E:\Personal\Open-Source Projects\WindowsDisplayAPI\WindowsDisplayAPI\obj\Release\net45\WindowsDisplayAPI.pdb
Overview
overview
7Static
static
3tairkyu pe...ll.lnk
windows7-x64
3tairkyu pe...ll.lnk
windows10-2004-x64
7tairkyu pe...or.exe
windows7-x64
1tairkyu pe...or.exe
windows10-2004-x64
1tairkyu pe...UI.exe
windows7-x64
1tairkyu pe...UI.exe
windows10-2004-x64
1tairkyu pe...PI.dll
windows7-x64
1tairkyu pe...PI.dll
windows10-2004-x64
1tairkyu pe...ut.dll
windows7-x64
1tairkyu pe...ut.dll
windows10-2004-x64
1tairkyu pe...er.exe
windows7-x64
3tairkyu pe...er.exe
windows10-2004-x64
3tairkyu pe...ak.exe
windows7-x64
6tairkyu pe...ak.exe
windows10-2004-x64
7Static task
static1
Behavioral task
behavioral1
Sample
tairkyu personal fps boost/2 Windows Tweaker/Windows PowerShell.lnk
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
tairkyu personal fps boost/2 Windows Tweaker/Windows PowerShell.lnk
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
tairkyu personal fps boost/3 BEST NVIDIA OR AMD SETTINGS/NVIDIA/nvidiaProfileInspector.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
tairkyu personal fps boost/3 BEST NVIDIA OR AMD SETTINGS/NVIDIA/nvidiaProfileInspector.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
tairkyu personal fps boost/4 dwm lut (COLOR SET GUI)/LUT GUI (windows 10 only)/DwmLutGUI.exe
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
tairkyu personal fps boost/4 dwm lut (COLOR SET GUI)/LUT GUI (windows 10 only)/DwmLutGUI.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
tairkyu personal fps boost/4 dwm lut (COLOR SET GUI)/LUT GUI (windows 10 only)/WindowsDisplayAPI.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
tairkyu personal fps boost/4 dwm lut (COLOR SET GUI)/LUT GUI (windows 10 only)/WindowsDisplayAPI.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
tairkyu personal fps boost/4 dwm lut (COLOR SET GUI)/LUT GUI (windows 10 only)/dwm_lut.dll
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
tairkyu personal fps boost/4 dwm lut (COLOR SET GUI)/LUT GUI (windows 10 only)/dwm_lut.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
tairkyu personal fps boost/5 Input Reducer/DelayReducer.exe
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
tairkyu personal fps boost/5 Input Reducer/DelayReducer.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
tairkyu personal fps boost/5 Input Reducer/Pax_Amber_Tweak.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
tairkyu personal fps boost/5 Input Reducer/Pax_Amber_Tweak.exe
Resource
win10v2004-20240802-en
General
-
Target
fps_boost.zip
-
Size
24.0MB
-
MD5
b1401048b9ff89fd1c366b56eee5fabd
-
SHA1
ba47e3099d6e225b0b626f04868ffb0f86c2442b
-
SHA256
a3b4dc2625c51cfafd1d1ba95e09803294236c02e26ec25ba8a5f2c3c46c9f9f
-
SHA512
a87de27141060d1c1063e4f2d492216f61fc81649dc4484a2fcf298916128671df92673bb17a725f902c6096a44e431d18c2a098bf22b7d08010b3101fef8a63
-
SSDEEP
786432:3B8NfPr0tlyNeCbEiC4mz4AEsXmM0ZepMV6lf3b:GOtkNvbEiC4UzXmM0YpMVa/b
Malware Config
Signatures
-
Unsigned PE 6 IoCs
Checks for missing Authenticode signature.
resource unpack001/tairkyu personal fps boost/3 BEST NVIDIA OR AMD SETTINGS/NVIDIA/nvidiaProfileInspector.exe unpack001/tairkyu personal fps boost/4 dwm lut (COLOR SET GUI)/LUT GUI (windows 10 only)/DwmLutGUI.exe unpack001/tairkyu personal fps boost/4 dwm lut (COLOR SET GUI)/LUT GUI (windows 10 only)/WindowsDisplayAPI.dll unpack001/tairkyu personal fps boost/4 dwm lut (COLOR SET GUI)/LUT GUI (windows 10 only)/dwm_lut.dll unpack001/tairkyu personal fps boost/5 Input Reducer/DelayReducer.exe unpack001/tairkyu personal fps boost/5 Input Reducer/Pax_Amber_Tweak.exe
Files
-
fps_boost.zip.zip
-
tairkyu personal fps boost/1 Registry Basics/(REVERT) lower kb tweak.reg
-
tairkyu personal fps boost/1 Registry Basics/(REVERT) lower mouse opt .reg
-
tairkyu personal fps boost/1 Registry Basics/READ ME.txt
-
tairkyu personal fps boost/1 Registry Basics/ds searching disabler.reg
-
tairkyu personal fps boost/1 Registry Basics/first ping.reg
-
tairkyu personal fps boost/1 Registry Basics/lower kb tweak.reg
-
tairkyu personal fps boost/1 Registry Basics/lower mouse opt.reg
-
tairkyu personal fps boost/1 Registry Basics/lowers dns.reg
-
tairkyu personal fps boost/1 Registry Basics/no more transparency.reg
-
tairkyu personal fps boost/1 Registry Basics/prefetch disabler.reg
-
tairkyu personal fps boost/1 Registry Basics/remove power throttle.reg
-
tairkyu personal fps boost/1 Registry Basics/removestartupdelay.reg
-
tairkyu personal fps boost/1 Registry Basics/tweak for lower delay or ping.reg
-
tairkyu personal fps boost/1 Registry Basics/tweaks for productivity .reg
-
tairkyu personal fps boost/2 Windows Tweaker/Windows PowerShell.lnk.lnk
-
tairkyu personal fps boost/2 Windows Tweaker/explanation + credits.txt
-
tairkyu personal fps boost/2 Windows Tweaker/tutorial for window tweaks.mp4
-
tairkyu personal fps boost/3 BEST NVIDIA OR AMD SETTINGS/NVIDIA/Base Profile.nip
-
tairkyu personal fps boost/3 BEST NVIDIA OR AMD SETTINGS/NVIDIA/nvidiaProfileInspector.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 560KB - Virtual size: 560KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
tairkyu personal fps boost/3 BEST NVIDIA OR AMD SETTINGS/Radeon (AMD)/Apply Optimal Settings.reg
-
tairkyu personal fps boost/3 BEST NVIDIA OR AMD SETTINGS/Radeon (AMD)/Disable Some Power Savings.reg
-
tairkyu personal fps boost/4 dwm lut (COLOR SET GUI)/COLOR PACK - tairkyu/BrightBlue.cube
-
tairkyu personal fps boost/4 dwm lut (COLOR SET GUI)/COLOR PACK - tairkyu/BrightComp.cube
-
tairkyu personal fps boost/4 dwm lut (COLOR SET GUI)/COLOR PACK - tairkyu/ClearBright.cube
-
tairkyu personal fps boost/4 dwm lut (COLOR SET GUI)/COLOR PACK - tairkyu/LittleBright.cube
-
tairkyu personal fps boost/4 dwm lut (COLOR SET GUI)/COLOR PACK - tairkyu/MoreColor.cube
-
tairkyu personal fps boost/4 dwm lut (COLOR SET GUI)/COLOR PACK - tairkyu/VeryBlue.cube
-
tairkyu personal fps boost/4 dwm lut (COLOR SET GUI)/COLOR PACK - tairkyu/tairkyu color.cube
-
tairkyu personal fps boost/4 dwm lut (COLOR SET GUI)/LUT GUI (windows 10 only)/DwmLutGUI.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
tairkyu personal fps boost/4 dwm lut (COLOR SET GUI)/LUT GUI (windows 10 only)/LICENSE
-
tairkyu personal fps boost/4 dwm lut (COLOR SET GUI)/LUT GUI (windows 10 only)/LICENSE-THIRD-PARTY
-
tairkyu personal fps boost/4 dwm lut (COLOR SET GUI)/LUT GUI (windows 10 only)/WindowsDisplayAPI.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
tairkyu personal fps boost/4 dwm lut (COLOR SET GUI)/LUT GUI (windows 10 only)/config.xml
-
tairkyu personal fps boost/4 dwm lut (COLOR SET GUI)/LUT GUI (windows 10 only)/dwm_lut.dll.dll windows:4 windows x64 arch:x64
383d12505bdf177f8fdbc0121a35d13a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
advapi32
RegGetValueA
d3dcompiler_47
D3DCompile
kernel32
CloseHandle
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
ExpandEnvironmentStringsA
FindClose
FindFirstFileA
FindNextFileA
FlushInstructionCache
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemInfo
GetThreadContext
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InitializeCriticalSection
IsDBCSLeadByteEx
K32GetModuleInformation
LeaveCriticalSection
MultiByteToWideChar
OpenThread
ResumeThread
SetThreadContext
Sleep
SuspendThread
Thread32First
Thread32Next
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
msvcrt
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_unlock
abort
calloc
fclose
fgets
fopen
free
fwrite
getc
islower
isspace
isupper
isxdigit
localeconv
malloc
memcpy
memset
realloc
strcpy
strlen
strncmp
strstr
strtol
strtoul
tolower
ungetc
vfprintf
Sections
.text Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
tairkyu personal fps boost/5 Input Reducer/DelayReducer.exe.exe windows:4 windows x86 arch:x86
72717c83cf7b5d060d520d8545909ee1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord5163
ord6374
ord4353
ord5290
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord3721
ord800
ord795
ord858
ord860
ord540
ord567
ord825
ord3626
ord3663
ord2414
ord4275
ord2379
ord755
ord6172
ord5875
ord5789
ord470
ord6453
ord3874
ord4284
ord1641
ord2385
ord2864
ord613
ord289
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord641
ord2514
ord2621
ord1134
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord1775
ord5280
ord4425
ord3597
ord537
ord324
ord2302
ord4234
ord1146
ord1168
ord2367
ord2370
ord4160
ord2863
ord2818
ord6334
ord5241
ord4407
ord1776
ord4078
ord6055
ord3619
ord3402
ord2860
ord5277
ord1576
msvcrt
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_setmbcp
__CxxFrameHandler
_ftol
__dllonexit
_onexit
_exit
_XcptFilter
_initterm
kernel32
GetModuleHandleA
GetStartupInfoA
user32
GetSystemMetrics
IsIconic
GetClientRect
LoadIconA
EnableWindow
GetParent
DrawIcon
AppendMenuA
SendMessageA
SetCursor
LoadCursorA
GetSystemMenu
gdi32
GetObjectA
GetTextExtentPoint32A
CreateFontIndirectA
shell32
ShellExecuteA
comctl32
_TrackMouseEvent
ntdll
NtSetTimerResolution
NtQueryTimerResolution
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 332B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
tairkyu personal fps boost/5 Input Reducer/Pax_Amber_Tweak.exe.exe windows:6 windows x64 arch:x64
5f8c85c4e25cacbe99b242e6382490cb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\Jack\source\repos\AmberFPS\x64\Release\AmberFPS.pdb
Imports
kernel32
SetConsoleTitleW
GetStdHandle
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
IsDebuggerPresent
GetConsoleWindow
SetConsoleTextAttribute
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW
user32
MessageBoxW
GetWindowRect
MoveWindow
advapi32
GetUserNameW
msvcp140
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
vcruntime140
__current_exception_context
__current_exception
__C_specific_handler
memset
api-ms-win-crt-stdio-l1-1-0
__p__commode
__stdio_common_vfprintf
_set_fmode
__acrt_iob_func
api-ms-win-crt-runtime-l1-1-0
_set_app_type
_exit
_cexit
_c_exit
_crt_atexit
terminate
exit
_initterm_e
_register_thread_local_exe_atexit_callback
_register_onexit_function
_seh_filter_exe
__p___argc
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_initialize_onexit_table
_configure_narrow_argv
system
__p___argv
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
tairkyu personal fps boost/6 private sens + keyboard and mouse leak/Sens.txt
-
tairkyu personal fps boost/6 private sens + keyboard and mouse leak/mouse and keyboard.txt
-
tairkyu personal fps boost/7 Best clent setting (UNLOCKS FPS CAP)/ClientAppSettings.json
-
tairkyu personal fps boost/8 Best Resolutions/Res.txt
-
tairkyu personal fps boost/9 Macros/360 MACROS/360 LOGITECH.txt
-
tairkyu personal fps boost/9 Macros/360 MACROS/360.ahk
-
tairkyu personal fps boost/9 Macros/360 MACROS/TUTORIAL ON LOGITECH MACRO.txt
-
tairkyu personal fps boost/9 Macros/Da Hood/LOGITECH.png.png
-
tairkyu personal fps boost/9 Macros/Da Hood/OP AUTO.png.png
-
tairkyu personal fps boost/9 Macros/Da Hood/RAZER.png.png