AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Static task
static1
Behavioral task
behavioral1
Sample
8e9b200666ce1a6cddbc3846ce869b53bb4f9e109340f421c88efa10095931f9.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
8e9b200666ce1a6cddbc3846ce869b53bb4f9e109340f421c88efa10095931f9.exe
Resource
win10v2004-20230831-en
Target
8e9b200666ce1a6cddbc3846ce869b53bb4f9e109340f421c88efa10095931f9
Size
7.7MB
MD5
788225324955bda2d5a79d2fa5f42f8a
SHA1
39a498dd6a982e1fbf7ccf63d5378b32a140220b
SHA256
8e9b200666ce1a6cddbc3846ce869b53bb4f9e109340f421c88efa10095931f9
SHA512
f48facf0766215aa7b2483226b77623fa3710a13657bac878a5cbc343020be80aa0f0978ddeb03ea048b0105aa79e39b87b1aab55d4faa4a3fd8f2738880e3e3
SSDEEP
98304:m9wzs97FJ3tPFgh4pKbKtt4KMB1wUIEhxhlk1rILA9q8bHtIcRrqEGMkLwmlk5X6:oR55tqEGMVmBG9m
Checks for missing Authenticode signature.
resource |
---|
8e9b200666ce1a6cddbc3846ce869b53bb4f9e109340f421c88efa10095931f9 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
RaiseException
InterlockedIncrement
HeapValidate
InterlockedDecrement
LockResource
LoadResource
SizeofResource
FindResourceA
FindResourceW
GetModuleFileNameW
GetCPInfo
CompareStringEx
GetStringTypeW
CreateSymbolicLinkW
GetFileInformationByHandleEx
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
GetTickCount64
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateSemaphoreExW
CreateEventExW
SleepConditionVariableCS
WakeConditionVariable
RtlCaptureStackBackTrace
GetNativeSystemInfo
GetExitCodeThread
InitializeConditionVariable
InitOnceExecuteOnce
InitializeSRWLock
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetTempPathW
SetFileInformationByHandle
QueryPerformanceFrequency
LCMapStringEx
DecodePointer
EncodePointer
GetLocaleInfoEx
LocalFree
InitializeCriticalSectionEx
TryAcquireSRWLockExclusive
FormatMessageA
SetFilePointerEx
CreateFileW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SleepConditionVariableSRW
CreateSemaphoreA
PeekNamedPipe
WaitForSingleObject
ReleaseSemaphore
GetLocaleInfoA
CompareStringA
WideCharToMultiByte
lstrlenW
GlobalLock
GlobalUnlock
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
GetSystemDirectoryA
WriteFile
SetFilePointer
ReadFile
WinExec
GetCurrentThread
OutputDebugStringA
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetSystemInfo
GetFileSize
GlobalAlloc
GetModuleFileNameA
WaitNamedPipeW
UnhandledExceptionFilter
GetTempFileNameA
GetTempPathA
RemoveDirectoryA
DeleteFileA
CreateDirectoryA
AllocConsole
TlsFree
CreateEventA
LoadLibraryExA
SetErrorMode
CreateDirectoryW
FindFirstFileW
MoveFileA
GetFileAttributesExA
GetFullPathNameW
FindNextFileW
RemoveDirectoryW
SetFileTime
SetEnvironmentVariableW
CreatePipe
GetFileAttributesW
DuplicateHandle
OpenProcess
GetVersion
SetCurrentDirectoryA
SetFileAttributesW
GetFileAttributesExW
DeleteFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetEnvironmentVariableA
SystemTimeToFileTime
GetSystemTime
MoveFileW
GetProcessTimes
GenerateConsoleCtrlEvent
GetExitCodeProcess
GetACP
SetConsoleCtrlHandler
ResetEvent
ExpandEnvironmentStringsW
FlushViewOfFile
TryEnterCriticalSection
FreeLibraryAndExitThread
LoadLibraryExW
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
LoadLibraryW
SignalObjectAndWait
SwitchToThread
SetUnhandledExceptionFilter
TerminateProcess
SleepEx
GetTickCount
SetLastError
FormatMessageW
MoveFileExA
WaitForSingleObjectEx
GetEnvironmentVariableA
GetStdHandle
GetFileType
WaitForMultipleObjects
VerSetConditionMask
VerifyVersionInfoW
GetFileSizeEx
CreateThread
GetThreadPriority
GetCurrentProcessorNumberEx
GetLogicalProcessorInformation
GetLogicalProcessorInformationEx
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetThreadGroupAffinity
SetThreadGroupAffinity
RegisterWaitForSingleObject
UnregisterWait
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetThreadTimes
GetConsoleOutputCP
GetConsoleCP
OutputDebugStringW
GetFileInformationByHandle
GetFileAttributesA
IsDBCSLeadByte
GetFullPathNameA
SetEndOfFile
TlsSetValue
SetEvent
TlsAlloc
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
SetThreadPriority
IsProcessorFeaturePresent
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetPrivateProfileStringA
lstrlenA
GetModuleHandleA
VirtualProtect
CreateProcessA
GetCurrentDirectoryA
FindNextFileA
FindFirstFileA
FindClose
MultiByteToWideChar
SetFileAttributesA
Sleep
Module32Next
Module32First
CreateToolhelp32Snapshot
ReadProcessMemory
GetCurrentProcessId
GetCurrentProcess
GetLastError
GetProcessHeap
HeapFree
HeapAlloc
DeviceIoControl
CloseHandle
InitializeCriticalSection
CreateFileA
TlsGetValue
DispatchMessageA
PostQuitMessage
PeekMessageA
TranslateMessage
GetMessageA
LoadStringA
ShowWindow
SystemParametersInfoA
CloseClipboard
GetClipboardData
LoadCursorA
ClientToScreen
SetCursorPos
CharNextW
SetWindowLongA
GetWindowLongA
SetRect
CharNextExA
GetKeyboardLayout
FlashWindowEx
AdjustWindowRectEx
GetKeyboardLayoutNameA
GetWindowRect
GetSystemMetrics
GetClientRect
SetWindowTextA
InvalidateRect
GetMenu
MoveWindow
DestroyWindow
IsWindow
CreateWindowExA
ReleaseDC
RegisterClassA
GetCapture
SetCapture
CharPrevExA
GetKeyState
DefWindowProcA
ReleaseCapture
MessageBoxA
MonitorFromPoint
SetWindowPos
GetAsyncKeyState
ShowCursor
GetMonitorInfoA
SetCursor
LoadIconA
ChangeDisplaySettingsA
GetCursorPos
FindWindowA
ScreenToClient
CharPrevA
GetDC
DestroyCursor
LoadImageA
OpenClipboard
CryptCreateHash
CryptGenRandom
CryptGetHashParam
CryptDestroyHash
CryptDestroyKey
CryptImportKey
CryptReleaseContext
CryptEncrypt
RegEnumKeyExA
RegSaveKeyA
RegConnectRegistryA
RegDeleteValueA
RegEnumValueA
RegQueryInfoKeyA
CryptAcquireContextA
RegSetValueExW
RegCreateKeyExW
RegOpenKeyA
RegLoadKeyA
RegSetValueExA
RegQueryValueA
RegFlushKey
RegCreateKeyExA
RegDeleteKeyA
RegSetValueA
RegCreateKeyA
RegQueryValueExA
RegOpenKeyExA
CryptHashData
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SHGetSpecialFolderPathA
SHFileOperationA
ShellExecuteW
ShellExecuteA
CoUninitialize
CoCreateInstance
CoInitializeEx
timeGetTime
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
Direct3DCreate8
GetPerAdapterInfo
GetAdaptersInfo
ImmGetContext
ImmReleaseContext
ImmAssociateContext
ImmGetCompositionStringW
ImmSetCompositionStringW
ImmGetCandidateListW
ImmGetConversionStatus
ImmSetConversionStatus
ImmGetOpenStatus
ImmNotifyIME
ImmGetIMEFileNameA
ImmIsIME
ilTexImage
ilSetPixels
ilSave
ilShutDown
ilOriginFunc
ilInit
ilGetInteger
ilBindImage
ilGenImages
ilEnable
ilDeleteImages
ilCopyPixels
ilConvertImage
ilLoad
WSACloseEvent
setsockopt
WSACreateEvent
WSAEnumNetworkEvents
gethostbyname
WSASetEvent
WSAWaitForMultipleEvents
bind
ntohl
inet_addr
WSAEventSelect
htons
htonl
WSACleanup
WSAStartup
WSAGetLastError
socket
send
select
recv
ioctlsocket
connect
closesocket
getpeername
getsockname
sendto
recvfrom
freeaddrinfo
getsockopt
getaddrinfo
__WSAFDIsSet
listen
accept
gethostname
WSASetLastError
ntohs
WSAResetEvent
WSAIoctl
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
StackWalk
EnumerateLoadedModules
GetTimestampForLoadedLibrary
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
?DeleteTransientData@CSpeedTreeRT@@QAEXXZ
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
??3CSpeedTreeRT@@SAXPAX@Z
??2CSpeedTreeRT@@SAPAXI@Z
??1CSpeedTreeRT@@QAE@XZ
??0CSpeedTreeRT@@QAE@XZ
??1STextures@CSpeedTreeRT@@QAE@XZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??0SGeometry@CSpeedTreeRT@@QAE@XZ
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetTime@CSpeedTreeRT@@SAXM@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
DirectInput8Create
WinHttpSendRequest
WinHttpOpen
WinHttpCloseHandle
WinHttpConnect
WinHttpOpenRequest
WinHttpReceiveResponse
_GrannySetControlEaseInCurve@28
_GrannySetControlEaseIn@8
_GrannyGetControlLocalDuration@4
_GrannySetControlSpeed@8
_GrannyGetControlSpeed@4
_GrannySetControlLoopCount@8
_GrannyGetControlLoopCount@4
_GrannyFreeControlIfComplete@4
_GrannyControlIsComplete@4
_GrannyCompleteControlAt@8
_GrannyFreeControlOnceUnused@4
_GrannyFreeControl@4
_GrannyGetMeshIndexCount@4
_GrannyMeshIsRigid@4
_GrannyGetMeshVertexCount@4
_GrannyGetTotalTypeSize@4
_GrannyGetWorldPoseComposite4x4@8
_GrannyGetWorldPose4x4@8
_GrannyFreeWorldPose@4
_GrannyNewWorldPose@4
_GrannyFindBoneByName@12
_GrannyGetMeshBindingToBoneIndices@4
_GrannyFreeMeshBinding@4
_GrannyNewMeshBinding@12
_GrannyFreeModelInstance@4
_GrannySetControlEaseOut@8
_GrannyGetWorldPoseComposite4x4Array@4
_GrannyFreeLocalPose@4
_GrannyNewLocalPose@4
_GrannyUpdateModelMatrix@20
_GrannySampleModelAnimationsAccelerated@20
_GrannyFreeCompletedModelControls@4
_GrannySetModelClock@8
_GrannyGetSourceSkeleton@4
_GrannyGetFileInfo@4
_GrannyFreeFile@4
_GrannyFreeFileSection@8
_GrannyReadEntireFileFromMemory@8
_GrannyConvertSingleObject@20
_GrannyFindMatchingMember@16
_GrannyGetMaterialTextureByType@8
_GrannyGetLogMessageOriginString@4
_GrannyGetMeshVertexType@4
_GrannyCopyMeshVertices@12
_GrannyGetMeshVertices@4
_GrannyCopyMeshIndices@12
_GrannyGetLogMessageTypeString@4
_GrannyNewMeshDeformer@16
_GrannyFreeMeshDeformer@4
_GrannyDeformVertices@24
GrannyPNT332VertexType
_GrannySetControlEaseOutCurve@28
_GrannySetControlRawLocalClock@8
_GrannySetLogCallback@4
_GrannyPlayControlledAnimation@12
_GrannyGetControlRawLocalClock@4
_GrannyGetMeshTriangleGroupCount@4
_GrannyInstantiateModel@4
_GrannyGetMeshTriangleGroups@4
strchr
memchr
_purecall
memmove
strrchr
strstr
memcpy
__CxxFrameHandler3
_CxxThrowException
__current_exception
memset
__std_exception_copy
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
memcmp
__RTDynamicCast
__AdjustPointer
__std_type_info_compare
__std_type_info_name
__uncaught_exception
__std_exception_destroy
__uncaught_exceptions
__CxxFrameHandler
longjmp
_setjmp3
wcsrchr
__std_terminate
_controlfp_s
_initterm_e
_initterm
_c_exit
_get_narrow_winmain_command_line
_set_app_type
_seh_filter_exe
_invalid_parameter_noinfo_noreturn
_cexit
_exit
_crt_atexit
_execute_onexit_table
_beginthreadex
_set_new_handler
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
perror
abort
_configure_narrow_argv
_register_thread_local_exe_atexit_callback
_seh_filter_dll
terminate
system
_errno
_invalid_parameter_noinfo
_controlfp
_crt_at_quick_exit
_endthreadex
strerror
__sys_errlist
__sys_nerr
_getpid
exit
__control87_2
__fpe_flt_rounds
_resetstkoflw
signal
_strupr
isalpha
isdigit
strlen
strcmp
iswdigit
towlower
isupper
_wcsdup
islower
strcspn
__strncnt
wcsncpy_s
strncpy_s
strncpy
isspace
strxfrm
isalnum
isprint
tolower
toupper
wcscoll
strcoll
wcsnlen
_strdup
strpbrk
_strnicmp
strncmp
_stricmp
wcsncmp
strspn
strncat
isxdigit
_wcsicmp
_CIacos
_ftol
_CIpow
log2
_CItanh
frexp
_isnan
ldexp
modf
_copysign
round
hypot
_fdopen
atan
cos
_CIcosh
_CIsinh
_libm_sse2_exp_precise
sqrt
fabs
_libm_sse2_tan_precise
_libm_sse2_log10_precise
sinh
_CIatan2
_libm_sse2_log_precise
asin
acos
__setusermatherr
_except1
_libm_sse2_sqrt_precise
floor
tan
exp
_CIfmod
tanh
_libm_sse2_acos_precise
_libm_sse2_pow_precise
_libm_sse2_cos_precise
_libm_sse2_sin_precise
ceil
_libm_sse2_asin_precise
cosh
_CIexp
_CIsqrt
_finite
sin
ferror
rewind
clearerr
putc
__stdio_common_vsprintf
fgets
_wfopen
_lseeki64
__stdio_common_vsscanf
_open
setvbuf
ungetc
__acrt_iob_func
feof
__stdio_common_vswprintf
__stdio_common_vfprintf
fgetpos
fputs
fsetpos
fflush
_wopen
__stdio_common_vsnprintf_s
fseek
_commit
tmpnam
tmpfile
_tempnam
fread
_open_osfhandle
fwrite
_kbhit
getc
_fileno
fputc
_setmode
_locking
fopen
fclose
_dup2
__stdio_common_vsprintf_s
_dup
_lseek
_isatty
_close
_getcwd
fgetc
__stdio_common_vfwprintf
freopen
__stdio_common_vswprintf_s
__p__commode
_write
_get_osfhandle
_set_fmode
_read
ftell
fopen_s
free
malloc
realloc
_aligned_free
_aligned_malloc
calloc
_callnewh
_set_new_mode
_heapmin
remove
_access
_stat64i32
_mkdir
rename
_fstat64
_unlink
_fstat64i32
_umask
_chmod
_stat64
strtol
_ecvt
wcstombs_s
mbstowcs_s
strtoll
atoi
strtoul
_atoi64
strtof
atol
atof
strtod
wcstombs
_gmtime64
_Strftime
_Gettnames
_Wcsftime
_time32
_W_Gettnames
_W_Getmonths
_W_Getdays
_ftime64
_Getmonths
strftime
__timezone
_mktime64
__tzname
__daylight
_Getdays
clock
_ctime64
_tzset
_time64
_localtime64
qsort
rand
srand
__pctype_func
setlocale
_unlock_locales
_lock_locales
_configthreadlocale
___lc_locale_name_func
___lc_codepage_func
localeconv
___mb_cur_max_func
___lc_collate_cp_func
getenv
_putenv
getenv_s
__p__environ
_execv
_execve
_cwait
_spawnve
_spawnv
_ungetch
_getche
_getch
_putch
_mbstrlen
CreateFontIndirectA
DeleteObject
GetDeviceCaps
EnumFontFamiliesExA
GetStockObject
GetCharABCWidthsFloatW
GetTextExtentPoint32W
SelectObject
SetBkColor
SetTextColor
TextOutW
CreateCompatibleDC
DeleteDC
GetTextExtentPoint32A
SetBkMode
SetDIBitsToDevice
CreateDIBSection
TextOutA
GetPixel
VariantClear
SysFreeString
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA
CertOpenStore
CertCloseStore
CertAddCertificateContextToStore
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryA
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertFindExtension
CertFreeCertificateChain
ord79
ord301
ord33
ord27
ord30
ord200
ord143
ord46
ord35
ord211
ord217
ord60
ord26
ord22
ord45
ord50
ord41
ord32
IdnToUnicode
IdnToAscii
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ