qt_plugin_instance
qt_plugin_query_metadata
sqlite3_carray_init
sqlite3_csv_init
sqlite3_fileio_init
sqlite3_series_init
sqlite3_shathree_init
Static task
static1
Behavioral task
behavioral1
Sample
25A3472BCF4387E6968C220B950D5D15.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
25A3472BCF4387E6968C220B950D5D15.dll
Resource
win10v2004-20221111-en
Target
25A3472BCF4387E6968C220B950D5D15.fil
Size
1.8MB
MD5
25a3472bcf4387e6968c220b950d5d15
SHA1
0e9d03aac7b23817766cea9e6f90fbaa0fa4a62c
SHA256
6fef1445304a7429d7a43d2677ce6fbb5b68338e3d009ee25f7f8ca9a10769b5
SHA512
f49091066c6bef684d310b718ff1bbc7c8e35338ccaa43b43909de05ca5c947a449a8f734b61e3f9ad36c56a5e45df572001d6686da3b5749c8d253c479f8440
SSDEEP
24576:kG4C1bxOY7OeFRQKGbVTtsjfcMVa30WDQW67Si0TjMPuMK8nC+dIukOHAnN8uJ9M:wC19OYfeKjfcf1ESEPuMBnXkOgNVD
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?staticMetaObject@QSqlDriver@@2UQMetaObject@@B
?qt_metacall@QSqlDriver@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QSqlDriver@@UAEPAXPBD@Z
?setLastError@QSqlDriver@@MAEXABVQSqlError@@@Z
?cancelQuery@QSqlDriver@@UAE_NXZ
?stripDelimiters@QSqlDriver@@UBE?AVQString@@ABV2@W4IdentifierType@1@@Z
?isIdentifierEscaped@QSqlDriver@@UBE_NABVQString@@W4IdentifierType@1@@Z
?sqlStatement@QSqlDriver@@UBE?AVQString@@W4StatementType@1@ABV2@ABVQSqlRecord@@_N@Z
?formatValue@QSqlDriver@@UBE?AVQString@@ABVQSqlField@@_N@Z
?isOpen@QSqlDriver@@UBE_NXZ
?setNumericalPrecisionPolicy@QSqlCachedResult@@MAEXW4NumericalPrecisionPolicy@QSql@@@Z
?fetchLast@QSqlCachedResult@@MAE_NXZ
?fetchFirst@QSqlCachedResult@@MAE_NXZ
?fetchPrevious@QSqlCachedResult@@MAE_NXZ
?fetchNext@QSqlCachedResult@@MAE_NXZ
?fetch@QSqlCachedResult@@MAE_NH@Z
?isNull@QSqlCachedResult@@MAE_NH@Z
?data@QSqlCachedResult@@MAE?AVQVariant@@H@Z
?nextResult@QSqlResult@@MAE_NXZ
?bindValue@QSqlResult@@MAEXHABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z
?bindValue@QSqlResult@@MAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z
?savePrepare@QSqlResult@@MAE_NABVQString@@@Z
?setForwardOnly@QSqlResult@@MAEX_N@Z
?setSelect@QSqlResult@@MAEX_N@Z
?setQuery@QSqlResult@@MAEXABVQString@@@Z
?setLastError@QSqlResult@@MAEXABVQSqlError@@@Z
?setActive@QSqlResult@@MAEX_N@Z
?setAt@QSqlResult@@MAEXH@Z
?fieldSerial@QSqlResultPrivate@@UBE?AVQString@@H@Z
??1QSqlCachedResultPrivate@@UAE@XZ
??0QSqlCachedResultPrivate@@QAE@PAVQSqlCachedResult@@PBVQSqlDriver@@@Z
??1QSqlCachedResult@@UAE@XZ
?virtual_hook@QSqlCachedResult@@MAEXHPAX@Z
?clearValues@QSqlCachedResult@@IAEXXZ
?cleanup@QSqlCachedResult@@IAEXXZ
?init@QSqlCachedResult@@IAEXH@Z
??0QSqlCachedResult@@IAE@AAVQSqlCachedResultPrivate@@@Z
?setOpenError@QSqlDriver@@MAEX_N@Z
?setOpen@QSqlDriver@@MAEX_N@Z
??0QSqlDriver@@IAE@AAVQSqlDriverPrivate@@PAVQObject@@@Z
?notification@QSqlDriver@@QAEXABVQString@@W4NotificationSource@1@ABVQVariant@@@Z
?isOpenError@QSqlDriver@@QBE_NXZ
??1QSqlDriver@@UAE@XZ
?numericalPrecisionPolicy@QSqlResult@@IBE?AW4NumericalPrecisionPolicy@QSql@@XZ
?boundValues@QSqlResult@@IBEAAV?$QVector@VQVariant@@@@XZ
?driver@QSqlResult@@IBEPBVQSqlDriver@@XZ
?isSelect@QSqlResult@@IBE_NXZ
?isActive@QSqlResult@@IBE_NXZ
?lastError@QSqlResult@@IBE?AVQSqlError@@XZ
?next@QSqlQuery@@QAE_NXZ
?value@QSqlQuery@@QBE?AVQVariant@@H@Z
?exec@QSqlQuery@@QAE_NABVQString@@@Z
?setForwardOnly@QSqlQuery@@QAEX_N@Z
?lastError@QSqlQuery@@QBE?AVQSqlError@@XZ
??1QSqlQuery@@QAE@XZ
??0QSqlQuery@@QAE@PAVQSqlResult@@@Z
?append@QSqlIndex@@QAEXABVQSqlField@@@Z
??1QSqlIndex@@QAE@XZ
??0QSqlIndex@@QAE@ABV0@@Z
??0QSqlIndex@@QAE@ABVQString@@0@Z
?count@QSqlRecord@@QBEHXZ
?clear@QSqlRecord@@QAEXXZ
?isEmpty@QSqlRecord@@QBE_NXZ
?append@QSqlRecord@@QAEXABVQSqlField@@@Z
??1QSqlRecord@@QAE@XZ
??0QSqlRecord@@QAE@ABV0@@Z
??0QSqlRecord@@QAE@XZ
?setAutoValue@QSqlField@@QAEX_N@Z
?setSqlType@QSqlField@@QAEXH@Z
?setDefaultValue@QSqlField@@QAEXABVQVariant@@@Z
?setRequired@QSqlField@@QAEX_N@Z
??1QSqlField@@QAE@XZ
??0QSqlField@@QAE@ABVQString@@W4Type@QVariant@@0@Z
?isValid@QSqlError@@QBE_NXZ
?databaseText@QSqlError@@QBE?AVQString@@XZ
??1QSqlError@@QAE@XZ
??0QSqlError@@QAE@ABVQString@@0W4ErrorType@0@0@Z
?staticMetaObject@QSqlDriverPlugin@@2UQMetaObject@@B
??1QSqlDriverPlugin@@UAE@XZ
??0QSqlDriverPlugin@@QAE@PAVQObject@@@Z
?qt_metacall@QSqlDriverPlugin@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QSqlDriverPlugin@@UAEPAXPBD@Z
?qt_assert@@YAXPBD0H@Z
??8QString@@QBE_NVQLatin1String@@@Z
?dynamicMetaObject@QObjectData@@QBEPAUQMetaObject@@XZ
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPAU12@PBVQObject@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?connectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?disconnectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?qt_assert_x@@YAXPBD00H@Z
?qt_check_pointer@@YAXPBDH@Z
??0QMessageLogger@@QAE@PBDH0@Z
?warning@QMessageLogger@@QBAXPBDZZ
??0QChar@@QAE@G@Z
??0QChar@@QAE@UQLatin1Char@@@Z
?data@QArrayData@@QAEPAXXZ
?data@QArrayData@@QBEPBXXZ
?allocate@QArrayData@@SAPAU1@IIIV?$QFlags@W4AllocationOption@QArrayData@@@@@Z
?deallocate@QArrayData@@SAXPAU1@II@Z
?sharedNull@QArrayData@@SAPAU1@XZ
??0QByteArray@@QAE@PBDH@Z
??1QByteArray@@QAE@XZ
?size@QByteArray@@QBEHXZ
?constData@QByteArray@@QBEPBDXZ
??0QString@@QAE@XZ
??0QString@@QAE@PBVQChar@@H@Z
??0QString@@QAE@VQLatin1String@@@Z
??0QString@@QAE@ABV0@@Z
??1QString@@QAE@XZ
??4QString@@QAEAAV0@ABV0@@Z
??0QString@@QAE@$$QAV0@@Z
??4QString@@QAEAAV0@$$QAV0@@Z
?size@QString@@QBEHXZ
?isEmpty@QString@@QBE_NXZ
?constData@QString@@QBEPBVQChar@@XZ
?clear@QString@@QAEXXZ
?at@QString@@QBE?BVQChar@@H@Z
?arg@QString@@QBE?AV1@HHHVQChar@@@Z
?arg@QString@@QBE?AV1@VQChar@@H0@Z
?arg@QString@@QBE?AV1@VQLatin1String@@HVQChar@@@Z
?indexOf@QString@@QBEHVQChar@@HW4CaseSensitivity@Qt@@@Z
?lastIndexOf@QString@@QBEHVQChar@@HW4CaseSensitivity@Qt@@@Z
?contains@QString@@QBE_NABVQRegularExpression@@@Z
?left@QString@@QBE?AV1@H@Z
?mid@QString@@QBE?AV1@HH@Z
?startsWith@QString@@QBE_NVQLatin1String@@W4CaseSensitivity@Qt@@@Z
?startsWith@QString@@QBE_NVQChar@@W4CaseSensitivity@Qt@@@Z
?endsWith@QString@@QBE_NVQChar@@W4CaseSensitivity@Qt@@@Z
?toLower@QString@@QGBE?AV1@XZ
?toLower@QString@@QHAE?AV1@XZ
?trimmed@QString@@QGBE?AV1@XZ
?trimmed@QString@@QHAE?AV1@XZ
?append@QString@@QAEAAV1@VQChar@@@Z
?prepend@QString@@QAEAAV1@VQChar@@@Z
??YQString@@QAEAAV0@VQChar@@@Z
??YQString@@QAEAAV0@ABV0@@Z
?remove@QString@@QAEAAV1@VQChar@@W4CaseSensitivity@Qt@@@Z
?replace@QString@@QAEAAV1@VQChar@@VQLatin1String@@W4CaseSensitivity@Qt@@@Z
?split@QString@@QBE?AVQStringList@@VQChar@@V?$QFlags@W4SplitBehaviorFlags@Qt@@@@W4CaseSensitivity@Qt@@@Z
?utf16@QString@@QBEPBGXZ
?toUtf8@QString@@QGBE?AVQByteArray@@XZ
?toUtf8@QString@@QHAE?AVQByteArray@@XZ
?toLocal8Bit@QString@@QGBE?AVQByteArray@@XZ
?fromUtf8@QString@@SA?AV1@PBDH@Z
?toInt@QString@@QBEHPA_NH@Z
?number@QString@@SA?AV1@HH@Z
??8@YA_NABVQString@@0@Z
?isNull@QString@@QBE_NXZ
??0QString@@QAE@UQStringDataPtr@@@Z
??0QGenericArgument@@QAE@PBDPBX@Z
?tr@QMetaObject@@QBE?AVQString@@PBD0H@Z
?normalizedType@QMetaObject@@SA?AVQByteArray@@PBD@Z
?invokeMethod@QMetaObject@@SA_NPAVQObject@@PBDW4ConnectionType@Qt@@VQGenericArgument@@333333333@Z
?qHash@@YAIABVQString@@I@Z
?detach@QListData@@QAEPAUData@1@H@Z
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z
?dispose@QListData@@QAEXXZ
?dispose@QListData@@SAXPAUData@1@@Z
?append@QListData@@QAEPAPAXXZ
?remove@QListData@@QAEXH@Z
?size@QListData@@QBEHXZ
?isEmpty@QListData@@QBE_NXZ
?at@QListData@@QBEPAPAXH@Z
?begin@QListData@@QBEPAPAXXZ
?end@QListData@@QBEPAPAXXZ
?QStringList_contains@QtPrivate@@YA_NPBVQStringList@@ABVQString@@W4CaseSensitivity@Qt@@@Z
?registerNormalizedType@QMetaType@@SAHABVQByteArray@@P6AXPAX@ZP6APAX1PBX@ZHV?$QFlags@W4TypeFlag@QMetaType@@@@PBUQMetaObject@@@Z
?registerNormalizedTypedef@QMetaType@@SAHABVQByteArray@@H@Z
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z
?allocateNode@QHashData@@QAEPAXH@Z
?freeNode@QHashData@@QAEXPAX@Z
?detach_helper@QHashData@@QAEPAU1@P6AXPAUNode@1@PAX@ZP6AX0@ZHH@Z
?willGrow@QHashData@@QAE_NXZ
?hasShrunk@QHashData@@QAEXXZ
?free_helper@QHashData@@QAEXP6AXPAUNode@1@@Z@Z
?firstNode@QHashData@@QAEPAUNode@1@XZ
?nextNode@QHashData@@SAPAUNode@1@PAU21@@Z
?toString@QTime@@QBE?AVQString@@ABV2@@Z
??1QDateTime@@QAE@XZ
?timeSpec@QDateTime@@QBE?AW4TimeSpec@Qt@@XZ
?offsetFromUtc@QDateTime@@QBEHXZ
?timeZone@QDateTime@@QBE?AVQTimeZone@@XZ
?toString@QDateTime@@QBE?AVQString@@ABV2@@Z
??0QVariant@@QAE@XZ
??1QVariant@@QAE@XZ
??0QVariant@@QAE@W4Type@0@@Z
??0QVariant@@QAE@HPBXI@Z
??0QVariant@@QAE@ABV0@@Z
??0QVariant@@QAE@H@Z
??0QVariant@@QAE@_J@Z
??0QVariant@@QAE@N@Z
??0QVariant@@QAE@ABVQByteArray@@@Z
?shared_null@QHashData@@2U1@B
??4QVariant@@QAEAAV0@ABV0@@Z
??0QVariant@@QAE@$$QAV0@@Z
??4QVariant@@QAEAAV0@$$QAV0@@Z
?type@QVariant@@QBE?AW4Type@1@XZ
?isNull@QVariant@@QBE_NXZ
?toInt@QVariant@@QBEHPA_N@Z
?toLongLong@QVariant@@QBE_JPA_N@Z
?toDouble@QVariant@@QBENPA_N@Z
?toString@QVariant@@QBE?AVQString@@XZ
?toTime@QVariant@@QBE?AVQTime@@XZ
?toDateTime@QVariant@@QBE?AVQDateTime@@XZ
?toList@QVariant@@QBE?AV?$QList@VQVariant@@@@XZ
?constData@QVariant@@QBEPBXXZ
??0QObjectPrivate@@QAE@H@Z
??1QObjectPrivate@@UAE@XZ
??0QRegularExpression@@QAE@ABVQString@@V?$QFlags@W4PatternOption@QRegularExpression@@@@@Z
??1QRegularExpression@@QAE@XZ
??1QTimeZone@@QAE@XZ
?offsetFromUtc@QTimeZone@@QBEHABVQDateTime@@@Z
?shared_null@QListData@@2UData@1@B
??0QVariant@@QAE@ABVQString@@@Z
InitializeSListHead
DisableThreadLibraryCalls
GetStartupInfoW
IsDebuggerPresent
GetProcAddress
GetModuleHandleW
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentThreadId
DeleteCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetFileTime
FindFirstFileW
FindClose
GetEnvironmentVariableA
AreFileApisANSI
ReadFile
HeapCreate
HeapFree
GetFullPathNameW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
WaitForSingleObject
CreateFileW
GetFileAttributesW
UnmapViewOfFile
HeapValidate
HeapSize
MultiByteToWideChar
Sleep
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetLastError
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
HeapReAlloc
CloseHandle
GetSystemInfo
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
LocalFree
LockFileEx
GetFileSize
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
memcmp
memcpy
memmove
memset
strrchr
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__current_exception
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
isalpha
isspace
isblank
toupper
tolower
_errno
strcat
strcmp
strcpy
strcspn
strerror
strlen
strncmp
strncpy
calloc
free
malloc
_msize
realloc
qsort
abort
rand_s
atoi
fclose
fopen
fread
fseek
ftell
fwrite
rewind
__stdio_common_vsprintf
_localtime64_s
acos
asin
atan
atan2
cos
cosh
exp
log
log10
pow
sin
sinh
sqrt
tan
tanh
acosh
asinh
atanh
ceil
floor
_beginthreadex
_endthreadex
_chmod
_findclose
_findfirst64i32
_findnext64i32
_stat64i32
_mkdir
_invalid_parameter
_CrtDbgReport
_except1
_callnewh
_free_dbg
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
_CrtDbgReportW
_initterm
_initterm_e
terminate
qt_plugin_instance
qt_plugin_query_metadata
sqlite3_carray_init
sqlite3_csv_init
sqlite3_fileio_init
sqlite3_series_init
sqlite3_shathree_init
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ