network[.]dll | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

network.dll
Size

740KB
MD5

5824571fe2d63d74c1b03860df33c255
SHA1

4c0e7e0c26ef8fd7aaf3067321e1b3f865f798e9
SHA256

9d8d6e3e2b6f9c8d6f943e831fe2c121dca33537accbf2cad6ca760baf1aa27c
SHA512

9d34fcf1f5dc0b44564e5ab92fa6153cd43efaef5a0f7e3c3135544faf51a64472a34b7a7d05b08611d7cbbb782185660f23c591b03ac9126e24ed7d62fd17ff
SSDEEP

6144:UY0bnAF762KdyRgcMK9N6vK6zmW9ponesA2QvySGFHYLda9uJFFJWmHC6r3vgFEz:QnI76ZdO3MKkK49pgjEFFJ5iN5pdc1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
network.dll

Files

network.dll
.dll windows:6 windows x64 arch:x64

00d4214c4f1be21da87abd48b2d7d160

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Topaz\topaz-build-agent\_work\2\b\build\network\RelWithDebInfo\network.pdb

Imports

imagedata

?imwrite@ImageData@@QEBA_NAEBVQString@@@Z

qt6qml

??1QQmlModuleRegistration@@QEAA@XZ
?qdeclarativeelement_destructor@QQmlPrivate@@YAXPEAVQObject@@@Z
??0QQmlModuleRegistration@@QEAA@PEBDP6AXXZ@Z
?qmlRegisterModule@@YAXPEBDHH@Z
?qmlregister@QQmlPrivate@@YAHW4RegistrationType@1@PEAX@Z

qt6network

?staticMetaObject@QNetworkAccessManager@@2UQMetaObject@@B
?supportedSchemes@QNetworkAccessManager@@UEBA?AV?$QList@VQString@@@@XZ
?qt_metacast@QNetworkAccessManager@@UEAAPEAXPEBD@Z
?qt_metacall@QNetworkAccessManager@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?metaObject@QNetworkAccessManager@@UEBAPEBUQMetaObject@@XZ
?createRequest@QNetworkAccessManager@@MEAAPEAVQNetworkReply@@W4Operation@1@AEBVQNetworkRequest@@PEAVQIODevice@@@Z
?downloadProgress@QNetworkReply@@QEAAX_J0@Z
?request@QNetworkReply@@QEBA?AVQNetworkRequest@@XZ
?finished@QNetworkAccessManager@@QEAAXPEAVQNetworkReply@@@Z
?setTransferTimeout@QNetworkAccessManager@@QEAAXH@Z
?deleteResource@QNetworkAccessManager@@QEAAPEAVQNetworkReply@@AEBVQNetworkRequest@@@Z
?put@QNetworkAccessManager@@QEAAPEAVQNetworkReply@@AEBVQNetworkRequest@@AEBVQByteArray@@@Z
?post@QNetworkAccessManager@@QEAAPEAVQNetworkReply@@AEBVQNetworkRequest@@AEBVQByteArray@@@Z
?get@QNetworkAccessManager@@QEAAPEAVQNetworkReply@@AEBVQNetworkRequest@@@Z
??1QNetworkAccessManager@@UEAA@XZ
??0QNetworkAccessManager@@QEAA@PEAVQObject@@@Z
?setAttribute@QNetworkRequest@@QEAAXW4Attribute@1@AEBVQVariant@@@Z
?attribute@QNetworkRequest@@QEBA?AVQVariant@@W4Attribute@1@AEBV2@@Z
?setRawHeader@QNetworkRequest@@QEAAXAEBVQByteArray@@0@Z
?hasRawHeader@QNetworkRequest@@QEBA_NAEBVQByteArray@@@Z
?setHeader@QNetworkRequest@@QEAAXW4KnownHeaders@1@AEBVQVariant@@@Z
??1QNetworkRequest@@QEAA@XZ
??0QNetworkRequest@@QEAA@AEBVQUrl@@@Z
?staticMetaObject@QNetworkReply@@2UQMetaObject@@B
?attribute@QNetworkReply@@QEBA?AVQVariant@@W4Attribute@QNetworkRequest@@@Z
?error@QNetworkReply@@QEBA?AW4NetworkError@1@XZ

qt6core

?end@QJsonArray@@QEAA?AViterator@1@XZ
??AQJsonObject@@QEAA?AVQJsonValueRef@@AEBVQString@@@Z
??0QChar@@QEAA@_S@Z
??0QString@@QEAA@$$QEAV0@@Z
?arg@QString@@QEBA?AV1@AEBV1@HVQChar@@@Z
??9QString@@QEBA_NPEBD@Z
??0QUrl@@QEAA@XZ
??4QUrl@@QEAAAEAV0@AEBV0@@Z
??0QUrl@@QEAA@$$QEAV0@@Z
?isEmpty@QUrl@@QEBA_NXZ
?toLocalFile@QUrl@@QEBA?AVQString@@XZ
?toPercentEncoding@QUrl@@SA?AVQByteArray@@AEBVQString@@AEBV2@1@Z
??4QVariant@@QEAAAEAV0@$$QEAV0@@Z
?toString@QUuid@@QEBA?AVQString@@W4StringFormat@1@@Z
?createUuid@QUuid@@SA?AV1@XZ
??0QCalendar@@QEAA@XZ
?toString@QDateTime@@QEBA?AVQString@@AEBV2@VQCalendar@@@Z
?currentDateTimeUtc@QDateTime@@SA?AV1@XZ
?currentSecsSinceEpoch@QDateTime@@SA_JXZ
??0QJsonValue@@QEAA@_J@Z
??0QJsonValue@@QEAA@PEBD@Z
??0QJsonValue@@QEAA@AEBVQJsonArray@@@Z
??0QJsonValue@@QEAA@AEBVQJsonObject@@@Z
??0QJsonValue@@QEAA@$$QEAVQJsonObject@@@Z
?type@QJsonValue@@QEBA?AW4Type@1@XZ
??0QJsonDocument@@QEAA@AEBVQJsonObject@@@Z
?toJson@QJsonDocument@@QEBA?AVQByteArray@@W4JsonFormat@1@@Z
?isObject@QJsonDocument@@QEBA_NXZ
??0QJsonObject@@QEAA@XZ
?fromVariantMap@QJsonObject@@SA?AV1@AEBV?$QMap@VQString@@VQVariant@@@@@Z
?insert@QJsonObject@@QEAA?AViterator@1@AEBVQString@@AEBVQJsonValue@@@Z
??0QJsonArray@@QEAA@V?$initializer_list@VQJsonValue@@@std@@@Z
??1QMimeType@@QEAA@XZ
?name@QMimeType@@QEBA?AVQString@@XZ
??0QMimeDatabase@@QEAA@XZ
??1QMimeDatabase@@QEAA@XZ
?mimeTypeForFile@QMimeDatabase@@QEBA?AVQMimeType@@AEBVQString@@W4MatchMode@1@@Z
?tempPath@QDir@@SA?AVQString@@XZ
??0QTemporaryFile@@QEAA@AEBVQString@@@Z
??1QTemporaryFile@@UEAA@XZ
??0QByteArray@@QEAA@PEBD_J@Z
?number@QByteArray@@SA?AV1@_JH@Z
?toUtf8@QString@@QEHAA?AVQByteArray@@XZ
?number@QString@@SA?AV1@HH@Z
?append@QString@@QEAAAEAV1@PEBD@Z
?toString@QUrl@@QEBA?AVQString@@V?$QUrlTwoFlags@W4UrlFormattingOption@QUrl@@W4ComponentFormattingOption@2@@@@Z
??6QDebug@@QEAAAEAV0@AEBVQByteArray@@@Z
??4QJsonArray@@QEAAAEAV0@$$QEAV0@@Z
?deleteLater@QObject@@QEAAXXZ
?peek@QIODevice@@QEAA?AVQByteArray@@_J@Z
?errorString@QIODevice@@QEBA?AVQString@@XZ
??0QFile@@QEAA@AEBVQString@@@Z
??1QFile@@UEAA@XZ
?open@QFile@@UEAA_NV?$QFlags@W4OpenModeFlag@QIODeviceBase@@@@@Z
?currentCpuArchitecture@QSysInfo@@SA?AVQString@@XZ
?toHex@QByteArray@@QEBA?AV1@D@Z
?fromStdString@QString@@SA?AV1@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?fileName@QUrl@@QEBA?AVQString@@V?$QFlags@W4ComponentFormattingOption@QUrl@@@@@Z
??0QVariant@@QEAA@AEBVQByteArray@@@Z
?write@QIODevice@@QEAA_JAEBVQByteArray@@@Z
?close@QFileDevice@@UEAAXXZ
??0QFileInfo@@QEAA@AEBVQString@@@Z
??1QFileInfo@@QEAA@XZ
?fileName@QFileInfo@@QEBA?AVQString@@XZ
?absolutePath@QFileInfo@@QEBA?AVQString@@XZ
??0QDir@@QEAA@AEBVQString@@@Z
??1QDir@@QEAA@XZ
?filePath@QDir@@QEBA?AVQString@@AEBV2@@Z
?mkpath@QDir@@QEBA_NAEBVQString@@@Z
?root@QDir@@SA?AV1@XZ
??0QMessageAuthenticationCode@@QEAA@W4Algorithm@QCryptographicHash@@AEBVQByteArray@@@Z
??1QMessageAuthenticationCode@@QEAA@XZ
?setKey@QMessageAuthenticationCode@@QEAAXAEBVQByteArray@@@Z
?addData@QMessageAuthenticationCode@@QEAAXAEBVQByteArray@@@Z
?result@QMessageAuthenticationCode@@QEBA?AVQByteArray@@XZ
?current@QOperatingSystemVersion@@SA?AV1@XZ
?majorVersion@QOperatingSystemVersion@@QEBAHXZ
?minorVersion@QOperatingSystemVersion@@QEBAHXZ
??0QProcess@@QEAA@PEAVQObject@@@Z
??1QProcess@@UEAA@XZ
?startDetached@QProcess@@SA_NAEBVQString@@AEBV?$QList@VQString@@@@0PEA_J@Z
?writableLocation@QStandardPaths@@SA?AVQString@@W4StandardLocation@1@@Z
??6QDebug@@QEAAAEAV0@H@Z
??6QDebug@@QEAAAEAV0@_J@Z
?toBool@QJsonValue@@QEBA_N_N@Z
?toString@QJsonValue@@QEBA?AVQString@@AEBV2@@Z
?toArray@QJsonValue@@QEBA?AVQJsonArray@@XZ
?toObject@QJsonValue@@QEBA?AVQJsonObject@@XZ
??6@YA?AVQDebug@@V0@AEBVQJsonValue@@@Z
?size@QJsonArray@@QEBA_JXZ
?at@QJsonArray@@QEBA?AVQJsonValue@@_J@Z
?toVariantMap@QJsonObject@@QEBA?AV?$QMap@VQString@@VQVariant@@@@XZ
?start@QThread@@QEAAXW4Priority@1@@Z
?createThreadImpl@QThread@@CAPEAV1@$$QEAV?$future@X@std@@@Z
?staticMetaObject@QObject@@2UQMetaObject@@B
?activate@QMetaObject@@SAXPEAVQObject@@PEBU1@HPEAPEAX@Z
?append@QByteArray@@QEAAAEAV1@PEBD_J@Z
??6@YAAEAVQDataStream@@AEAV0@AEBVQString@@@Z
??5@YAAEAVQDataStream@@AEAV0@AEAVQString@@@Z
?status@QDataStream@@QEBA?AW4Status@1@XZ
?setStatus@QDataStream@@QEAAXW4Status@1@@Z
?resetStatus@QDataStream@@QEAAXXZ
??5QDataStream@@QEAAAEAV0@AEAH@Z
??5QDataStream@@QEAAAEAV0@AEA_J@Z
??5QDataStream@@QEAAAEAV0@AEA_N@Z
??6QDataStream@@QEAAAEAV0@H@Z
??6QDataStream@@QEAAAEAV0@_J@Z
??6QDataStream@@QEAAAEAV0@_N@Z
?isDeviceTransactionStarted@QDataStream@@QEBA_NXZ
??0QMetaType@@QEAA@XZ
?hasRegisteredConverterFunction@QMetaType@@SA_NV1@0@Z
?hasRegisteredMutableViewFunction@QMetaType@@SA_NV1@0@Z
?registerConverterFunction@QMetaType@@SA_NAEBV?$function@$$A6A_NPEBXPEAX@Z@std@@V1@1@Z
?unregisterConverterFunction@QMetaType@@SAXV1@0@Z
?registerMutableViewFunction@QMetaType@@SA_NAEBV?$function@$$A6A_NPEAX0@Z@std@@V1@1@Z
??0QJsonArray@@QEAA@AEBV0@@Z
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
?qt_metacast@QObject@@UEAAPEAXPEBD@Z
?qt_metacall@QObject@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
??MQUrl@@QEBA_NAEBV0@@Z
??8QUrl@@QEBA_NAEBV0@@Z
??6@YAAEAVQDataStream@@AEAV0@AEBVQUrl@@@Z
??5@YAAEAVQDataStream@@AEAV0@AEAVQUrl@@@Z
??6QDebug@@QEAAAEAV0@_K@Z
??5@YAAEAVQDataStream@@AEAV0@AEAVQVariant@@@Z
??6@YAAEAVQDataStream@@AEAV0@AEBVQVariant@@@Z
??0QJsonArray@@QEAA@$$QEAV0@@Z
??8QJsonArray@@QEBA_NAEBV0@@Z
??6@YA?AVQDebug@@V0@AEBVQJsonArray@@@Z
??6@YAAEAVQDataStream@@AEAV0@AEBVQJsonArray@@@Z
??5@YAAEAVQDataStream@@AEAV0@AEAVQJsonArray@@@Z
??0QJsonArray@@QEAA@XZ
??9QJsonValueRef@@QEBA_NAEBVQJsonValue@@@Z
?toObject@QJsonValueRef@@QEBA?AVQJsonObject@@XZ
?toArray@QJsonValueRef@@QEBA?AVQJsonArray@@XZ
?toString@QJsonValueRef@@QEBA?AVQString@@AEBV2@@Z
?toInt@QJsonValueRef@@QEBAHH@Z
??0QJsonValue@@QEAA@AEBVQString@@@Z
??0QDate@@QEAA@HHH@Z
??6@YA?AVQDebug@@V0@AEBVQVersionNumber@@@Z
?fromString@QVersionNumber@@SA?AV1@VQAnyStringView@@PEA_J@Z
?compare@QVersionNumber@@SAHAEBV1@0@Z
?segments@QVersionNumber@@QEBA?AV?$QList@H@@XZ
?setListData@SegmentStorage@QVersionNumber@@QEAAXAEBV?$QList@H@@@Z
??6@YA?AVQDebug@@V0@AEBVQJsonObject@@@Z
?contains@QJsonObject@@QEBA_NAEBVQString@@@Z
?value@QJsonObject@@QEBA?AVQJsonValue@@AEBVQString@@@Z
??1QJsonObject@@QEAA@XZ
??6@YA?AVQDebug@@V0@AEBVQJsonDocument@@@Z
?begin@QJsonArray@@QEAA?AViterator@1@XZ
?isNull@QJsonDocument@@QEBA_NXZ
?object@QJsonDocument@@QEBA?AVQJsonObject@@XZ
?isEmpty@QJsonDocument@@QEBA_NXZ
?fromJson@QJsonDocument@@SA?AV1@AEBVQByteArray@@PEAUQJsonParseError@@@Z
?toVariant@QJsonDocument@@QEBA?AVQVariant@@XZ
??1QJsonDocument@@QEAA@XZ
?toString@QJsonValue@@QEBA?AVQString@@XZ
??1QJsonValue@@QEAA@XZ
??6@YA?AVQDebug@@V0@AEBVQDateTime@@@Z
?currentDateTime@QDateTime@@SA?AV1@XZ
?secsTo@QDateTime@@QEBA_JAEBV1@@Z
?setSecsSinceEpoch@QDateTime@@QEAAX_J@Z
??1QDateTime@@QEAA@XZ
??0QDateTime@@QEAA@XZ
?fromString@QDate@@SA?AV1@AEBVQString@@W4DateFormat@Qt@@@Z
?currentDate@QDate@@SA?AV1@XZ
?daysTo@QDate@@QEBA_JV1@@Z
?hash@QCryptographicHash@@SA?AVQByteArray@@VQByteArrayView@@W4Algorithm@1@@Z
?equals@QVariant@@IEBA_NAEBV1@@Z
?toMap@QVariant@@QEBA?AV?$QMap@VQString@@VQVariant@@@@XZ
?toLongLong@QVariant@@QEBA_JPEA_N@Z
??0QVariant@@QEAA@$$QEAV0@@Z
?toStdString@QString@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?toUtf8@QString@@QEGBA?AVQByteArray@@XZ
?split@QString@@QEBA?AV?$QList@VQString@@@@AEBV1@V?$QFlags@W4SplitBehaviorFlags@Qt@@@@W4CaseSensitivity@Qt@@@Z
?fromBase64@QByteArray@@SA?AV1@AEBV1@V?$QFlags@W4Base64Option@QByteArray@@@@@Z
?append@QByteArray@@QEAAAEAV1@AEBV1@@Z
?constData@QByteArray@@QEBAPEBDXZ
?data@QByteArray@@QEAAPEADXZ
?reallocateUnaligned@QArrayData@@SA?AU?$pair@PEAUQArrayData@@PEAX@std@@PEAU1@PEAX_J2W4AllocationOption@1@@Z
?allocate@QArrayData@@SAPEAXPEAPEAU1@_J11W4AllocationOption@1@@Z
?warning@QMessageLogger@@QEBA?AVQDebug@@XZ
?qBadAlloc@@YAXXZ
?addQueryItem@QUrlQuery@@QEAAXAEBVQString@@0@Z
??1QUrlQuery@@QEAA@XZ
??0QUrlQuery@@QEAA@XZ
?readAll@QIODevice@@QEAA?AVQByteArray@@XZ
??1QJsonArray@@QEAA@XZ
?value@QSettings@@QEBA?AVQVariant@@VQAnyStringView@@@Z
?setValue@QSettings@@QEAAXVQAnyStringView@@AEBVQVariant@@@Z
?sync@QSettings@@QEAAXXZ
??1QSettings@@UEAA@XZ
??0QSettings@@QEAA@PEAVQObject@@@Z
?qdebugHelper@QVariant@@AEBA?AVQDebug@@V2@@Z
?toString@QVariant@@QEBA?AVQString@@XZ
?toInt@QVariant@@QEBAHPEA_N@Z
??4QVariant@@QEAAAEAV0@AEBV0@@Z
??0QVariant@@QEAA@AEBVQString@@@Z
??0QVariant@@QEAA@PEBD@Z
??0QVariant@@QEAA@H@Z
??0QVariant@@QEAA@AEBV0@@Z
??0QVariant@@QEAA@XZ
??1QDebugStateSaver@@QEAA@XZ
??0QDebugStateSaver@@QEAA@AEAVQDebug@@@Z
??6QDebug@@QEAAAEAV0@AEBVQString@@@Z
??6QDebug@@QEAAAEAV0@PEBD@Z
??6QDebug@@QEAAAEAV0@D@Z
??6QDebug@@QEAAAEAV0@_N@Z
??1QDebug@@QEAA@XZ
??0QDebug@@QEAA@$$QEAV0@@Z
??6@YA?AVQDebug@@V0@AEBVQUrl@@@Z
?setQuery@QUrl@@QEAAXAEBVQUrlQuery@@@Z
??0QUrl@@QEAA@AEBVQString@@W4ParsingMode@0@@Z
??0QUrl@@QEAA@AEBV0@@Z
?connectImpl@QObject@@CA?AVConnection@QMetaObject@@PEBV1@PEAPEAX01PEAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PEBHPEBU3@@Z
??0QObject@@QEAA@PEAV0@@Z
?isNull@QString@@QEBA_NXZ
??8QString@@QEBA_NPEBD@Z
?prepend@QString@@QEAAAEAV1@PEBD@Z
??4QString@@QEAAAEAV0@AEBVQByteArray@@@Z
??4QString@@QEAAAEAV0@PEBD@Z
??0QString@@QEAA@AEBVQByteArray@@@Z
??0QString@@QEAA@PEBD@Z
?fromUtf8@QString@@SA?AV1@VQByteArrayView@@@Z
?append@QString@@QEAAAEAV1@AEBV1@@Z
?endsWith@QString@@QEBA_NAEBV1@W4CaseSensitivity@Qt@@@Z
?chopped@QString@@QEBA?AV1@_J@Z
?indexOf@QString@@QEBA_JAEBV1@_JW4CaseSensitivity@Qt@@@Z
?data@QString@@QEBAPEBVQChar@@XZ
??4QString@@QEAAAEAV0@$$QEAV0@@Z
??4QString@@QEAAAEAV0@AEBV0@@Z
??0QString@@QEAA@AEBV0@@Z
??0QString@@QEAA@XZ
?compareStrings@QtPrivate@@YAHVQStringView@@0W4CaseSensitivity@Qt@@@Z
??1Connection@QMetaObject@@QEAA@XZ
?critical@QMessageLogger@@QEBA?AVQDebug@@XZ
?info@QMessageLogger@@QEBA?AVQDebug@@XZ
?debug@QMessageLogger@@QEBA?AVQDebug@@XZ
??0QMessageLogger@@QEAA@PEBDH0@Z
?machineHostName@QSysInfo@@SA?AVQString@@XZ
?qgetenv@@YA?AVQByteArray@@PEBD@Z
?qUnregisterResourceData@@YA_NHPEBE00@Z
?qRegisterResourceData@@YA_NHPEBE00@Z
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
??1QUrl@@QEAA@XZ
??1QVariant@@QEAA@XZ
??1QObject@@UEAA@XZ
?id@QMetaType@@QEBAHH@Z
?registerNormalizedTypedef@QMetaType@@SAXAEBVQByteArray@@V1@@Z
??0QMetaSequence@@QEAA@XZ
??1QString@@QEAA@XZ
?isNull@QByteArray@@QEBA_NXZ
?size@QByteArray@@QEBA_JXZ
?append@QByteArray@@QEAAAEAV1@PEBD@Z
?append@QByteArray@@QEAAAEAV1@D@Z
?data@QByteArray@@QEBAPEBDXZ
?reserve@QByteArray@@QEAAX_J@Z
?isEmpty@QByteArray@@QEBA_NXZ
??1QByteArray@@QEAA@XZ
??0QByteArray@@QEAA@XZ
?castHelper@QByteArrayView@@CAPEBDPEBD@Z
?compareMemory@QtPrivate@@YAHVQByteArrayView@@0@Z
?deallocate@QArrayData@@SAXPEAU1@_J1@Z
?tr@QMetaObject@@QEBA?AVQString@@PEBD0H@Z
?className@QMetaObject@@QEBAPEBDXZ
qt_version_tag_6_4
?qt_QMetaEnum_debugOperator@@YA?AVQDebug@@AEAV1@_JPEBUQMetaObject@@PEBD@Z
?unregisterMutableViewFunction@QMetaType@@SAXV1@0@Z

aiengine

?getMachineId@SystemInfo@aiutils@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetInstance@SystemInfo@aiutils@@SAAEAV12@_N@Z

libcrypto-1_1-x64

EVP_PKEY_free
EVP_PKEY_get0_RSA
BIO_new_mem_buf
RSA_verify
PEM_read_bio_PUBKEY

ws2_32

recv
select
send
setsockopt
shutdown
socket
WSASocketW
getaddrinfo
freeaddrinfo
listen
ntohs
getnameinfo
WSAStartup
WSACleanup
accept
bind
closesocket
getpeername
getsockname

msvcp140

?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Random_device@std@@YAIXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
??Bid@locale@std@@QEAA_KXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
_Strxfrm
_Strcoll
?_Syserror_map@std@@YAPEBDH@Z
?_Xbad_function_call@std@@YAXXZ
?_Throw_Cpp_error@std@@YAXH@Z
?_Throw_C_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Cnd_unregister_at_thread_exit
_Cnd_register_at_thread_exit
_Cnd_signal
_Cnd_broadcast
_Cnd_wait
_Cnd_destroy_in_situ
_Cnd_init_in_situ
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Thrd_id
_Thrd_hardware_concurrency
_Thrd_sleep
_Thrd_join
_Query_perf_frequency
_Query_perf_counter
_Xtime_get_ticks
?_Xout_of_range@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?uncaught_exceptions@std@@YAHXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Xlength_error@std@@YAXPEBD@Z
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
_Mbrtowc
?_Xbad_alloc@std@@YAXXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
??0task_continuation_context@Concurrency@@AEAA@XZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z

vcruntime140

__std_type_info_destroy_list
memcpy
__current_exception_context
__current_exception
__C_specific_handler
memcmp
strchr
_purecall
memset
memmove
__std_type_info_compare
memchr
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__std_terminate

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_initialize_narrow_environment
_seh_filter_dll
_execute_onexit_table
_beginthreadex
_crt_atexit
_initialize_onexit_table
_cexit
abort
strerror
terminate
_crt_at_quick_exit
_errno
_initterm
_invalid_parameter_noinfo_noreturn
_initterm_e
_configure_narrow_argv

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free
calloc
realloc

api-ms-win-crt-convert-l1-1-0

strtoull
strtoll
strtoul

api-ms-win-crt-stdio-l1-1-0

fsetpos
fread
fputc
fgetpos
fgetc
_fseeki64
fclose
_get_stream_buffer_pointers
setvbuf
ungetc
__stdio_common_vsprintf
fflush
fwrite

api-ms-win-crt-filesystem-l1-1-0

_unlock_file
_access_s
_lock_file

api-ms-win-crt-string-l1-1-0

strncpy
_stricmp
tolower
isdigit

kernel32

GetSystemInfo
CreateEventW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ResumeThread
Sleep
SetWaitableTimer
OpenEventA
CreateEventA
WaitForMultipleObjectsEx
ReleaseSemaphore
GetProcessHeap
HeapFree
HeapAlloc
QueryPerformanceFrequency
GetLastError
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
WaitForSingleObjectEx
ResetEvent
SetEvent
WideCharToMultiByte
CreateWaitableTimerA
FormatMessageW
FormatMessageA
LocalFree
GetModuleHandleA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
InitOnceComplete
InitOnceBeginInitialize
GetLogicalProcessorInformation
GetModuleHandleW

Exports

Exports

??0TAuth@@QEAA@AEBVQString@@H00_N111@Z
??0TEventTracker@@QEAA@PEAVQObject@@@Z
??0TEventTracker@@QEAA@_NPEAVQObject@@@Z
??1TAuth@@UEAA@XZ
??1TEventTracker@@UEAA@XZ
??_7TAuth@@6B@
??_7TEventTracker@@6B@
??_FTEventTracker@@QEAAXXZ
?authenticate@TAuth@@QEAAXAEBV?$QMap@VQString@@VQVariant@@@@@Z
?busy@TAuth@@QEBA_NXZ
?busyChanged@TAuth@@QEAAXXZ
?checkAuth@TAuth@@AEAAXXZ
?checkForUpdates@TAuth@@QEAAX_N@Z
?checkResponse@TAuth@@AEAAXPEAVQNetworkReply@@@Z
?checkingForUpdates@TAuth@@QEBA_NXZ
?checkingForUpdatesChanged@TAuth@@QEAAXXZ
?claimedSeats@TAuth@@QEBA?AVQJsonArray@@XZ
?claimedSeatsChanged@TAuth@@QEAAXXZ
?deleteSeat@TAuth@@QEAAXAEBVQString@@@Z
?email@TAuth@@QEBA?AVQString@@XZ
?emailChanged@TAuth@@QEAAXXZ
?enabledChanged@TEventTracker@@QEAAXXZ
?finishAuth@TAuth@@AEAAXW4AuthState@1@@Z
?getFriendlyName@TAuth@@AEAA?AVQString@@XZ
?getMimeType@TEventTracker@@AEBA?AVQString@@VQUrl@@@Z
?getSeats@TAuth@@AEAAXXZ
?handleNetworkError@TAuth@@AEAAXPEAVQNetworkReply@@@Z
?handleReply@TEventTracker@@QEAAXVQString@@PEAVQNetworkReply@@@Z
?lastOwnedVersion@TAuth@@QEBA?AVQString@@XZ
?lastOwnedVersionChanged@TAuth@@QEAAXXZ
?lastOwnedVersionDownload@TAuth@@QEBA?AVQString@@XZ
?lastOwnedVersionDownloadChanged@TAuth@@QEAAXXZ
?licenseExpiration@TAuth@@QEBA?AVQString@@XZ
?licenseExpirationChanged@TAuth@@QEAAXXZ
?m_sessionId@TEventTracker@@0VQUuid@@B
?metaObject@TAuth@@UEBAPEBUQMetaObject@@XZ
?metaObject@TEventTracker@@UEBAPEBUQMetaObject@@XZ
?networkError@TAuth@@QEBA?AVQString@@XZ
?networkErrorChanged@TAuth@@QEAAXXZ
?qml_register_types_TNetwork@@YAXXZ
?qt_metacall@TAuth@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacall@TEventTracker@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@TAuth@@UEAAPEAXPEBD@Z
?qt_metacast@TEventTracker@@UEAAPEAXPEBD@Z
?qt_static_metacall@TAuth@@CAXPEAVQObject@@W4Call@QMetaObject@@HPEAPEAX@Z
?qt_static_metacall@TEventTracker@@CAXPEAVQObject@@W4Call@QMetaObject@@HPEAPEAX@Z
?refresh@TAuth@@QEAAX_N@Z
?replyReceived@TAuth@@QEAAXVQString@@PEAVQNetworkReply@@@Z
?reset@TAuth@@QEAAXXZ
?sendImageToS3@TEventTracker@@QEAAXAEBVQUrl@@AEBVQString@@@Z
?sendImageToS3@TEventTracker@@QEAAXV?$shared_ptr@VImageData@@@std@@AEBVQString@@@Z
?setDev@TEventTracker@@QEAAX_N@Z
?setEnabled@TEventTracker@@QEAAX_N@Z
?setUniqueId@TEventTracker@@QEAAXAEBVQString@@@Z
?settingsChanged@TAuth@@QEAAXVQString@@0@Z
?state@TAuth@@QEBA?AW4AuthState@1@XZ
?stateChanged@TAuth@@QEAAXXZ
?staticMetaObject@TAuth@@2UQMetaObject@@B
?staticMetaObject@TEventTracker@@2UQMetaObject@@B
?totalSeats@TAuth@@QEBAHXZ
?totalSeatsChanged@TAuth@@QEAAXXZ
?tr@TAuth@@SA?AVQString@@PEBD0H@Z
?tr@TEventTracker@@SA?AVQString@@PEBD0H@Z
?track@TEventTracker@@QEBA_NAEBVQString@@AEBV?$QMap@VQString@@VQVariant@@@@@Z
?trackBacktrace@TEventTracker@@QEBA_NAEBVQString@@AEBV?$QMap@VQString@@VQVariant@@@@@Z
?updateResponseReceived@TAuth@@QEAAXAEBVTUpdateCheckerResponse@@@Z
?useCachedCredentials@TAuth@@AEAAXXZ
?writeTempFile@TEventTracker@@QEAA?AVQString@@V?$shared_ptr@VImageData@@@std@@AEBV2@@Z

Sections

.text
Size: 466KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qtversi
Size: 512B - Virtual size: 275B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00d4214c4f1be21da87abd48b2d7d160

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

imagedata

qt6qml

qt6network

qt6core

aiengine

libcrypto-1_1-x64

ws2_32

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-string-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 466KB - Virtual size: 466KB

.rdata Size: 160KB - Virtual size: 160KB

.data Size: 43KB - Virtual size: 45KB

.pdata Size: 21KB - Virtual size: 21KB

.idata Size: 38KB - Virtual size: 38KB

.qtversi Size: 512B - Virtual size: 275B

.tls Size: 1024B - Virtual size: 777B

.00cfg Size: 512B - Virtual size: 337B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 466KB - Virtual size: 466KB

.rdata
Size: 160KB - Virtual size: 160KB

.data
Size: 43KB - Virtual size: 45KB

.pdata
Size: 21KB - Virtual size: 21KB

.idata
Size: 38KB - Virtual size: 38KB

.qtversi
Size: 512B - Virtual size: 275B

.tls
Size: 1024B - Virtual size: 777B

.00cfg
Size: 512B - Virtual size: 337B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB