AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Static task
static1
Behavioral task
behavioral1
Sample
b2f131be3778f8514897e3b4ad69ab58df5cf61794eaeb73d42dd9ad5676929e.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b2f131be3778f8514897e3b4ad69ab58df5cf61794eaeb73d42dd9ad5676929e.exe
Resource
win10v2004-20230915-en
Target
b2f131be3778f8514897e3b4ad69ab58df5cf61794eaeb73d42dd9ad5676929e
Size
359KB
MD5
26683deff34943dc0bfffb6a684ab64b
SHA1
77b9be87abf6907a0bd0f94c2a7004a0e9f9550f
SHA256
b2f131be3778f8514897e3b4ad69ab58df5cf61794eaeb73d42dd9ad5676929e
SHA512
8bad047af3d371f02f23c560090d648f4af63b5d0c91bc3fbf1309b163728d4a434a14a198b3ad9e9a11cd3ffb4e52f5bc77aba3f81b5b169e9140081f6196d6
SSDEEP
3072:FEAYQnstKp2YUbsMBsz3Zuky8ledx5ZLvQDuEF+Zl:FEABstbsMBboYZLWF+Zl
Checks for missing Authenticode signature.
resource |
---|
b2f131be3778f8514897e3b4ad69ab58df5cf61794eaeb73d42dd9ad5676929e |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?CheckEntityVersion@@YAXXZ
NtQueryInformationProcess
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
MoveFileA
GetSystemDefaultLangID
CreateToolhelp32Snapshot
Process32First
Process32Next
Sleep
GetLastError
CloseHandle
CheckRemoteDebuggerPresent
DeleteFileA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
LoadLibraryA
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
UnmapViewOfFile
CreateFileMappingA
OpenFileMappingA
MapViewOfFile
OpenEventA
WaitForSingleObject
CreateEventA
FindFirstFileA
FindNextFileA
GetFullPathNameA
FindClose
SetCurrentDirectoryA
CreateFileA
GetCurrentDirectoryA
GetProcAddress
GetModuleFileNameA
FreeLibrary
OpenProcess
GetThreadContext
CreateThread
TerminateProcess
GetCurrentProcessId
ResetEvent
GetCurrentThread
GetCurrentProcess
ShowWindow
DestroyWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
SetWindowPos
CreateDialogParamA
SetFocus
GetSystemMetrics
UpdateWindow
GetDC
ReleaseDC
BeginPaint
EndPaint
GetClientRect
GetWindowRect
MessageBoxA
FillRect
SetWindowLongA
GetDesktopWindow
LoadBitmapA
LoadIconA
ChangeDisplaySettingsA
InvalidateRect
RegisterClassA
LoadCursorA
GetWindow
GetWindowThreadProcessId
FindWindowA
GetParent
ShowCursor
GetWindowTextA
IsIconic
SendMessageA
PeekMessageA
DispatchMessageA
TranslateMessage
DeleteDC
CreateCompatibleDC
BitBlt
GetObjectA
GetStockObject
GetDeviceCaps
DeleteObject
SelectObject
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
_Mbrtowc
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Getdays@_Locinfo@std@@QBEPBDXZ
?_Getmonths@_Locinfo@std@@QBEPBDXZ
?_W_Getdays@_Locinfo@std@@QBEPBGXZ
?_W_Getmonths@_Locinfo@std@@QBEPBGXZ
??Bid@locale@std@@QAEIXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?tolower@?$ctype@D@std@@QBEDD@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?good@ios_base@std@@QBE_NXZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
??0_Lockit@std@@QAE@H@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?width@ios_base@std@@QAE_J_J@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?id@?$ctype@D@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
?ThrowF_t@@YAXPADZZ
?CloseWebPage@cWeb@@QAEHPAUHWND__@@@Z
?SetValue@CShell@@QAEXABVCTString@@0@Z
?GetValue@CShell@@QAE?AVCTString@@ABV2@@Z
?GetLine_t@CTStream@@QAEXAAVCTString@@D@Z
?TranslateConst@@YAPBDPBDJ@Z
?TrimSpacesRight@CTString@@QAEJXZ
?RemovePrefix@CTString@@QAEHABV1@@Z
?Clear@CTString@@QAEXXZ
?RemReference@CEntity@@QAEXXZ
?AddReference@CEntity@@QAEXXZ
?g_bNoPlaySnd@@3HA
?g_fFramePerSecond@@3MA
?g_iCountry@@3JA
?snd_iFormat@@3JA
?g_szExitError@@3PADA
?_pEntityClassStock@@3PAVCStock_CEntityClass@@A
?g_nmVER@@3VCTString@@A
?g_nmCID@@3VCTString@@A
?g_nmPW@@3VCTString@@A
?g_nmID@@3VCTString@@A
?g_bAutoLogin@@3HA
?sam_bWideScreen@@3JA
?sam_iGfxAPI@@3JA
?sam_iDisplayAdapter@@3JA
?sam_iDisplayDepth@@3JA
?_bClientApp@@3HA
?_pfdDisplayFont@@3PAVCFontData@@A
?_pSound@@3PAVCSoundLibrary@@A
?_pNetwork@@3PAVCNetworkLibrary@@A
?_pTimer@@3PAVCTimer@@A
?_strModExt@@3VCTString@@A
?_fnmApplicationPath@@3VCTFileName@@A
?CheckEngineVersion@@YAXXZ
?initialize@CWebAddress@@QAEXXZ
?End@cWeb@@QAEHXZ
?Begin@cWeb@@QAEHXZ
?SetNextStage@StageMgr@@QAEXW4eSTAGE@@0@Z
?Run@StageMgr@@QAEXXZ
?Create@StageMgr@@QAEXXZ
?getSingleton@?$CSingletonBase@VStageMgr@@@@SAPAVStageMgr@@XZ
?setVersion@CUILoginNew@@QAEXPBD@Z
?Create@GameDataManager@@QAEXXZ
?SetDesktopSize@CUIOption@@QAEXJJ@Z
?DestroyRenderTarget@CUIManager@@QAEXXZ
?InitRenderTarget@CUIManager@@QAEXHH@Z
?MsgProc@CUIManager@@QAEXPAUtagMSG@@PAH@Z
?GetMouseCursor@CUIManager@@QAEPAVCUIMouseCursor@@XZ
?AdjustUIPos@CUIManager@@QAEXPAVCDrawPort@@@Z
?ResetUIPos@CUIManager@@QAEXPAVCDrawPort@@@Z
?SetGameHandle@CUIManager@@QAEXPAVCGame@@@Z
?ResetSHIT@CUIManager@@QAEXXZ
?GETUPDATESHIT@CUIManager@@QAEHXZ
?Create@CUIManager@@QAEXXZ
?Release@CStock_CEntityClass@@QAEXPAVCEntityClass@@@Z
?Obtain_t@CStock_CEntityClass@@QAEPAVCEntityClass@@ABVCTFileName@@@Z
?GetGameMode@CGameState@@QAEAAJXZ
?SE_Destroy_WebAddressPtr@@YAXXZ
?SE_Get_GameDataManagerPtr@@YAPAVGameDataManager@@XZ
?SE_Get_WebAddressPtr@@YAPAVCWebAddress@@XZ
?SE_LoadDefaultFonts@@YAXXZ
?SE_EndEngine@@YAXXZ
?SE_InitEngine@@YAXVCTString@@@Z
?UpdateSounds@CSoundLibrary@@QAEXXZ
?SetFormat@CSoundLibrary@@QAEXW4SoundFormat@1@H@Z
?SetVolume@CSoundObject@@QAEXMH@Z
??1CSoundObject@@QAE@XZ
??0CSoundObject@@QAE@XZ
?GameInactive@CNetworkLibrary@@QAEXXZ
?InitPos@CUIBase@@QAEXHHHH@Z
?PutTexture@CDrawPort@@QBEXPAVCTextureObject@@ABV?$AABBox@J$01@@1KK@Z
?PutText@CDrawPort@@QBEXABVCTString@@JJK@Z
?SetTextShadow@CDrawPort@@QAEXM@Z
?SetTextAspect@CDrawPort@@QAEXM@Z
?SetTextScaling@CDrawPort@@QAEXM@Z
?SetFont@CDrawPort@@QAEXPAVCFontData@@@Z
?GetHeight@CDrawPort@@QBEJXZ
?GetWidth@CDrawPort@@QBEJXZ
?IsTripleHead@CDrawPort@@QAEHXZ
?IsDualHead@CDrawPort@@QAEHXZ
?MakeWideScreen@CDrawPort@@QAEXPAV1@@Z
??0CDrawPort@@QAE@PAV0@J@Z
??1CDrawPort@@QAE@XZ
??0CDrawPort@@QAE@XZ
?InitSEEDEncrypt@CMessageDispatcher@@SAXXZ
??1CTextureObject@@QAE@XZ
?SetData_t@CTextureObject@@QAEXABVCTFileName@@@Z
??0CTextureObject@@QAE@XZ
?Force@CTextureData@@QAEXK@Z
?GetPixWidth@CTextureData@@QBEJXZ
?GetWidth@CTextureData@@QBEJXZ
?Benchmark@CGfxLibrary@@QAEXPAVCViewPort@@PAVCDrawPort@@@Z
?DestroyWindowCanvas@CGfxLibrary@@QAEXPAVCViewPort@@@Z
?IsCurrentModeAccelerated@CGfxLibrary@@QAEHXZ
?ResetDisplayMode@CGfxLibrary@@QAEHW4GfxAPIType@@@Z
?LerpColor@@YAKKKM@Z
?IsWideScreen@CDisplayMode@@QAEHXZ
?IsTripleHead@CDisplayMode@@QAEHXZ
?IsDualHead@CDisplayMode@@QAEHXZ
?DepthString@CDisplayMode@@QBE?AVCTString@@XZ
??0CDisplayMode@@QAE@XZ
?GetHighPrecisionTimer@CTimer@@QAE?AVCTimerValue@@XZ
?GetRealTimeTick@CTimer@@QBEMXZ
?ExpandFilePath@@YAJKABVCTFileName@@AAV1@@Z
?ExceptionFatalError@CTStream@@SAXXZ
?ExceptionFilter@CTStream@@SAHKPAU_EXCEPTION_POINTERS@@@Z
?ClearStreamHandling@CTStream@@SAXXZ
?DisableStreamHandling@CTStream@@SAXXZ
?EnableStreamHandling@CTStream@@SAXXZ
?FileName@CTFileName@@QBE?AV1@XZ
?FileDir@CTFileName@@QBE?AV1@XZ
??0CTFileName@@QAE@PBDH@Z
?FinishTranslationTable@@YAXXZ
?AddTranslationTablesDir_t@@YAXABVCTFileName@@0@Z
?InitTranslation@@YAXXZ
?GetWindowsError@@YA?BVCTString@@K@Z
?OpenWebPage@cWeb@@QAEHPAUHWND__@@@Z
?MEM_CAlloc@@YAPAXII@Z
?DeleteChars@CTString@@QAEXJJ@Z
?IsEqualCaseSensitive@CTString@@QBEHABV1@@Z
?TrimRight@CTString@@QAEJJ@Z
?FindSubstr@CTString@@QAEJABV1@@Z
?Length@CTString@@QBEJXZ
?g_web@@3VcWeb@@A
?_hDlgWeb@@3PAUHWND__@@A
?_hwndMain@@3PAUHWND__@@A
?_pGameState@@3PAVCGameState@@A
?sam_iScreenSizeJ@@3JA
?sam_iScreenSizeI@@3JA
?sam_bFullScreenActive@@3JA
?_hInstanceMain@@3PAUHINSTANCE__@@A
?_pvpViewPortMain@@3PAVCViewPort@@A
?_pdpNormalMain@@3PAVCDrawPort@@A
?_pdpMain@@3PAVCDrawPort@@A
?_bWindowChanging@@3HA
?SetTitleName@CUIManager@@QAEXJHH@Z
?UPDATESHIT@CUIManager@@QAEXXZ
?InitInterface@CUIOption@@QAEXXZ
?UpdatePos@cWeb@@QAEXXZ
?SetWebDlgCallBack@cWeb@@QAEXP6GHPAUHWND__@@IIJ@Z@Z
?GetWebHandle@cWeb@@QAEPAUHWND__@@XZ
?SetWebDlgID@cWeb@@QAEXJ@Z
??0CTString@@QAE@XZ
??0CTString@@QAE@ABV0@@Z
??0CTString@@QAE@PBD@Z
??0CTString@@QAA@JPBDZZ
??1CTString@@QAE@XZ
??BCTString@@QBEPBDXZ
??4CTString@@QAEAAV0@PBD@Z
??4CTString@@QAEAAV0@ABV0@@Z
?TrimSpacesLeft@CTString@@QAEJXZ
??8CTString@@QBEHPBD@Z
??9CTString@@QBEHPBD@Z
??HCTString@@QBE?AV0@ABV0@@Z
??YCTString@@QAEAAV0@ABV0@@Z
??H@YA?AVCTString@@PBDABV0@@Z
?Split@CTString@@QAEXJAAV1@0@Z
?DeleteChar@CTString@@QAEXJ@Z
?ScanF@CTString@@QAAJPBDZZ
?Translate@@YAPADPADJ@Z
??4CTFileName@@QAEXABVCTString@@@Z
?_fnmMod@@3VCTFileName@@A
?_fnmCDPath@@3VCTFileName@@A
?_strLogFile@@3VCTString@@A
?cmd_iWindowLeft@@3JA
?cmd_iWindowTop@@3JA
??8CTString@@QBEHABV0@@Z
?Matches@CTString@@QBEHABV1@@Z
?PrintF@CTString@@QAAJPBDZZ
?WarningMessage@@YAXPBDZZ
??0CListNode@@QAE@XZ
??1CListNode@@QAE@XZ
?IsTailMarker@CListNode@@QBEHXZ
?IterationSucc@CListNode@@QBEAAV1@XZ
??0CListHead@@QAE@XZ
?IterationHead@CListHead@@QBEAAVCListNode@@XZ
?AddTail@CListHead@@QAEXAAVCListNode@@@Z
??0CTFileName@@QAE@XZ
??0CTFileName@@QAE@ABVCTString@@@Z
??1CTFileName@@QAE@XZ
?AtEOF@CTStream@@QAEHXZ
?GetLine_t@CTStream@@QAEXPADJD@Z
??0CTFileStream@@QAE@XZ
??1CTFileStream@@UAE@XZ
?Open_t@CTFileStream@@QAEXABVCTFileName@@W4OpenMode@CTStream@@@Z
?CPrintF@@YAXPBDZZ
?DeclareSymbol@CShell@@QAEXABVCTString@@PAX@Z
?Execute@CShell@@QAEXABVCTString@@@Z
?_pShell@@3PAVCShell@@A
?_pGfx@@3PAVCGfxLibrary@@A
?FatalError@@YAXPBDZZ
?CreateWindowCanvas@CGfxLibrary@@QAEXPAXPAPAVCViewPort@@PAPAVCDrawPort@@@Z
?Lock@CDrawPort@@QAEHXZ
?Unlock@CDrawPort@@QAEXXZ
?Fill@CDrawPort@@QBEXK@Z
?SetWidth@CUIBase@@QAEXH@Z
?SetHeight@CUIBase@@QAEXH@Z
?SwapBuffers@CViewPort@@QAEXH@Z
?Resize@CViewPort@@QAEXXZ
?SE_UpdateWindowHandle@@YAXPAUHWND__@@0@Z
?SE_Get_UIManagerPtr@@YAPAVCUIManager@@XZ
?Running@CGameState@@QAEAAHXZ
?QuitScreen@CGameState@@QAEAAHXZ
?IsWebHandle@cWeb@@QAEHXZ
?SetWebHandle@cWeb@@QAEXPAUHWND__@@@Z
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
strchr
__std_type_info_destroy_list
__CxxFrameHandler3
memset
_except_handler4_common
__current_exception_context
__current_exception
memmove
memcpy
memcmp
memchr
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__std_terminate
_stricmp
isspace
strncpy
_strnicmp
_strdup
__p__commode
__stdio_common_vsscanf
_get_stream_buffer_pointers
_set_fmode
fclose
fflush
ungetc
setvbuf
fwrite
_fseeki64
fsetpos
fread
fputc
fopen
fgetpos
fgetc
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
exit
_register_thread_local_exe_atexit_callback
_configure_narrow_argv
_c_exit
_initialize_onexit_table
_controlfp_s
_register_onexit_function
_controlfp
_exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_set_app_type
_seh_filter_exe
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_unlock_file
_lock_file
_time32
_execv
malloc
_callnewh
free
_set_new_mode
__setusermatherr
_except1
_configthreadlocale
PathAppendA
PathFileExistsA
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
SetFileSecurityA
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ