Rx 6400 Optimization[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

Rx 6400 Optimization.rar
Size

8.3MB
MD5

c975d51d630039bdf97944d20d2b9162
SHA1

07b0e81fc1ed3c759f5e90fe24a5f3450d667a0c
SHA256

9e1029a0974cb623344d2ffde4f2d74d05f68def7fe07fa8874e25a571223860
SHA512

7625d10a00ad946f673afa0b9593de503a01eb7946e125abdd059b8f0749f09912325beeca97a7fdd883a98f8305bd0f75b11680056680a7a813b076f381f95f
SSDEEP

196608:7+/PeD6YzwRy6fyR7DXJDJD2abRi10P4Mgcu13/YcyVc+bu7mKp6xFZycyS:7+/PeDsRyAyR5DBbRG0PBLc77m86xzya

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Rx 6400 Optimization/Rx 6400 Optimization/5 GPU SETTINGS/AMD Radeon GPU FPS Optimization PACK/AMD Radeon GPU FPS Optimization PACK/5 - Programs/MSI Mode Utility 3.0.exe

Files

Rx 6400 Optimization.rar
.rar
Rx 6400 Optimization/AMD Radeon™ RX 6400 Drivers.url
Rx 6400 Optimization/Rx 6400 Optimization/1 SERVICE OPTIMIZATION/Disable Diagnostics & Telemetry Services.reg
Rx 6400 Optimization/Rx 6400 Optimization/1 SERVICE OPTIMIZATION/Disable Extra Unnecessary Services.reg
Rx 6400 Optimization/Rx 6400 Optimization/1 SERVICE OPTIMIZATION/OPTIONAL Disable Bluetooth Services.reg
Rx 6400 Optimization/Rx 6400 Optimization/1 SERVICE OPTIMIZATION/OPTIONAL Disable Download Maps Manager.reg
Rx 6400 Optimization/Rx 6400 Optimization/1 SERVICE OPTIMIZATION/OPTIONAL Disable Printer Services.reg
Rx 6400 Optimization/Rx 6400 Optimization/1 SERVICE OPTIMIZATION/OPTIONAL Disable Xbox Services.reg
Rx 6400 Optimization/Rx 6400 Optimization/1 SERVICE OPTIMIZATION/PowerRun.exe
.exe windows:5 windows x86 arch:x86

870b8e75c7190e202e9c6c81dff1040c

Code Sign

3d:34:42:6b:94:3c:02:46:bb:2a:dd:6c:e2:9e:2a:e6
Certificate

Issuer

CN=Sordum Software

Not Before

31/12/2005, 21:00

Not After

31/12/2025, 21:00

Subject

CN=Sordum Software

Extended Key Usages

ExtKeyUsageCodeSigning

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

70:ac:49:66:18:8c:4c:86:84:cf:4e:a2:2c:23:30:bc:90:8f:c5:66
Signer

Actual PE Digest

70:ac:49:66:18:8c:4c:86:84:cf:4e:a2:2c:23:30:bc:90:8f:c5:66

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

__WSAFDIsSet
setsockopt
ntohs
recvfrom
sendto
htons
select
listen
WSAStartup
bind
closesocket
connect
socket
send
WSACleanup
ioctlsocket
accept
WSAGetLastError
inet_addr
gethostbyname
gethostname
recv

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

winmm

timeGetTime
waveOutSetVolume
mciSendStringW

comctl32

ImageList_Remove
ImageList_SetDragCursorImage
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_EndDrag
ImageList_DragMove
ImageList_ReplaceIcon
ImageList_Create
InitCommonControlsEx
ImageList_Destroy

mpr

WNetCancelConnection2W
WNetGetConnectionW
WNetAddConnection2W
WNetUseConnectionW

wininet

InternetReadFile
InternetCloseHandle
InternetOpenW
InternetSetOptionW
InternetCrackUrlW
HttpQueryInfoW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
FtpOpenFileW
FtpGetFileSize
InternetOpenUrlW
InternetQueryOptionW
InternetQueryDataAvailable

psapi

EnumProcesses
GetModuleBaseNameW
GetProcessMemoryInfo
EnumProcessModules

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock
UnloadUserProfile
LoadUserProfileW

kernel32

HeapAlloc
Sleep
GetCurrentThreadId
RaiseException
MulDiv
GetVersionExW
GetSystemInfo
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleW
QueryPerformanceCounter
VirtualFreeEx
OpenProcess
VirtualAllocEx
WriteProcessMemory
ReadProcessMemory
CreateFileW
SetFilePointerEx
ReadFile
WriteFile
FlushFileBuffers
TerminateProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
SetFileTime
GetFileAttributesW
FindFirstFileW
FindClose
DeleteFileW
FindNextFileW
lstrcmpiW
MoveFileW
CopyFileW
CreateDirectoryW
RemoveDirectoryW
SetSystemPowerState
QueryPerformanceFrequency
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessHeap
OutputDebugStringW
GetLocalTime
CompareStringW
CompareStringA
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetStdHandle
CreatePipe
InterlockedExchange
TerminateThread
GetTempPathW
GetTempFileNameW
VirtualFree
FormatMessageW
GetExitCodeProcess
SetErrorMode
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileSectionW
WritePrivateProfileSectionW
GetPrivateProfileSectionNamesW
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetDriveTypeW
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetVolumeInformationW
SetVolumeLabelW
CreateHardLinkW
DeviceIoControl
SetFileAttributesW
GetShortPathNameW
CreateEventW
SetEvent
GetEnvironmentVariableW
SetEnvironmentVariableW
GlobalLock
GlobalUnlock
GlobalAlloc
GetFileSize
GlobalFree
GlobalMemoryStatusEx
Beep
GetComputerNameW
GetWindowsDirectoryW
GetSystemDirectoryW
GetCurrentProcessId
GetCurrentThread
GetProcessIoCounters
CreateProcessW
SetPriorityClass
LoadLibraryW
VirtualAlloc
LoadLibraryExW
HeapFree
WaitForSingleObject
CreateThread
DuplicateHandle
GetLastError
CloseHandle
GetCurrentProcess
GetProcAddress
LoadLibraryA
FreeLibrary
GetModuleFileNameW
GetFullPathNameW
ExitProcess
ExitThread
GetSystemTimeAsFileTime
SetCurrentDirectoryW
IsDebuggerPresent
GetCurrentDirectoryW
ResumeThread
GetStartupInfoW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameA
HeapReAlloc
HeapCreate
SetHandleCount
GetFileType
GetStartupInfoA
SetStdHandle
GetConsoleCP
GetConsoleMode
LCMapStringW
LCMapStringA
RtlUnwind
SetFilePointer
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetTickCount
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetModuleHandleA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEndOfFile
EnumResourceNamesW
SetEnvironmentVariableA

user32

SetWindowPos
GetCursorInfo
RegisterHotKey
ClientToScreen
GetKeyboardLayoutNameW
IsCharAlphaW
IsCharAlphaNumericW
IsCharLowerW
IsCharUpperW
GetMenuStringW
GetSubMenu
GetCaretPos
IsZoomed
MonitorFromPoint
GetMonitorInfoW
SetWindowLongW
SetLayeredWindowAttributes
FlashWindow
GetClassLongW
TranslateAcceleratorW
IsDialogMessageW
GetSysColor
InflateRect
DrawFocusRect
DrawTextW
FrameRect
DrawFrameControl
FillRect
PtInRect
DestroyAcceleratorTable
CreateAcceleratorTableW
SetCursor
GetWindowDC
GetSystemMetrics
GetActiveWindow
CharNextW
wsprintfW
RedrawWindow
DrawMenuBar
DestroyMenu
SetMenu
GetWindowTextLengthW
CreateMenu
IsDlgButtonChecked
DefDlgProcW
ReleaseCapture
SetCapture
WindowFromPoint
CreateIconFromResourceEx
mouse_event
ExitWindowsEx
SetActiveWindow
FindWindowExW
EnumThreadWindows
SetMenuDefaultItem
InsertMenuItemW
IsMenu
TrackPopupMenuEx
GetCursorPos
DeleteMenu
CheckMenuRadioItem
CopyImage
GetMenuItemCount
SetMenuItemInfoW
GetMenuItemInfoW
SetForegroundWindow
IsIconic
FindWindowW
SystemParametersInfoW
PeekMessageW
SendInput
GetAsyncKeyState
SetKeyboardState
GetKeyboardState
GetKeyState
VkKeyScanW
LoadStringW
DialogBoxParamW
MessageBeep
EndDialog
SendDlgItemMessageW
GetDlgItem
SetWindowTextW
CopyRect
ReleaseDC
GetDC
EndPaint
BeginPaint
GetClientRect
GetMenu
DestroyWindow
EnumWindows
GetDesktopWindow
IsWindow
IsWindowEnabled
IsWindowVisible
EnableWindow
InvalidateRect
GetWindowThreadProcessId
AttachThreadInput
GetFocus
GetWindowTextW
ScreenToClient
SendMessageTimeoutW
EnumChildWindows
CharUpperBuffW
GetClassNameW
GetParent
GetDlgCtrlID
SendMessageW
MapVirtualKeyW
PostMessageW
GetWindowRect
SetUserObjectSecurity
GetUserObjectSecurity
CloseDesktop
CloseWindowStation
OpenDesktopW
SetProcessWindowStation
GetProcessWindowStation
OpenWindowStationW
MessageBoxW
DefWindowProcW
MoveWindow
AdjustWindowRectEx
SetRect
SetClipboardData
EmptyClipboard
CountClipboardFormats
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
OpenClipboard
BlockInput
GetMessageW
LockWindowUpdate
DispatchMessageW
GetMenuItemID
TranslateMessage
SetFocus
PostQuitMessage
KillTimer
CreatePopupMenu
RegisterWindowMessageW
SetTimer
ShowWindow
CreateWindowExW
RegisterClassExW
LoadIconW
LoadCursorW
GetSysColorBrush
GetForegroundWindow
MessageBoxA
DestroyIcon
UnregisterHotKey
CharLowerBuffW
MonitorFromRect
keybd_event
LoadImageW
GetWindowLongW

gdi32

DeleteObject
GetObjectW
GetTextExtentPoint32W
ExtCreatePen
StrokeAndFillPath
StrokePath
EndPath
SetPixel
CloseFigure
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
StretchBlt
GetDIBits
LineTo
AngleArc
MoveToEx
Ellipse
PolyDraw
BeginPath
Rectangle
GetDeviceCaps
SetBkMode
RoundRect
SetBkColor
CreatePen
CreateSolidBrush
SetTextColor
CreateFontW
GetTextFaceW
GetStockObject
CreateDCW
GetPixel
DeleteDC
SetViewportOrgEx

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegEnumValueW
RegDeleteValueW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
GetUserNameW
RegConnectRegistryW
RegEnumKeyExW
CloseServiceHandle
UnlockServiceDatabase
LockServiceDatabase
OpenSCManagerW
InitiateSystemShutdownExW
AdjustTokenPrivileges
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
DuplicateTokenEx
CreateProcessAsUserW
CreateProcessWithLogonW
InitializeSecurityDescriptor
InitializeAcl
GetLengthSid
SetSecurityDescriptorDacl
CopySid
LogonUserW
GetTokenInformation
GetAclInformation
GetAce
AddAce
GetSecurityDescriptorDacl

shell32

DragQueryPoint
ShellExecuteExW
SHGetFolderPathW
DragQueryFileW
SHEmptyRecycleBinW
SHBrowseForFolderW
SHFileOperationW
SHGetPathFromIDListW
SHGetDesktopFolder
SHGetMalloc
ExtractIconExW
Shell_NotifyIconW
ShellExecuteW
DragFinish

ole32

OleSetMenuDescriptor
MkParseDisplayName
OleSetContainedObject
CoInitialize
CoUninitialize
CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
StringFromCLSID
IIDFromString
StringFromIID
OleInitialize
CreateBindCtx
CLSIDFromProgID
CoInitializeSecurity
CoCreateInstanceEx
CoSetProxyBlanket
OleUninitialize

oleaut32

SafeArrayAllocData
SafeArrayAllocDescriptorEx
SysAllocString
OleLoadPicture
SafeArrayGetVartype
SafeArrayDestroyData
SafeArrayAccessData
VarR8FromDec
VariantTimeToSystemTime
VariantClear
VariantCopy
VariantInit
SafeArrayDestroyDescriptor
LoadRegTypeLi
GetActiveObject
SafeArrayUnaccessData

Sections

.text
Size: 512KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Rx 6400 Optimization/Rx 6400 Optimization/1 SERVICE OPTIMIZATION/PowerRun.ini
Rx 6400 Optimization/Rx 6400 Optimization/2 RAM OPTIMIZATION/16GB Ram.reg
Rx 6400 Optimization/Rx 6400 Optimization/2 RAM OPTIMIZATION/Disable LargeSystemCache.reg
Rx 6400 Optimization/Rx 6400 Optimization/2 RAM OPTIMIZATION/Memory Tweaks.reg
Rx 6400 Optimization/Rx 6400 Optimization/3 CPU OPTIMIZATION/Better Response.reg
Rx 6400 Optimization/Rx 6400 Optimization/3 CPU OPTIMIZATION/CPU Optimizations2.reg
Rx 6400 Optimization/Rx 6400 Optimization/3 CPU OPTIMIZATION/Disable Full Screen Optimizations.reg
Rx 6400 Optimization/Rx 6400 Optimization/3 CPU OPTIMIZATION/Disable Game Bar.reg
Rx 6400 Optimization/Rx 6400 Optimization/3 CPU OPTIMIZATION/Disable GpuEnergyDriver.reg
Rx 6400 Optimization/Rx 6400 Optimization/3 CPU OPTIMIZATION/Disable Some Power Savings.reg
Rx 6400 Optimization/Rx 6400 Optimization/3 CPU OPTIMIZATION/Exclusive Fullscreen.reg
Rx 6400 Optimization/Rx 6400 Optimization/3 CPU OPTIMIZATION/Game Optimizations.reg
Rx 6400 Optimization/Rx 6400 Optimization/3 CPU OPTIMIZATION/Optimize ALL Windows Settings.reg
Rx 6400 Optimization/Rx 6400 Optimization/3 CPU OPTIMIZATION/Registry Tweaks.reg
Rx 6400 Optimization/Rx 6400 Optimization/3 CPU OPTIMIZATION/Thread Prioritys.reg
Rx 6400 Optimization/Rx 6400 Optimization/3 CPU OPTIMIZATION/UnparkCPUCores.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:71:0d:c4:23:c7:d0:00:e3:0b:ae:9f:11:ae:11:51
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15/10/2019, 00:00

Not After

04/01/2023, 12:00

Subject

SERIALNUMBER=201927010957,CN=CoderBag\, LLC,O=CoderBag\, LLC,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

50:d5:a1:b8:89:e3:b6:6b:bb:6a:5f:03:a2:47:88:4d:55:dc:06:c7:8f:61:0a:3c:32:e4:c7:33:3a:09:7c:84
Signer

Actual PE Digest

50:d5:a1:b8:89:e3:b6:6b:bb:6a:5f:03:a2:47:88:4d:55:dc:06:c7:8f:61:0a:3c:32:e4:c7:33:3a:09:7c:84

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 627KB - Virtual size: 626KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Rx 6400 Optimization/Rx 6400 Optimization/4 BOOST FPS/1Increase System Responsiveness.bat
Rx 6400 Optimization/Rx 6400 Optimization/4 BOOST FPS/2Fps_and_input_delay.bat
Rx 6400 Optimization/Rx 6400 Optimization/4 BOOST FPS/3Latency BCD Tweaks.cmd
Rx 6400 Optimization/Rx 6400 Optimization/4 BOOST FPS/4Memory+FpsTweak.bat
Rx 6400 Optimization/Rx 6400 Optimization/4 BOOST FPS/5 AxinBeta.bat
Rx 6400 Optimization/Rx 6400 Optimization/4 BOOST FPS/Turn Off Auto Windows Updates.cmd
Rx 6400 Optimization/Rx 6400 Optimization/5 GPU SETTINGS/(65) AMD RADEON SETTINGS- 🔧BEST AMD SETTINGS To Boost FPS For Gaming - NEW & IMPROVED Tweaks (2024) - YouTube.url
Rx 6400 Optimization/Rx 6400 Optimization/5 GPU SETTINGS/(65) AMD Radeon Software BEST Settings For GAMING & Performance - The Ultimate GUIDE 2024 ✅ - YouTube.url
Rx 6400 Optimization/Rx 6400 Optimization/5 GPU SETTINGS/AMD Radeon GPU FPS Optimization PACK/AMD Radeon GPU FPS Optimization PACK/1 - AMD Reg Optimizations/AMD Priority.reg
Rx 6400 Optimization/Rx 6400 Optimization/5 GPU SETTINGS/AMD Radeon GPU FPS Optimization PACK/AMD Radeon GPU FPS Optimization PACK/1 - AMD Reg Optimizations/AMD SFIO High Priority.reg
Rx 6400 Optimization/Rx 6400 Optimization/5 GPU SETTINGS/AMD Radeon GPU FPS Optimization PACK/AMD Radeon GPU FPS Optimization PACK/1 - AMD Reg Optimizations/Boost PC Responsiveness.reg
Rx 6400 Optimization/Rx 6400 Optimization/5 GPU SETTINGS/AMD Radeon GPU FPS Optimization PACK/AMD Radeon GPU FPS Optimization PACK/1 - AMD Reg Optimizations/Prioritize AMD GPU.reg
Rx 6400 Optimization/Rx 6400 Optimization/5 GPU SETTINGS/AMD Radeon GPU FPS Optimization PACK/AMD Radeon GPU FPS Optimization PACK/2 - AMD GPU Optimizations/Disable GPU Energy Driver.reg
Rx 6400 Optimization/Rx 6400 Optimization/5 GPU SETTINGS/AMD Radeon GPU FPS Optimization PACK/AMD Radeon GPU FPS Optimization PACK/2 - AMD GPU Optimizations/Disable GPU Power Throttling.reg
Rx 6400 Optimization/Rx 6400 Optimization/5 GPU SETTINGS/AMD Radeon GPU FPS Optimization PACK/AMD Radeon GPU FPS Optimization PACK/3 - Clean AMD Shader Cache/Clean AMD Temp Files.bat
Rx 6400 Optimization/Rx 6400 Optimization/5 GPU SETTINGS/AMD Radeon GPU FPS Optimization PACK/AMD Radeon GPU FPS Optimization PACK/3 - Clean AMD Shader Cache/Delete Update Cache.cmd
Rx 6400 Optimization/Rx 6400 Optimization/5 GPU SETTINGS/AMD Radeon GPU FPS Optimization PACK/AMD Radeon GPU FPS Optimization PACK/3 - Clean AMD Shader Cache/Epic Disk Cleanup.lnk
.lnk
Rx 6400 Optimization/Rx 6400 Optimization/5 GPU SETTINGS/AMD Radeon GPU FPS Optimization PACK/AMD Radeon GPU FPS Optimization PACK/4 - CMD Tweaks/Disable Memory Compression.cmd
Rx 6400 Optimization/Rx 6400 Optimization/5 GPU SETTINGS/AMD Radeon GPU FPS Optimization PACK/AMD Radeon GPU FPS Optimization PACK/4 - CMD Tweaks/Disable Mitigations.cmd
Rx 6400 Optimization/Rx 6400 Optimization/5 GPU SETTINGS/AMD Radeon GPU FPS Optimization PACK/AMD Radeon GPU FPS Optimization PACK/5 - Programs/AutoRuns.exe
.exe windows:5 windows x64 arch:x64

4c809586244a432cc12e634bd857fd28

Code Sign

33:00:00:01:1f:97:63:0a:33:b9:83:d7:2b:00:00:00:00:01:1f
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24/10/2018, 21:07

Not After

10/01/2020, 21:07

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:49BC-E37A-233C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:b1:dd:ed:ba:54:e9:65:b8:5f:00:01:00:00:01:b1
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:03:5e:25:1c:99:1f:a3:1e:b8:00:00:00:00:01:03
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:08

Not After

26/07/2019, 20:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

91:36:2e:5d:01:2b:f7:06:f4:1a:43:c6:f4:05:20:ee:58:01:5a:0c:20:93:83:92:3a:52:4e:7e:f0:92:25:40
Signer

Actual PE Digest

91:36:2e:5d:01:2b:f7:06:f4:1a:43:c6:f4:05:20:ee:58:01:5a:0c:20:93:83:92:3a:52:4e:7e:f0:92:25:40

Digest Algorithm

sha256

PE Digest Matches

true

28:bd:d3:bd:c0:86:6d:b7:e0:fe:ff:a0:47:f1:36:28:67:dc:1b:60
Signer

Actual PE Digest

28:bd:d3:bd:c0:86:6d:b7:e0:fe:ff:a0:47:f1:36:28:67:dc:1b:60

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\agent\_work\3\s\x64\Release\autoruns64.pdb

Imports

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

comctl32

ImageList_Create
ImageList_GetIcon
ImageList_Remove
ImageList_Draw
ImageList_ReplaceIcon
ImageList_Add
ImageList_GetImageCount
ord17

crypt32

CertDuplicateCertificateContext
CryptSIPRetrieveSubjectGuidForCatalogFile
CryptSIPLoad
CertGetNameStringW

wintrust

CryptCATAdminCalcHashFromFileHandle

ntdll

RtlLookupFunctionEntry
RtlPcToFileHeader
RtlCaptureContext
RtlUnwindEx
NtDeleteKey
NtOpenKey
NtCreateKey
RtlVirtualUnwind

kernel32

DeleteFileW
MoveFileW
GetComputerNameW
IsWow64Process
GetLocaleInfoW
GetNumberFormatW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetPrivateProfileSectionW
WritePrivateProfileSectionW
MultiByteToWideChar
DecodePointer
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
RaiseException
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WaitForSingleObject
GetCurrentThread
SetThreadPriority
SetFileAttributesW
WaitForMultipleObjects
CreateEventW
CreateThread
GetExitCodeThread
LoadLibraryA
ExpandEnvironmentStringsA
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
WideCharToMultiByte
GetModuleHandleExW
ExitProcess
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
ResumeThread
GetCurrentThreadId
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsFree
GetStartupInfoW
FlushFileBuffers
GetConsoleCP
GetStringTypeW
QueryPerformanceCounter
GetCurrentProcessId
GetFullPathNameW
RemoveDirectoryW
CreateDirectoryW
GetSystemWow64DirectoryW
GetSystemWindowsDirectoryW
GetWindowsDirectoryW
GetTempFileNameW
GetTempPathW
WritePrivateProfileStringW
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetPrivateProfileStringW
WriteProfileStringW
GetProfileStringW
ExpandEnvironmentStringsW
SetEnvironmentVariableW
CreateProcessW
LoadLibraryExW
CreateSemaphoreW
TlsSetValue
TlsAlloc
lstrlenW
lstrcatW
GetTickCount
GetFileTime
WriteFile
GetFileSize
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetErrorMode
ExitThread
TerminateProcess
GetCurrentProcess
OpenProcess
GetLongPathNameW
GlobalUnlock
GlobalLock
GlobalAlloc
GetVersion
FreeLibrary
TlsGetValue
GetModuleFileNameW
GetCommandLineW
GetStdHandle
GetFileType
LocalFree
LocalAlloc
GetDateFormatW
GetTimeFormatW
GetModuleHandleW
FormatMessageW
FileTimeToSystemTime
FileTimeToLocalFileTime
MulDiv
ReadFile
FindNextFileW
FindFirstFileW
GetFileAttributesW
CreateFileW
LoadLibraryW
FindClose
Sleep
GetLastError
GetProcAddress
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
CloseHandle
GetFileSizeEx
LCMapStringW
SetFilePointerEx
OutputDebugStringW
WriteConsoleW
ReadConsoleW
SetEndOfFile
lstrlenA
SetEvent
SetStdHandle

user32

FindWindowExW
FindWindowW
EnumChildWindows
SetParent
GetParent
SetWindowLongPtrW
GetWindowLongPtrW
GetWindowLongW
PtInRect
OffsetRect
UnionRect
IntersectRect
GetSysColor
ChildWindowFromPoint
MapWindowPoints
ScreenToClient
ClientToScreen
GetCursorPos
GetWindowRect
GetClientRect
GetWindowTextW
GetPropW
SetPropW
InvalidateRgn
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
SetForegroundWindow
GetClassNameW
SetMenuItemInfoW
DeleteMenu
ModifyMenuW
InsertMenuW
GetSubMenu
EnableMenuItem
CheckMenuItem
DrawMenuBar
GetMenu
GetSystemMetrics
TranslateAcceleratorW
LoadAcceleratorsW
EnableWindow
KillTimer
GetWindowThreadProcessId
LoadBitmapW
LoadIconW
DestroyIcon
LoadImageW
CopyImage
DrawIconEx
CreateIconIndirect
GetIconInfo
SetTimer
ReleaseCapture
GetFocus
SetFocus
CharUpperW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
IsDlgButtonChecked
CheckDlgButton
GetDlgItemTextW
SetDlgItemTextW
DialogBoxParamW
CreateDialogParamW
IsZoomed
LoadStringW
IsDialogMessageW
EnumDisplaySettingsW
DrawTextW
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPos
MoveWindow
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
CallWindowProcW
PostQuitMessage
DefWindowProcW
WaitForInputIdle
PostMessageW
DispatchMessageW
TranslateMessage
GetMessageW
DrawFrameControl
RegisterWindowMessageW
LoadCursorW
InflateRect
GetSysColorBrush
SetCursor
SetWindowTextW
GetDlgItem
EndDialog
DialogBoxIndirectParamW
SendMessageW
MessageBoxW
TrackPopupMenu

gdi32

StartDocW
SetMapMode
EndPage
GetDeviceCaps
DeleteDC
CreateCompatibleDC
GetObjectW
ExtTextOutW
GetDIBits
CreateDIBSection
GdiFlush
EndDoc
SetBkMode
SetTextColor
GetTextMetricsW
BitBlt
CreateBitmap
CreateFontIndirectW
CreateSolidBrush
DeleteObject
GetStockObject
GetTextExtentPoint32W
SelectObject
SetBkColor
StartPage

comdlg32

GetOpenFileNameW
GetSaveFileNameW
FindTextW
ChooseFontW
CommDlgExtendedError
PrintDlgW

advapi32

CryptDestroyHash
RegQueryValueExA
RegOpenKeyExA
QueryServiceConfig2W
GetServiceDisplayNameW
DeleteService
RegQueryValueW
RegUnLoadKeyW
RegSetKeySecurity
RegQueryInfoKeyW
RegLoadKeyW
RegGetKeySecurity
RegEnumValueW
RegEnumKeyW
RegDeleteKeyW
DuplicateTokenEx
ImpersonateLoggedOnUser
LookupPrivilegeValueW
LookupAccountNameW
LookupAccountSidW
FreeSid
AllocateAndInitializeSid
EqualSid
AdjustTokenPrivileges
GetTokenInformation
OpenProcessToken
RevertToSelf
RegOpenKeyW
RegCreateKeyW
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW
OpenServiceW
OpenSCManagerW
CloseServiceHandle
CryptAcquireContextW
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
RegCloseKey
RegOpenKeyExW
RegQueryValueExW

shell32

CommandLineToArgvW
ShellExecuteExW
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFolderPathW
SHGetFileInfoW
SHChangeNotify
ShellExecuteW

ole32

CoUninitialize
CoTaskMemFree
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoInitializeEx
CoCreateInstance

oleaut32

SysAllocString
SysFreeString
VariantClear
SysStringLen
SysAllocStringByteLen
VariantInit
VariantChangeType

shlwapi

SHAutoComplete
UrlUnescapeW
SHCreateStreamOnFileW
ord176

winhttp

WinHttpOpen
WinHttpGetProxyForUrl
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpOpenRequest
WinHttpSetOption
WinHttpQueryDataAvailable
WinHttpWriteData
WinHttpReadData
WinHttpConnect
WinHttpCloseHandle

Sections

.text
Size: 474KB - Virtual size: 474KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Rx 6400 Optimization/Rx 6400 Optimization/5 GPU SETTINGS/AMD Radeon GPU FPS Optimization PACK/AMD Radeon GPU FPS Optimization PACK/5 - Programs/MSI Mode Utility 3.0.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Z:\Software\mediafire\MSI_util\MSI_util\obj\Release\MSI_util_v3.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Rx 6400 Optimization/Rx 6400 Optimization/SystemUtilities.exe
.exe windows:6 windows x86 arch:x86

5a594319a0d69dbc452e748bcf05892e

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d8:df:42:3a:18:1e:ec:80:10:32:a4:62:2b:91:bc:d2
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

17/06/2021, 00:00

Not After

17/06/2022, 23:59

Subject

CN=Pegasun LLC,O=Pegasun LLC,L=Phoenix,ST=Arizona,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:84:26:de:c5:9d:c1:80:01:f1:6d:df:d5:00:b6:17:73:3a:b0:c1:cd:b1:8f:d4:3b:26:ac:9a:16:1d:39:53
Signer

Actual PE Digest

33:84:26:de:c5:9d:c1:80:01:f1:6d:df:d5:00:b6:17:73:3a:b0:c1:cd:b1:8f:d4:3b:26:ac:9a:16:1d:39:53

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetACP
GetExitCodeProcess
LocalFree
CloseHandle
SizeofResource
VirtualProtect
VirtualFree
GetFullPathNameW
ExitProcess
HeapAlloc
GetCPInfoExW
RtlUnwind
GetCPInfo
GetStdHandle
GetModuleHandleW
FreeLibrary
HeapDestroy
ReadFile
CreateProcessW
GetLastError
GetModuleFileNameW
SetLastError
FindResourceW
CreateThread
CompareStringW
LoadLibraryA
ResetEvent
GetVersion
RaiseException
FormatMessageW
SwitchToThread
GetExitCodeThread
GetCurrentThread
LoadLibraryExW
LockResource
GetCurrentThreadId
UnhandledExceptionFilter
VirtualQuery
VirtualQueryEx
Sleep
EnterCriticalSection
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetFileSize
GetStartupInfoW
GetFileAttributesW
InitializeCriticalSection
GetThreadPriority
SetThreadPriority
GetCurrentProcess
VirtualAlloc
GetSystemInfo
GetCommandLineW
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
GetWindowsDirectoryW
VerSetConditionMask
GetDiskFreeSpaceW
FindFirstFileW
GetUserDefaultUILanguage
lstrlenW
QueryPerformanceCounter
SetEndOfFile
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
CreateFileW
GetLocaleInfoW
GetSystemDirectoryW
DeleteFileW
GetLocalTime
GetEnvironmentVariableW
WaitForSingleObject
WriteFile
ExitThread
DeleteCriticalSection
TlsGetValue
GetDateFormatW
SetErrorMode
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
GetUserDefaultLangID
RemoveDirectoryW
CreateEventW
SetThreadLocale
GetThreadLocale

comctl32

InitCommonControls

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

user32

CreateWindowExW
TranslateMessage
CharLowerBuffW
CallWindowProcW
CharUpperW
PeekMessageW
GetSystemMetrics
SetWindowLongW
MessageBoxW
DestroyWindow
CharUpperBuffW
CharNextW
MsgWaitForMultipleObjects
LoadStringW
ExitWindowsEx
DispatchMessageW

oleaut32

SysAllocStringLen
SafeArrayPtrOfIndex
VariantCopy
SafeArrayGetLBound
SafeArrayGetUBound
VariantInit
VariantClear
SysFreeString
SysReAllocStringLen
VariantChangeType
SafeArrayCreate

netapi32

NetWkstaGetInfo
NetApiBufferFree

advapi32

RegQueryValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCloseKey
OpenProcessToken
RegOpenKeyExW

Exports

Exports

TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 718KB - Virtual size: 717KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 27KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 24B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Rx 6400 Optimization/Rx 6400 Optimization/msconfig.lnk
.lnk

Sharing

General

Malware Config

Signatures

Files

870b8e75c7190e202e9c6c81dff1040c

Code Sign

3d:34:42:6b:94:3c:02:46:bb:2a:dd:6c:e2:9e:2a:e6Certificate

Extended Key Usages

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

70:ac:49:66:18:8c:4c:86:84:cf:4e:a2:2c:23:30:bc:90:8f:c5:66Signer

Headers

DLL Characteristics

File Characteristics

Imports

wsock32

version

winmm

comctl32

mpr

wininet

psapi

userenv

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 512KB - Virtual size: 512KB

.rdata Size: 54KB - Virtual size: 54KB

.data Size: 26KB - Virtual size: 105KB

.rsrc Size: 60KB - Virtual size: 59KB

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

61:20:4d:b4:00:00:00:00:00:27Certificate

Key Usages

0b:71:0d:c4:23:c7:d0:00:e3:0b:ae:9f:11:ae:11:51Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

50:d5:a1:b8:89:e3:b6:6b:bb:6a:5f:03:a2:47:88:4d:55:dc:06:c7:8f:61:0a:3c:32:e4:c7:33:3a:09:7c:84Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 627KB - Virtual size: 626KB

.rsrc Size: 240KB - Virtual size: 239KB

.reloc Size: 512B - Virtual size: 12B

4c809586244a432cc12e634bd857fd28

Code Sign

33:00:00:01:1f:97:63:0a:33:b9:83:d7:2b:00:00:00:00:01:1fCertificate

Extended Key Usages

33:00:00:01:b1:dd:ed:ba:54:e9:65:b8:5f:00:01:00:00:01:b1Certificate

Extended Key Usages

61:33:26:1a:00:00:00:00:00:31Certificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

33:00:00:01:03:5e:25:1c:99:1f:a3:1e:b8:00:00:00:00:01:03Certificate

Extended Key Usages

3d:34:42:6b:94:3c:02:46:bb:2a:dd:6c:e2:9e:2a:e6
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

70:ac:49:66:18:8c:4c:86:84:cf:4e:a2:2c:23:30:bc:90:8f:c5:66
Signer

.text
Size: 512KB - Virtual size: 512KB

.rdata
Size: 54KB - Virtual size: 54KB

.data
Size: 26KB - Virtual size: 105KB

.rsrc
Size: 60KB - Virtual size: 59KB

61:20:4d:b4:00:00:00:00:00:27
Certificate

0b:71:0d:c4:23:c7:d0:00:e3:0b:ae:9f:11:ae:11:51
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

50:d5:a1:b8:89:e3:b6:6b:bb:6a:5f:03:a2:47:88:4d:55:dc:06:c7:8f:61:0a:3c:32:e4:c7:33:3a:09:7c:84
Signer

.text
Size: 627KB - Virtual size: 626KB

.rsrc
Size: 240KB - Virtual size: 239KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:01:1f:97:63:0a:33:b9:83:d7:2b:00:00:00:00:01:1f
Certificate

33:00:00:01:b1:dd:ed:ba:54:e9:65:b8:5f:00:01:00:00:01:b1
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

33:00:00:01:03:5e:25:1c:99:1f:a3:1e:b8:00:00:00:00:01:03
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

91:36:2e:5d:01:2b:f7:06:f4:1a:43:c6:f4:05:20:ee:58:01:5a:0c:20:93:83:92:3a:52:4e:7e:f0:92:25:40
Signer

28:bd:d3:bd:c0:86:6d:b7:e0:fe:ff:a0:47:f1:36:28:67:dc:1b:60
Signer

.text
Size: 474KB - Virtual size: 474KB

.rdata
Size: 210KB - Virtual size: 210KB

.data
Size: 15KB - Virtual size: 33KB

.pdata
Size: 13KB - Virtual size: 13KB

.rsrc
Size: 105KB - Virtual size: 104KB

.reloc
Size: 2KB - Virtual size: 2KB

.text
Size: 34KB - Virtual size: 34KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

d8:df:42:3a:18:1e:ec:80:10:32:a4:62:2b:91:bc:d2
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

33:84:26:de:c5:9d:c1:80:01:f1:6d:df:d5:00:b6:17:73:3a:b0:c1:cd:b1:8f:d4:3b:26:ac:9a:16:1d:39:53
Signer