WanGP-DLSS5-workers-v1.1.1.zip
- SHA256 6a6288c304251ab0d21c17267f6fa3ee148f706555459859e753a6b1390c47fc
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dlssg\dlssg-worker.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
dlssg\dlssg-worker.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
host\nr-depth-worker.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
host\nr-depth-worker.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
host\nvngx.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
host\nvngx.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target WanGP-DLSS5-workers-v1.1.1.zip
- Size 129KB
- Sample261113-r7bcaacy5k
- SHA256 6a6288c304251ab0d21c17267f6fa3ee148f706555459859e753a6b1390c47fc
- MD5 05e6844a9148e2e745a9715e69e1bfdb
- SHA1 f6012577af5f7f3045437346dc11e3d048fe31bc
- SHA512 cbf3c34ea20a2cf9bf98ea6513e0e40c0179e3e0186e4392dc0bfd55ad1d57f671019c207d0e2b319349801d5962e939bc61ce6ebc144dad938b22b1f9810289
- SSDEEP 3072:VCGYLxaf8y5FZPql1GwTgkcYjY7YCvh5QOk8qw5hdiVSa:VC7LMf80DPql1GwTSYjYjvh5HPcT
- TLSH T149D312E750445AEDEE2D9470302A4D3DAFCD2EDC518F40A88FA351C725F21B176B2BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/dlssg\dlssg-worker.exe unpack001/host\nr-depth-worker.exe unpack001/host\nvngx.dll
File Explorer
-
WanGP-DLSS5-workers-v1.1.1.zip.zip 129KB
-
LICENSE-DLSS5-Feeder.txt1KB
-
LICENSE-Merserk.txt1KB
-
LICENSE-WanGP-Adapters.txt1KB
-
README.txt2KB
-
SHA256SUMS.txt261B
-
dlss\INSTALL-NVIDIA-DLSS-HERE.txt123B
-
dlssg\INSTALL-NVIDIA-DLSSG-HERE.txt124B
-
dlssg\dlssg-worker.exe.exe 67KB
-
host\INSTALL-THIRD-PARTY-FILES-HERE.txt200B
-
host\nr-depth-worker.exe.exe 103KB
-
host\nvngx.dll.exe 78KB
LICENSE-DLSS5-Feeder.txt
- SHA256 3ec3f7d1eb38180827b3398e21f61f86f8b366d07df7dd932d0538d2fd14d423
- MD5 3abc00521971ccb1bbb4f9aae9b695c8
- SHA1 8160424e4977a6fe211018412b817c460551cad7
- SHA512 1cfdcab59dcc99f05d71d9ce64ad56a747d24b7fa87ac2ef2d7cacdec8bfeedbf86ba500224cec1fe407eb16c6721c2324f0a6c8c56a94a10dd0b8ab03398e1f
- TLSH T15921B11E7200032218AB17704838ACC5B12BB20EBB5B3A8864ADF385232A46CD6FF804
- MD5 SHA1 SHA512 TLSH
LICENSE-Merserk.txt
- SHA256 6d3939094f12aa118f86b6a99c46ea525ff4f203a062c2f377873a3498ffe7ec
- MD5 6f99c0ce82b45934249a97c3fa75a768
- SHA1 4fc344018983d7fd47c6f966ba036d4b2b1afb7e
- SHA512 1db9caf5eb25f748e50985666cd3f0dfbf8cab56b88fc69056346e91ba9bbb0644550c606cdca4974127da76bb41649ad7b9ef69c61aafb6a3f0c561d24681b4
- TLSH T10011751E72510772189B13A05578ACD5F23BB25F7B5F2A84246DF345233A06CD6FF840
- MD5 SHA1 SHA512 TLSH
LICENSE-WanGP-Adapters.txt
- SHA256 416f447a15a6111dedebf78c828f4b0afbf10949eae23422b3a4a487e03c5b45
- MD5 26112d3cdfe370dbe08937723b551700
- SHA1 fc338117c17d2119c2e141993a4d512d658a182b
- SHA512 c39554848580af026193c2570c5f12c7fe8df90e0b4803b9cfa3a7473251bb0da74d0e90a5067ef032c9dac6a277ad0780493a05fc75a68861e544a8da71345e
- TLSH T10A11861E725147671C9A13A05579ACC5B12BB15FBB5F2A85146DF245232A06CC6FF840
- MD5 SHA1 SHA512 TLSH
README.txt
- SHA256 3bc19692ad457e6d6cfba2322c7bc8d045cde61a141a54e635fd3ff6dc625476
- MD5 b170d5ad59ebd4cf37fa70c3754fed5d
- SHA1 28dd98ad3d59a79f030e2bf3f2441bc07bb089e1
- SHA512 c778e9272809998d1f70b82b2cf622c24e1d1956cec6362dbe7f7d8ca4da40f494e7189224b339db80231cc35a2327aa905e01d16745744d5e0c9974986d5b92
- TLSH T1215174429E0FA6391381C1D1B19C5ACEFB5BC46ED39B5550B44D00CA2365B79A3DCD36
- MD5 SHA1 SHA512 TLSH
SHA256SUMS.txt
- SHA256 619135e61980951cd5f82ddb0d0d198f786bac2f2c2f16a08c9d05fa9b0099d1
- MD5 6550b158185e4c14f31116f16087e64b
- SHA1 88f0163da3eabddc0b375ab09f088d9b3689323c
- SHA512 c53ec51a66c555ac96ba11f8e2bbaf6d636970467e3ead10454a2fa63e1dcdb8d956bf2ee8ddabf06575735c251caffad30ebbc40fdc3eb745598f797cb01acf
- TLSH T1FBD075F41540DC7154173C21481C4E9E0170A807CC01CD036B28898723CE0731CC452B
- MD5 SHA1 SHA512 TLSH
dlss\INSTALL-NVIDIA-DLSS-HERE.txt
- SHA256 dff242849d0585846a47b5fa4430796dce9d8095ca44c28277796b11f400bde9
- MD5 f73ba14a7aaf98068484a4fb67edf258
- SHA1 90d9c71e0de68f69bd601f5675054118dde07938
- SHA512 879d7d9f1cc5117a108c78a7a4407a24783f3c692b7deffe8c8d12680701d80f4d814e34066b9e74e9e76a907005024c2ebbf4d509a7434e8647cc0841850af1
- TLSH T16FB09242338A2835B21611DEB9848619B74B82D2723E4C20669A6AC66B1D0532269CAB
- MD5 SHA1 SHA512 TLSH
dlssg\INSTALL-NVIDIA-DLSSG-HERE.txt
- SHA256 63d61b3d685e9e58b054f3c5404226bc7c907fe2a3931ab2d84233987186e636
- MD5 58aa4f0a4955a4499a970f08894dde41
- SHA1 1315eacf98a11b6fe7fc83a54808716dd68e0aa4
- SHA512 29acffefc06209008b2f5bb2883849a960451bd06ef71b6a299c90f383ac656c493a4547624ef2370765e0f5b354ed66e8dc476d17ecbfcef3e16b0e21650d3c
- TLSH T100B09242778A2C35B21A11DDB8948619B70B82D2723E4C20669A5AC26B1D1532269CAB
- MD5 SHA1 SHA512 TLSH
dlssg\dlssg-worker.exe
- IMPHASH 3e505d7887f30f6508b1c82e01321077
- SHA256 d93084633e0aab4a08c43a5ee240176716ef73d87f06f35c2293509fbfc8bd00
- MD5 131f0951ad1ce8ff4f5b5d7181152974
- SHA1 e472434894bb5b9782d3e0e7c3d54c5f24c56201
- SHA512 fa7a0acc73126857618bf50f91099a61ada8fc5e7274c0c4a1f1b413c40d0aed6f8df338975bc5b18cca37111941a4197195682f2c476e121442dbda3d597a99
- SSDEEP 1536:R8MbOR0HIllnOaQdTtXgFSed2OJ+GuqcrR7SEr8jh:R8a0O5dJXgzd9J+GuRrReEr8N
- TLSH T167636B1B77B8409CD5BB5039C6129927C3B274482324EBCF57A98B961FA35F12E39F21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
43356
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
d3d12
ord101
dxgi
CreateDXGIFactory2
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
kernel32
InitializeCriticalSectionAndSpinCount
SetEnvironmentVariableW
CloseHandle
WaitForSingleObject
CreateEventW
GetModuleFileNameW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VerSetConditionMask
CreateFileW
GetFileAttributesW
GetFullPathNameW
GetLastError
SetLastError
GetSystemTimeAsFileTime
GetSystemDirectoryW
FreeLibrary
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
VerifyVersionInfoW
GetStdHandle
OutputDebugStringA
GetCurrentProcessId
AllocConsole
WriteConsoleA
SetConsoleTitleA
GetConsoleWindow
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
InitializeSListHead
IsDebuggerPresent
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCurrentThreadId
user32
GetWindowThreadProcessId
advapi32
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
msvcp140
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
vcruntime140
memcmp
__CxxFrameHandler3
memcpy
__current_exception
__current_exception_context
memset
__C_specific_handler
__std_exception_copy
wcsrchr
__std_terminate
memmove
_CxxThrowException
__std_exception_destroy
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
_set_invalid_parameter_handler
terminate
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_seh_filter_exe
_set_app_type
_register_thread_local_exe_atexit_callback
_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
_c_exit
__p___argc
__p___argv
_cexit
api-ms-win-crt-convert-l1-1-0
atoi
_strtoui64
mbsrtowcs
api-ms-win-crt-stdio-l1-1-0
fflush
_fileno
fputc
__p__commode
__stdio_common_vswprintf_s
__stdio_common_vfwprintf
__acrt_iob_func
_setmode
__stdio_common_vfprintf_s
fputs
fclose
_set_fmode
fread
__stdio_common_vsprintf_s
_wfsopen
__stdio_common_vfprintf
fwrite
api-ms-win-crt-string-l1-1-0
isalpha
isdigit
wcscat_s
wcscpy_s
_strnicmp
strncmp
_wcsnicmp
_wcsdup
strcmp
api-ms-win-crt-heap-l1-1-0
_set_new_mode
malloc
_callnewh
free
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-time-l1-1-0
_time64
strftime
_localtime64_s
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
42KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
116B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=29, id=261, version=31935,
count=10, id=260, version=31935,
count=3, id=259, version=31935,
count=6, id=257, version=31935,
count=13, id=257, version=29395,
count=144, id=1, productName=Unmarked objects,
count=6, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
count=1, id=261, version=32216,
count=1, id=258, version=32216,
host\INSTALL-THIRD-PARTY-FILES-HERE.txt
- SHA256 b33a1f4d64418daf535474e4a2053914c2cf2545512eff8d86ded28ef0a523f9
- MD5 3eb473d94aa15391931c46f1512bf8d3
- SHA1 8486804a7bbf029ca85ceaee2ed26c68ffdece1b
- SHA512 ba3c5f8820a686d64aba59a2b7609feb8b77da348adc3c2e1e749ca86ca08e4182c100291346322fac8e51c0582adf79e331c4e0ebff329a8ebe2c1449554a9a
- TLSH T149D0234777851831018720CBE541492D3E0743E313754C24275755C94BA8141450CC36
- MD5 SHA1 SHA512 TLSH
host\nr-depth-worker.exe
- IMPHASH 25b1abe779a6178769993210c91add33
- SHA256 1af14d9443ec13b717c41c4e64020b8af81322b027985761c417c3bb37381c19
- MD5 4f590d9ab3ea23619fb0d916ee3e5c81
- SHA1 8d04d60b50637321217f1ab027d5821601b31704
- SHA512 833e59dd836e1f2596caeafb3399204f7ae1747cc78c17f689938f9c51e6e79c671c18551dd328d2c80dfbf1dc814df7d08ba194b850d7db4a6d3d0a95833820
- SSDEEP 3072:se8qYl/gK0v/0e9uu0+61NCYL+6hJ6GuRr7f97BxEp:s9nl/t0nV9uutMTJBEi
- TLSH T112A37C2A72E810ADCA77C178DA622207C731B054177A9BDF03E1C1981FB29F55E3EB65
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
64828
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
winmm
timeBeginPeriod
kernel32
DuplicateHandle
SetUnhandledExceptionFilter
GetLastError
ConnectNamedPipe
GetOverlappedResult
CancelIo
ResetEvent
WaitForSingleObject
CreateEventW
Sleep
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetCurrentThreadId
GetProcessId
OpenProcess
GetLocalTime
GetTickCount64
GetSystemDirectoryW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetModuleHandleExW
GetProcAddress
LoadLibraryW
GetPrivateProfileStringA
WritePrivateProfileStringA
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VerSetConditionMask
CreateFileW
GetFileAttributesW
SetLastError
FreeLibrary
LoadLibraryExW
LocalAlloc
LocalFree
VerifyVersionInfoW
GetStdHandle
OutputDebugStringA
AllocConsole
WriteConsoleA
SetConsoleTitleA
GetConsoleWindow
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
ReadFile
GetFullPathNameW
GetFileSize
FindNextFileA
CloseHandle
FindFirstFileA
FindClose
CreateFileA
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
CreateNamedPipeA
RtlCaptureContext
user32
MsgWaitForMultipleObjects
MapVirtualKeyW
SetWindowPos
DrawTextW
DestroyWindow
CreateWindowExW
RegisterClassW
AdjustWindowRect
FillRect
GetWindowThreadProcessId
SystemParametersInfoW
ShowWindow
TranslateMessage
DispatchMessageW
PostMessageW
PeekMessageW
DefWindowProcW
gdi32
SetBkMode
DeleteObject
CreateDIBSection
GdiFlush
DeleteDC
CreateSolidBrush
SetTextColor
SelectObject
CreateFontW
CreateCompatibleDC
advapi32
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
msvcp140
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
vcruntime140
__C_specific_handler
memchr
memcmp
memcpy
memmove
memset
__CxxFrameHandler3
__current_exception
__current_exception_context
_CxxThrowException
__std_exception_destroy
wcsrchr
strstr
strrchr
__std_exception_copy
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_set_invalid_parameter_handler
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
_invalid_parameter_noinfo_noreturn
_seh_filter_exe
_set_app_type
terminate
_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
__p___argc
api-ms-win-crt-string-l1-1-0
strcmp
_strnicmp
strncmp
isalpha
_wcsnicmp
wcscpy_s
wcscat_s
isdigit
_wcsdup
strcpy_s
api-ms-win-crt-heap-l1-1-0
free
malloc
_callnewh
_set_new_mode
api-ms-win-crt-convert-l1-1-0
strtof
atoi
mbsrtowcs
strtoul
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
fopen_s
fclose
__stdio_common_vfprintf_s
fputs
__stdio_common_vswprintf_s
__p__commode
_wfsopen
fflush
_fileno
fread
fwrite
__stdio_common_vfprintf
__stdio_common_vsprintf_s
_set_fmode
__stdio_common_vsnprintf_s
__stdio_common_vsscanf
_setmode
api-ms-win-crt-math-l1-1-0
__setusermatherr
_fdclass
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-time-l1-1-0
_time64
strftime
_localtime64_s
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
62KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
136B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=29, id=261, version=31935,
count=10, id=260, version=31935,
count=4, id=259, version=31935,
count=6, id=257, version=31935,
count=13, id=257, version=29395,
count=196, id=1, productName=Unmarked objects,
count=6, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
count=1, id=261, version=32216,
count=1, id=258, version=32216,
host\nvngx.dll
- IMPHASH 419289c63c0d114dbf78cdc026c0ce36
- SHA256 58191f4d38288c6bfbda47ef56911d32052a9789e65714f4583f426e01464638
- MD5 5682e61190a300dde0c7a9b6b5173a96
- SHA1 f25716913a71d7c9bbb462f834bf02c260130c35
- SHA512 4ff3fd2d7bcdf912df4f0d3240774931ff753a4f4c778b3bdff18d39db2558bf0eb4abd8e76a8f1c3bc020a16edcc6633370ea4085c0cc138e14d057bc884eeb
- SSDEEP 1536:g6YrtMnFZMZJyQd7ALlmRp6qQ32G63y/srecHGuqcrO0IM9xqOw:DYrtMg0RPTmGKcGecHGuRrMM9xqO
- TLSH T191736B19B6E400ECC963C1B8DD70656BC7B1B44427299FCF43A282456F736E26E3EB49
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
51376
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
kernel32
Sleep
GetCurrentProcess
OpenProcess
GetLocalTime
GetTickCount64
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryW
GetPrivateProfileStringA
WritePrivateProfileStringA
CreateNamedPipeA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VerSetConditionMask
CreateFileW
GetFileAttributesW
GetFullPathNameW
WaitForSingleObject
GetSystemDirectoryW
FreeLibrary
LoadLibraryExW
LocalAlloc
LocalFree
VerifyVersionInfoW
GetStdHandle
OutputDebugStringA
GetCurrentProcessId
AllocConsole
WriteConsoleA
SetConsoleTitleA
GetConsoleWindow
QueryPerformanceCounter
GetCurrentThreadId
PeekNamedPipe
ConnectNamedPipe
GetLastError
DuplicateHandle
CreateEventW
CloseHandle
WriteFile
ReadFile
GetFileSize
CreateFileA
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
SetLastError
user32
CreateWindowExW
RegisterClassW
DrawTextW
FillRect
ShowWindow
GetWindowThreadProcessId
TranslateMessage
DispatchMessageW
PeekMessageW
DefWindowProcW
gdi32
CreateFontW
DeleteDC
CreateDIBSection
GdiFlush
DeleteObject
SelectObject
CreateCompatibleDC
CreateSolidBrush
SetTextColor
SetBkMode
advapi32
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
msvcp140
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
vcruntime140
_CxxThrowException
memcmp
memcpy
memset
__CxxFrameHandler3
memmove
__current_exception
__current_exception_context
__std_exception_destroy
__std_exception_copy
wcsrchr
strrchr
__C_specific_handler
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-string-l1-1-0
_wcsdup
strcpy_s
_wcsnicmp
strncmp
strcmp
isdigit
isalpha
wcscpy_s
wcscat_s
_strnicmp
strlen
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
_set_new_mode
free
api-ms-win-crt-convert-l1-1-0
strtoul
mbsrtowcs
atoi
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
fopen_s
_set_fmode
fclose
__stdio_common_vfprintf_s
fputs
__stdio_common_vswprintf_s
__stdio_common_vsscanf
_setmode
__stdio_common_vsprintf_s
__p__commode
fflush
_fileno
fread
fwrite
_wfsopen
__stdio_common_vfprintf
__stdio_common_vsnprintf_s
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_register_onexit_function
_set_invalid_parameter_handler
_initialize_onexit_table
terminate
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
__p___argc
_exit
exit
_initterm_e
_seh_filter_exe
_set_app_type
_invalid_parameter_noinfo_noreturn
_initterm
_initialize_narrow_environment
_get_initial_narrow_environment
_configure_narrow_argv
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-time-l1-1-0
strftime
_time64
_localtime64_s
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
49KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=35721,
count=10, id=260, version=35721,
count=29, id=261, version=35721,
count=6, id=257, version=35721,
count=11, id=257, version=33145,
count=170, id=1, productName=Unmarked objects,
count=6, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
count=1, id=261, version=36256,
count=1, id=258, version=36256,