff1ac1b2c85aed7b1ffe2c7668e2be71f5a8cff86b4327bfa1d959a28
- MD5 de859dde105d9313db6a4c9624df196f
- SHA1 1e5fd861afc9c76f692e55c4628fd3ff37482ab1
- SHA512 edbe96b7ecd7e2a7a3b4d456916b3553d3ccdd4b550532759d8bc842d0909d650f9a3ded511f1c68f9d96c9cf49c3a63cfab976e7b3e8869aaa1e633a5d1fd9a
- SSDEEP 384:q7VYgfBHT9slibsvAdDmdVd4YpfzL0636:aVYghWliAvoWVd4Ypfz4Y6
- TLSH T17B824A0AEA5508ADE17B557888171D0FD3B3F51A5372A6CB43A113AB1E737E13E3C982
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
10688
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
GetLocalTime
GetModuleFileNameA
GetModuleHandleExA
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
vcruntime140
__C_specific_handler
__std_type_info_destroy_list
memset
memcmp
_CxxThrowException
memcpy
memmove
strrchr
__std_exception_copy
__std_exception_destroy
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-string-l1-1-0
strlen
strcpy_s
strcmp
api-ms-win-crt-stdio-l1-1-0
fopen_s
fclose
__stdio_common_vfprintf
__stdio_common_vsnprintf_s
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
free
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit
_initterm
_configure_narrow_argv
_seh_filter_dll
FeedGetDeviceProcAddr
FeedGetInstanceProcAddr
vkNegotiateLoaderLayerInterfaceVersion
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
776B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
816B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
92B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=35403,
count=8, id=260, version=35403,
count=17, id=261, version=35403,
count=6, id=257, version=35403,
count=3, id=257, version=33145,
count=48, id=1, productName=Unmarked objects,
count=1, id=261, version=35728,
count=1, id=256, version=35728,
count=1, id=258, version=35728,
resources/payload/feeder/layer-x64/VkLayer_feed_vk.json
- SHA256 c15967b3f8847a145e21058a1e57e92c595ee17fc5dd23ab3278b0148ad6e9d1
- MD5 1c13d9d3341f5ae21ddd9810e2f6eb1c
- SHA1 23aabb06823ba152dfe2b9cd3139378fee8e3950
- SHA512 9ac809c57ace52f89466d3251fbcaae0425021ccd5cebbf676cc658666ec140ce2459e0804508c35e6f6fa45ce3d70081ca09c799ddaeb0986756ba4a737939d
- TLSH T183F0E96ADD06AF13017653299CBA0616FBB4171F1402486279BC104D4F7AEBA510BF2D
- MD5 SHA1 SHA512 TLSH
resources/payload/feeder/layer-x64/run-with-feed-layer.bat
- SHA256 bc9aa7964742e23653556be978f540f503f3cef928b6de7a38f77c570bb764f9
- MD5 3e1bfa364f0683b37eae2c00a0ea1653
- SHA1 a549765d658dc2afaf4c538af181532fd4ce27de
- SHA512 7b67cef4417a113db71cdbdfb7e242126b7e2ac082107826a2b15c47e96a0ddbbb84b1b189a4fb2fc554adaee75ee9919da4b3715c0ef1abea06144e61d9a159
- TLSH T19E01C5DF614F973A0DF00584261B1099FD1A69460311DEE5310B41FD1D5935F72765F2
- MD5 SHA1 SHA512 TLSH
resources/payload/feeder/layer-x86/VkLayer_feed_vk32.dll
- IMPHASH 2f8cadbdbcdc5c7d2c7340fba5b6bd49
- SHA256 cbb3039e13ce1a851c00bba24a93586ea8d9731dad3fcf426f412cc764a61860
- MD5 11edeeb27fe045e8f2f4ed5dec5e0a1e
- SHA1 814fb5dc9b58e2ad780bf91b28a701c24e08eb54
- SHA512 1b29a2404105624707244990c2c225b8af76a7c430d4b7b5fff5fefc882c676a1c365eb2d252b81bfa99e6f8d4195798f58e1ba20354cd5c0478e9fcf3861d50
- SSDEEP 384:9Avmu7GyciRRhku+k4dtuIYZ/ytNLQk82J18:9A+u7PciRRV+kIuIYZ/alt82J
- TLSH T16A622A45FE1146B2C72D11342826E73B85A8BD505FF20AD377E5222E85787E73B3C84A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
10131
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetLocalTime
GetModuleFileNameA
GetModuleHandleExA
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
msvcp140
?_Xlength_error@std@@YAXPBD@Z
vcruntime140
_except_handler4_common
__CxxFrameHandler3
__std_type_info_destroy_list
memset
strrchr
__std_exception_copy
_CxxThrowException
__std_exception_destroy
memmove
memcpy
api-ms-win-crt-string-l1-1-0
strcpy_s
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsnprintf_s
fopen_s
fclose
__stdio_common_vfprintf
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
free
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_initialize_narrow_environment
_cexit
_configure_narrow_argv
_seh_filter_dll
_initialize_onexit_table
_initterm_e
_initterm
_FeedGetDeviceProcAddr@8
_FeedGetInstanceProcAddr@8
vkNegotiateLoaderLayerInterfaceVersion
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
640B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
632B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=259, version=35403,
count=10, id=260, version=35403,
count=16, id=261, version=35403,
count=4, id=257, version=35403,
count=3, id=257, version=33145,
count=46, id=1, productName=Unmarked objects,
count=1, id=261, version=35728,
count=1, id=256, version=35728,
count=1, id=258, version=35728,
resources/payload/feeder/layer-x86/VkLayer_feed_vk32.json
- SHA256 28f8174eb8fed02266bafa6910eab07922ec6d2bdb33110699c586f74b254921
- MD5 b5b1f8b1a817e387c20e7e22d67650a3
- SHA1 433577e2288dcaff8aa26a54dc8fd8b639989910
- SHA512 d6cd1864b26b0285b2db5368cb513030e1cffd4a135ea010188b3251312f7138c5d6b55b71c877d1c2d9571430e4f10c4749fa8777b622f3f690a8e8cb33deb9
- TLSH T1C9F05968DD06AF53014B53198CEE0516E3B8560F2C026C707A8C104D8F4EEBF622BF6D
- MD5 SHA1 SHA512 TLSH
resources/payload/feeder/layer-x86/run-with-feed-layer32.bat
- SHA256 75d4584ad01619402a10e0d8342b114613057a1d3b0ac8dbe9280b740090c3e8
- MD5 9a7c6b3b32c70b6113af9108334938e8
- SHA1 3106ec1c4cfceff786aa646fe9a06a6eb36e5c64
- SHA512 902fc5f1796775f9b69a5e8eb54acade2646f4fc47ac9a459ea68a8abd633862b73c7db3ce06764b095624495bc34954f5cc5c765191569c315c5c1d911b28c1
- TLSH T15C01EFCF20CE9B3E045006911B2920E17A0E688B0352EE71A443027D1C9776421BA4E0
- MD5 SHA1 SHA512 TLSH
resources/payload/feeder/reshade-shaders/Shaders/DLSS5_Feed.fx
- SHA256 c4ba1610df8e1593faa7c203d6d0517058d3a8ecf2dfda18ca67849844391456
- MD5 842a41b08e1076c0673c864332abb2b7
- SHA1 1a542a770433d469f0a48305d076cdc575c9ce2b
- SHA512 dee44cedbb0b5f22bc987f66acf8a3ddbdae9de64329696ab0ef854979fa2405469e85ab9903b2471d737abe6712b62f02512cc8098967404212472de83dc088
- SSDEEP 768:MC17JAGF3OlVr6XusfjPy++grNY/xPJY8/xdEeLPU2olgIeAvllaEqmr+qfHIXpE:/WPVr6Xus8lJ12lNfBg/C
- TLSH T18233D7061EA153394EB3D016EF0AC185E6AA80E37951E55078CE910C3FF782A976DFDE
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_ACES.fxh
- SHA256 967cb4914457f18cc91e8844e6f7ccef0b353e4091e38f9c8667d36d45309b61
- MD5 0b67668e1abf7c3057d0edc0749c2c9f
- SHA1 8df211c62572319f6b0bef82e587e9f91ffae969
- SHA512 81c50428420046644988e8f283fe1eb918d5efe6dcf10df3845d8a3c00186af8c2e4fed581c9a1e1e96d8eb3cb2a67a02d38c36875523dfac0fc8f75a31584d6
- SSDEEP 384:R4rshr+Y0OVnyLzUOQGzn8ttd5VVqrAJD/a722RqY9ElaiYJmip1O47Mz:C2xVnDgEG8WJ6laJJm9
- TLSH T1D1F2918813E36D220E76207E4F5363D9A18760D32E79858474CD76811FBE46F867EBCA
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_Bloom.fxh
- SHA256 a3ab7942b73c61dcabe9b83ae42dafe65956c7a60d627aea27ede48a7cfb3c04
- MD5 a34a05a606f7df1d7b2442924782414f
- SHA1 8896eb13019edaccce564936e98fe12cd94fc4f7
- SHA512 0b84ee0778afc5cd065a8cf68713555019964b3d49dec0e13632d20200805550e648b35861eca7b25b8533e6967fa8475fd4daf22454de66b1bf4d45a1a4b2c8
- SSDEEP 192:OQHHxnOOVDirT6doU9xfUjKouxYb6/le4qLXqJlMqVW/W419o+3raUJpzzTAGs0M:OG6rGO8xfMKouxYb6/4mX
- TLSH T13C02FD03D1022D041B83D45BEE13DAD293E4A597025D9B7E386C33756FFDC7C88A9AA9
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_BlueNoise.fxh
- SHA256 a1eca01ddc6bdfef2b0c52601d297c59d7dabd71039d1489b7092532407cb455
- MD5 dc979a3a9e47a911820cebb17f316836
- SHA1 bebbc7f2f8e9ca172601e803acbbfb333e1c68b2
- SHA512 f059dc5fff85a212849eaae984e5d7457c5f92f7384f2da08d43351522a6fc9b96cea6c45402183fa304b735c9d6701b1f23c3eb98751084d48a24faee5b0e2e
- TLSH T1CDE02603833D5E49FB1EB43A0409561AB44CABED0948CF9F627C1090FE8500B558B7D5
- MD5 SHA1 SHA512 TLSH
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_ColorChanges.fxh
- SHA256 0cbd91dff9aa5ab615a206f56ba760378810a5540d4f2928e35138c7980b1538
- MD5 3d35da87e25e057beace217507684e02
- SHA1 0512fe53b848fb13077a4416f831b82a627fd36a
- SHA512 de6c4131128a8806e007a844a397c6f4e1ed8b8e9062d1927ea418bc9d3457b7e98c173e026e4a0790875d8e618d38d677a29f3dd194a1e4e586d7674fb5ded0
- SSDEEP 192:OQHHVi0FQhQaTeODLtOVUgkMtu8GKmXLGMBuUi0F65wLoeMjTn32qZje9:OGMWaT2tj6GeMOqZi9
- TLSH T1F142E64667392C850CA790AE8F83D2C42112B2D37E58C96C380DB3516F9D17E8E376EE
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_ColorTex.fxh
- SHA256 f5eef2db313c73b0419503295731c03bc4365fe1ed219f4afa618707b59e8d6c
- MD5 fc09f23aff2a9a30df0e11e87dc496c3
- SHA1 150403b79b1333bfb91c0c3e4d63e210e5ad7433
- SHA512 c530a5cc46efdf5968069cc464087077b9f5112a10dde8fa9b9b8e97a9bc1562b1db3e069e255f8b7d511de6ab42a9ef273a98c347d0319866533073f16a4a6e
- TLSH T19CF02E8DA59F9A16CD0FA8FD88458305112B35D008DC4B49540D4135B73D1CCF1793E8
- MD5 SHA1 SHA512 TLSH
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_Defs.fxh
- SHA256 a00e99ece8b07899a7918a5248a2d603fd7f98882c795e3d31b9470cfe70a61c
- MD5 adfbaf79289933e253c06838629e40e0
- SHA1 e5f81b3a903b8200599c065765434922394d786e
- SHA512 b1bbb5e137f9f58502238955c64a8abd37ae2b6262889de5792395996c8f1ac05fc639670fbf295fc2aed2f9a62b02090cccb88cb93249ad0dbbc340701907a4
- SSDEEP 384:OGwvO2A8xUufxCkza3h+I2itd68qjvXZIUhhiYQpl6R6oTJE2u6Q/:Fd2AqUUCxAtvXXiYQplkXu6S
- TLSH T185B2D74E2AE48D604DA9E011CD8787C4A316C9E74998BE84B94C7A980FDF47ED0F57CE
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_Depth.fxh
- SHA256 92d4f0a93b3945452c861e580117bb875bb594157694b3c8741790eaf3826205
- MD5 b9ec727ed28c4441e340a85fb25f305c
- SHA1 c9be0f5de0a33577ff76907a4b4c4235aa93386b
- SHA512 34841d752c6538c931f8e3e1dc71811b0f8c3a43b117f16909d3a75d10be2960591616a1e3d75a8c99eac6f205a68ab6fc75edf95f391e7b54bb62e4b94b6d29
- TLSH T15741C12598B241980CBEC56B8A8367542157F1E79DEDC324204CE845AFD27BCC217BE1
- MD5 SHA1 SHA512 TLSH
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_Filters.fxh
- SHA256 8d98a78f2fd7fe91f34bf4044d81094bd40fbb2c7b8f520ef66c5043f720f98d
- MD5 c2ec8d22fe10b384e0b54ac7f18345d3
- SHA1 395ebfbe02e89202998e912942d50470500d67e9
- SHA512 d1a11a65d0004d7812ad519fff25bc3fe39f62436d041b3a8fea139d0f1d3a1ef45fbe244374af21ff6c984035b743c3266c9dd57ef8840423189da2545cbe25
- SSDEEP 96:1seaQHHoQKgbPbb+AUnlXkgtB3HfDRe3Joh39m63hk:OQHHugbPbb+AQXkGLRyo7m4k
- TLSH T10DA13E0B2BC40F620D9B5BB85F9719C42225D2F76E987798340E33209F1F45EAA367C5
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_HDRTex.fxh
- SHA256 5d3d002a6d4d0fc6e67dcdd4a68497163268fbb590c7477220dac8f1293f916e
- MD5 a1b597aefcee5d4dae95d3c5b1f0be29
- SHA1 70ba9162bd3c18cabb3639e9b299d9c745021cbf
- SHA512 03e882189e25ca12ba9833684082ca821d97b494e91d843ccd4e151c5fd524a7dba921d5d06f1305ea5ec451cf3aa4e32fe257d3a59c1eac37a02653b72a9a0e
- TLSH T159C08C05D12E4F05EE03C8B92006B2360916368E0CC8CB9F6A9124A8BECA429108A5E8
- MD5 SHA1 SHA512 TLSH
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_MotionBlur.fxh
- SHA256 67edbc5db1645d3c10c08375eb0bec0911c59c4fc1d3dde2d3e9c46a292ea35b
- MD5 56fced73208b627b804940f93a481f46
- SHA1 d88c01630cab92174e3bd5941374ed1b53e49f28
- SHA512 30442f4549b3d9f49cab4452e6e15272543ef383dd207a101fe2a6b21f93566b58f1ac2c2159a4ef29074e0c9049e25b50c68f682cd6e1e5d50c04c508618304
- SSDEEP 384:zYG76xvQsVRTplxiTEM72FEbCLuIshFW07V2C0c+m7rBL58y:z7GxvQxj7WHuIYV2lmXBL59
- TLSH T15E92822B46615E178C576669EF47A4C41739A0C71A68FE48386CF3142FCE02E52EB7EC
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_MotionBlur_Cheap.fxh
- SHA256 0837c8151a50ef57c77bab7a3b14dd4c3b92354e4021ee37f54eb47f3f5589c7
- MD5 abd19a6c30cb8d9b4676f6bf9abbaedd
- SHA1 ed0afb41ec6b0f0dcd6fce49b0857c405e0d3676
- SHA512 afe5a1603208e62e1897b5c0d7d7d8271eac1ffc1182dccffc2f684fcf5c099861ec51d6eaab23ec9801e43d9c049a146b419d6048f4d70c7eeb36be965bdf3b
- SSDEEP 192:zYQHHuOLOsUbKLgAQghbq4tIT8HIm7IeKDT1KqyhSBi07V3uk5z3i1ynrDkS:zYGzhQrTEIeWT1+hSU07V57R
- TLSH T1EB42A26A5BA10D178C572619EF87D4C4523AB0871A68FE18382DF3152FCE46E16EB3DC
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_MotionUtils.fxh
- SHA256 2d353b23cea6961ca40308a6aebf1e56d509485a728399d5f6b36427b7023027
- MD5 634e9f7b45037b41c217dfef6555db01
- SHA1 710ab26ee1009af781d3e04b0b461d85eda47138
- SHA512 8eb74f06816e16e3355d29bf721bbe3e68bfeaffc696f946ba66cb21da41aa198084786f5ccdd13d58b69aaf663cdfb7fd56b73dec4efb0257cdb16a93beb692
- SSDEEP 96:1seaQHHoQKOLOyB94fYsDWeT/iLpvaCt3pRaC9P1qDp7Hq:OQHHuOLOY4xRT/spvaCt5RaC9P1A7Hq
- TLSH T1C1C1632A65685E620E17C265AE53A8C07356B2CB14A8EB8D340CF350BF8F12E51FB7C5
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_MotionVectors.fxh
- SHA256 22d5c8f8a5f2cccee0ddde994ba04a7bc5379c54b1b3e9c7cf7d46f1f8ead87d
- MD5 f4cff417bbe0841987fdeff9472b4c1f
- SHA1 3f2793c08ef277872850bb4f4b5e567a9c611c84
- SHA512 1af739f0f11015b0b7821718fddd831b6fa3ebae603319380c4bc37d5529fc191ddff79382bb3f28c9f90de3a4c35e21812a39c16fa5fa13c676e97cb579e35d
- SSDEEP 384:K77/FGcJaLiluewFA8RUv2zWvnYpEICc5ugzNXdtVFPC0wgwTm9Q/4YKEaASkClO:KP/FpJSi16AqUvfQhu0wg0/4dO
- TLSH T12D723F1780562C211F87A058D96BACC19EADD0C70288DB6DB73C73065FEF82D4CE9AE5
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_Motion_UI.fxh
- SHA256 29783705b01d7b83a408d29a9d4b72c5a90012a91fb05ebdf1166ba9e9aeac2b
- MD5 616adb7c5bee08ebf01b03a1daff306b
- SHA1 320032a4f82e7821f5287b7690a82611e3d69607
- SHA512 bb325c4bf066ba2da76dfb3a626347d95861c75ea63cd59da71d689a193d4f5f2316a50ca04d01c6c3c7baaa182777435f9d366576d0651fa1d63d51b6b8549c
- SSDEEP 96:1seaQHHoQKfID3GE1k+4G2ncyrGV3dCSFBibXO4YcXFHzZyIjX:OQHHue3GE1k/G2BqcXllyO
- TLSH T189A1D81760802DF7246F90509299E1C45328B3977777BAAD7C6EF0982F1F13446FBA44
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_OKColors.fxh
- SHA256 5a0a8468e97eaa9e8e018246e12002a86e3fb0c7a9cb97a3bc38390fc3f854e2
- MD5 39aea8337fe14d36f0c82491423445a3
- SHA1 c627c4ead95d1952d00999c293df3c9c77d25332
- SHA512 460d3639c944e8738f609c2d1c545da75a63da3d13471042bbcccf663bc7d8030f7884550829371b166c86e752d76a22e87e0edc779817ce14be16211be2e719
- SSDEEP 192:oQHHujztHnhsfq95KKezP/d5bk1K3me5Q/TXmMAnooV0wZuamKuzXFyKFPE3VXMH:oGo5PZezP/d5bkq35Q/TX9AnooCwZ8a4
- TLSH T1BE72A46963960D051D6B303D8FD762C8B08651D70A90C9143F4DBBA29FCE52F8A35AEF
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_Static_UI.fxh
- SHA256 ccd75ef28359b5324cf479fe568fbad7586ac203f6b1921f1b6fae48ae19bef2
- MD5 4a648fdd617bb8f784a589debe2fd0a4
- SHA1 6b48812f8a555f4634b83c220859b51e85d41566
- SHA512 e7d70606710ad29f19d8c55fccd80addaea7105834ab9096ac944b0449e303abadb2286795f1b8f75e0339b46e9ca7b914a0daae557930b923d01317ba569339
- SSDEEP 192:OQHHuNLfRbP5XT3gcvLNrNKQ8d5/H2j+g13eKPWLaE:OGERj5XT3gcvLNrNKRb/H2j+g13eKP0t
- TLSH T1E7028622E7840F33519B419B8419C2C63775B293766F98DA3D9AF2301F9E5A887B24CD
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_TAA.fxh
- SHA256 9b5c701fdacb37f15e565ca1aa3a861e4df3f55db493cd6589d509927ed08ede
- MD5 b7894b319a8db10ba58811df733c01e7
- SHA1 74c0f5c5264ef8490fb7ffbd870926bb2cd66945
- SHA512 7a6341a830759a98de611045455c591bafc9e130f8369644dee29f2dd5964a31b819b5ae8839ac9051278d1af38c27b164c2f09cd3a404ed02a7cdfcc5af209b
- SSDEEP 96:T6jOseaQHHoQKOLOba9JXqo6QCPfS9U8nuWCCWqNRBZ9771x33wtpOY+De:eQHHuOLObc8o6QCPfUU8nuGWqNp9771Q
- TLSH T1BEC1E54BDA650E465C73827DEF838AD4620236DBA955AB18311D73007F9E09F80F67EC
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/payload/feeder/reshade-shaders/Shaders/Includes/vort_Tonemap.fxh
- SHA256 9413eef6190303e920356310bc3aa2a270c052a1bcfde44f024f0a8986095f30
- MD5 d468f913a663b4a7cbdff8c8ce2004ed
- SHA1 2c97159e8ce659098e0cdedd5f3dff10fb53bba4
- SHA512 79681a1fa69631a289a11e7292c59ebd1c8abd41c6ca4b0ac2db45e7ffa25e79b5b271832e80818cebfa047e370296bcdd63ff99c8da7e0d7b44a45887c93c24
- TLSH T15F51F08C31B28E701C27A078CD5792D9A60693E3A91D9749B41DF6541F6E17D88FABC0
- MD5 SHA1 SHA512 TLSH
resources/payload/feeder/reshade-shaders/Shaders/ReShade.fxh
- SHA256 6dabfbbaf968c3871905d2ea17f96572ff7b1cec01310b5d0e5252b66b30174f
- MD5 47282a1a2afe26b488fddf25ef18ff9e
- SHA1 c204dec60f1d94e5bc448c26bff080cb3b3fe8d7
- SHA512 b4afa899db26506bd98b74a9ecad7b5e03581103ad8479ffa41a497dd1d199405be9c128cf782dbd0b5d2ecd6c3b02d5986c8a5d97f2ea8bdec5a0a17b69d81c
- SSDEEP 48:OI5xgSIBpaVi6PnmpuazeOlaiV3G8aXnsxE4lkx05NQW4Z4xjC5Sa4co++CL34KJ:l5MBz6Pnmp+gxRxEOsoxGwa4co+13Bz
- TLSH T1F4911034ADB200D84EE8D58788838B451177F6FB6BA5D698100CDC8D9DE09BCC29BED9
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/payload/feeder/reshade-shaders/Shaders/ReShadeUI.fxh
- SHA256 78adf672df47460297eb9fe6dd238d2aafa24510b52b84feb1a745dff70eb901
- MD5 a4851a3a31b433f7b608421200067dcf
- SHA1 2d45356196b0383d3cf67a0c5ad48f102b42e38e
- SHA512 784f1a9dfa080d3ece722ef65f989c7371a214b31c545e5d6ca30b418ae6ee17817b0c2715de911ed4f6c0487bba93fa5e3d02eaef7192a4fcf6b960de6fc555
- SSDEEP 96:UdpiFlV+v+gDETwN+gLGos2ZE3FGxFwFq+cKjpJ3Ar0aoRo+ono/gokojoCoXopb:UWvG+qGO+forMGD7GzLulobfsh4G/09x
- TLSH T189220E93088C920605E563D93C4D1F155E8798F7C984589CB439284CDBDBBA7A0F9BFE
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/payload/feeder/reshade-shaders/Shaders/vort_Motion.fx
- SHA256 71ef3086ccf86792f5a333346eebb7b857434583712d3a51b9998db99e562edc
- MD5 9db06589d20a53e9cc5f298bb794a482
- SHA1 1dbeb7cd23ec3a31fa6a81b1f9341101bfe01e18
- SHA512 83e2d7e9feae2c08413d68d845fa85ccedbed8da04ed65cb594756f79153aa9a3ce77a2228efd8e23ae7f2c4aee02b1aef05f009d398052c6835ad7141b291a0
- TLSH T124413116FD3C0FBF69AAC2611891E4D9E111B307ABA9A99C381DF1807F5E56C11FF240
- MD5 SHA1 SHA512 TLSH
resources/payload/feeder/reshade-shaders/Textures/vort_BlueNoise.png
- SHA256 050d26db9283fbaece3b6883e300d22403631d83a12a5f2f79dc8b789b860305
- MD5 a3c753475e3ad6b6a0ca689e85827dd4
- SHA1 d52bbdeb424c1b920cff0c253d65bff0e1b7c579
- SHA512 47057181cf2ee659d5d9985fd7fe01eaf27c481d0638b698a9a5349d6c5ba7e3b00d2ad713b8f1ba49d1064ac9c3653d4ae7b38bcc940297a7f776941fa2258c
- SSDEEP 6144:ItD+xqfT1AisI7yPGfGDs9mjCGfLEfWFVOLNbfCbXEhd2c0:IZ7b1AisIY7sRGTBuN6bXEv2d
- TLSH T1F4442333E4D52C587558B03507B7B4E82291B4AB56A5F26A0C760F984FDE09173F3DE8
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/payload/feeder/reshade-shaders/Textures/vort_MLUT.png
- SHA256 acb25ed926e7e847aeb0ef521745287d4ddda3c7f22e472ee42d61bb3064bbd7
- MD5 1355fe69703216f1d29504d153d4d005
- SHA1 bbad4bb047e4287267754f0155ca2f01bd097ba9
- SHA512 093a6b1e3064b79bbe3cca906ac8a5f7231028a57bbfaf6761855517780b6532b4395669b52e888e87f37921b2fc00446134f21588e67a7d55ca54fb09e093d0
- SSDEEP 98304:e1q7azHKe12R5io/tWtrKpRNvO3tUgzdG4ufP02kdBBq:e1qeeRBPp/vEtUaQ4ufP024q
- TLSH T1870633F513F14C294AEC4F3B2FA0AB9BED6DB4BD55A5B14E548B9474B4ED220B600C0A
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/payload/renodx-dlss5.addon64
- IMPHASH cf43510e254eed9254b85b947756e11c
- SHA256 342341f669f1d64e0c70c8593a07a2fab5075e073dfae97c331c9a6776260a0a
- MD5 7d9581aa500e924cf1f551700860b91f
- SHA1 400f6141d6c2c672667dcfa0f0d6f5d75baf646c
- SHA512 be5de4a0108222e95fad6416444cac4dce124d7da7aadec10b4dc0b13f6b04b673dd6cbd85689ebfca922730e88da8dd7a1854165193f9f2adad95bb31008b62
- SSDEEP 12288:t4K2EC0hPmxivU3zW2bl42zYB1objsZi:t12EC0hPmxivUjWul42MB+
- TLSH T131156B27A7A802BDD07AD239CA879A12F772781607B157EF079049613F277E44E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
447976
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
GetLastError
SetLastError
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
Sleep
GetCurrentProcess
GetCurrentProcessId
SwitchToThread
GetCurrentThread
GetCurrentThreadId
FlushInstructionCache
VirtualProtect
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetModuleHandleExW
GetProcAddress
LoadLibraryW
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
K32EnumProcessModules
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
VirtualAlloc
VirtualFree
VirtualQuery
LoadLibraryExW
SetEndOfFile
WriteConsoleW
HeapSize
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
QueryPerformanceCounter
QueryPerformanceFrequency
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
LocalFree
FormatMessageA
GetLocaleInfoEx
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFileInformationByHandle
SetFileInformationByHandle
AreFileApisANSI
CopyFileW
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateThread
ExitThread
FreeLibraryAndExitThread
ExitProcess
HeapAlloc
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
GetTimeZoneInformation
HeapReAlloc
RtlUnwind
user32
GetKeyNameTextA
MapVirtualKeyA
GetForegroundWindow
GetWindowThreadProcessId
GetAsyncKeyState
bcrypt
BCryptCloseAlgorithmProvider
BCryptCreateHash
BCryptHashData
BCryptFinishHash
BCryptDestroyHash
BCryptOpenAlgorithmProvider
DESCRIPTION
NAME
Name
.text
Size
609KB
Virtual Size
609KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
198KB
Virtual Size
197KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourd
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=177, id=261, version=33145,
count=31, id=260, version=33145,
count=13, id=259, version=33145,
count=10, id=259, version=35207,
count=14, id=260, version=35207,
count=90, id=261, version=35207,
count=7, id=257, version=33145,
count=178, id=1, productName=Unmarked objects,
count=3, id=261, version=36252,
count=1, id=261, version=35222,
count=1, id=256, version=35222,
count=1, id=255, version=35222,
count=1, id=151,
count=1, id=258, version=35222,
resources/payload/reshade-vulkan/ReShade32.dll
- IMPHASH ac343358fcf25c28a8b319d6498a3cb2
- SHA256 da430e0a9c6eecefa0d1b27d05e16c426fb5d04e808b194d914eaac4b31bc0f8
- MD5 21b6e2e1a68560cbe14d01ef931a96bd
- SHA1 90e77f77327129298ac651cf6591ecac007a4d8c
- SHA512 2df6f49cdc7e3fedafbfb757345be9fe55b2e0ab3390a06bcc5df05823ee09f98037bbf73d1a2aaf011ea85de84abfe24f0a46f336bce871028a8a529ec49246
- SSDEEP 49152:dizBWSc+xCgUlqbTM2uvlYpzwPvNxO0YbNMfsFBpdex/NDwy3Kqeg3hmtHH8gu8E:dizBW1+AvKTzglAwNxuXKFT133h/9d
- TLSH T1A616AE01F7838060E9A307B1D5BE7FAB963D3D54033884EB63C85D59AA706E32AB5717
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
3036608
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
version
GetFileVersionInfoSizeW
VerQueryValueW
VerQueryValueA
GetFileVersionInfoW
wininet
InternetOpenUrlW
InternetOpenW
InternetCloseHandle
InternetSetOptionW
InternetReadFile
kernel32
Sleep
GetModuleHandleW
GetModuleHandleExW
GetLastError
GetProcAddress
FreeLibrary
LoadLibraryExW
WriteFile
CreateFileW
GetCurrentThreadId
CloseHandle
GetLocalTime
GetCurrentProcess
GetModuleFileNameW
GetEnvironmentVariableW
GetSystemDirectoryW
CreateEventW
SetEvent
LoadLibraryW
VerSetConditionMask
VerifyVersionInfoW
K32EnumProcessModules
SizeofResource
SetLastError
GetThreadPreferredUILanguages
EnumResourceNamesW
LCIDToLocaleName
LockResource
EnumResourceLanguagesW
LoadResource
FindResourceW
SetThreadPreferredUILanguages
VirtualProtect
LoadLibraryExA
GetCommandLineA
GetCurrentProcessId
GetTickCount
OpenProcess
GetWindowsDirectoryW
CreateProcessW
WaitForSingleObject
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
HeapQueryInformation
HeapSize
LCMapStringW
CompareStringW
GetTimeZoneInformation
ReadConsoleW
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
GetFileType
GetStdHandle
UnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
GetCommandLineW
GetEnvironmentStringsW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetProcessHeap
FlushFileBuffers
SetStdHandle
SetEndOfFile
WriteConsoleW
LoadLibraryA
FindFirstFileW
TerminateProcess
ExitProcess
GetCPInfo
ExitThread
RaiseException
GetSystemInfo
VirtualQuery
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
OpenThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
CreateToolhelp32Snapshot
Thread32First
Thread32Next
VirtualAlloc
VirtualFree
FormatMessageA
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
TryAcquireSRWLockExclusive
SleepConditionVariableSRW
LocalFree
GetLocaleInfoEx
CreateDirectoryW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
GetFinalPathNameByHandleW
SetFileInformationByHandle
GetTempPathW
CreateFile2
AreFileApisANSI
CopyFile2
GetFileInformationByHandleEx
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimePreciseAsFileTime
WaitForSingleObjectEx
SwitchToThread
GetExitCodeThread
GetLogicalProcessorInformationEx
WakeAllConditionVariable
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
GetCurrentThread
GetThreadTimes
FreeLibraryAndExitThread
InitializeCriticalSectionEx
CreateThread
TlsGetValue
TlsFree
InterlockedFlushSList
RtlUnwind
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
ReadFile
user32
EmptyClipboard
CloseClipboard
EnumDisplayDevicesA
DestroyWindow
GetDC
CreateWindowExW
WindowFromDC
GetClassLongW
GetDesktopWindow
GetShellWindow
GetWindowThreadProcessId
GetKeyState
EnumChildWindows
ScreenToClient
CallNextHookEx
MsgWaitForMultipleObjects
GetAsyncKeyState
PeekMessageW
GetRawInputData
GetKeyboardLayout
SetClipboardData
ClipCursor
ToUnicode
GetClientRect
PeekMessageA
GetParent
LoadStringW
TranslateMessage
GetClipboardData
OpenClipboard
gdi32
GetPixelFormat
SetPixelFormat
DescribePixelFormat
advapi32
AdjustTokenPrivileges
CreateProcessWithTokenW
OpenProcessToken
DuplicateTokenEx
GetTokenInformation
LookupPrivilegeValueW
shell32
ShellExecuteW
ole32
StringFromGUID2
ClipCursor
CompatString
CompatValue
CreateDXGIFactory
CreateDXGIFactory1
CreateDXGIFactory2
D2D1CreateDevice
D2D1CreateFactory
D3D10CompileEffectFromMemory
D3D10CompileShader
D3D10CreateBlob
D3D10CreateDevice
D3D10CreateDevice1
D3D10CreateDeviceAndSwapChain
D3D10CreateDeviceAndSwapChain1
D3D10CreateEffectFromMemory
D3D10CreateEffectPoolFromMemory
D3D10DisassembleEffect
D3D10DisassembleShader
D3D10GetGeometryShaderProfile
D3D10GetInputAndOutputSignatureBlob
D3D10GetInputSignatureBlob
D3D10GetOutputSignatureBlob
D3D10GetPixelShaderProfile
D3D10GetShaderDebugInfo
D3D10GetVertexShaderProfile
D3D10PreprocessShader
D3D10ReflectShader
D3D11CreateDevice
D3D11CreateDeviceAndSwapChain
D3D11On12CreateDevice
D3D12CreateDevice
D3D12CreateRootSignatureDeserializer
D3D12CreateVersionedRootSignatureDeserializer
D3D12EnableExperimentalFeatures
D3D12GetDebugInterface
D3D12GetInterface
D3D12PIXEventsReplaceBlock
D3D12PIXGetThreadInfo
D3D12PIXNotifyWakeFromFenceSignal
D3D12PIXReportCounter
D3D12SerializeRootSignature
D3D12SerializeVersionedRootSignature
D3DPERF_BeginEvent
D3DPERF_EndEvent
D3DPERF_GetStatus
D3DPERF_QueryRepeatFrame
D3DPERF_SetMarker
D3DPERF_SetOptions
D3DPERF_SetRegion
DXGID3D10CreateDevice
DXGID3D10CreateLayeredDevice
DXGID3D10ETWRundown
DXGID3D10GetLayeredDeviceSize
DXGID3D10RegisterLayers
DXGIDeclareAdapterRemovalSupport
DXGIDisableVBlankVirtualization
DXGIDumpJournal
DXGIGetDebugInterface1
DXGIReportAdapterConfiguration
Direct3D9EnableMaximizedWindowedModeShim
Direct3DCreate9
Direct3DCreate9Ex
Direct3DCreate9On12
Direct3DCreate9On12Ex
DirectDrawCreate
DirectDrawCreateEx
DirectInput8Create
DirectInputCreateA
DirectInputCreateEx
DirectInputCreateW
GetAsyncKeyState
GetCursorPos
GetKeyState
GetKeyboardState
GetMessageA
GetMessageW
GetRawInputBuffer
GetdfDIJoystick
PeekMessageA
PeekMessageW
PostMessageA
PostMessageW
ReShadeCreateEffectRuntime
ReShadeDestroyEffectRuntime
ReShadeGetBasePath
ReShadeGetConfigValue
ReShadeGetImGuiFunctionTable
ReShadeLogMessage
ReShadeRegisterAddon
ReShadeRegisterEvent
ReShadeRegisterEventForAddon
ReShadeRegisterOverlay
ReShadeRegisterOverlayForAddon
ReShadeSetConfigArray
ReShadeSetConfigValue
ReShadeUnregisterAddon
ReShadeUnregisterEvent
ReShadeUnregisterEventForAddon
ReShadeUnregisterOverlay
ReShadeUnregisterOverlayForAddon
ReShadeUpdateAndPresentEffectRuntime
ReShadeVersion
RegisterClassA
RegisterClassExA
RegisterClassExW
RegisterClassW
RegisterRawInputDevices
SetCursorPos
SetWindowsHookExA
SetWindowsHookExW
UnhookWindowsHookEx
VR_GetGenericInterface
VR_GetInitToken
VR_Init
VR_InitInternal
VR_InitInternal2
VR_Shutdown
VR_ShutdownInternal
WSARecv
WSARecvFrom
WSASend
WSASendTo
glAccum
glAlphaFunc
glAreTexturesResident
glArrayElement
glBegin
glBindTexture
glBitmap
glBlendFunc
glCallList
glCallLists
glClear
glClearAccum
glClearColor
glClearDepth
glClearIndex
glClearStencil
glClipPlane
glColor3b
glColor3bv
glColor3d
glColor3dv
glColor3f
glColor3fv
glColor3i
glColor3iv
glColor3s
glColor3sv
glColor3ub
glColor3ubv
glColor3ui
glColor3uiv
glColor3us
glColor3usv
glColor4b
glColor4bv
glColor4d
glColor4dv
glColor4f
glColor4fv
glColor4i
glColor4iv
glColor4s
glColor4sv
glColor4ub
glColor4ubv
glColor4ui
glColor4uiv
glColor4us
glColor4usv
glColorMask
glColorMaterial
glColorPointer
glCopyPixels
glCopyTexImage1D
glCopyTexImage2D
glCopyTexSubImage1D
glCopyTexSubImage2D
glCullFace
glDeleteLists
glDeleteTextures
glDepthFunc
glDepthMask
glDepthRange
glDisable
glDisableClientState
glDrawArrays
glDrawBuffer
glDrawElements
glDrawPixels
glEdgeFlag
glEdgeFlagPointer
glEdgeFlagv
glEnable
glEnableClientState
glEnd
glEndList
glEvalCoord1d
glEvalCoord1dv
glEvalCoord1f
glEvalCoord1fv
glEvalCoord2d
glEvalCoord2dv
glEvalCoord2f
glEvalCoord2fv
glEvalMesh1
glEvalMesh2
glEvalPoint1
glEvalPoint2
glFeedbackBuffer
glFinish
glFlush
glFogf
glFogfv
glFogi
glFogiv
glFrontFace
glFrustum
glGenLists
glGenTextures
glGetBooleanv
glGetClipPlane
glGetDoublev
glGetError
glGetFloatv
glGetIntegerv
glGetLightfv
glGetLightiv
glGetMapdv
glGetMapfv
glGetMapiv
glGetMaterialfv
glGetMaterialiv
glGetPixelMapfv
glGetPixelMapuiv
glGetPixelMapusv
glGetPointerv
glGetPolygonStipple
glGetString
glGetTexEnvfv
glGetTexEnviv
glGetTexGendv
glGetTexGenfv
glGetTexGeniv
glGetTexImage
glGetTexLevelParameterfv
glGetTexLevelParameteriv
glGetTexParameterfv
glGetTexParameteriv
glHint
glIndexMask
glIndexPointer
glIndexd
glIndexdv
glIndexf
glIndexfv
glIndexi
glIndexiv
glIndexs
glIndexsv
glIndexub
glIndexubv
glInitNames
glInterleavedArrays
glIsEnabled
glIsList
glIsTexture
glLightModelf
glLightModelfv
glLightModeli
glLightModeliv
glLightf
glLightfv
glLighti
glLightiv
glLineStipple
glLineWidth
glListBase
glLoadIdentity
glLoadMatrixd
glLoadMatrixf
glLoadName
glLogicOp
glMap1d
glMap1f
glMap2d
glMap2f
glMapGrid1d
glMapGrid1f
glMapGrid2d
glMapGrid2f
glMaterialf
glMaterialfv
glMateriali
glMaterialiv
glMatrixMode
glMultMatrixd
glMultMatrixf
glNewList
glNormal3b
glNormal3bv
glNormal3d
glNormal3dv
glNormal3f
glNormal3fv
glNormal3i
glNormal3iv
glNormal3s
glNormal3sv
glNormalPointer
glOrtho
glPassThrough
glPixelMapfv
glPixelMapuiv
glPixelMapusv
glPixelStoref
glPixelStorei
glPixelTransferf
glPixelTransferi
glPixelZoom
glPointSize
glPolygonMode
glPolygonOffset
glPolygonStipple
glPopAttrib
glPopClientAttrib
glPopMatrix
glPopName
glPrioritizeTextures
glPushAttrib
glPushClientAttrib
glPushMatrix
glPushName
glRasterPos2d
glRasterPos2dv
glRasterPos2f
glRasterPos2fv
glRasterPos2i
glRasterPos2iv
glRasterPos2s
glRasterPos2sv
glRasterPos3d
glRasterPos3dv
glRasterPos3f
glRasterPos3fv
glRasterPos3i
glRasterPos3iv
glRasterPos3s
glRasterPos3sv
glRasterPos4d
glRasterPos4dv
glRasterPos4f
glRasterPos4fv
glRasterPos4i
glRasterPos4iv
glRasterPos4s
glRasterPos4sv
glReadBuffer
glReadPixels
glRectd
glRectdv
glRectf
glRectfv
glRecti
glRectiv
glRects
glRectsv
glRenderMode
glRotated
glRotatef
glScaled
glScalef
glScissor
glSelectBuffer
glShadeModel
glStencilFunc
glStencilMask
glStencilOp
glTexCoord1d
glTexCoord1dv
glTexCoord1f
glTexCoord1fv
glTexCoord1i
glTexCoord1iv
glTexCoord1s
glTexCoord1sv
glTexCoord2d
glTexCoord2dv
glTexCoord2f
glTexCoord2fv
glTexCoord2i
glTexCoord2iv
glTexCoord2s
glTexCoord2sv
glTexCoord3d
glTexCoord3dv
glTexCoord3f
glTexCoord3fv
glTexCoord3i
glTexCoord3iv
glTexCoord3s
glTexCoord3sv
glTexCoord4d
glTexCoord4dv
glTexCoord4f
glTexCoord4fv
glTexCoord4i
glTexCoord4iv
glTexCoord4s
glTexCoord4sv
glTexCoordPointer
glTexEnvf
glTexEnvfv
glTexEnvi
glTexEnviv
glTexGend
glTexGendv
glTexGenf
glTexGenfv
glTexGeni
glTexGeniv
glTexImage1D
glTexImage2D
glTexParameterf
glTexParameterfv
glTexParameteri
glTexParameteriv
glTexSubImage1D
glTexSubImage2D
glTranslated
glTranslatef
glVertex2d
glVertex2dv
glVertex2f
glVertex2fv
glVertex2i
glVertex2iv
glVertex2s
glVertex2sv
glVertex3d
glVertex3dv
glVertex3f
glVertex3fv
glVertex3i
glVertex3iv
glVertex3s
glVertex3sv
glVertex4d
glVertex4dv
glVertex4f
glVertex4fv
glVertex4i
glVertex4iv
glVertex4s
glVertex4sv
glVertexPointer
glViewport
recv
recvfrom
send
sendto
vkCreateDevice
vkCreateInstance
vkGetDeviceProcAddr
vkGetInstanceProcAddr
vkGetPhysicalDeviceToolPropertiesEXT
vkNegotiateLoaderLayerInterfaceVersion
wglChoosePixelFormat
wglCopyContext
wglCreateContext
wglCreateLayerContext
wglDeleteContext
wglDescribeLayerPlane
wglDescribePixelFormat
wglGetCurrentContext
wglGetCurrentDC
wglGetLayerPaletteEntries
wglGetPixelFormat
wglGetProcAddress
wglMakeCurrent
wglRealizeLayerPalette
wglSetLayerPaletteEntries
wglSetPixelFormat
wglShareLists
wglSwapBuffers
wglSwapLayerBuffers
wglSwapMultipleBuffers
wglUseFontBitmapsA
wglUseFontBitmapsW
wglUseFontOutlinesA
wglUseFontOutlinesW
xrNegotiateLoaderApiLayerInterface
Name
.text
Size
3.1MB
Virtual Size
3.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
454KB
Virtual Size
454KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
195KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
94KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
511KB
Virtual Size
510KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
95KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=27, id=259, version=33145,
count=34, id=260, version=33145,
count=39, id=259, version=35721,
count=15, id=260, version=35721,
count=8, id=260, version=36252,
count=7, id=261, version=36252,
count=110, id=261, version=35721,
count=17, id=257, version=33145,
count=181, id=261, version=33145,
count=267, id=1, productName=Unmarked objects,
count=133, id=265, version=36252,
count=1, id=256, version=36252,
count=1, id=255, version=36252,
count=1, id=258, version=36252,
resources/payload/reshade-vulkan/ReShade32.json
- SHA256 dbfdbadb8c64b398b2f8bf30469841ab8c35e10c9da40ba69b966559d5fa15f6
- MD5 71cd15ce397942ffcd5e6d55df9105df
- SHA1 61e8813a8b49ca00fc0db70f2b5b9ab7f0f7f29c
- SHA512 dc5bd6a462f7fc19280b9f610f5aaf6a5093d7cd005a2f920f75989dfb9325a686ea2cb983063128fd36256d346ead1a531b99838461d60b518ab92c7678b815
- TLSH T1ADF02E0375A9C6D357C4870A4935E255DF2E4A5F12915CD5BC95245086A8B71140F71D
- MD5 SHA1 SHA512 TLSH
resources/payload/reshade-vulkan/ReShade64.dll
- IMPHASH 44122df46240fbd707f47354ea29daea
- SHA256 0cee63f9c9f13f3ac909c5b4903f4dbb4b719a7ab3b4f13b0deaf83c814b94f7
- MD5 b1de41b152b9758e30a9044c4408de23
- SHA1 7b394c12765ec31d9488574514497fad3da6943d
- SHA512 2136313ce9e14d14bf7296b9891c0afeb7d23c8131b0a9449a5e527d169514b12124f2b04ef18bac940cfd5fb712406df42023c7d63cb3d3206fad2fbee947ec
- SSDEEP 98304:Z/E2S7z5Wv3XUGwnU8ddZm/iSS8xagvHRYx5ic+FuZ:lA7z5Wv3XrwnU8ddZm/iSS8xawHRYx5d
- TLSH T15F469D16B3F911ACE177D178CB275A07EB72344A0330A6EF169486652F237E05B7E722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
3825888
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
version
VerQueryValueW
GetFileVersionInfoSizeW
VerQueryValueA
GetFileVersionInfoW
wininet
InternetOpenUrlW
InternetOpenW
InternetCloseHandle
InternetSetOptionW
InternetReadFile
kernel32
Sleep
GetModuleHandleW
GetModuleHandleExW
GetLastError
GetProcAddress
FreeLibrary
LoadLibraryExW
WriteFile
CreateFileW
GetCurrentThreadId
CloseHandle
GetLocalTime
GetCurrentProcess
GetModuleFileNameW
GetEnvironmentVariableW
GetSystemDirectoryW
CreateEventW
SetEvent
LoadLibraryW
VerSetConditionMask
VerifyVersionInfoW
K32EnumProcessModules
SizeofResource
SetLastError
GetThreadPreferredUILanguages
EnumResourceNamesW
LCIDToLocaleName
LockResource
EnumResourceLanguagesW
LoadResource
FindResourceW
SetThreadPreferredUILanguages
VirtualProtect
LoadLibraryExA
GetCommandLineW
GetCurrentProcessId
GetTickCount
OpenProcess
GetWindowsDirectoryW
CreateProcessW
WaitForSingleObject
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
HeapQueryInformation
HeapSize
LCMapStringW
CompareStringW
GetTimeZoneInformation
ReadConsoleW
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
GetFileType
GetStdHandle
UnhandledExceptionFilter
IsDebuggerPresent
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetEnvironmentVariableW
FlushFileBuffers
SetStdHandle
SetEndOfFile
WriteConsoleW
LoadLibraryA
FindNextFileW
RtlVirtualUnwind
RtlCaptureContext
TerminateProcess
ExitProcess
RaiseException
GetSystemInfo
VirtualQuery
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
OpenThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
CreateToolhelp32Snapshot
Thread32First
Thread32Next
VirtualAlloc
VirtualFree
FormatMessageA
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
TryAcquireSRWLockExclusive
SleepConditionVariableSRW
LocalFree
GetLocaleInfoEx
CreateDirectoryW
FindClose
FindFirstFileW
FindFirstFileExW
RtlUnwind
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
GetFinalPathNameByHandleW
SetFileInformationByHandle
GetTempPathW
CreateFile2
AreFileApisANSI
CopyFile2
GetFileInformationByHandleEx
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimePreciseAsFileTime
WaitForSingleObjectEx
SwitchToThread
GetExitCodeThread
GetLogicalProcessorInformationEx
WakeAllConditionVariable
SetUnhandledExceptionFilter
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
GetCurrentThread
GetThreadTimes
FreeLibraryAndExitThread
InitializeCriticalSectionEx
CreateThread
TlsGetValue
TlsFree
InterlockedFlushSList
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
ReadFile
IsProcessorFeaturePresent
ExitThread
GetCPInfo
user32
CloseClipboard
SetClipboardData
EnumDisplayDevicesA
DestroyWindow
GetDC
CreateWindowExW
GetClassLongPtrW
WindowFromDC
GetDesktopWindow
GetShellWindow
GetWindowThreadProcessId
GetKeyState
EnumChildWindows
ScreenToClient
CallNextHookEx
MsgWaitForMultipleObjects
GetAsyncKeyState
PeekMessageW
GetRawInputData
GetKeyboardLayout
GetClipboardData
ClipCursor
ToUnicode
GetClientRect
PeekMessageA
GetParent
LoadStringW
TranslateMessage
EmptyClipboard
OpenClipboard
gdi32
GetPixelFormat
SetPixelFormat
DescribePixelFormat
advapi32
AdjustTokenPrivileges
CreateProcessWithTokenW
OpenProcessToken
DuplicateTokenEx
GetTokenInformation
LookupPrivilegeValueW
shell32
ShellExecuteW
ole32
StringFromGUID2
ClipCursor
CompatString
CompatValue
CreateDXGIFactory
CreateDXGIFactory1
CreateDXGIFactory2
D2D1CreateDevice
D2D1CreateFactory
D3D10CompileEffectFromMemory
D3D10CompileShader
D3D10CreateBlob
D3D10CreateDevice
D3D10CreateDevice1
D3D10CreateDeviceAndSwapChain
D3D10CreateDeviceAndSwapChain1
D3D10CreateEffectFromMemory
D3D10CreateEffectPoolFromMemory
D3D10DisassembleEffect
D3D10DisassembleShader
D3D10GetGeometryShaderProfile
D3D10GetInputAndOutputSignatureBlob
D3D10GetInputSignatureBlob
D3D10GetOutputSignatureBlob
D3D10GetPixelShaderProfile
D3D10GetShaderDebugInfo
D3D10GetVertexShaderProfile
D3D10PreprocessShader
D3D10ReflectShader
D3D11CreateDevice
D3D11CreateDeviceAndSwapChain
D3D11On12CreateDevice
D3D12CreateDevice
D3D12CreateRootSignatureDeserializer
D3D12CreateVersionedRootSignatureDeserializer
D3D12EnableExperimentalFeatures
D3D12GetDebugInterface
D3D12GetInterface
D3D12PIXEventsReplaceBlock
D3D12PIXGetThreadInfo
D3D12PIXNotifyWakeFromFenceSignal
D3D12PIXReportCounter
D3D12SerializeRootSignature
D3D12SerializeVersionedRootSignature
D3DPERF_BeginEvent
D3DPERF_EndEvent
D3DPERF_GetStatus
D3DPERF_QueryRepeatFrame
D3DPERF_SetMarker
D3DPERF_SetOptions
D3DPERF_SetRegion
DXGID3D10CreateDevice
DXGID3D10CreateLayeredDevice
DXGID3D10ETWRundown
DXGID3D10GetLayeredDeviceSize
DXGID3D10RegisterLayers
DXGIDeclareAdapterRemovalSupport
DXGIDisableVBlankVirtualization
DXGIDumpJournal
DXGIGetDebugInterface1
DXGIReportAdapterConfiguration
Direct3D9EnableMaximizedWindowedModeShim
Direct3DCreate9
Direct3DCreate9Ex
Direct3DCreate9On12
Direct3DCreate9On12Ex
DirectDrawCreate
DirectDrawCreateEx
DirectInput8Create
DirectInputCreateA
DirectInputCreateEx
DirectInputCreateW
GetAsyncKeyState
GetCursorPos
GetKeyState
GetKeyboardState
GetMessageA
GetMessageW
GetRawInputBuffer
GetdfDIJoystick
PeekMessageA
PeekMessageW
PostMessageA
PostMessageW
ReShadeCreateEffectRuntime
ReShadeDestroyEffectRuntime
ReShadeGetBasePath
ReShadeGetConfigValue
ReShadeGetImGuiFunctionTable
ReShadeLogMessage
ReShadeRegisterAddon
ReShadeRegisterEvent
ReShadeRegisterEventForAddon
ReShadeRegisterOverlay
ReShadeRegisterOverlayForAddon
ReShadeSetConfigArray
ReShadeSetConfigValue
ReShadeUnregisterAddon
ReShadeUnregisterEvent
ReShadeUnregisterEventForAddon
ReShadeUnregisterOverlay
ReShadeUnregisterOverlayForAddon
ReShadeUpdateAndPresentEffectRuntime
ReShadeVersion
RegisterClassA
RegisterClassExA
RegisterClassExW
RegisterClassW
RegisterRawInputDevices
SetCursorPos
SetWindowsHookExA
SetWindowsHookExW
UnhookWindowsHookEx
VR_GetGenericInterface
VR_GetInitToken
VR_Init
VR_InitInternal
VR_InitInternal2
VR_Shutdown
VR_ShutdownInternal
WSARecv
WSARecvFrom
WSASend
WSASendTo
glAccum
glAlphaFunc
glAreTexturesResident
glArrayElement
glBegin
glBindTexture
glBitmap
glBlendFunc
glCallList
glCallLists
glClear
glClearAccum
glClearColor
glClearDepth
glClearIndex
glClearStencil
glClipPlane
glColor3b
glColor3bv
glColor3d
glColor3dv
glColor3f
glColor3fv
glColor3i
glColor3iv
glColor3s
glColor3sv
glColor3ub
glColor3ubv
glColor3ui
glColor3uiv
glColor3us
glColor3usv
glColor4b
glColor4bv
glColor4d
glColor4dv
glColor4f
glColor4fv
glColor4i
glColor4iv
glColor4s
glColor4sv
glColor4ub
glColor4ubv
glColor4ui
glColor4uiv
glColor4us
glColor4usv
glColorMask
glColorMaterial
glColorPointer
glCopyPixels
glCopyTexImage1D
glCopyTexImage2D
glCopyTexSubImage1D
glCopyTexSubImage2D
glCullFace
glDeleteLists
glDeleteTextures
glDepthFunc
glDepthMask
glDepthRange
glDisable
glDisableClientState
glDrawArrays
glDrawBuffer
glDrawElements
glDrawPixels
glEdgeFlag
glEdgeFlagPointer
glEdgeFlagv
glEnable
glEnableClientState
glEnd
glEndList
glEvalCoord1d
glEvalCoord1dv
glEvalCoord1f
glEvalCoord1fv
glEvalCoord2d
glEvalCoord2dv
glEvalCoord2f
glEvalCoord2fv
glEvalMesh1
glEvalMesh2
glEvalPoint1
glEvalPoint2
glFeedbackBuffer
glFinish
glFlush
glFogf
glFogfv
glFogi
glFogiv
glFrontFace
glFrustum
glGenLists
glGenTextures
glGetBooleanv
glGetClipPlane
glGetDoublev
glGetError
glGetFloatv
glGetIntegerv
glGetLightfv
glGetLightiv
glGetMapdv
glGetMapfv
glGetMapiv
glGetMaterialfv
glGetMaterialiv
glGetPixelMapfv
glGetPixelMapuiv
glGetPixelMapusv
glGetPointerv
glGetPolygonStipple
glGetString
glGetTexEnvfv
glGetTexEnviv
glGetTexGendv
glGetTexGenfv
glGetTexGeniv
glGetTexImage
glGetTexLevelParameterfv
glGetTexLevelParameteriv
glGetTexParameterfv
glGetTexParameteriv
glHint
glIndexMask
glIndexPointer
glIndexd
glIndexdv
glIndexf
glIndexfv
glIndexi
glIndexiv
glIndexs
glIndexsv
glIndexub
glIndexubv
glInitNames
glInterleavedArrays
glIsEnabled
glIsList
glIsTexture
glLightModelf
glLightModelfv
glLightModeli
glLightModeliv
glLightf
glLightfv
glLighti
glLightiv
glLineStipple
glLineWidth
glListBase
glLoadIdentity
glLoadMatrixd
glLoadMatrixf
glLoadName
glLogicOp
glMap1d
glMap1f
glMap2d
glMap2f
glMapGrid1d
glMapGrid1f
glMapGrid2d
glMapGrid2f
glMaterialf
glMaterialfv
glMateriali
glMaterialiv
glMatrixMode
glMultMatrixd
glMultMatrixf
glNewList
glNormal3b
glNormal3bv
glNormal3d
glNormal3dv
glNormal3f
glNormal3fv
glNormal3i
glNormal3iv
glNormal3s
glNormal3sv
glNormalPointer
glOrtho
glPassThrough
glPixelMapfv
glPixelMapuiv
glPixelMapusv
glPixelStoref
glPixelStorei
glPixelTransferf
glPixelTransferi
glPixelZoom
glPointSize
glPolygonMode
glPolygonOffset
glPolygonStipple
glPopAttrib
glPopClientAttrib
glPopMatrix
glPopName
glPrioritizeTextures
glPushAttrib
glPushClientAttrib
glPushMatrix
glPushName
glRasterPos2d
glRasterPos2dv
glRasterPos2f
glRasterPos2fv
glRasterPos2i
glRasterPos2iv
glRasterPos2s
glRasterPos2sv
glRasterPos3d
glRasterPos3dv
glRasterPos3f
glRasterPos3fv
glRasterPos3i
glRasterPos3iv
glRasterPos3s
glRasterPos3sv
glRasterPos4d
glRasterPos4dv
glRasterPos4f
glRasterPos4fv
glRasterPos4i
glRasterPos4iv
glRasterPos4s
glRasterPos4sv
glReadBuffer
glReadPixels
glRectd
glRectdv
glRectf
glRectfv
glRecti
glRectiv
glRects
glRectsv
glRenderMode
glRotated
glRotatef
glScaled
glScalef
glScissor
glSelectBuffer
glShadeModel
glStencilFunc
glStencilMask
glStencilOp
glTexCoord1d
glTexCoord1dv
glTexCoord1f
glTexCoord1fv
glTexCoord1i
glTexCoord1iv
glTexCoord1s
glTexCoord1sv
glTexCoord2d
glTexCoord2dv
glTexCoord2f
glTexCoord2fv
glTexCoord2i
glTexCoord2iv
glTexCoord2s
glTexCoord2sv
glTexCoord3d
glTexCoord3dv
glTexCoord3f
glTexCoord3fv
glTexCoord3i
glTexCoord3iv
glTexCoord3s
glTexCoord3sv
glTexCoord4d
glTexCoord4dv
glTexCoord4f
glTexCoord4fv
glTexCoord4i
glTexCoord4iv
glTexCoord4s
glTexCoord4sv
glTexCoordPointer
glTexEnvf
glTexEnvfv
glTexEnvi
glTexEnviv
glTexGend
glTexGendv
glTexGenf
glTexGenfv
glTexGeni
glTexGeniv
glTexImage1D
glTexImage2D
glTexParameterf
glTexParameterfv
glTexParameteri
glTexParameteriv
glTexSubImage1D
glTexSubImage2D
glTranslated
glTranslatef
glVertex2d
glVertex2dv
glVertex2f
glVertex2fv
glVertex2i
glVertex2iv
glVertex2s
glVertex2sv
glVertex3d
glVertex3dv
glVertex3f
glVertex3fv
glVertex3i
glVertex3iv
glVertex3s
glVertex3sv
glVertex4d
glVertex4dv
glVertex4f
glVertex4fv
glVertex4i
glVertex4iv
glVertex4s
glVertex4sv
glVertexPointer
glViewport
recv
recvfrom
send
sendto
vkCreateDevice
vkCreateInstance
vkGetDeviceProcAddr
vkGetInstanceProcAddr
vkGetPhysicalDeviceToolPropertiesEXT
vkNegotiateLoaderLayerInterfaceVersion
wglChoosePixelFormat
wglCopyContext
wglCreateContext
wglCreateLayerContext
wglDeleteContext
wglDescribeLayerPlane
wglDescribePixelFormat
wglGetCurrentContext
wglGetCurrentDC
wglGetLayerPaletteEntries
wglGetPixelFormat
wglGetProcAddress
wglMakeCurrent
wglRealizeLayerPalette
wglSetLayerPaletteEntries
wglSetPixelFormat
wglShareLists
wglSwapBuffers
wglSwapLayerBuffers
wglSwapMultipleBuffers
wglUseFontBitmapsA
wglUseFontBitmapsW
wglUseFontOutlinesA
wglUseFontOutlinesW
xrNegotiateLoaderApiLayerInterface
Name
.text
Size
3.8MB
Virtual Size
3.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
763KB
Virtual Size
762KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
271KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
171KB
Virtual Size
171KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
511KB
Virtual Size
510KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=33, id=260, version=33145,
count=25, id=259, version=33145,
count=21, id=259, version=35721,
count=15, id=260, version=35721,
count=8, id=260, version=36252,
count=7, id=261, version=36252,
count=113, id=261, version=35721,
count=17, id=257, version=33145,
count=181, id=261, version=33145,
count=271, id=1, productName=Unmarked objects,
count=133, id=265, version=36252,
count=1, id=256, version=36252,
count=1, id=255, version=36252,
count=1, id=258, version=36252,
resources/payload/reshade-vulkan/ReShade64.json
- SHA256 aa21713718843e531da396e2bfc80772c9cb3c369d6c30b836be6b0ae812d503
- MD5 e3959a41b8bb2a4ee1f2bf74ed0fd411
- SHA1 972206f94dbdeb4a207594d58a9518bd5be1a0b8
- SHA512 f7313a9a1906ffdfa08857c11b5200721debe3c92628e8a24da340f06ed7d1eaf02af8297eeeb3691a693e5b789c1dae78cc424789b1f2e97e517648de9180af
- TLSH T160F09703BAA8C6E713C8870A4936A266DF2E8B2F12814CD1BC92240082A8B72240F31D
- MD5 SHA1 SHA512 TLSH