AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Static task
static1
Behavioral task
behavioral1
Sample
0be970ba58171ac12a5b70c958a5d7bb4e2374d95671a75d74d6818f7812896c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0be970ba58171ac12a5b70c958a5d7bb4e2374d95671a75d74d6818f7812896c.exe
Resource
win10v2004-20231215-en
Target
0be970ba58171ac12a5b70c958a5d7bb4e2374d95671a75d74d6818f7812896c
Size
6.6MB
MD5
9d76b3bea9fa4db64eac2269bbe2f017
SHA1
0f3d1ae16e858647d195af18f705460cca4a3872
SHA256
0be970ba58171ac12a5b70c958a5d7bb4e2374d95671a75d74d6818f7812896c
SHA512
e5709608b66fa6dca9c485e0d1491d539e1e0617d1b8670b4e9e9c990bcf2eca8457f1124d1231ba11a5792e8675806761175e06b946dd36f6e21a92ddc80dc3
SSDEEP
98304:8plYYGjwQ/TvvdJn6jpHLZsNZp/mfwMoeoSwowwFF9yIMZpnIEV3aQaIgC:8XYYG7ejViNZp/mf+VwG/I83aQ2
Checks for missing Authenticode signature.
resource |
---|
0be970ba58171ac12a5b70c958a5d7bb4e2374d95671a75d74d6818f7812896c |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
ExitProcess
GetDriveTypeW
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
InterlockedPushEntrySList
RaiseException
RtlUnwind
SetFilePointerEx
GetComputerNameA
GetExitCodeThread
CreateThread
SwitchToThread
HeapFree
HeapAlloc
FindFirstFileExA
GetThreadTimes
ExpandEnvironmentStringsA
WaitForMultipleObjects
GetFileType
GetStdHandle
WaitForSingleObjectEx
VerifyVersionInfoA
VerSetConditionMask
SleepEx
SetLastError
GetModuleFileNameW
WaitNamedPipeW
PeekNamedPipe
GetCurrentThreadId
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
TerminateProcess
UnhandledExceptionFilter
FindResourceW
FindResourceA
GetUserDefaultLCID
LoadResource
LockResource
IsProcessorFeaturePresent
InterlockedDecrement
GetProcessHeap
HeapValidate
InterlockedIncrement
GetCPInfo
CompareStringEx
LCMapStringEx
DecodePointer
EncodePointer
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
EnumSystemLocalesW
GetCommandLineA
DeleteFileW
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadConsoleW
SetConsoleCtrlHandler
GetFileSizeEx
GetExitCodeProcess
CreateProcessW
GetTimeZoneInformation
GetOEMCP
GetACP
IsValidCodePage
IsValidLocale
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateSemaphoreExW
CreateEventExW
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
OutputDebugStringW
HeapSize
HeapQueryInformation
SetEndOfFile
InitOnceExecuteOnce
InitializeCriticalSectionEx
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
FlsFree
WriteConsoleW
FlsSetValue
FlsGetValue
SizeofResource
GetNativeSystemInfo
GetTickCount
GetCurrentDirectoryW
ReadProcessMemory
GetCurrentProcessId
GetCurrentProcess
GetLastError
FlsAlloc
GetStringTypeW
CreateSymbolicLinkW
GetFileInformationByHandleEx
CreateHardLinkW
MoveFileExW
CopyFileW
CreateDirectoryExW
GetModuleHandleW
DeviceIoControl
AreFileApisANSI
GetTempPathW
SetFileTime
SetFileInformationByHandle
SetFileAttributesW
GetFullPathNameW
GetFinalPathNameByHandleW
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
GetDiskFreeSpaceExW
FindNextFileW
GetModuleFileNameA
FindNextFileA
FindFirstFileA
FindClose
FindFirstFileExW
FindFirstFileW
CreateFileW
CreateDirectoryW
SetCurrentDirectoryW
GetLocaleInfoEx
FormatMessageA
LocalFree
QueryPerformanceFrequency
QueryPerformanceCounter
CopyFileA
CreateSemaphoreA
ReleaseSemaphore
GetLocaleInfoA
CompareStringA
WideCharToMultiByte
lstrlenW
GlobalLock
GlobalUnlock
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
GetSystemDirectoryA
WriteFile
SetFilePointer
ReadFile
GetModuleHandleA
CreateProcessA
GetCurrentThread
SetUnhandledExceptionFilter
GetFileSize
CreateFileA
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
OutputDebugStringA
GetTempFileNameA
GetTempPathA
RemoveDirectoryA
DeleteFileA
CreateDirectoryA
AllocConsole
GlobalFree
GlobalAlloc
MultiByteToWideChar
SetFileAttributesA
Module32Next
Module32First
Process32Next
Process32First
CreateToolhelp32Snapshot
GetSystemInfo
OpenProcess
SetThreadPriority
Sleep
CreateEventA
WaitForSingleObject
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetStdHandle
CloseHandle
GetClientRect
FillRect
SetRect
OffsetRect
GetKeyState
EndPaint
BeginPaint
SystemParametersInfoA
LoadIconA
FindWindowA
ScreenToClient
ReleaseDC
GetDC
GetCursorPos
GetAsyncKeyState
SetWindowPos
SetCursor
DestroyCursor
PeekMessageA
GetSystemMetrics
ChangeDisplaySettingsA
ReleaseCapture
DefWindowProcA
UnregisterClassA
RegisterClassExA
CreateWindowExA
IsWindow
DestroyWindow
MoveWindow
SetFocus
UpdateWindow
GetWindowLongA
SetWindowLongA
MessageBoxA
CharNextExA
CharPrevExA
RegisterClassA
GetMenu
SetWindowTextA
GetWindowRect
AdjustWindowRectEx
LoadCursorA
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyboardLayoutNameA
GetKeyboardLayout
OpenClipboard
CloseClipboard
GetClipboardData
CharNextW
MonitorFromPoint
GetMonitorInfoA
LoadImageW
LoadIconW
LoadImageA
RegisterClassExW
UnregisterClassW
SetCursorPos
ClientToScreen
ShowWindow
GetCapture
ShowCursor
SetCapture
DefWindowProcW
CreateWindowExW
PostQuitMessage
InvalidateRect
SendMessageW
SetTextColor
SetBkColor
SelectObject
GetTextExtentPoint32W
GetCharABCWidthsFloatW
CreateFontIndirectA
GetStockObject
EnumFontFamiliesExA
TextOutW
CreateCompatibleDC
SetBkMode
SetDIBitsToDevice
CreateDIBSection
TextOutA
GetDeviceCaps
GetPixel
DeleteDC
GetTextExtentPoint32A
StretchBlt
PatBlt
DeleteObject
CreateSolidBrush
CoInitialize
CoCreateInstance
CoInitializeEx
OleSetContainedObject
OleUninitialize
OleInitialize
CoGetClassObject
CoUninitialize
timeBeginPeriod
timeGetDevCaps
timeEndPeriod
timeGetTime
Direct3DCreate8
PyDict_GetItemString
PyLong_FromLongLong
PyList_New
PyList_SetItem
PyList_Append
PyInt_AsLong
PyDict_Next
PyDict_Size
PyDict_New
PyDict_SetItem
PyErr_SetString
PyExc_RuntimeError
PyString_FromString
PyArg_ParseTuple
PyTuple_New
PyTuple_SetItem
PyModule_AddStringConstant
PyImport_ImportModule
PyString_InternFromString
PyObject_GetAttrString
PyObject_GetAttr
PyCallable_Check
PyLong_AsLongLong
PyLong_AsUnsignedLongLong
PyFloat_AsDouble
PyString_AsString
PyErr_Clear
PyErr_BadArgument
PyErr_Print
PyTuple_Size
PyNumber_Check
_Py_NoneStruct
PyDict_SetItemString
PyErr_Fetch
Py_SetProgramName
Py_Initialize
Py_Finalize
PyRun_StringFlags
PyEval_SetTrace
Py_FlushLine
PyImport_GetMagicNumber
PyImport_AddModule
PyObject_AsCharBuffer
PyCode_Addr2Line
PyEval_EvalCode
Py_OptimizeFlag
PyCode_Type
PyUnicodeUCS2_DecodeUTF8
PyInt_FromLong
_PyLong_FromByteArray
PyFloat_FromDouble
PyComplex_FromCComplex
PyString_FromStringAndSize
PyErr_Occurred
PyErr_NoMemory
PyLong_AsLong
PyModule_AddIntConstant
Py_BuildValue
Py_InitModule4
PyTuple_GetItem
PyEval_GetRestricted
PyCode_New
PyMarshal_ReadObjectFromString
_PyLong_New
_Py_EllipsisObject
PyExc_StopIteration
PyExc_EOFError
PyExc_ValueError
PyObject_CallObject
PyModule_GetDict
ImmReleaseContext
ImmAssociateContext
ImmGetContext
ImmIsIME
ImmGetCompositionStringW
ImmNotifyIME
ImmGetOpenStatus
ImmSetConversionStatus
ImmGetConversionStatus
ImmGetCandidateListW
ImmSetCompositionStringW
ImmGetIMEFileNameA
IcmpSendEcho2
IcmpCloseHandle
IcmpCreateFile
GetAdaptersInfo
WSAGetLastError
WSACleanup
send
select
recv
ioctlsocket
connect
closesocket
__WSAFDIsSet
htonl
htons
ntohl
ntohs
gethostbyname
gethostname
WSASetLastError
bind
getpeername
WSAStartup
getsockname
getsockopt
setsockopt
WSAIoctl
getaddrinfo
freeaddrinfo
accept
listen
recvfrom
sendto
socket
inet_addr
CryptGenRandom
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
CryptAcquireContextA
CryptReleaseContext
RegCloseKey
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptImportKey
CryptEncrypt
CertFreeCertificateContext
ord46
ord211
ord60
ord50
ord143
ord301
ord200
ord30
ord41
ord79
ord33
ord32
ord27
ord26
ord22
ord35
IdnToAscii
IdnToUnicode
_AIL_3D_sample_volume@4
_AIL_mem_free_lock@4
_AIL_file_read@8
_AIL_set_file_callbacks@16
_AIL_WAV_info@8
_AIL_decompress_ASI@24
_AIL_decompress_ADPCM@12
_AIL_file_type@8
_AIL_open_digital_driver@16
_AIL_open_stream@12
_AIL_close_digital_driver@4
_AIL_enumerate_3D_providers@12
_AIL_open_3D_provider@4
_AIL_close_3D_provider@4
_AIL_open_3D_listener@4
_AIL_close_3D_listener@4
_AIL_set_3D_position@16
_AIL_set_3D_velocity@20
_AIL_set_3D_orientation@28
_AIL_startup@0
_AIL_update_3D_position@8
_AIL_set_redist_directory@4
_AIL_close_stream@4
_AIL_start_stream@4
_AIL_pause_stream@8
_AIL_set_stream_volume_levels@12
_AIL_stream_volume_levels@12
_AIL_set_stream_loop_count@8
_AIL_stream_status@4
_AIL_last_error@0
_AIL_allocate_sample_handle@4
_AIL_release_sample_handle@4
_AIL_init_sample@4
_AIL_set_sample_file@12
_AIL_start_sample@4
_AIL_stop_sample@4
_AIL_resume_sample@4
_AIL_auto_update_3D_position@8
_AIL_3D_sample_status@4
_AIL_end_sample@4
_AIL_set_sample_volume_pan@12
_AIL_set_sample_loop_count@8
_AIL_sample_status@4
_AIL_sample_volume_pan@12
_AIL_allocate_3D_sample_handle@4
_AIL_release_3D_sample_handle@4
_AIL_start_3D_sample@4
_AIL_stop_3D_sample@4
_AIL_resume_3D_sample@4
_AIL_end_3D_sample@4
_AIL_set_3D_sample_file@8
_AIL_set_3D_sample_volume@8
_AIL_set_3D_sample_loop_count@8
_AIL_shutdown@0
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
??1CSpeedTreeRT@@QAE@XZ
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
??0CSpeedTreeRT@@QAE@XZ
??0SGeometry@CSpeedTreeRT@@QAE@XZ
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?DeleteTransientData@CSpeedTreeRT@@QAEXXZ
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
??3CSpeedTreeRT@@SAXPAX@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
??2CSpeedTreeRT@@SAPAXI@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetTime@CSpeedTreeRT@@SAXM@Z
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
??1STextures@CSpeedTreeRT@@QAE@XZ
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
??0STextures@CSpeedTreeRT@@QAE@XZ
DirectInput8Create
DirectDrawCreate
SymGetModuleBase
SymGetModuleInfo
SymGetLineFromAddr
SymCleanup
GetTimestampForLoadedLibrary
StackWalk
SymInitialize
SymGetSymFromAddr
SymFunctionTableAccess
ilEnable
ilSave
ilCopyPixels
ilSetPixels
ilLoad
ilOriginFunc
ilShutDown
ilTexImage
ilInit
ilBindImage
ilDeleteImages
ilGenImages
ilGetInteger
ilConvertImage
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
SHGetSpecialFolderPathA
SysAllocString
SafeArrayCreate
SafeArrayDestroy
SysFreeString
VariantInit
VariantClear
SafeArrayAccessData
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ