AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Static task
static1
Behavioral task
behavioral1
Sample
f9bf0d1a0bf4392a7de74ae93b832737f63185b30ebe963ba69c6d47d1ec58c3.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
f9bf0d1a0bf4392a7de74ae93b832737f63185b30ebe963ba69c6d47d1ec58c3.exe
Resource
win10v2004-20231020-en
Target
f9bf0d1a0bf4392a7de74ae93b832737f63185b30ebe963ba69c6d47d1ec58c3
Size
7.8MB
MD5
c091c37267605bbaa847b8df43078c4d
SHA1
6958b1d97c9ff913b28ea9b91e2211c84abf2203
SHA256
f9bf0d1a0bf4392a7de74ae93b832737f63185b30ebe963ba69c6d47d1ec58c3
SHA512
bb829a995c8fe56f36d1694c20a003aeb65e6663614f495981f6011e48238eeeec88017bab30d4ada2b9489eda665cfc5ed520586b443081879032757e03c560
SSDEEP
98304:jwwDz3lu76c2oSHojOceFoK2UV1SHFT5y8i16/4x1jbH7MvkqhP:UVCojbI0TBGQvr
Checks for missing Authenticode signature.
resource |
---|
f9bf0d1a0bf4392a7de74ae93b832737f63185b30ebe963ba69c6d47d1ec58c3 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
GetNativeSystemInfo
RtlCaptureStackBackTrace
WriteFile
GetSystemDirectoryA
GetVersionExA
FreeLibrary
LoadLibraryA
RaiseException
GlobalUnlock
GlobalLock
lstrlenW
WideCharToMultiByte
AcquireSRWLockExclusive
SetFilePointer
ReadFile
OutputDebugStringA
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetSystemInfo
GetFileSize
GlobalAlloc
GetModuleFileNameA
GetTempFileNameA
GetTempPathA
RemoveDirectoryA
DeleteFileA
CreateDirectoryA
AllocConsole
FlsFree
InitializeSRWLock
InitOnceExecuteOnce
InitializeConditionVariable
WakeConditionVariable
SleepConditionVariableCS
CreateEventExW
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetTickCount64
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetFileInformationByHandleEx
CreateSymbolicLinkW
GetStringTypeW
CompareStringEx
GetCPInfo
InterlockedIncrement
HeapValidate
InterlockedDecrement
LockResource
ReleaseSRWLockExclusive
SizeofResource
FindResourceA
FindResourceW
GetModuleFileNameW
PeekNamedPipe
WaitNamedPipeW
SleepEx
GetTickCount
SetLastError
FormatMessageW
MoveFileExA
WakeAllConditionVariable
GetEnvironmentVariableA
GetStdHandle
GetFileType
WaitForMultipleObjects
VerSetConditionMask
VerifyVersionInfoW
GetFileSizeEx
GetCurrentThread
GetThreadTimes
GetConsoleOutputCP
GetConsoleCP
OutputDebugStringW
GetFileInformationByHandle
GetFileAttributesA
SleepConditionVariableSRW
CompareStringA
IsDBCSLeadByte
GetFullPathNameA
SetEndOfFile
TlsSetValue
SetEvent
TlsAlloc
TlsGetValue
GetExitCodeThread
TlsFree
CreateEventA
LoadLibraryExA
SetErrorMode
CreateDirectoryW
FindFirstFileW
MoveFileA
GetFileAttributesExA
GetFullPathNameW
FindNextFileW
RemoveDirectoryW
SetFileTime
SetEnvironmentVariableW
CreatePipe
GetFileAttributesW
DuplicateHandle
OpenProcess
GetVersion
SetCurrentDirectoryA
SetFileAttributesW
GetFileAttributesExW
DeleteFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetEnvironmentVariableA
SystemTimeToFileTime
CreateProcessA
GetSystemTime
MoveFileW
GetProcessTimes
GenerateConsoleCtrlEvent
GetExitCodeProcess
GetACP
SetConsoleCtrlHandler
ResetEvent
ExpandEnvironmentStringsW
FlushViewOfFile
TryEnterCriticalSection
FreeLibraryAndExitThread
LoadLibraryExW
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
SignalObjectAndWait
SwitchToThread
GetLocaleInfoA
ReleaseSemaphore
WaitForSingleObject
SetThreadPriority
CreateSemaphoreA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateFileW
SetFilePointerEx
FormatMessageA
TryAcquireSRWLockExclusive
CreateThread
GetThreadPriority
GetCurrentProcessorNumberEx
GetLogicalProcessorInformation
GetLogicalProcessorInformationEx
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetThreadGroupAffinity
SetThreadGroupAffinity
RegisterWaitForSingleObject
UnregisterWait
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
InitializeCriticalSectionEx
LocalFree
GetLocaleInfoEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceFrequency
SetFileInformationByHandle
GetTempPathW
FlsAlloc
FlsGetValue
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
FlsSetValue
TerminateProcess
SetUnhandledExceptionFilter
GetPrivateProfileStringA
lstrlenA
LoadLibraryW
GetProcAddress
GetModuleHandleA
VirtualProtect
RemoveVectoredExceptionHandler
AddVectoredExceptionHandler
GetCurrentDirectoryA
FindNextFileA
FindFirstFileA
FindClose
MultiByteToWideChar
SetFileAttributesA
Sleep
Module32Next
Module32First
CreateToolhelp32Snapshot
ReadProcessMemory
GetCurrentProcessId
GetCurrentProcess
WaitForSingleObjectEx
GetLastError
GetProcessHeap
HeapFree
UnhandledExceptionFilter
HeapAlloc
DeviceIoControl
CloseHandle
LoadResource
CreateFileA
FlashWindowEx
MessageBoxA
SetCapture
CreateWindowExA
IsWindow
DestroyWindow
GetCursorPos
MoveWindow
GetMenu
InvalidateRect
SetWindowTextA
GetClientRect
GetAsyncKeyState
GetWindowRect
AdjustWindowRectEx
SetRect
GetWindowLongA
SetWindowLongA
LoadCursorA
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
GetDC
ReleaseDC
GetKeyboardLayoutNameA
GetKeyboardLayout
OpenClipboard
CloseClipboard
GetClipboardData
CharNextW
CharNextExA
CharPrevExA
SetCursor
MonitorFromPoint
GetMonitorInfoA
CharPrevA
DestroyCursor
LoadImageA
SetCursorPos
LoadStringA
GetSystemMetrics
ChangeDisplaySettingsA
ReleaseCapture
PostQuitMessage
SetWindowPos
RegisterClassA
ShowCursor
GetKeyState
ScreenToClient
SystemParametersInfoA
LoadIconA
GetCapture
FindWindowA
ShowWindow
DefWindowProcA
ClientToScreen
RegCreateKeyExW
RegQueryValueExA
RegSetValueExW
RegOpenKeyExA
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptImportKey
CryptEncrypt
RegEnumKeyExA
RegSaveKeyA
RegConnectRegistryA
RegDeleteValueA
RegEnumValueA
RegQueryInfoKeyA
RegLoadKeyA
RegSetValueExA
RegQueryValueA
RegFlushKey
RegCreateKeyExA
RegDeleteKeyA
RegSetValueA
RegCreateKeyA
RegOpenKeyA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SHGetSpecialFolderPathA
ShellExecuteW
ShellExecuteA
SHFileOperationA
CoCreateInstance
CoInitializeEx
CoUninitialize
timeGetTime
timeGetDevCaps
timeEndPeriod
timeBeginPeriod
Direct3DCreate8
GetAdaptersInfo
GetPerAdapterInfo
ImmGetCandidateListW
ImmGetIMEFileNameA
ImmIsIME
ImmGetContext
ImmReleaseContext
ImmAssociateContext
ImmGetCompositionStringW
ImmSetCompositionStringW
ImmNotifyIME
ImmGetConversionStatus
ImmSetConversionStatus
ImmGetOpenStatus
ilSetPixels
ilTexImage
ilSave
ilShutDown
ilOriginFunc
ilLoad
ilGetInteger
ilBindImage
ilGenImages
ilEnable
ilDeleteImages
ilCopyPixels
ilConvertImage
ilInit
sendto
WSACloseEvent
recvfrom
WSACreateEvent
freeaddrinfo
WSAEnumNetworkEvents
getaddrinfo
listen
WSAEventSelect
accept
WSAResetEvent
WSASetEvent
WSAWaitForMultipleEvents
bind
getpeername
getsockname
getsockopt
setsockopt
WSAIoctl
WSASetLastError
gethostname
__WSAFDIsSet
gethostbyname
ntohs
ntohl
inet_addr
htons
htonl
WSACleanup
WSAStartup
WSAGetLastError
socket
send
select
recv
ioctlsocket
connect
closesocket
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?SetTime@CSpeedTreeRT@@SAXM@Z
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?DeleteTransientData@CSpeedTreeRT@@QAEXXZ
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
??3CSpeedTreeRT@@SAXPAX@Z
??2CSpeedTreeRT@@SAPAXI@Z
??1CSpeedTreeRT@@QAE@XZ
??0CSpeedTreeRT@@QAE@XZ
??1STextures@CSpeedTreeRT@@QAE@XZ
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
??0STextures@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??0SGeometry@CSpeedTreeRT@@QAE@XZ
DirectInput8Create
WinHttpOpen
WinHttpOpenRequest
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpCloseHandle
WinHttpConnect
_GrannySetControlEaseOutCurve@28
_GrannySetControlSpeed@8
_GrannyGetControlSpeed@4
_GrannySetControlLoopCount@8
_GrannyGetControlLoopCount@4
_GrannyFreeControlIfComplete@4
_GrannyControlIsComplete@4
_GrannyCompleteControlAt@8
_GrannyFreeControlOnceUnused@4
_GrannyFreeControl@4
_GrannyGetMeshIndexCount@4
_GrannyMeshIsRigid@4
_GrannyGetMeshVertexCount@4
_GrannyGetTotalTypeSize@4
_GrannyGetWorldPoseComposite4x4@8
_GrannyGetWorldPose4x4@8
_GrannyFreeWorldPose@4
_GrannyNewWorldPose@4
_GrannyFindBoneByName@12
_GrannyGetMeshBindingToBoneIndices@4
_GrannyFreeMeshBinding@4
_GrannyNewMeshBinding@12
_GrannyFreeModelInstance@4
_GrannyInstantiateModel@4
_GrannyGetWorldPoseComposite4x4Array@4
_GrannyFreeLocalPose@4
_GrannyNewLocalPose@4
_GrannySetControlEaseIn@8
_GrannySampleModelAnimationsAccelerated@20
_GrannyFreeCompletedModelControls@4
_GrannySetModelClock@8
_GrannyGetSourceSkeleton@4
_GrannyGetFileInfo@4
_GrannyFreeFile@4
_GrannyFreeFileSection@8
_GrannyReadEntireFileFromMemory@8
_GrannyConvertSingleObject@20
_GrannyFindMatchingMember@16
_GrannyGetControlRawLocalClock@4
_GrannySetControlRawLocalClock@8
_GrannyPlayControlledAnimation@12
_GrannyGetMeshTriangleGroupCount@4
_GrannyGetMaterialTextureByType@8
_GrannyGetMeshTriangleGroups@4
_GrannyGetMeshVertexType@4
_GrannyCopyMeshVertices@12
_GrannyGetMeshVertices@4
_GrannyCopyMeshIndices@12
_GrannyNewMeshDeformer@16
_GrannyGetLogMessageOriginString@4
_GrannyFreeMeshDeformer@4
_GrannyGetLogMessageTypeString@4
_GrannyDeformVertices@24
GrannyPNT332VertexType
_GrannySetControlEaseInCurve@28
_GrannySetLogCallback@4
_GrannyUpdateModelMatrix@20
_GrannySetControlEaseOut@8
_GrannyGetControlLocalDuration@4
memmove
__CxxFrameHandler3
wcsrchr
__std_terminate
memset
_setjmp3
_CxxThrowException
strchr
__std_exception_destroy
longjmp
__AdjustPointer
__std_exception_copy
memcpy
memchr
strrchr
strstr
_set_purecall_handler
__current_exception
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
memcmp
__RTDynamicCast
__std_type_info_compare
__CxxFrameHandler
__uncaught_exceptions
__std_type_info_name
__uncaught_exception
_purecall
_set_invalid_parameter_handler
_seh_filter_dll
_getpid
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
__sys_nerr
__sys_errlist
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
__fpe_flt_rounds
__control87_2
terminate
_seh_filter_exe
_set_app_type
_invalid_parameter_noinfo
_get_narrow_winmain_command_line
_initterm
_set_new_handler
perror
_initterm_e
_invalid_parameter_noinfo_noreturn
exit
_exit
_c_exit
_register_thread_local_exe_atexit_callback
strerror
_controlfp
_endthreadex
signal
abort
_controlfp_s
_errno
_beginthreadex
set_terminate
_resetstkoflw
system
wcsnlen
_strdup
strxfrm
strpbrk
_strupr
wcscoll
strcoll
strncpy_s
strncpy
toupper
strspn
isalpha
isdigit
isxdigit
wcsncmp
_strnicmp
strncmp
_stricmp
strncat
strlen
strcmp
iswdigit
towlower
wcsncpy_s
isspace
isupper
_wcsicmp
_wcsdup
islower
strcspn
__strncnt
tolower
isprint
isalnum
_except1
__setusermatherr
_libm_sse2_asin_precise
_libm_sse2_sin_precise
_libm_sse2_cos_precise
_libm_sse2_log_precise
_libm_sse2_acos_precise
_CIatan2
cosh
tanh
exp
tan
acos
asin
sinh
ceil
sin
atan
_libm_sse2_log10_precise
_libm_sse2_tan_precise
fabs
sqrt
_libm_sse2_exp_precise
_CIfmod
_CIexp
_CIsqrt
_isnan
floor
_fdopen
_libm_sse2_sqrt_precise
_CIcosh
frexp
cos
_CIsinh
_libm_sse2_pow_precise
_CItanh
_CIacos
_finite
hypot
round
_ftol
_copysign
_CIpow
log2
modf
ldexp
tmpnam
tmpfile
_commit
getc
fseek
_tempnam
fputc
__stdio_common_vsprintf
_wopen
__stdio_common_vswprintf_s
__stdio_common_vfwprintf
fgetc
fgets
__stdio_common_vsscanf
fread
_open_osfhandle
__acrt_iob_func
__stdio_common_vfprintf
fgetpos
fputs
_getcwd
fsetpos
fflush
freopen
_kbhit
_setmode
fwrite
__p__commode
_locking
fopen
fclose
ungetc
__stdio_common_vsnprintf_s
ftell
__stdio_common_vsprintf_s
fopen_s
_read
_write
setvbuf
_close
_wfopen
putc
_isatty
clearerr
__stdio_common_vswprintf
feof
_lseek
_open
_dup2
_lseeki64
_dup
ferror
_get_osfhandle
rewind
_fileno
_set_fmode
realloc
calloc
_aligned_malloc
_aligned_free
_heapmin
_set_new_mode
malloc
free
_callnewh
_unlink
_stat64i32
_umask
_stat64
_fstat64i32
_chmod
_mkdir
remove
rename
_access
_fstat64
atol
wcstombs
strtoul
strtof
strtoll
strtol
_ecvt
wcstombs_s
mbstowcs_s
_atoi64
strtod
atof
atoi
__timezone
_Getdays
strftime
_Getmonths
_time64
_W_Gettnames
_localtime64
_time32
_W_Getdays
_tzset
clock
_W_Getmonths
__daylight
_gmtime64
__tzname
_ftime64
_mktime64
_Strftime
_Gettnames
_Wcsftime
qsort
rand
srand
_unlock_locales
_lock_locales
___lc_collate_cp_func
setlocale
___lc_locale_name_func
_configthreadlocale
___lc_codepage_func
localeconv
__pctype_func
___mb_cur_max_func
getenv
getenv_s
__p__environ
_putenv
_spawnv
_cwait
_spawnve
_execve
_execv
_ungetch
_getch
_getche
_putch
_mbstrlen
CreateFontIndirectA
GetDeviceCaps
EnumFontFamiliesExA
GetStockObject
DeleteObject
GetCharABCWidthsFloatW
GetTextExtentPoint32W
SelectObject
SetBkColor
GetTextExtentPoint32A
SetTextColor
TextOutW
CreateCompatibleDC
DeleteDC
SetBkMode
SetDIBitsToDevice
CreateDIBSection
TextOutA
GetPixel
SysFreeString
VariantClear
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertGetNameStringA
CertAddCertificateContextToStore
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryA
CertFreeCertificateContext
CertFindExtension
CertFreeCertificateChain
ord60
ord211
ord143
ord45
ord50
ord41
ord22
ord26
ord27
ord32
ord33
ord301
ord200
ord217
ord79
ord35
ord46
ord30
IdnToUnicode
IdnToAscii
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ