AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Static task
static1
Behavioral task
behavioral1
Sample
ea1b7f6de7a8f96bff14ea3e9956cd341504b0bfa98d2e5a3b346b3c94f8a44e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ea1b7f6de7a8f96bff14ea3e9956cd341504b0bfa98d2e5a3b346b3c94f8a44e.exe
Resource
win10v2004-20240508-en
Target
ea1b7f6de7a8f96bff14ea3e9956cd341504b0bfa98d2e5a3b346b3c94f8a44e
Size
7.6MB
MD5
13852f51184737fdf4bedf7126b58cea
SHA1
dc4f60e792f06bb82576aaa9f7a4c1edf27d1cc7
SHA256
ea1b7f6de7a8f96bff14ea3e9956cd341504b0bfa98d2e5a3b346b3c94f8a44e
SHA512
da53a4b4be444efeb25930f681a750c3252ab4a723942de91079a1299f56779080aa972cd471a2321a691f31be369ffb19f85562f23796c8d10b676b3b93cceb
SSDEEP
196608:pCZYnlf0EUi1GAYBzw2LKF95GQMD2VOds8zfdhhk7/N7NqJ:mYlf0wqw2G9sQMD3hhk7Pq
Checks for missing Authenticode signature.
resource |
---|
ea1b7f6de7a8f96bff14ea3e9956cd341504b0bfa98d2e5a3b346b3c94f8a44e |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE