AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Static task
static1
Behavioral task
behavioral1
Sample
c93fbf19daf446d8c659aab65d8ddbd5aca74227c34515157289b7b7d66b7ad5.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
c93fbf19daf446d8c659aab65d8ddbd5aca74227c34515157289b7b7d66b7ad5.exe
Resource
win10v2004-20231023-en
Target
c93fbf19daf446d8c659aab65d8ddbd5aca74227c34515157289b7b7d66b7ad5
Size
1017KB
MD5
df566c5a389c763ff5d9549a3e4ec51e
SHA1
fd69226b5c0f3b4940d9f89bb65938bd94dac827
SHA256
c93fbf19daf446d8c659aab65d8ddbd5aca74227c34515157289b7b7d66b7ad5
SHA512
0acb29e7cd0ef49afb8cc58345a26d193a3d1365e827fbb1d0d6e372ce1d9a255f22cc0c018d4b7cc17fcc4b4e701e29eb7ed134ae5836f8b2c43d9abc4bf5d4
SSDEEP
24576:Dr9d/dLpde/7w439kO/O9IaUAkIIFAcPd9FJXyp:DJpde/7wCeEAkIIFAcPlJC
Checks for missing Authenticode signature.
resource |
---|
c93fbf19daf446d8c659aab65d8ddbd5aca74227c34515157289b7b7d66b7ad5 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?CheckEntityVersion@@YAXXZ
DiscordCreate
GetTempPathW
GetStdHandle
GetCommandLineW
GetCommandLineA
FindNextFileW
FindFirstFileExW
GetTimeZoneInformation
SetCurrentDirectoryA
FindClose
GetFullPathNameA
FindNextFileA
FindFirstFileA
CreateEventA
SetEvent
OpenEventA
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
UnmapViewOfFile
InitializeSListHead
QueryPerformanceCounter
CompareStringEx
LCMapStringEx
GetLocaleInfoEx
LocalFree
InitializeCriticalSectionEx
FormatMessageA
GetCurrentDirectoryA
CreateFileA
DeleteFileA
CloseHandle
GetLastError
Sleep
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
SetEnvironmentVariableW
DecodePointer
EncodePointer
HeapReAlloc
HeapSize
SetEndOfFile
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
OutputDebugStringW
CreateFileW
WideCharToMultiByte
GetProcessHeap
MultiByteToWideChar
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetFileAttributesExW
GetModuleHandleExW
GetModuleHandleW
ExitProcess
GetModuleFileNameW
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
LoadLibraryExW
GetCurrentProcessId
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
SetConsoleCtrlHandler
RaiseException
GetStartupInfoW
HeapFree
HeapAlloc
GetCurrentThreadId
GetCurrentThread
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
GetFileType
SetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
Process32Next
Process32First
CreateToolhelp32Snapshot
SetConsoleScreenBufferSize
GetConsoleScreenBufferInfo
AllocConsole
GetSystemDefaultLangID
MoveFileA
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
LoadLibraryA
GetProcAddress
GetModuleFileNameA
FreeLibrary
CreateWindowExA
DestroyWindow
ShowWindow
RegisterClassExA
SetClassLongA
ShowCursor
MessageBoxW
IsIconic
DefWindowProcA
InvalidateRect
RegisterClassA
SetWindowPos
CreateDialogParamA
SetFocus
GetSystemMetrics
UpdateWindow
GetDC
ReleaseDC
BeginPaint
EndPaint
GetClientRect
GetWindowRect
MessageBoxA
FillRect
SetWindowLongA
GetDesktopWindow
LoadBitmapA
LoadIconA
ChangeDisplaySettingsA
TranslateMessage
DispatchMessageA
PeekMessageA
SendMessageA
LoadCursorA
BitBlt
SelectObject
GetStockObject
GetDeviceCaps
DeleteObject
CreateCompatibleDC
DeleteDC
GetObjectA
?SetValue@CShell@@QAEXABVCTString@@0@Z
?GetValue@CShell@@QAE?AVCTString@@ABV2@@Z
?GetLine_t@CTStream@@QAEXAAVCTString@@D@Z
?TranslateConst@@YAPBDPBDJ@Z
?TrimSpacesRight@CTString@@QAEJXZ
?RemovePrefix@CTString@@QAEHABV1@@Z
?Clear@CTString@@QAEXXZ
?DeleteSelf@CEntity@@QAEXXZ
?g_bNoPlaySnd@@3HA
?g_fFramePerSecond@@3MA
?g_iCountry@@3JA
?snd_iFormat@@3JA
?g_szExitError@@3PADA
?_pEntityClassStock@@3PAVCStock_CEntityClass@@A
?g_bNasTrans@@3HA
?g_nmVER@@3VCTString@@A
?g_nmCID@@3VCTString@@A
?g_nmPW@@3VCTString@@A
?g_nmID@@3VCTString@@A
?g_bAutoLogin@@3HA
?sam_bWideScreen@@3JA
?sam_iGfxAPI@@3JA
?sam_iDisplayAdapter@@3JA
?sam_iDisplayDepth@@3JA
?_bClientApp@@3HA
?_pfdDisplayFont@@3PAVCFontData@@A
?_pSound@@3PAVCSoundLibrary@@A
?_pNetwork@@3PAVCNetworkLibrary@@A
?_pTimer@@3PAVCTimer@@A
?_strModExt@@3VCTString@@A
?_fnmApplicationPath@@3VCTFileName@@A
?CheckEngineVersion@@YAXXZ
?initialize@CWebAddress@@QAEXXZ
?End@cWeb@@QAEHXZ
?Begin@cWeb@@QAEHXZ
?SetNextStage@StageMgr@@QAEXW4eSTAGE@@0@Z
?Run@StageMgr@@QAEXXZ
?Create@StageMgr@@QAEXXZ
?getSingleton@?$CSingletonBase@VStageMgr@@@@SAPAVStageMgr@@XZ
?setVersion@CUILoginNew@@QAEXPBD@Z
?Create@GameDataManager@@QAEXXZ
?DestroyRenderTarget@CUIManager@@QAEXXZ
?InitRenderTarget@CUIManager@@QAEXHH@Z
?MsgProc@CUIManager@@QAEXPAUtagMSG@@PAH@Z
?AdjustUIPos@CUIManager@@QAEXPAVCDrawPort@@@Z
?ResetUIPos@CUIManager@@QAEXPAVCDrawPort@@@Z
?SetGameHandle@CUIManager@@QAEXPAVCGame@@@Z
?ResetSHIT@CUIManager@@QAEXXZ
?GETUPDATESHIT@CUIManager@@QAEHXZ
?Create@CUIManager@@QAEXXZ
?Release@CStock_CEntityClass@@QAEXPAVCEntityClass@@@Z
?Obtain_t@CStock_CEntityClass@@QAEPAVCEntityClass@@ABVCTFileName@@@Z
?SE_Destroy_WebAddressPtr@@YAXXZ
?SE_Get_GameDataManagerPtr@@YAPAVGameDataManager@@XZ
?SE_Get_WebAddressPtr@@YAPAVCWebAddress@@XZ
?SE_LoadDefaultFonts@@YAXXZ
?SE_EndEngine@@YAXXZ
?SE_InitEngine@@YAXVCTString@@@Z
?UpdateSounds@CSoundLibrary@@QAEXXZ
?SetFormat@CSoundLibrary@@QAEXW4SoundFormat@1@H@Z
?SetVolume@CSoundObject@@QAEXMH@Z
??1CSoundObject@@QAE@XZ
??0CSoundObject@@QAE@XZ
?GameInactive@CNetworkLibrary@@QAEXXZ
?InitPos@CUIBase@@QAEXHHHH@Z
?PutTexture@CDrawPort@@QBEXPAVCTextureObject@@ABV?$AABBox@J$01@@1KK@Z
?PutText@CDrawPort@@QBEXABVCTString@@JJK@Z
?SetFont@CDrawPort@@QAEXPAVCFontData@@@Z
?IsTripleHead@CDrawPort@@QAEHXZ
?IsDualHead@CDrawPort@@QAEHXZ
?MakeWideScreen@CDrawPort@@QAEXPAV1@@Z
??0CDrawPort@@QAE@PAV0@J@Z
??1CDrawPort@@QAE@XZ
??0CDrawPort@@QAE@XZ
??1CTextureObject@@QAE@XZ
?SetData_t@CTextureObject@@QAEXABVCTFileName@@@Z
??0CTextureObject@@QAE@XZ
?Force@CTextureData@@QAEXK@Z
?Benchmark@CGfxLibrary@@QAEXPAVCViewPort@@PAVCDrawPort@@@Z
?DestroyWindowCanvas@CGfxLibrary@@QAEXPAVCViewPort@@@Z
?ResetDisplayMode@CGfxLibrary@@QAEHW4GfxAPIType@@@Z
?LerpColor@@YAKKKM@Z
?IsWideScreen@CDisplayMode@@QAEHXZ
?IsTripleHead@CDisplayMode@@QAEHXZ
?IsDualHead@CDisplayMode@@QAEHXZ
?DepthString@CDisplayMode@@QBE?AVCTString@@XZ
??0CDisplayMode@@QAE@XZ
?InitConsole@@YAXPAU_iobuf@@00@Z
?GetHighPrecisionTimer@CTimer@@QAE?AVCTimerValue@@XZ
?GetRealTimeTick@CTimer@@QBEMXZ
?ExpandFilePath@@YAJKABVCTFileName@@AAV1@@Z
?ExceptionFatalError@CTStream@@SAXXZ
?ExceptionFilter@CTStream@@SAHKPAU_EXCEPTION_POINTERS@@@Z
?ClearStreamHandling@CTStream@@SAXXZ
?DisableStreamHandling@CTStream@@SAXXZ
?EnableStreamHandling@CTStream@@SAXXZ
?FileName@CTFileName@@QBE?AV1@XZ
?FileDir@CTFileName@@QBE?AV1@XZ
??0CTFileName@@QAE@PBDH@Z
?FinishTranslationTable@@YAXXZ
?AddTranslationTablesDir_t@@YAXABVCTFileName@@0@Z
?InitTranslation@@YAXXZ
?GetWindowsError@@YA?BVCTString@@K@Z
?ThrowF_t@@YAXPADZZ
?MEM_CAlloc@@YAPAXII@Z
?MEM_Free@@YAXPAX@Z
?DeleteChars@CTString@@QAEXJJ@Z
?IsEqualCaseSensitive@CTString@@QBEHABV1@@Z
?TrimRight@CTString@@QAEJJ@Z
?FindSubstr@CTString@@QAEJABV1@@Z
?g_web@@3VcWeb@@A
?_hDlgWeb@@3PAUHWND__@@A
?_hwndMain@@3PAUHWND__@@A
?_pGameState@@3PAVCGameState@@A
?sam_iScreenSizeJ@@3JA
?sam_iScreenSizeI@@3JA
?sam_bFullScreenActive@@3JA
?_hInstanceMain@@3PAUHINSTANCE__@@A
?_pvpViewPortMain@@3PAVCViewPort@@A
?_pdpNormalMain@@3PAVCDrawPort@@A
?_pdpMain@@3PAVCDrawPort@@A
?_bWindowChanging@@3HA
?SetTitleName@CUIManager@@QAEXJHH@Z
?UPDATESHIT@CUIManager@@QAEXXZ
?InitInterface@CUIOption@@QAEXXZ
?UpdatePos@cWeb@@QAEXXZ
?CloseWebPage@cWeb@@QAEHPAUHWND__@@@Z
?OpenWebPage@cWeb@@QAEHPAUHWND__@@@Z
?SE_Get_UIManagerPtr@@YAPAVCUIManager@@XZ
?SE_UpdateWindowHandle@@YAXPAUHWND__@@0@Z
?Resize@CViewPort@@QAEXXZ
?SwapBuffers@CViewPort@@QAEXH@Z
?Fill@CDrawPort@@QBEXK@Z
?Unlock_internal@CDrawPort@@QAEXXZ
?Lock_internal@CDrawPort@@QAEHXZ
?CreateWindowCanvas@CGfxLibrary@@QAEXPAXPAPAVCViewPort@@PAPAVCDrawPort@@@Z
?FatalError@@YAXPBDZZ
?_pGfx@@3PAVCGfxLibrary@@A
?_pShell@@3PAVCShell@@A
?Execute@CShell@@QAEXABVCTString@@@Z
?DeclareSymbol@CShell@@QAEXABVCTString@@PAX@Z
??0CTString@@QAE@XZ
??0CTString@@QAA@JPBDZZ
??1CTString@@QAE@XZ
?TrimSpacesLeft@CTString@@QAEJXZ
??8CTString@@QBEHPBD@Z
??9CTString@@QBEHPBD@Z
??HCTString@@QBE?AV0@ABV0@@Z
??YCTString@@QAEAAV0@ABV0@@Z
??H@YA?AVCTString@@PBDABV0@@Z
?Split@CTString@@QAEXJAAV1@0@Z
?DeleteChar@CTString@@QAEXJ@Z
?ScanF@CTString@@QAAJPBDZZ
?StringDuplicate@@YAPADPBD@Z
?StringFree@@YAXPAD@Z
?Translate@@YAPADPADJ@Z
?_fnmMod@@3VCTFileName@@A
?_fnmCDPath@@3VCTFileName@@A
?_strLogFile@@3VCTString@@A
?cmd_iWindowLeft@@3JA
?cmd_iWindowTop@@3JA
??8CTString@@QBEHABV0@@Z
?Matches@CTString@@QBEHABV1@@Z
?PrintF@CTString@@QAAJPBDZZ
?WarningMessage@@YAXPBDZZ
??1CListNode@@QAE@XZ
?Clear@CListHead@@QAEXXZ
?AddTail@CListHead@@QAEXAAVCListNode@@@Z
??0CTFileName@@QAE@XZ
??0CTFileName@@QAE@ABVCTString@@@Z
??1CTFileName@@QAE@XZ
?AtEOF@CTStream@@QAEHXZ
?GetLine_t@CTStream@@QAEXPADJD@Z
??0CTFileStream@@QAE@XZ
??1CTFileStream@@UAE@XZ
?Open_t@CTFileStream@@QAEXABVCTFileName@@W4OpenMode@CTStream@@@Z
?CPrintF@@YAXPBDZZ
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
PathFileExistsA
PathAppendA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
SetFileSecurityA
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ