AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Static task
static1
Behavioral task
behavioral1
Sample
9b20f9f00015dd428cda512b227de94acd1b1fd79448461541788c75f909fd51.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9b20f9f00015dd428cda512b227de94acd1b1fd79448461541788c75f909fd51.exe
Resource
win10v2004-20230915-en
Target
9b20f9f00015dd428cda512b227de94acd1b1fd79448461541788c75f909fd51
Size
1.6MB
MD5
b509ddb0d59d7e4b025d8a6025ce7f94
SHA1
15defb92b898b9d5f16c7480d1e51872000462bf
SHA256
9b20f9f00015dd428cda512b227de94acd1b1fd79448461541788c75f909fd51
SHA512
33e6579a0da605d351e4a9f83ba58554c64647019f254b61f73d0105dd750af2a548b83e1383378ba436ddc9eac38063449e73a59c520d90f9887ac5eabba64e
SSDEEP
12288:FOg0+HAN7dNkcKxvAOwLD+lCFcD1goThydrWUeB+QChZsrwbebPeVmfCUqVfZbdB:FV09VDUOoTqy8QCYrLLeYKUML
Checks for missing Authenticode signature.
resource |
---|
9b20f9f00015dd428cda512b227de94acd1b1fd79448461541788c75f909fd51 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
??0BSXLocalClient@@QAE@PAVQObject@@@Z
??1BSXLocalClient@@UAE@XZ
?launch@BSXLocalClient@@QAEXABVQString@@@Z
?sendSync@BSXLocalClient@@QAEXABVQString@@@Z
?metaObject@BSXLocalClient@@UBEPBUQMetaObject@@XZ
?qt_metacall@BSXLocalClient@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@BSXLocalClient@@UAEPAXPBD@Z
??0BSXLocalServer@@QAE@PAVQObject@@@Z
??1BSXLocalServer@@UAE@XZ
?launch@BSXLocalServer@@QAEXABVQString@@@Z
?sig_receive@BSXLocalServer@@QAEXVQString@@@Z
?iCommandLine@@YAPAVICommandLine@@XZ
?metaObject@BSXLocalServer@@UBEPBUQMetaObject@@XZ
?qt_metacall@BSXLocalServer@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@BSXLocalServer@@UAEPAXPBD@Z
?staticMetaObject@BSXLocalServer@@2UQMetaObject@@B
?BLConfig@@YA?AVQVariant@@W4AppConfig@BLauncher@@@Z
?InitConnections@Plugin@@YAXPAVIPluginManager@@@Z
?instance@BLauncher@@SAPAV1@XZ
?doClearWebCache@BLauncher@@QAEXXZ
?getAppConfigValue@BLauncher@@QAE?AVQVariant@@W4AppConfig@1@@Z
?setAppconfigValue@BLauncher@@QAEXW4AppConfig@1@ABVQVariant@@@Z
?saveRegistryValue@BLauncher@@QAEXW4RegistryPath@1@W4AppConfig@1@W4RegistryType@1@ABVQVariant@@@Z
?registryValue@BLauncher@@QAE?AVQVariant@@W4RegistryPath@1@W4AppConfig@1@W4RegistryType@1@@Z
?init@BEvent@@SAXXZ
?MainWindowPlugin@Plugin@@YAPAVIMainWindow@@XZ
?instance@Log@@SAPAV1@XZ
?start@Log@@QAEXXZ
?registerMainThreadID@Log@@SAXH@Z
?stop@Log@@SAXXZ
?initErrorMsg@BError@@SAXXZ
?instance@Language@@SAPAV1@XZ
?init@Language@@QAEXXZ
?setStartingEnv@CreateProcessHelper@@SAXPAPAD@Z
?startAgent@BAgent@@SAXXZ
??0QApplication@@QAE@AAHPAPADH@Z
?staticMetaObject@QMainWindow@@2UQMetaObject@@B
?setStyleSheet@QApplication@@QAEXABVQString@@@Z
?exec@QApplication@@SAHXZ
??1QApplication@@UAE@XZ
?allWidgets@QApplication@@SA?AV?$QList@PAVQWidget@@@@XZ
?event@QApplication@@MAE_NPAVQEvent@@@Z
?compressEvent@QApplication@@MAE_NPAVQEvent@@PAVQObject@@PAVQPostEventList@@@Z
?metaObject@QApplication@@UBEPBUQMetaObject@@XZ
?notify@QApplication@@UAE_NPAVQObject@@PAVQEvent@@@Z
?qt_metacall@QApplication@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QApplication@@UAEPAXPBD@Z
?staticMetaObject@QGuiApplication@@2UQMetaObject@@B
?setHighDpiScaleFactorRoundingPolicy@QGuiApplication@@SAXW4HighDpiScaleFactorRoundingPolicy@Qt@@@Z
?lastWindowClosed@QGuiApplication@@QAEXXZ
?setUseSystemConfiguration@QNetworkProxyFactory@@SAX_N@Z
??1QPluginLoader@@UAE@XZ
?qResourceFeatureZlib@@YAEXZ
?qUnregisterResourceData@@YA_NHPBE00@Z
?qRegisterResourceData@@YA_NHPBE00@Z
?dynamicMetaObject@QObjectData@@QBEPAUQMetaObject@@XZ
?staticMetaObject@QObject@@2UQMetaObject@@B
?qt_metacast@QObject@@UAEPAXPBD@Z
?qt_metacall@QObject@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?value@QSettings@@QBE?AVQVariant@@ABVQString@@ABV2@@Z
??1QSettings@@UAE@XZ
??0QSettings@@QAE@ABVQString@@W4Format@0@PAVQObject@@@Z
?setCurrent@QDir@@SA_NABVQString@@@Z
?toNativeSeparators@QDir@@SA?AVQString@@ABV2@@Z
?createUuid@QUuid@@SA?AV1@XZ
??9QUuid@@QBE_NABV0@@Z
?isNull@QUuid@@QBE_NXZ
?toString@QUuid@@QBE?AVQString@@W4StringFormat@1@@Z
??0QUuid@@QAE@PBD@Z
?startDetached@QProcess@@SA_NABVQString@@ABVQStringList@@@Z
?fromPercentEncoding@QUrl@@SA?AVQString@@ABVQByteArray@@@Z
?singleShotImpl@QTimer@@CAXHW4TimerType@Qt@@PBVQObject@@PAVQSlotObjectBase@QtPrivate@@@Z
?defaultTypeFor@QTimer@@CA?AW4TimerType@Qt@@H@Z
?applicationFilePath@QCoreApplication@@SA?AVQString@@XZ
?instance@QCoreApplication@@SAPAV1@XZ
?setAttribute@QCoreApplication@@SAXW4ApplicationAttribute@Qt@@_N@Z
?quit@QEventLoop@@QAEXXZ
?exec@QEventLoop@@QAEHV?$QFlags@W4ProcessEventsFlag@QEventLoop@@@@@Z
??1QEventLoop@@UAE@XZ
??0QEventLoop@@QAE@PAVQObject@@@Z
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
??1QFile@@UAE@XZ
??0QFile@@QAE@ABVQString@@@Z
?toBool@QVariant@@QBE_NXZ
?toInt@QVariant@@QBEHPA_N@Z
??0QVariant@@QAE@ABVQString@@@Z
??0QVariant@@QAE@XZ
?setCodecForLocale@QTextCodec@@SAXPAV1@@Z
?codecForName@QTextCodec@@SAPAV1@PBD@Z
?setMaxThreadCount@QThreadPool@@QAEXH@Z
?globalInstance@QThreadPool@@SAPAV1@XZ
?currentThreadId@QThread@@SAPAXXZ
?elapsed@QElapsedTimer@@QBE_JXZ
?start@QElapsedTimer@@QAEXXZ
?readAll@QIODevice@@QAE?AVQByteArray@@XZ
?isEmpty@QListData@@QBE_NXZ
?toStdWString@QString@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
??4QString@@QAEAAV0@PBD@Z
??0QString@@QAE@ABVQByteArray@@@Z
?number@QString@@SA?AV1@KH@Z
?number@QString@@SA?AV1@HH@Z
?toInt@QString@@QBEHPA_NH@Z
?toUtf8@QString@@QHAE?AVQByteArray@@XZ
?append@QString@@QAEAAV1@ABV1@@Z
?indexOf@QString@@QBEHABV1@HW4CaseSensitivity@Qt@@@Z
??4QString@@QAEAAV0@$$QAV0@@Z
??1QByteArray@@QAE@XZ
??0QByteArray@@QAE@PBDH@Z
?warning@QMessageLogger@@QBAXPBDZZ
?qputenv@@YA_NPBDABVQByteArray@@@Z
?qEnvironmentVariable@@YA?AVQString@@PBD@Z
?shared_null@QHashData@@2U1@B
?shared_null@QListData@@2UData@1@B
?null@QString@@2UNull@1@B
?qt_metacast@QPluginLoader@@UAEPAXPBD@Z
?qt_metacall@QPluginLoader@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?metaObject@QPluginLoader@@UBEPBUQMetaObject@@XZ
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ
?entryList@QDir@@QBE?AVQStringList@@V?$QFlags@W4Filter@QDir@@@@V?$QFlags@W4SortFlag@QDir@@@@@Z
?cd@QDir@@QAE_NABVQString@@@Z
?absoluteFilePath@QDir@@QBE?AVQString@@ABV2@@Z
??1QDir@@QAE@XZ
??0QDir@@QAE@ABVQString@@@Z
?fileName@QPluginLoader@@QBE?AVQString@@XZ
?load@QPluginLoader@@QAE_NXZ
?instance@QPluginLoader@@QAEPAVQObject@@XZ
??0QPluginLoader@@QAE@ABVQString@@PAVQObject@@@Z
?isLibrary@QLibrary@@SA_NABVQString@@@Z
?shared_null@QMapDataBase@@2U1@B
??0QString@@QAE@ABV0@@Z
??1QString@@QAE@XZ
??4QString@@QAEAAV0@ABV0@@Z
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z
??1Connection@QMetaObject@@QAE@XZ
?detach@QListData@@QAEPAUData@1@H@Z
?dispose@QListData@@QAEXXZ
?dispose@QListData@@SAXPAUData@1@@Z
?begin@QListData@@QBEPAPAXXZ
?end@QListData@@QBEPAPAXXZ
?connectImpl@QObject@@CA?AVConnection@QMetaObject@@PBV1@PAPAX01PAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PBHPBU3@@Z
?quit@QCoreApplication@@SAXXZ
?recalcMostLeftNode@QMapDataBase@@QAEXXZ
?createNode@QMapDataBase@@QAEPAUQMapNodeBase@@HHPAU2@_N@Z
?freeTree@QMapDataBase@@QAEXPAUQMapNodeBase@@H@Z
?createData@QMapDataBase@@SAPAU1@XZ
?freeData@QMapDataBase@@SAXPAU1@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?connectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?disconnectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
??0QObject@@QAE@PAV0@@Z
??1QObject@@UAE@XZ
?disconnect@QObject@@SA_NPBV1@PBD01@Z
?deleteLater@QObject@@QAEXXZ
?event@QObject@@UAE_NPAVQEvent@@@Z
?fromUtf8@QString@@SA?AV1@PBDH@Z
?qBadAlloc@@YAXXZ
??0QMessageLogger@@QAE@PBDH0@Z
?info@QMessageLogger@@QBE?AVQDebug@@XZ
?allocate@QArrayData@@SAPAU1@IIIV?$QFlags@W4AllocationOption@QArrayData@@@@@Z
?deallocate@QArrayData@@SAXPAU1@II@Z
??6QDebug@@QAEAAV0@ABVQString@@@Z
??0QString@@QAE@XZ
??8@YA_NABVQString@@0@Z
??0QString@@QAE@ABUNull@0@@Z
?qHash@@YAIABVQString@@I@Z
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z
?realloc@QListData@@QAEXH@Z
?append@QListData@@QAEPAPAXXZ
?setParent@QObject@@QAEXPAV1@@Z
??0QUrl@@QAE@XZ
??1QUrl@@QAE@XZ
??0QUuid@@QAE@ABVQString@@@Z
?toString@QUuid@@QBE?AVQString@@XZ
?allocateNode@QHashData@@QAEPAXH@Z
?freeNode@QHashData@@QAEXPAX@Z
?detach_helper@QHashData@@QAEPAU1@P6AXPAUNode@1@PAX@ZP6AX0@ZHH@Z
?hasShrunk@QHashData@@QAEXXZ
?rehash@QHashData@@QAEXH@Z
?free_helper@QHashData@@QAEXP6AXPAUNode@1@@Z@Z
?nextNode@QHashData@@SAPAUNode@1@PAU21@@Z
?nextNode@QMapNodeBase@@QBEPBU1@XZ
??1QVariant@@QAE@XZ
?toString@QVariant@@QBE?AVQString@@XZ
??1QDebug@@QAE@XZ
??6QDebug@@QAEAAV0@PBD@Z
LocalFree
GetCommandLineW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
GetModuleHandleW
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
CreateMutexW
GetLastError
CloseHandle
WideCharToMultiByte
__CxxFrameHandler3
memcpy
_purecall
__current_exception
__std_terminate
_except_handler4_common
__std_exception_copy
__std_exception_destroy
memset
_CxxThrowException
__current_exception_context
_controlfp_s
_register_thread_local_exe_atexit_callback
_c_exit
terminate
_initterm
_exit
exit
_get_narrow_winmain_command_line
_initterm_e
_invalid_parameter_noinfo_noreturn
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
__p__environ
malloc
_callnewh
_set_new_mode
free
__setusermatherr
_set_fmode
__p__commode
_configthreadlocale
CommandLineToArgvW
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE