AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
Target
tmp
Size
8.2MB
MD5
58da07309c364c5ded3cf57f208d7ca2
SHA1
0bbb404a0417e719a1a5fa9a33361ab85a7bd98f
SHA256
88a6c66caf3ef4da96e67ec0a02252f89f3f56ff4ed6c2ae1646ae759f4eb768
SHA512
158840895936dce8e3b31587da6660311a0724ab847159826470f7c0cf62850502c475929dc62f72d96d9dc9e9064a3483c18ddbf3c6118c82e24d0bea5418da
SSDEEP
98304:HZzlZCZfZqZnZr6JcB9TPKUQHue8gUrgwCFJzrPfhfIahyHKORvhef7tHJMiYP1F:HFlghwplhPQJUrAJzrKKOj9ith4
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
RaiseException
GetModuleHandleA
WinExec
OutputDebugStringA
ReadFile
SetFilePointer
WriteFile
GetSystemDirectoryA
GetVersionExA
FreeLibrary
LoadLibraryA
GlobalUnlock
GlobalLock
lstrlenW
GetCurrentThread
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetSystemInfo
GetFileSize
GlobalAlloc
GetModuleFileNameA
GetTempFileNameA
GetTempPathA
RemoveDirectoryA
DeleteFileA
CreateDirectoryA
AllocConsole
QueryPerformanceFrequency
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
SetFileInformationByHandle
GetTempPathW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitOnceExecuteOnce
SleepConditionVariableCS
CreateEventExW
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetTickCount64
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
WideCharToMultiByte
CloseThreadpoolWork
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetFileInformationByHandleEx
CreateSymbolicLinkW
GetStringTypeW
CompareStringEx
GetCPInfo
InterlockedIncrement
HeapValidate
InterlockedDecrement
LockResource
LoadResource
SizeofResource
FindResourceA
FindResourceW
PeekNamedPipe
WaitNamedPipeW
GetModuleFileNameW
SleepEx
GetTickCount
MoveFileExA
GetEnvironmentVariableA
GetStdHandle
GetFileType
CompareStringA
GetLocaleInfoA
ReleaseSemaphore
WaitForSingleObject
RtlCaptureStackBackTrace
CreateSemaphoreA
InitializeCriticalSection
CreateFileW
SetFilePointerEx
FormatMessageA
SwitchToThread
GetExitCodeThread
GetNativeSystemInfo
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
WaitForMultipleObjects
SetLastError
FormatMessageW
VerSetConditionMask
VerifyVersionInfoA
GetFileSizeEx
GetThreadTimes
GetFileInformationByHandle
GetFileAttributesA
GetConsoleOutputCP
GetConsoleCP
OutputDebugStringW
IsDBCSLeadByte
GetFullPathNameA
SetEndOfFile
TlsSetValue
TlsAlloc
TlsGetValue
TlsFree
CreateEventA
LoadLibraryExA
SetErrorMode
CreateDirectoryW
FindFirstFileW
MoveFileA
GetFullPathNameW
FindNextFileW
RemoveDirectoryW
SetFileTime
SetEnvironmentVariableW
CreatePipe
GetFileAttributesW
DuplicateHandle
OpenProcess
GetVersion
SetCurrentDirectoryA
SetFileAttributesW
GetFileAttributesExW
DeleteFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetEnvironmentVariableA
SystemTimeToFileTime
CreateProcessA
GetSystemTime
MoveFileW
GetProcessTimes
GenerateConsoleCtrlEvent
GetExitCodeProcess
GetACP
SetConsoleCtrlHandler
InitializeCriticalSectionEx
LocalFree
ExpandEnvironmentStringsW
FlushViewOfFile
TryEnterCriticalSection
FreeLibraryAndExitThread
GetLocaleInfoEx
EncodePointer
DecodePointer
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetPrivateProfileStringA
lstrlenA
GetCurrentDirectoryA
GetFileAttributesExA
FindNextFileA
FindFirstFileA
SetThreadPriority
FindClose
MultiByteToWideChar
SetFileAttributesA
Sleep
Module32Next
Module32First
CreateToolhelp32Snapshot
ReadProcessMemory
GetCurrentProcessId
GetCurrentProcess
GetLastError
GetProcessHeap
HeapFree
HeapAlloc
DeviceIoControl
CloseHandle
SubmitThreadpoolWork
CreateFileA
LoadLibraryExW
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
LoadLibraryW
SignalObjectAndWait
CreateThread
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
UnregisterWaitEx
GetVersionExW
LCMapStringEx
VirtualAlloc
VirtualProtect
VirtualFree
SetProcessAffinityMask
CreateTimerQueue
WaitForMultipleObjectsEx
GetKeyboardLayout
GetKeyboardLayoutNameA
ShowWindow
GetCapture
PostQuitMessage
FlashWindowEx
ReleaseDC
GetDC
SetCapture
OpenClipboard
CloseClipboard
ReleaseCapture
SetWindowPos
ChangeDisplaySettingsA
GetClipboardData
EmptyClipboard
CharNextW
CharNextExA
CharPrevExA
MonitorFromPoint
GetMonitorInfoA
CharPrevA
GetAsyncKeyState
GetSystemMetrics
PeekMessageA
ClientToScreen
LoadStringA
DispatchMessageA
RegisterClassA
SetCursorPos
LoadImageA
TranslateMessage
DestroyCursor
GetMessageA
LoadCursorA
SetWindowLongA
SetCursor
ShowCursor
GetWindowLongA
GetKeyState
SystemParametersInfoA
MessageBoxA
DefWindowProcA
SetClipboardData
SetRect
LoadIconA
CreateWindowExA
IsWindow
DestroyWindow
MoveWindow
GetMenu
InvalidateRect
FindWindowA
ScreenToClient
GetCursorPos
SetWindowTextA
GetClientRect
GetWindowRect
AdjustWindowRectEx
RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegCreateKeyExA
RegFlushKey
RegQueryValueA
RegSetValueExA
RegLoadKeyA
RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueA
RegConnectRegistryA
RegSaveKeyA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegSetValueExW
RegCreateKeyExW
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptImportKey
CryptEncrypt
ShellExecuteW
ShellExecuteA
SHGetSpecialFolderPathA
CoGetApartmentType
CoGetObjectContext
CoUninitialize
CoCreateInstance
CoInitializeEx
timeBeginPeriod
timeGetDevCaps
timeGetTime
timeEndPeriod
Direct3DCreate8
GetPerAdapterInfo
GetAdaptersInfo
ImmNotifyIME
ImmGetOpenStatus
ImmGetIMEFileNameA
ImmIsIME
ImmGetContext
ImmReleaseContext
ImmAssociateContext
ImmGetCompositionStringW
ImmSetCompositionStringW
ImmGetCandidateListW
ImmGetConversionStatus
ImmSetConversionStatus
ilConvertImage
ilCopyPixels
ilBindImage
ilDeleteImages
ilEnable
ilGenImages
ilGetInteger
ilLoad
ilOriginFunc
ilShutDown
ilSave
ilSetPixels
ilTexImage
ilInit
bind
getpeername
WSAStartup
WSACleanup
send
recv
getsockname
getsockopt
htonl
setsockopt
htons
WSASetLastError
WSAIoctl
accept
ioctlsocket
WSAGetLastError
listen
gethostname
getaddrinfo
connect
freeaddrinfo
WSACloseEvent
WSACreateEvent
closesocket
WSAEnumNetworkEvents
WSAEventSelect
recvfrom
sendto
__WSAFDIsSet
gethostbyname
socket
ntohs
ntohl
inet_addr
select
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
StackWalk
EnumerateLoadedModules
GetTimestampForLoadedLibrary
_AIL_start_sample@4
_AIL_set_sample_file@12
_AIL_init_sample@4
_AIL_release_sample_handle@4
_AIL_allocate_sample_handle@4
_AIL_last_error@0
_AIL_stream_status@4
_AIL_set_stream_loop_count@8
_AIL_stream_volume_levels@12
_AIL_set_stream_volume_levels@12
_AIL_pause_stream@8
_AIL_start_stream@4
_AIL_close_stream@4
_AIL_set_redist_directory@4
_AIL_shutdown@0
_AIL_startup@0
_AIL_set_3D_orientation@28
_AIL_set_3D_velocity@20
_AIL_set_3D_position@16
_AIL_close_3D_listener@4
_AIL_open_3D_listener@4
_AIL_resume_sample@4
_AIL_open_3D_provider@4
_AIL_enumerate_3D_providers@12
_AIL_close_digital_driver@4
_AIL_open_stream@12
_AIL_open_digital_driver@16
_AIL_file_type@8
_AIL_decompress_ADPCM@12
_AIL_decompress_ASI@24
_AIL_WAV_info@8
_AIL_set_file_callbacks@16
_AIL_file_read@8
_AIL_mem_free_lock@4
_AIL_stop_sample@4
_AIL_end_sample@4
_AIL_sample_status@4
_AIL_allocate_3D_sample_handle@4
_AIL_release_3D_sample_handle@4
_AIL_start_3D_sample@4
_AIL_stop_3D_sample@4
_AIL_resume_3D_sample@4
_AIL_end_3D_sample@4
_AIL_set_3D_sample_file@8
_AIL_set_3D_sample_volume@8
_AIL_set_sample_volume_pan@12
_AIL_set_3D_sample_loop_count@8
_AIL_close_3D_provider@4
_AIL_3D_sample_status@4
_AIL_set_sample_loop_count@8
_AIL_3D_sample_volume@4
_AIL_update_3D_position@8
_AIL_auto_update_3D_position@8
_AIL_sample_volume_pan@12
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
??3CSpeedTreeRT@@SAXPAX@Z
??2CSpeedTreeRT@@SAPAXI@Z
?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ
??0CSpeedTreeRT@@QAE@XZ
??1STextures@CSpeedTreeRT@@QAE@XZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??0SGeometry@CSpeedTreeRT@@QAE@XZ
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetTime@CSpeedTreeRT@@SAXM@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?DeleteTransientData@CSpeedTreeRT@@QAEXXZ
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
??1CSpeedTreeRT@@QAE@XZ
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
DirectInput8Create
_GrannySetControlEaseOutCurve@28
_GrannySetControlEaseOut@8
_GrannySetControlEaseInCurve@28
_GrannySetControlEaseIn@8
_GrannyGetControlLocalDuration@4
_GrannySetControlSpeed@8
_GrannyGetControlSpeed@4
_GrannySetControlLoopCount@8
_GrannyGetControlLoopCount@4
_GrannyFreeControlIfComplete@4
_GrannyControlIsComplete@4
_GrannyCompleteControlAt@8
_GrannyFreeControlOnceUnused@4
_GrannyFreeControl@4
_GrannyFindTrackGroupForModel@12
_GrannyGetSourceModel@4
_GrannyGetMeshIndexCount@4
_GrannyMeshIsRigid@4
_GrannyGetMeshVertexCount@4
_GrannyGetTotalTypeSize@4
_GrannyGetControlRawLocalClock@4
_GrannyGetWorldPose4x4@8
_GrannyPlayControlledAnimation@12
_GrannyNewWorldPose@4
_GrannyFindBoneByName@12
_GrannyGetMeshBindingToBoneIndices@4
_GrannyFreeMeshBinding@4
_GrannyNewMeshBinding@12
_GrannyFreeModelInstance@4
_GrannyInstantiateModel@4
_GrannyGetWorldPoseComposite4x4Array@4
_GrannyFreeLocalPose@4
_GrannyGetMeshTriangleGroupCount@4
_GrannyUpdateModelMatrix@20
_GrannySampleModelAnimationsAccelerated@20
_GrannyFreeCompletedModelControls@4
_GrannySetModelClock@8
_GrannyGetSourceSkeleton@4
_GrannyGetFileInfo@4
_GrannyFreeFile@4
_GrannyFreeFileSection@8
_GrannyReadEntireFileFromMemory@8
_GrannyGetWorldPoseComposite4x4@8
_GrannyConvertSingleObject@20
_GrannyFindMatchingMember@16
_GrannyGetMaterialTextureByType@8
_GrannySetControlRawLocalClock@8
_GrannyBeginControlledAnimation@8
_GrannyEndControlledAnimation@4
_GrannySetTrackGroupTarget@12
_GrannyFreeWorldPose@4
_GrannySetTrackGroupLOD@16
GrannyPNT332VertexType
_GrannyDeformVertices@24
_GrannyFreeMeshDeformer@4
_GrannyNewMeshDeformer@16
_GrannyCopyMeshIndices@12
_GrannyGetMeshVertices@4
_GrannyCopyMeshVertices@12
_GrannyGetMeshVertexType@4
_GrannyNewLocalPose@4
_GrannyGetMeshTriangleGroups@4
__current_exception_context
__AdjustPointer
__current_exception
__std_type_info_compare
strstr
strrchr
memchr
memset
__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
_except_handler4_common
__CxxFrameHandler3
memcpy
memmove
wcsrchr
_setjmp3
longjmp
__CxxFrameHandler
memcmp
__uncaught_exceptions
__uncaught_exception
__std_type_info_name
__RTDynamicCast
__std_type_info_destroy_list
_purecall
strchr
_set_app_type
_get_narrow_winmain_command_line
_initterm
_initterm_e
exit
_exit
_c_exit
_register_thread_local_exe_atexit_callback
_set_new_handler
perror
_controlfp_s
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_seh_filter_exe
_invalid_parameter_noinfo_noreturn
_errno
_cexit
_invalid_parameter_noinfo
terminate
system
_beginthreadex
_execute_onexit_table
_endthreadex
_crt_at_quick_exit
abort
_controlfp
signal
strerror
_resetstkoflw
__control87_2
__fpe_flt_rounds
_getpid
__sys_nerr
__sys_errlist
_register_onexit_function
_crt_atexit
isspace
_strupr
strcoll
isalpha
wcscoll
isdigit
strxfrm
strncmp
strlen
strcmp
strcat_s
iswdigit
towlower
wcsncpy_s
isupper
_wcsdup
islower
strcspn
__strncnt
strncat
strncpy
toupper
_wcsicmp
strncpy_s
isxdigit
isalnum
isprint
_strnicmp
_stricmp
tolower
strspn
wcsnlen
_strdup
strpbrk
wcsncmp
_CIsqrt
_CIexp
_libm_sse2_log10_precise
_libm_sse2_tan_precise
_CIacos
_finite
_ftol
frexp
ldexp
cosh
tanh
exp
_CIcosh
_CIsinh
_CIatan2
_libm_sse2_log_precise
tan
acos
__setusermatherr
_except1
asin
_libm_sse2_pow_precise
ceil
sinh
cos
_libm_sse2_asin_precise
sin
atan
_libm_sse2_exp_precise
_fdopen
sqrt
hypot
round
_copysign
_libm_sse2_sin_precise
_libm_sse2_cos_precise
_libm_sse2_acos_precise
_CIfmod
modf
_isnan
floor
_libm_sse2_sqrt_precise
fabs
_CIpow
_CItanh
fopen
clearerr
fwrite
_get_osfhandle
_lseeki64
fread
fseek
rewind
feof
__stdio_common_vswprintf
ftell
__stdio_common_vsprintf
fgets
__stdio_common_vsscanf
__acrt_iob_func
__stdio_common_vfprintf
fgetpos
fputs
fsetpos
fflush
putc
__stdio_common_vsnprintf_s
_wfopen
_wopen
_fsopen
_wfsopen
_get_stream_buffer_pointers
fgetc
fclose
getc
_fileno
_fseeki64
setvbuf
ungetc
_commit
tmpnam
tmpfile
_tempnam
_open_osfhandle
fopen_s
_getcwd
_kbhit
_setmode
freopen
_locking
__p__commode
_read
_write
_set_fmode
_close
_open
_isatty
_lseek
_dup2
__stdio_common_vfwprintf
__stdio_common_vswprintf_s
_dup
fputc
ferror
__stdio_common_vsprintf_s
free
calloc
malloc
_callnewh
_aligned_malloc
_heapmin
_set_new_mode
realloc
_aligned_free
rename
remove
_mkdir
_umask
_unlock_file
_stat64i32
_lock_file
_chmod
_access
_fstat64i32
_unlink
_fstat64
_stat64
_atoi64
wcstombs_s
strtoul
strtoll
mbstowcs_s
atol
atoi
_ecvt
strtof
wcstombs
atof
strtod
strtol
strftime
clock
_Gettnames
_Wcsftime
_W_Gettnames
_W_Getmonths
_W_Getdays
_Strftime
_Getdays
_time32
__daylight
__tzname
_mktime64
__timezone
_ftime64
_Getmonths
_tzset
_ctime64
_time64
_gmtime64
_localtime64
rand
srand
qsort
_lock_locales
setlocale
___mb_cur_max_func
___lc_collate_cp_func
_unlock_locales
localeconv
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_configthreadlocale
_putenv
getenv
__p__environ
_execve
_execv
_cwait
_spawnv
_spawnve
_getche
_getch
_ungetch
_putch
_mbstrlen
EnumFontFamiliesExA
GetPixel
GetDeviceCaps
TextOutA
CreateDIBSection
SetDIBitsToDevice
SetBkMode
DeleteDC
CreateCompatibleDC
TextOutW
SetTextColor
GetTextExtentPoint32A
SetBkColor
SelectObject
GetTextExtentPoint32W
GetCharABCWidthsFloatW
DeleteObject
CreateFontIndirectA
GetStockObject
VariantClear
SysFreeString
CertOpenStore
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA
CertFindExtension
CertAddCertificateContextToStore
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryA
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
ord301
ord200
ord30
ord79
ord35
ord33
ord32
ord27
ord26
ord22
ord41
ord50
ord45
ord60
ord211
ord46
ord217
ord143
IdnToUnicode
IdnToAscii
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ