G:\devops-filmora-agent\workspace\p-bdddab82719243ef89791047d2fc0026\src\code\Bin\x64\Release\FilmoraUninstaller.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3d435fbd4d1476584a0fc386acd8df807d5e23bfcc69f3f07c2896f3642346c2.exe
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
3d435fbd4d1476584a0fc386acd8df807d5e23bfcc69f3f07c2896f3642346c2.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
3d435fbd4d1476584a0fc386acd8df807d5e23bfcc69f3f07c2896f3642346c2
-
Size
1.6MB
-
MD5
c00e57d2b648539ced5bdfee4c093ec2
-
SHA1
694a10ecaa9420b5307c3f9ab7fe60fa0416aa08
-
SHA256
3d435fbd4d1476584a0fc386acd8df807d5e23bfcc69f3f07c2896f3642346c2
-
SHA512
bd1a7e3acc1ac2d3385ba966f09110a545420669a6673dbdce61f528e165adb7091183c9c407eefd6619b34c4df92c723345751cbf53a050ce9729b51f2181ce
-
SSDEEP
24576:mPHt+05KBLS0ZSBFi+rlwJLEiyjEnk4PYkbpT0rdwQWOwN7PPpgyqn4zB:mPg0Z0wFXrq6wnkaYk9QrtWOs6Q
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d435fbd4d1476584a0fc386acd8df807d5e23bfcc69f3f07c2896f3642346c2
Files
-
3d435fbd4d1476584a0fc386acd8df807d5e23bfcc69f3f07c2896f3642346c2.exe windows:6 windows x64 arch:x64
6efb92ff51b8f4d4abb17c9caa63389e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
qt5gui
??1QPainter@@QEAA@XZ
?pos@QCursor@@SA?AVQPoint@@XZ
?geometry@QScreen@@QEBA?AVQRect@@XZ
?setHighDpiScaleFactorRoundingPolicy@QGuiApplication@@SAXW4HighDpiScaleFactorRoundingPolicy@Qt@@@Z
?primaryScreen@QGuiApplication@@SAPEAVQScreen@@XZ
?addApplicationFont@QFontDatabase@@SAHAEBVQString@@@Z
?setRenderHint@QPainter@@QEAAXW4RenderHint@1@_N@Z
?drawPixmap@QPainter@@QEAAXAEBVQRect@@AEBVQPixmap@@0@Z
?translate@QPainter@@QEAAXAEBVQPoint@@@Z
?rotate@QPainter@@QEAAXN@Z
?rect@QPixmap@@QEBA?AVQRect@@XZ
??1QPixmap@@UEAA@XZ
??0QPixmap@@QEAA@AEBVQString@@PEBDV?$QFlags@W4ImageConversionFlag@Qt@@@@@Z
?setPosition@QTextCursor@@QEAAXHW4MoveMode@1@@Z
??1QTextCursor@@QEAA@XZ
?openUrl@QDesktopServices@@SA_NAEBVQUrl@@@Z
??0QPainter@@QEAA@PEAVQPaintDevice@@@Z
wsap-filmorax
ord6005
ord972
ord6915
ord499
ord9906
ord5642
ord7992
ord5712
ord2310
ord6989
ord3031
ord9567
ord7418
ord2660
ord4260
ord10033
ord2161
ord357
ord8282
ord7610
ord6659
ord7565
ord3639
ord3096
ord7363
ord705
ord3947
ord1311
ord4280
ord2261
ord4074
ord8782
ord268
ord7155
ord3382
ord4693
ord9423
ord7792
ord1252
ord4180
ord9860
ord1554
ord1666
ord8760
ord666
ord4124
ord5782
ord7230
ord601
ord3233
ord5789
ord572
ord2406
ord1620
ord81
ord3210
ord2499
ord8882
ord6822
ord1219
ord6419
ord4979
ord10555
ord1889
ord6574
ord9270
ord882
ord2085
ord7096
ord6504
ord1490
ord5557
ord498
ord4309
ord9619
ord1937
ord2589
ord5850
ord1578
ord27
ord1852
ord1378
ord6810
ord3312
ord3064
ord4801
ord5060
ord3259
ord2242
ord9133
ord5823
ord7964
ord2039
ord4113
ord3466
ord8039
ord711
ord829
ord9353
ord762
ord989
ord8208
ord1059
ord935
ord6412
ord7407
ord39
ord680
ord3975
ord8342
ord1895
ord7239
ord10519
ord4893
ord6450
ord8467
ord9220
ord7492
ord4691
ord4767
ord784
ord8709
ord10510
ord7837
ord9260
ord1818
ord6020
ord5034
ord9528
ord1839
ord3316
ord7961
ord6384
ord6622
ord8826
ord7015
ord2698
ord7930
ord3815
ord4313
ord6563
ord1210
ord5934
ord6618
ord9909
ord7659
ord3134
ord10506
ord4016
ord8939
ord5326
ord2747
ord3986
ord6337
ord3492
ord9875
ord7762
ord331
ord3965
ord1380
ord7452
ord3557
ord5801
ord1388
ord7828
ord441
ord4574
ord4380
ord4119
ord9737
ord8243
ord2320
ord6014
ord9736
ord7447
ord3695
ord4896
ord3745
ord3616
ord4890
ord132
ord5406
ord2861
ord9690
ord6612
ord5412
ord3586
ord9167
ord928
ord5184
ord7290
ord3241
ord9747
ord3577
ord2939
ord8619
ord1637
ord1339
ord757
ord5322
ord6886
ord7538
ord635
ord8881
ord3113
ord10212
ord9917
ord4205
ord6516
ord4681
ord6320
ord3891
ord58
ord3287
ord10271
ord5946
ord10366
ord5425
ord899
ord1577
ord8217
ord4157
ord5826
ord2383
ord1148
ord6411
ord10413
ord3738
ord6666
ord3637
ord7771
ord2644
ord7119
ord5797
ord7507
ord4426
ord4697
ord1752
ord7427
ord6851
ord6256
ord6340
ord1358
ord2215
ord4386
ord10171
ord1370
ord2389
ord4856
ord7267
ord3251
ord3971
ord4699
ord3118
ord6765
ord3885
ord6795
ord7935
ord10153
ord5246
ord2216
ord4397
ord8358
ord796
ord7897
ord3952
ord9042
ord5287
ord1239
ord5996
ord2276
ord980
ord3450
ord9047
ord10222
ord6265
ord396
ord3155
ord6208
ord2026
ord4275
ord8775
ord6784
ord10417
ord8377
ord3535
ord9807
ord8051
ord2590
ord10389
ord7683
ord10090
ord6119
ord3004
ord5026
ord4998
ord1477
ord7045
ord7944
ord7210
ord2306
ord885
ord3674
ord10115
ord10045
ord2616
ord8908
ord9080
ord92
ord8365
ord5879
ord5186
ord5636
ord3781
ord2294
ord10130
ord9694
ord3433
ord1525
ord1216
ord3473
ord10252
ord576
ord7212
ord9444
ord3717
ord7684
ord7605
ord3178
ord8026
ord8438
ord3786
ord3882
ord4406
ord9109
ord3250
ord9614
ord5238
ord3385
ord6577
ord5203
ord3959
ord5798
ord1194
ord2509
ord760
ord5462
ord8906
ord8913
ord10324
ord4408
ord10391
ord5173
ord3701
ord2949
ord9035
ord1735
ord8852
ord9160
ord4340
ord3974
ord9641
ord4850
ord1409
ord2410
ord407
ord7626
ord6913
ord1444
ord10411
ord9322
ord166
ord59
ord9662
ord6628
ord6118
ord6315
ord9126
ord1521
ord8312
ord9259
ord8079
ord8620
ord4087
ord626
ord98
ord2260
ord6393
ord6965
ord5540
ord4193
ord9819
ord6270
ord2225
ord4795
ord2169
ord7250
ord3445
ord7671
ord3163
ord10410
ord8347
ord2832
ord817
ord8414
ord9054
ord3479
ord785
ord1074
ord4967
ord9880
ord9026
ord7144
ord1004
ord5508
ord4162
ord3208
ord2621
ord4116
ord10046
ord1623
ord3771
ord917
ord7594
ord9333
ord2252
ord526
ord3994
ord1634
ord1314
ord4742
ord9803
ord6205
ord4049
ord2114
ord630
ord4316
ord7958
ord4996
ord3720
ord3795
ord2896
ord1616
ord2635
ord2007
ord8773
ord3568
ord6728
ord8295
ord2821
ord3985
ord866
ord9825
ord1373
ord3098
ord1676
ord7270
ord2959
ord7206
ord9834
ord10472
ord9107
ord985
ord6894
ord4570
ord3206
ord5555
ord9703
ord7378
ffwsupgrade
createUpgradeService
releaseUpgradeService
??0IFFUpgradeEventObserver@@QEAA@XZ
qt5core
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?registerNormalizedTypedef@QMetaType@@SAHAEBVQByteArray@@H@Z
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
?qt_metacast@QObject@@UEAAPEAXPEBD@Z
?qt_metacall@QObject@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?staticMetaObject@QObject@@2UQMetaObject@@B
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?registerNormalizedType@QMetaType@@SAHAEBVQByteArray@@P6AXPEAX@ZP6APEAX1PEBX@ZHV?$QFlags@W4TypeFlag@QMetaType@@@@PEBUQMetaObject@@@Z
??1QByteArray@@QEAA@XZ
?activate@QMetaObject@@SAXPEAVQObject@@PEBU1@HPEAPEAX@Z
?normalizedType@QMetaObject@@SA?AVQByteArray@@PEBD@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?connectSlotsByName@QMetaObject@@SAXPEAVQObject@@@Z
?qResourceFeatureZlib@@YAEXZ
?qUnregisterResourceData@@YA_NHPEBE00@Z
?qRegisterResourceData@@YA_NHPEBE00@Z
?staticMetaObject@QCoreApplication@@2UQMetaObject@@B
?load@QTranslator@@QEAA_NAEBVQString@@000@Z
??1QTranslator@@UEAA@XZ
??0QTranslator@@QEAA@PEAVQObject@@@Z
?msleep@QThread@@SAXK@Z
?close@QFileDevice@@UEAAXXZ
?aboutToQuit@QCoreApplication@@QEAAXUQPrivateSignal@1@@Z
?installTranslator@QCoreApplication@@SA_NPEAVQTranslator@@@Z
??0QString@@QEAA@AEBVQByteArray@@@Z
?qputenv@@YA_NPEBDAEBVQByteArray@@@Z
?fromWCharArray@QString@@SA?AV1@PEB_WH@Z
?indexOf@QString@@QEBAHAEBV1@HW4CaseSensitivity@Qt@@@Z
?setSingleShot@QTimer@@QEAAX_N@Z
?remove@QFile@@QEAA_NXZ
?setFileName@QFile@@QEAAXAEBVQString@@@Z
??0QFile@@QEAA@XZ
?flush@QFileDevice@@QEAA_NXZ
?resolved@QUrl@@QEBA?AV1@AEBV1@@Z
?errorString@QIODevice@@QEBA?AVQString@@XZ
?write@QIODevice@@QEAA_JAEBVQByteArray@@@Z
?readAll@QIODevice@@QEAA?AVQByteArray@@XZ
?toUrl@QVariant@@QEBA?AVQUrl@@XZ
?isNull@QVariant@@QEBA_NXZ
?deleteLater@QObject@@QEAAXXZ
??4QByteArray@@QEAAAEAV0@$$QEAV0@@Z
??0QByteArray@@QEAA@AEBV0@@Z
??0QByteArray@@QEAA@PEBDH@Z
??0QJsonObject@@QEAA@XZ
?setObject@QJsonDocument@@QEAAXAEBVQJsonObject@@@Z
??4QJsonValueRef@@QEAAAEAV0@AEBVQJsonValue@@@Z
??1QJsonValue@@QEAA@XZ
??0QJsonValue@@QEAA@PEBD@Z
??0QJsonValue@@QEAA@AEBVQString@@@Z
??4QJsonDocument@@QEAAAEAV0@$$QEAV0@@Z
??0QJsonDocument@@QEAA@XZ
?end@QJsonArray@@QEAA?AViterator@1@XZ
?begin@QJsonArray@@QEAA?AViterator@1@XZ
??1QJsonArray@@QEAA@XZ
?toArray@QJsonValueRef@@QEBA?AVQJsonArray@@XZ
?toString@QJsonValueRef@@QEBA?AVQString@@XZ
?isArray@QJsonValueRef@@QEBA_NXZ
?isString@QJsonValueRef@@QEBA_NXZ
??0QJsonValueRef@@QEAA@PEAVQJsonArray@@H@Z
?readAll@QTextStream@@QEAA?AVQString@@XZ
?toUtf8@QString@@QEHAA?AVQByteArray@@XZ
?toUtf8@QString@@QEGBA?AVQByteArray@@XZ
??0QString@@QEAA@$$QEAV0@@Z
?contains@QJsonObject@@QEBA_NAEBVQString@@@Z
?isEmpty@QJsonObject@@QEBA_NXZ
?isNull@QJsonDocument@@QEBA_NXZ
?object@QJsonDocument@@QEBA?AVQJsonObject@@XZ
?isEmpty@QJsonDocument@@QEBA_NXZ
?toJson@QJsonDocument@@QEBA?AVQByteArray@@XZ
?fromJson@QJsonDocument@@SA?AV1@AEBVQByteArray@@PEAUQJsonParseError@@@Z
??1QJsonDocument@@QEAA@XZ
?toObject@QJsonValueRef@@QEBA?AVQJsonObject@@XZ
?isObject@QJsonValueRef@@QEBA_NXZ
?suffix@QFileInfo@@QEBA?AVQString@@XZ
??1QFileInfo@@QEAA@XZ
??0QFileInfo@@QEAA@AEBVQString@@@Z
?open@QFile@@UEAA_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?copy@QFile@@SA_NAEBVQString@@0@Z
?remove@QFile@@SA_NAEBVQString@@@Z
??1QFile@@UEAA@XZ
??0QFile@@QEAA@AEBVQString@@@Z
??6QTextStream@@QEAAAEAV0@AEBVQByteArray@@@Z
?setCodec@QTextStream@@QEAAXPEBD@Z
??1QTextStream@@UEAA@XZ
??0QTextStream@@QEAA@PEAVQIODevice@@@Z
??1QObject@@UEAA@XZ
??0QObject@@QEAA@PEAV0@@Z
?QStringList_contains@QtPrivate@@YA_NPEBVQStringList@@AEBVQString@@W4CaseSensitivity@Qt@@@Z
?remove@QListData@@QEAAXH@Z
??8@YA_NAEBVQString@@0@Z
?invokeMethod@QMetaObject@@SA_NPEAVQObject@@PEBDW4ConnectionType@Qt@@VQGenericArgument@@333333333@Z
??0QGenericArgument@@QEAA@PEBDPEBX@Z
?Windows8_1@QOperatingSystemVersion@@2V1@B
?standardLocations@QStandardPaths@@SA?AVQStringList@@W4StandardLocation@1@@Z
?endGroup@QSettings@@QEAAXXZ
?beginGroup@QSettings@@QEAAXAEBVQString@@@Z
?compare@QOperatingSystemVersion@@CAHAEBV1@0@Z
?type@QOperatingSystemVersion@@QEBA?AW4OSType@1@XZ
?current@QOperatingSystemVersion@@SA?AV1@XZ
?resolve@QLibrary@@SAP6AXXZAEBVQString@@PEBD@Z
?exists@QDir@@QEBA_NXZ
?mkpath@QDir@@QEBA_NAEBVQString@@@Z
?fromNativeSeparators@QDir@@SA?AVQString@@AEBV2@@Z
??1QDir@@QEAA@XZ
??0QDir@@QEAA@AEBVQString@@@Z
?at@QListData@@QEBAPEAPEAXH@Z
?isActive@QTimer@@QEBA_NXZ
?value@QSettings@@QEBA?AVQVariant@@AEBVQString@@AEBV2@@Z
??1QSettings@@UEAA@XZ
??0QSettings@@QEAA@AEBVQString@@W4Format@0@PEAVQObject@@@Z
?state@QProcess@@QEBA?AW4ProcessState@1@XZ
?restart@QElapsedTimer@@QEAA_JXZ
?type@QEvent@@QEBA?AW4Type@1@XZ
??0QVariant@@QEAA@XZ
?installEventFilter@QObject@@QEAAXPEAV1@@Z
?qt_qFindChild_helper@@YAPEAVQObject@@PEBV1@AEBVQString@@AEBUQMetaObject@@V?$QFlags@W4FindChildOption@Qt@@@@@Z
?exactMatch@QRegExp@@QEBA_NAEBVQString@@@Z
??1QRegExp@@QEAA@XZ
??0QRegExp@@QEAA@AEBVQString@@W4CaseSensitivity@Qt@@W4PatternSyntax@0@@Z
?toStdString@QString@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?trimmed@QString@@QEHAA?AV1@XZ
?timerEvent@QTimer@@MEAAXPEAVQTimerEvent@@@Z
?qt_metacast@QTimer@@UEAAPEAXPEBD@Z
?qt_metacall@QTimer@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?metaObject@QTimer@@UEBAPEBUQMetaObject@@XZ
?stop@QTimer@@QEAAXXZ
?start@QTimer@@QEAAXH@Z
??1QTimer@@UEAA@XZ
??0QTimer@@QEAA@PEAVQObject@@@Z
?height@QRect@@QEBAHXZ
?width@QRect@@QEBAHXZ
?translate@QRect@@QEAAXHH@Z
?elapsed@QElapsedTimer@@QEBA_JXZ
?isValid@QElapsedTimer@@QEBA_NXZ
?invalidate@QElapsedTimer@@QEAAXXZ
?start@QElapsedTimer@@QEAAXXZ
??0QElapsedTimer@@QEAA@XZ
??0QPoint@@QEAA@HH@Z
?shared_null@QMapDataBase@@2U1@B
?toInt@QVariant@@QEBAHPEA_N@Z
??0QVariant@@QEAA@H@Z
?freeData@QMapDataBase@@SAXPEAU1@@Z
?createData@QMapDataBase@@SAPEAU1@XZ
?freeTree@QMapDataBase@@QEAAXPEAUQMapNodeBase@@H@Z
?createNode@QMapDataBase@@QEAAPEAUQMapNodeBase@@HHPEAU2@_N@Z
?recalcMostLeftNode@QMapDataBase@@QEAAXXZ
?freeNodeAndRebalance@QMapDataBase@@QEAAXPEAUQMapNodeBase@@@Z
?setParent@QMapNodeBase@@QEAAXPEAU1@@Z
?setColor@QMapNodeBase@@QEAAXW4Color@1@@Z
?color@QMapNodeBase@@QEBA?AW4Color@1@XZ
?isEmpty@QListData@@QEBA_NXZ
?size@QListData@@QEBAHXZ
?append@QListData@@QEAAPEAPEAXAEBU1@@Z
??M@YA_NAEBVQString@@0@Z
??0QRect@@QEAA@HHHH@Z
??AQJsonObject@@QEAA?AVQJsonValueRef@@AEBVQString@@@Z
??0QJsonObject@@QEAA@AEBV0@@Z
??1QJsonObject@@QEAA@XZ
?toInt@QJsonValueRef@@QEBAHH@Z
?quit@QCoreApplication@@SAXXZ
?toJsonObject@QVariant@@QEBA?AVQJsonObject@@XZ
??0QVariant@@QEAA@AEBVQJsonObject@@@Z
??0QVariant@@QEAA@AEBVQString@@@Z
??0QVariant@@QEAA@PEBD@Z
??0QVariant@@QEAA@_N@Z
?setProperty@QObject@@QEAA_NPEBDAEBVQVariant@@@Z
?isWidgetType@QObject@@QEBA_NXZ
?realloc@QListData@@QEAAXH@Z
?detach@QListData@@QEAAPEAUData@1@H@Z
??4QString@@QEAAAEAV0@PEBD@Z
?number@QString@@SA?AV1@HH@Z
?mid@QString@@QEBA?AV1@HH@Z
?length@QString@@QEBAHXZ
?cast@QMetaObject@@QEBAPEAVQObject@@PEAV2@@Z
?shared_null@QListData@@2UData@1@B
?writeData@QProcess@@MEAA_JPEBD_J@Z
?waitForReadyRead@QProcess@@UEAA_NH@Z
?waitForBytesWritten@QProcess@@UEAA_NH@Z
?size@QIODevice@@UEBA_JXZ
?setupChildProcess@QProcess@@MEAAXXZ
?seek@QIODevice@@UEAA_N_J@Z
?reset@QIODevice@@UEAA_NXZ
?readLineData@QIODevice@@MEAA_JPEAD_J@Z
?readData@QProcess@@MEAA_JPEAD_J@Z
?qt_metacast@QProcess@@UEAAPEAXPEBD@Z
?qt_metacall@QProcess@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?pos@QIODevice@@UEBA_JXZ
?open@QProcess@@UEAA_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?metaObject@QProcess@@UEBAPEBUQMetaObject@@XZ
?isSequential@QProcess@@UEBA_NXZ
?close@QProcess@@UEAAXXZ
?canReadLine@QProcess@@UEBA_NXZ
?bytesToWrite@QProcess@@UEBA_JXZ
?bytesAvailable@QProcess@@UEBA_JXZ
?atEnd@QProcess@@UEBA_NXZ
?singleShotImpl@QTimer@@CAXHW4TimerType@Qt@@PEBVQObject@@PEAVQSlotObjectBase@QtPrivate@@@Z
?defaultTypeFor@QTimer@@CA?AW4TimerType@Qt@@H@Z
?moveCenter@QRect@@QEAAXAEBVQPoint@@@Z
?center@QRect@@QEBA?AVQPoint@@XZ
?topLeft@QRect@@QEBA?AVQPoint@@XZ
?startDetached@QProcess@@SA_NAEBVQString@@AEBVQStringList@@@Z
?start@QProcess@@QEAAXAEBVQString@@AEBVQStringList@@V?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
??1QProcess@@UEAA@XZ
??0QProcess@@QEAA@PEAVQObject@@@Z
?systemEnvironment@QProcessEnvironment@@SA?AV1@XZ
?value@QProcessEnvironment@@QEBA?AVQString@@AEBV2@0@Z
??1QProcessEnvironment@@QEAA@XZ
?exists@QFile@@SA_NAEBVQString@@@Z
?instance@QCoreApplication@@SAPEAV1@XZ
??1QUrl@@QEAA@XZ
??0QUrl@@QEAA@AEBVQString@@W4ParsingMode@0@@Z
?toString@QVariant@@QEBA?AVQString@@XZ
?toBool@QVariant@@QEBA_NXZ
??1QVariant@@QEAA@XZ
?quit@QEventLoop@@QEAAXXZ
?exec@QEventLoop@@QEAAHV?$QFlags@W4ProcessEventsFlag@QEventLoop@@@@@Z
??1QEventLoop@@UEAA@XZ
??0QEventLoop@@QEAA@PEAVQObject@@@Z
?sender@QObject@@IEBAPEAV1@XZ
?inherits@QObject@@QEBA_NPEBD@Z
?property@QObject@@QEBA?AVQVariant@@PEBD@Z
?connect@QObject@@SA?AVConnection@QMetaObject@@PEBV1@PEBD01W4ConnectionType@Qt@@@Z
?end@QListData@@QEBAPEAPEAXXZ
?begin@QListData@@QEBAPEAPEAXXZ
?append@QListData@@QEAAPEAPEAXXZ
?dispose@QListData@@SAXPEAUData@1@@Z
?dispose@QListData@@QEAAXXZ
?detach_grow@QListData@@QEAAPEAUData@1@PEAHH@Z
?y@QPoint@@QEBAHXZ
??YQString@@QEAAAEAV0@AEBV0@@Z
?arg@QString@@QEBA?AV1@AEBV1@HVQChar@@@Z
?arg@QString@@QEBA?AV1@HHHVQChar@@@Z
??4QString@@QEAAAEAV0@$$QEAV0@@Z
??4QString@@QEAAAEAV0@AEBV0@@Z
??0QString@@QEAA@AEBV0@@Z
??0QString@@QEAA@XZ
??0QChar@@QEAA@UQLatin1Char@@@Z
?tr@QMetaObject@@QEBA?AVQString@@PEBD0H@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
??0QSize@@QEAA@HH@Z
?translate@QCoreApplication@@SA?AVQString@@PEBD00H@Z
?ignore@QEvent@@QEAAXXZ
?spontaneous@QEvent@@QEBA_NXZ
?connectImpl@QObject@@CA?AVConnection@QMetaObject@@PEBV1@PEAPEAX01PEAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PEBHPEBU3@@Z
?setObjectName@QObject@@QEAAXAEBVQString@@@Z
?objectName@QObject@@QEBA?AVQString@@XZ
??0QString@@QEAA@PEBD@Z
?fromUtf8@QString@@SA?AV1@PEBDH@Z
?isEmpty@QString@@QEBA_NXZ
??1QString@@QEAA@XZ
??1Connection@QMetaObject@@QEAA@XZ
ffcore
?jsonDownloadUrl@FFUninstallUrlHelper@@SA?AVQString@@XZ
?exists@FFFile@@SA_NAEBVQString@@@Z
?slideshowImageUrl@FFUninstallUrlHelper@@SA?AVQString@@XZ
?slash@FFDir@@SA?AVQString@@AEBV2@@Z
?getInstance@IFFAppInfo@@SAPEAV1@XZ
kernel32
MultiByteToWideChar
GetLastError
LocalFree
GetCommandLineW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
WideCharToMultiByte
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
ReleaseMutex
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
RtlCaptureContext
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
CreateMutexW
UnhandledExceptionFilter
SetEvent
user32
EnumDisplaySettingsW
GetMonitorInfoW
EnumDisplayMonitors
ReleaseDC
FindWindowW
GetDC
gdi32
GetDeviceCaps
shell32
ShellExecuteW
CommandLineToArgvW
advapi32
RegQueryValueExW
RegCreateKeyExW
RegCloseKey
msvcp140
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
wininet
InternetGetConnectedState
vcruntime140
__CxxFrameHandler3
memmove
memcpy
_CxxThrowException
memset
__C_specific_handler
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_destroy_list
api-ms-win-crt-string-l1-1-0
strcmp
wcsnlen
api-ms-win-crt-runtime-l1-1-0
exit
_c_exit
_initterm
_get_narrow_winmain_command_line
_exit
_invalid_parameter_noinfo_noreturn
_set_app_type
_seh_filter_exe
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_initterm_e
_register_thread_local_exe_atexit_callback
api-ms-win-crt-convert-l1-1-0
mbstowcs
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
setlocale
api-ms-win-crt-heap-l1-1-0
_callnewh
free
_set_new_mode
malloc
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
Exports
Exports
BrowserOpenUrl
Sections
.text Size: 173KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 889KB - Virtual size: 888KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 568KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE