AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Static task
static1
Behavioral task
behavioral1
Sample
ec5f363a35842ecb2532f313900ad24fc4a851d30e17ca3af85bc0eb797569aa.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
ec5f363a35842ecb2532f313900ad24fc4a851d30e17ca3af85bc0eb797569aa.exe
Resource
win10v2004-20231020-en
Target
ec5f363a35842ecb2532f313900ad24fc4a851d30e17ca3af85bc0eb797569aa
Size
5.7MB
MD5
f04285b16c66f2d96f229cc4267ddd08
SHA1
90177fad1d1e448d4ca12fef9855ac321fd6604a
SHA256
ec5f363a35842ecb2532f313900ad24fc4a851d30e17ca3af85bc0eb797569aa
SHA512
2cbb29b6f0bb33b4fa5cd30db6f40e3d6e0b93c02e063809d04a12d9a223f816b3e1d2d825f9a1a70499d1714608b659623a94a887cc3186ad680795b9e12ff2
SSDEEP
98304:AWcHtc4mDN0unE3xpn679q6LPowDcBUomqQHuM+IUrbj9E:dcNUJ033zcq6LPFYu+P9E
Checks for missing Authenticode signature.
resource |
---|
ec5f363a35842ecb2532f313900ad24fc4a851d30e17ca3af85bc0eb797569aa |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
SetThreadpoolWait
CloseThreadpoolWait
HeapValidate
UnhandledExceptionFilter
RaiseException
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
FreeLibraryWhenCallbackReturns
GetTickCount64
FlushProcessWriteBuffers
CreateSemaphoreExW
CreateEventExW
WakeConditionVariable
InitializeConditionVariable
GetExitCodeThread
LCMapStringEx
DecodePointer
EncodePointer
LocalFree
InitializeCriticalSectionEx
QueryPerformanceFrequency
TryAcquireSRWLockExclusive
FormatMessageA
SetFilePointerEx
CreateFileW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetThreadPriority
WaitForSingleObject
ReleaseSemaphore
GetLocaleInfoA
SleepConditionVariableSRW
SetUnhandledExceptionFilter
lstrlenW
GlobalLock
GlobalUnlock
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
GetSystemDirectoryA
WriteFile
SetFilePointer
ReadFile
WinExec
GetModuleHandleA
GetCurrentThread
OutputDebugStringA
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetSystemInfo
GetFileSize
GetModuleFileNameA
RemoveDirectoryA
DeleteFileA
CreateDirectoryA
SetEndOfFile
TlsSetValue
TerminateProcess
SetEvent
TlsAlloc
TlsGetValue
TlsFree
CreateEventA
LoadLibraryExA
SetErrorMode
CreateDirectoryW
FindFirstFileW
MoveFileA
GetFileAttributesExA
GetFullPathNameW
FindNextFileW
RemoveDirectoryW
SetFileTime
SetEnvironmentVariableW
CreatePipe
GetFileAttributesW
DuplicateHandle
OpenProcess
GetVersion
SetCurrentDirectoryA
SetFileAttributesW
GetFileAttributesExW
DeleteFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetEnvironmentVariableA
SystemTimeToFileTime
GetSystemTime
MoveFileW
GetProcessTimes
GenerateConsoleCtrlEvent
GetExitCodeProcess
GetACP
SetConsoleCtrlHandler
ResetEvent
ExpandEnvironmentStringsW
FlushViewOfFile
FreeLibraryAndExitThread
LoadLibraryExW
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
LoadLibraryW
SignalObjectAndWait
SwitchToThread
CreateThread
GetThreadPriority
GetModuleFileNameW
PeekNamedPipe
WaitNamedPipeW
SleepEx
GetTickCount
SetLastError
FormatMessageW
MoveFileExA
WaitForSingleObjectEx
GetEnvironmentVariableA
GetStdHandle
GetFileType
GetCurrentProcessorNumberEx
GetLogicalProcessorInformationEx
GetNumaHighestNodeNumber
GetThreadGroupAffinity
SetThreadGroupAffinity
VirtualFree
GetProcessAffinityMask
WaitForMultipleObjects
GetFileSizeEx
GetThreadTimes
GetConsoleOutputCP
GetConsoleCP
OutputDebugStringW
GetFileInformationByHandle
GetFileAttributesA
IsDBCSLeadByte
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
WideCharToMultiByte
IsProcessorFeaturePresent
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetPrivateProfileStringA
lstrlenA
CreateProcessA
GetCurrentDirectoryA
FindNextFileA
FindFirstFileA
FindClose
MultiByteToWideChar
SetFileAttributesA
Sleep
Module32Next
Module32First
CreateToolhelp32Snapshot
ReadProcessMemory
GetCurrentProcess
GetLastError
VerSetConditionMask
GetProcessHeap
HeapFree
HeapAlloc
DeviceIoControl
CloseHandle
CreateFileA
VerifyVersionInfoW
GetCurrentProcessId
CompareStringA
GetFullPathNameA
GetMessageA
LoadCursorA
SetWindowLongA
GetWindowLongA
PeekMessageA
SetRect
GetDC
ReleaseDC
AdjustWindowRectEx
GetKeyboardLayoutNameA
GetKeyboardLayout
OpenClipboard
CloseClipboard
GetClipboardData
GetClientRect
LoadStringA
GetSystemMetrics
TranslateMessage
InvalidateRect
GetMenu
CharNextExA
DestroyIcon
ChangeDisplaySettingsA
MoveWindow
ReleaseCapture
DestroyWindow
CharPrevExA
IsWindow
CreateWindowExA
RegisterClassA
DefWindowProcA
MessageBoxA
CharPrevA
SetCapture
GetCapture
CharNextW
FlashWindowEx
ShowWindow
ClientToScreen
SetCursorPos
DestroyCursor
SetCursor
ShowCursor
GetKeyState
SystemParametersInfoA
LoadIconA
FindWindowA
ScreenToClient
GetCursorPos
GetAsyncKeyState
SetWindowPos
PostQuitMessage
DispatchMessageA
LoadImageA
CryptCreateHash
CryptDestroyKey
CryptImportKey
CryptEncrypt
RegEnumKeyExA
RegSaveKeyA
RegConnectRegistryA
RegDeleteValueA
CryptHashData
CryptGenRandom
CryptGetHashParam
RegEnumValueA
RegQueryInfoKeyA
RegLoadKeyA
RegSetValueExA
RegQueryValueA
RegFlushKey
RegCreateKeyExA
RegDeleteKeyA
RegSetValueA
RegCreateKeyA
CryptReleaseContext
CryptAcquireContextA
RegSetValueExW
RegCreateKeyExW
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
CryptDestroyHash
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SHGetSpecialFolderPathA
SetCurrentProcessExplicitAppUserModelID
ShellExecuteA
SHFileOperationA
ShellExecuteW
CoUninitialize
CoCreateInstance
CoInitializeEx
timeEndPeriod
timeBeginPeriod
timeGetTime
timeGetDevCaps
Direct3DCreate8
ImmIsIME
ImmGetContext
ImmReleaseContext
ImmAssociateContext
ImmGetCompositionStringW
ImmSetCompositionStringW
ImmGetCandidateListW
ImmGetConversionStatus
ImmSetConversionStatus
ImmGetOpenStatus
ImmNotifyIME
ImmGetIMEFileNameA
ilSetPixels
ilSave
ilOriginFunc
ilLoad
ilTexImage
ilBindImage
ilGenImages
ilEnable
ilDeleteImages
ilCopyPixels
ilConvertImage
ilInit
ilGetInteger
GetAdaptersInfo
GetPerAdapterInfo
getpeername
socket
getsockname
gethostname
gethostbyname
bind
select
ntohs
inet_addr
htons
htonl
WSACloseEvent
WSACreateEvent
WSACleanup
WSAStartup
WSAEnumNetworkEvents
__WSAFDIsSet
WSAEventSelect
closesocket
connect
sendto
ioctlsocket
recv
recvfrom
freeaddrinfo
getaddrinfo
listen
accept
WSAIoctl
WSASetLastError
setsockopt
getsockopt
send
WSAGetLastError
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
StackWalk
GetTimestampForLoadedLibrary
EnumerateLoadedModules
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
??3CSpeedTreeRT@@SAXPAX@Z
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
??2CSpeedTreeRT@@SAPAXI@Z
??1CSpeedTreeRT@@QAE@XZ
??0CSpeedTreeRT@@QAE@XZ
??1STextures@CSpeedTreeRT@@QAE@XZ
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
??0STextures@CSpeedTreeRT@@QAE@XZ
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??0SGeometry@CSpeedTreeRT@@QAE@XZ
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetTime@CSpeedTreeRT@@SAXM@Z
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
DirectInput8Create
WinHttpReceiveResponse
WinHttpOpen
WinHttpCloseHandle
WinHttpSendRequest
WinHttpOpenRequest
WinHttpConnect
_GrannySetControlEaseInCurve@28
_GrannyGetMeshTriangleGroups@4
_GrannyGetControlLocalDuration@4
_GrannySetControlSpeed@8
_GrannyGetControlSpeed@4
_GrannySetControlLoopCount@8
_GrannyGetControlLoopCount@4
_GrannyFreeControlIfComplete@4
_GrannyControlIsComplete@4
_GrannyCompleteControlAt@8
_GrannyFreeControlOnceUnused@4
_GrannyFreeControl@4
_GrannyGetMeshIndexCount@4
_GrannyMeshIsRigid@4
_GrannyGetMeshVertexType@4
_GrannyGetTotalTypeSize@4
_GrannyGetWorldPoseComposite4x4@8
_GrannyGetWorldPose4x4@8
_GrannyFreeWorldPose@4
_GrannyNewWorldPose@4
_GrannyFindBoneByName@12
_GrannyGetMeshBindingToBoneIndices@4
_GrannyFreeMeshBinding@4
_GrannyNewMeshBinding@12
_GrannyFreeModelInstance@4
_GrannySetControlEaseOut@8
_GrannyGetWorldPoseComposite4x4Array@4
_GrannyFreeLocalPose@4
_GrannyNewLocalPose@4
_GrannyUpdateModelMatrix@20
_GrannySampleModelAnimationsAccelerated@20
_GrannyFreeCompletedModelControls@4
_GrannySetModelClock@8
_GrannyGetSourceSkeleton@4
_GrannyGetFileInfo@4
_GrannyFreeFile@4
_GrannyFreeFileSection@8
_GrannyReadEntireFileFromMemory@8
_GrannyConvertSingleObject@20
_GrannyFindMatchingMember@16
_GrannyGetMaterialTextureByType@8
_GrannyGetLogMessageOriginString@4
_GrannyGetLogMessageTypeString@4
_GrannyCopyMeshVertices@12
_GrannyGetMeshVertices@4
_GrannyCopyMeshIndices@12
_GrannyNewMeshDeformer@16
_GrannySetLogCallback@4
_GrannyFreeMeshDeformer@4
_GrannyDeformVertices@24
GrannyPNT332VertexType
_GrannyGetControlRawLocalClock@4
_GrannySetControlRawLocalClock@8
_GrannyPlayControlledAnimation@12
_GrannySetControlEaseOutCurve@28
_GrannyInstantiateModel@4
_GrannyGetMeshTriangleGroupCount@4
_GrannyGetMeshVertexCount@4
_GrannySetControlEaseIn@8
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memmove
memset
_purecall
__std_terminate
strchr
memchr
strrchr
memcpy
__current_exception
wcsrchr
__AdjustPointer
_setjmp3
longjmp
__CxxFrameHandler
__uncaught_exceptions
__uncaught_exception
__std_type_info_name
__std_type_info_compare
strstr
__current_exception_context
_except_handler4_common
memcmp
__RTDynamicCast
__CxxFrameHandler3
_invalid_parameter_noinfo
_errno
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
perror
_cexit
terminate
_seh_filter_exe
_set_app_type
_get_narrow_winmain_command_line
_initterm
_set_new_handler
_initterm_e
exit
_controlfp
_exit
_c_exit
system
_register_thread_local_exe_atexit_callback
_controlfp_s
_beginthreadex
_crt_atexit
_endthreadex
strerror
abort
__sys_errlist
__sys_nerr
_getpid
__control87_2
__fpe_flt_rounds
_resetstkoflw
signal
_wcsicmp
isxdigit
strspn
wcsncmp
wcscoll
strxfrm
strpbrk
_strdup
strcoll
strncat
strncpy_s
isalpha
isdigit
strncpy
isspace
strlen
toupper
strcmp
iswdigit
towlower
isalnum
isupper
_strnicmp
strncmp
_stricmp
_wcsdup
islower
strcspn
__strncnt
isprint
tolower
ferror
clearerr
_lseek
_isatty
putc
_close
_open
_wfopen
setvbuf
_write
feof
_read
_get_osfhandle
__stdio_common_vswprintf
__stdio_common_vsprintf_s
fclose
fopen
fwrite
fread
fseek
ftell
__stdio_common_vsprintf
ungetc
fgets
__stdio_common_vsscanf
__acrt_iob_func
getc
_fileno
fputc
__stdio_common_vfprintf
_wopen
fgetpos
fputs
fsetpos
fflush
__stdio_common_vsnprintf_s
fgetc
_getcwd
_locking
_setmode
freopen
_kbhit
__p__commode
tmpnam
_set_fmode
tmpfile
_tempnam
_open_osfhandle
_lseeki64
round
hypot
_copysign
modf
_fdopen
ldexp
_isnan
atan
sin
_libm_sse2_exp_precise
cos
_CIsqrt
_CItanh
_CIcosh
_CIsinh
fabs
_libm_sse2_tan_precise
_libm_sse2_log10_precise
_CIexp
sinh
_CIatan2
_libm_sse2_log_precise
log2
_CIpow
__setusermatherr
ceil
_ftol
_libm_sse2_sqrt_precise
_libm_sse2_pow_precise
floor
_libm_sse2_asin_precise
_finite
asin
acos
_CIacos
tan
_CIfmod
exp
tanh
_libm_sse2_acos_precise
cosh
frexp
_libm_sse2_cos_precise
_libm_sse2_sin_precise
sqrt
_heapmin
calloc
_aligned_malloc
_aligned_free
_set_new_mode
_callnewh
free
malloc
realloc
_fstat64
_fstat64i32
_access
_stat64
rename
remove
_unlink
_mkdir
_umask
_stat64i32
atoi
strtoul
_atoi64
strtol
atol
wcstombs
atof
strtoll
_localtime64
_time32
_tzset
clock
strftime
_time64
_gmtime64
_ftime64
__timezone
_mktime64
__tzname
__daylight
_ctime64
rand
srand
qsort
setlocale
__pctype_func
_configthreadlocale
localeconv
___lc_locale_name_func
___lc_codepage_func
_unlock_locales
_lock_locales
getenv
__p__environ
_putenv
_execv
_spawnve
_cwait
_execve
_spawnv
_getche
_ungetch
_getch
_putch
_mbstrlen
CreateDIBSection
GetStockObject
EnumFontFamiliesExA
CreateFontIndirectA
DeleteObject
GetCharABCWidthsFloatW
GetTextExtentPoint32W
SelectObject
SetBkColor
GetTextExtentPoint32A
SetTextColor
TextOutW
CreateCompatibleDC
DeleteDC
SetBkMode
TextOutA
SysFreeString
VariantClear
CertFreeCertificateChain
CertOpenStore
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertFindExtension
CertAddCertificateContextToStore
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryA
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertGetNameStringA
CertCloseStore
ord22
ord50
ord143
ord41
ord45
ord60
ord46
ord217
ord211
ord301
ord200
ord30
ord26
ord79
ord27
ord35
ord32
ord33
IdnToAscii
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ