AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Static task
static1
Behavioral task
behavioral1
Sample
Hera2-Patcher.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Hera2-Patcher.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
Hera2-PvP.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
Hera2-PvP.exe
Resource
win10v2004-20221111-en
Target
Hera2-PvP.7z
Size
2.9MB
MD5
e91d193ba4b2d97831bbc044fc776cae
SHA1
e82fd0f55d31ed182829a8b0612ecd096da99aae
SHA256
c54faf1b004e3ef92bf9e653fec2b871057004b8f4b1b32989a815456e8ada08
SHA512
9d8009cb043f8d2b4fd3c8c1731967361537f53050285337d819d5cf5bb06ff37a8a27eab553d36b5aced062ce6fba0ad92de32379401d6fe49f740dc32762c4
SSDEEP
49152:P2JTd/4CKqEgfTpdC+pBqAhwyrrtksljfpSFQmoZl4//QTY/+oi8li39jMOK6Mpw:utdg2lp4+pB5eyPtkscx9Wo5li39f/Mu
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
timeBeginPeriod
timeGetDevCaps
timeGetTime
timeEndPeriod
Direct3DCreate8
GetAdaptersInfo
GetPerAdapterInfo
ImmSetCompositionStringW
ImmGetIMEFileNameA
ImmIsIME
ImmGetContext
ImmReleaseContext
ImmAssociateContext
ImmGetCompositionStringW
ImmSetConversionStatus
ImmNotifyIME
ImmGetCandidateListW
ImmGetConversionStatus
ImmGetOpenStatus
ilGenImages
ilGetInteger
ilLoad
ilOriginFunc
ilEnable
ilSave
ilSetPixels
ilTexImage
ilInit
ilDeleteImages
ilBindImage
ilCopyPixels
ilShutDown
ilConvertImage
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
GetTimestampForLoadedLibrary
EnumerateLoadedModules
StackWalk
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
??0SGeometry@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??1STextures@CSpeedTreeRT@@QAE@XZ
??0CSpeedTreeRT@@QAE@XZ
??1CSpeedTreeRT@@QAE@XZ
??2CSpeedTreeRT@@SAPAXI@Z
??3CSpeedTreeRT@@SAXPAX@Z
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?SetTime@CSpeedTreeRT@@SAXM@Z
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
DirectInput8Create
select
__WSAFDIsSet
closesocket
connect
ioctlsocket
recv
WSAGetLastError
send
socket
WSAStartup
gethostbyname
inet_addr
htons
WSACleanup
WinHttpCloseHandle
WinHttpOpen
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpConnect
WinHttpOpenRequest
ShowCursor
SetCursor
DestroyCursor
LoadImageA
SetCursorPos
ClientToScreen
BlockInput
ReleaseCapture
SystemParametersInfoA
LoadIconA
FindWindowA
ScreenToClient
GetCursorPos
GetKeyState
ShowWindow
PostQuitMessage
FlashWindowEx
SetWindowPos
GetCapture
CharPrevA
CharPrevExA
CharNextExA
CharNextW
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
GetKeyboardLayout
GetKeyboardLayoutNameA
ReleaseDC
GetDC
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
LoadCursorA
SetWindowLongA
GetWindowLongA
SetRect
AdjustWindowRectEx
GetClientRect
InvalidateRect
GetMenu
MoveWindow
DestroyWindow
IsWindow
CreateWindowExA
RegisterClassA
DefWindowProcA
MessageBoxA
LoadStringA
GetSystemMetrics
ChangeDisplaySettingsA
SetCapture
GetAsyncKeyState
SetBkColor
GetStockObject
EnumFontFamiliesExA
CreateFontIndirectA
DeleteObject
GetCharABCWidthsFloatW
GetTextExtentPoint32W
SelectObject
GetTextExtentPoint32A
SetTextColor
TextOutW
CreateCompatibleDC
DeleteDC
SetBkMode
CreateDIBSection
TextOutA
CoUninitialize
CoInitializeEx
CoCreateInstance
VariantClear
SysFreeString
SHGetSpecialFolderPathA
SHFileOperationA
ShellExecuteA
ShellExecuteW
_GrannyConvertSingleObject@20
_GrannyFindMatchingMember@16
_GrannyGetMaterialTextureByType@8
_GrannyGetLogMessageOriginString@4
_GrannyGetLogMessageTypeString@4
_GrannySetLogCallback@4
_GrannyFreeMeshDeformer@4
_GrannyDeformVertices@24
_GrannyFreeFileSection@8
_GrannyFreeFile@4
_GrannyGetFileInfo@4
_GrannyGetSourceSkeleton@4
_GrannySetModelClock@8
_GrannyFreeCompletedModelControls@4
_GrannySampleModelAnimationsAccelerated@20
_GrannyUpdateModelMatrix@20
_GrannyNewLocalPose@4
_GrannyFreeLocalPose@4
_GrannyGetWorldPoseComposite4x4Array@4
_GrannyInstantiateModel@4
_GrannyFreeModelInstance@4
_GrannyNewMeshBinding@12
_GrannyFreeMeshBinding@4
_GrannyGetMeshBindingToBoneIndices@4
_GrannyFindBoneByName@12
GrannyPNT332VertexType
_GrannyReadEntireFileFromMemory@8
_GrannyGetMeshVertices@4
_GrannyFreeWorldPose@4
_GrannyGetWorldPose4x4@8
_GrannyGetWorldPoseComposite4x4@8
_GrannyGetTotalTypeSize@4
_GrannyGetMeshVertexCount@4
_GrannyMeshIsRigid@4
_GrannyGetMeshIndexCount@4
_GrannyGetSourceModel@4
_GrannyFindTrackGroupForModel@12
_GrannyFreeControl@4
_GrannyFreeControlOnceUnused@4
_GrannyCompleteControlAt@8
_GrannyControlIsComplete@4
_GrannyFreeControlIfComplete@4
_GrannyGetControlLoopCount@4
_GrannySetControlLoopCount@8
_GrannyGetControlSpeed@4
_GrannySetControlSpeed@8
_GrannyGetControlLocalDuration@4
_GrannySetControlEaseIn@8
_GrannySetControlEaseInCurve@28
_GrannySetControlEaseOut@8
_GrannySetControlEaseOutCurve@28
_GrannyGetControlRawLocalClock@4
_GrannySetControlRawLocalClock@8
_GrannyPlayControlledAnimation@12
_GrannyBeginControlledAnimation@8
_GrannyEndControlledAnimation@4
_GrannySetTrackGroupTarget@12
_GrannySetTrackGroupLOD@16
_GrannyGetMeshTriangleGroupCount@4
_GrannyGetMeshTriangleGroups@4
_GrannyGetMeshVertexType@4
_GrannyNewWorldPose@4
_GrannyNewMeshDeformer@16
_GrannyCopyMeshIndices@12
_GrannyCopyMeshVertices@12
ExitProcess
RtlUnwind
RaiseException
GetFileSizeEx
ReadConsoleW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
MoveFileExW
HeapReAlloc
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
SetConsoleMode
GetNumberOfConsoleInputEvents
GetDriveTypeW
ExitThread
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
VirtualQuery
CreateTimerQueue
VirtualFree
VirtualProtect
VirtualAlloc
GetVersionExW
UnregisterWaitEx
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetStdHandle
SignalObjectAndWait
LoadLibraryW
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
LoadLibraryExW
FreeLibraryAndExitThread
FlushViewOfFile
GetStdHandle
ExpandEnvironmentStringsW
SetConsoleCtrlHandler
GetACP
GetExitCodeProcess
GenerateConsoleCtrlEvent
GetProcessTimes
MoveFileW
GetSystemTime
GetFileType
SystemTimeToFileTime
SetEnvironmentVariableA
SetCurrentDirectoryW
GetCurrentDirectoryW
DeleteFileW
GetFileAttributesExW
SetFileAttributesW
SetCurrentDirectoryA
GetVersion
DuplicateHandle
GetFileAttributesW
GetEnvironmentVariableA
CreatePipe
SetEnvironmentVariableW
SetFileTime
RemoveDirectoryW
FindNextFileW
GetFullPathNameW
GetFileAttributesExA
MoveFileA
FindFirstFileW
CreateDirectoryW
SetErrorMode
LoadLibraryExA
CreateEventA
TlsFree
TlsGetValue
TlsAlloc
TlsSetValue
SetEndOfFile
GetFullPathNameA
IsDBCSLeadByte
GetFileInformationByHandle
OutputDebugStringW
GetConsoleCP
GetConsoleOutputCP
GetThreadTimes
FlushFileBuffers
GetTempPathW
CreateProcessW
HeapCompact
LockFileEx
UnlockFileEx
GetTimeZoneInformation
GetModuleHandleExW
SwitchToThread
GetConsoleMode
ReadConsoleInputW
PeekConsoleInputA
WriteConsoleW
GetTickCount
GetExitCodeThread
ReadProcessMemory
SetLastError
GetModuleFileNameW
WaitNamedPipeW
PeekNamedPipe
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
HeapValidate
GetCPInfo
GetStringTypeW
GetModuleHandleW
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
FreeLibraryWhenCallbackReturns
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateSemaphoreExW
CreateEventExW
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
LCMapStringEx
DecodePointer
EncodePointer
LocalFree
QueryPerformanceFrequency
QueryPerformanceCounter
GetCurrentThreadId
TryEnterCriticalSection
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
FormatMessageA
SetFilePointerEx
CreateFileW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetThreadPriority
CreateFileA
CloseHandle
DeviceIoControl
HeapAlloc
HeapFree
GetProcessHeap
GetLastError
GetCurrentProcess
GetCurrentProcessId
CreateToolhelp32Snapshot
Module32First
Module32Next
Sleep
GetModuleHandleA
GetProcAddress
SetFileAttributesA
MultiByteToWideChar
FindClose
FindFirstFileA
FindNextFileA
GetCurrentDirectoryA
GetFileAttributesA
CheckRemoteDebuggerPresent
SetUnhandledExceptionFilter
TerminateProcess
CreateThread
CreateProcessA
GetPriorityClass
OpenProcess
lstrlenA
GetPrivateProfileStringA
Process32First
Process32Next
CreateDirectoryA
DeleteFileA
RemoveDirectoryA
GetModuleFileNameA
GlobalAlloc
GetFileSize
GetSystemInfo
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
OutputDebugStringA
GetCurrentThread
WinExec
ReadFile
SetFilePointer
WriteFile
GetSystemDirectoryA
GetVersionExA
FreeLibrary
LoadLibraryA
GlobalUnlock
GlobalLock
lstrlenW
WideCharToMultiByte
CompareStringA
GetLocaleInfoA
ReleaseSemaphore
WaitForSingleObject
RegCreateKeyExW
RegCreateKeyA
RegSetValueA
RegDeleteKeyA
RegCreateKeyExA
RegFlushKey
RegQueryValueA
RegSetValueExA
RegLoadKeyA
RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueA
RegConnectRegistryA
RegSaveKeyA
RegEnumKeyExA
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegSetValueExW
CryptReleaseContext
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ