qbit.zip
- SHA256 76b117cf47ad04ec0efdcfc73112d4855921177ed11476293478c280033430b3
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
qbit.zip
Resource
win10-20240404-en
windows10-1703-x64
0 signatures
300 seconds
General
- Target qbit.zip
- Size 34.0MB
- Sample240420-w2ly2sfa91
- SHA256 76b117cf47ad04ec0efdcfc73112d4855921177ed11476293478c280033430b3
- MD5 66b99f13e8d79ba71f7d3a4a84d99a75
- SHA1 7ccaa3121d44d37e9ae2377b7a782300bb7a68e1
- SHA512 5b8dbddbc5bb8e5d8c9e7883e6e1f1e888f94e4ea30d5a1f30dc2cf74f4d46854fa3843141f95c837ea03196dfd3531de410a93a7914db56cf926c36294b7c74
- SSDEEP 786432:/sfmg1bqLkfAzfDIEZ2CCCxKintfkWVSqCa9Zbxk:kfmeWAdEZ2qtt7Ca/y
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 14 IoCs
Checks for missing Authenticode signature.
resource unpack001/qbit/qbittorrent_4.6.4_x64_setup.exe unpack002/$PLUGINSDIR/FindProcDLL.dll unpack002/$PLUGINSDIR/LangDLL.dll unpack002/$PLUGINSDIR/System.dll unpack002/$PLUGINSDIR/UAC.dll unpack002/$PLUGINSDIR/nsDialogs.dll unpack002/$PLUGINSDIR/nsisFirewallW.dll unpack002/qbittorrent.exe unpack002/uninst.exe unpack003/$PLUGINSDIR/FindProcDLL.dll unpack003/$PLUGINSDIR/LangDLL.dll unpack003/$PLUGINSDIR/System.dll unpack003/$PLUGINSDIR/UAC.dll unpack003/$PLUGINSDIR/nsisFirewallW.dll
File Explorer
-
qbit.zip.zip 34.0MB
-
qbit/download.txt2KB
-
qbit/qbittorrent_4.6.4_x64_setup.exe.exe 34.0MB
-
$PLUGINSDIR/FindProcDLL.dll.dll 3KB
-
$PLUGINSDIR/LangDLL.dll.dll 5KB
-
$PLUGINSDIR/System.dll.dll 12KB
-
$PLUGINSDIR/UAC.dll.dll 14KB
-
$PLUGINSDIR/modern-header.bmp9KB
-
$PLUGINSDIR/modern-wizard.bmp25KB
-
$PLUGINSDIR/nsDialogs.dll.dll 9KB
-
$PLUGINSDIR/nsisFirewallW.dll.dll 8KB
-
qbittorrent.exe.exe 30.8MB
-
qbittorrent.pdb139.7MB
-
qt.conf84B
-
translations/qt_gl.qm316KB
-
translations/qt_lt.qm161KB
-
translations/qt_pt_PT.qm68KB
-
translations/qt_sl.qm223KB
-
translations/qt_sv.qm64KB
-
translations/qtbase_ar.qm156KB
-
translations/qtbase_bg.qm161KB
-
translations/qtbase_ca.qm199KB
-
translations/qtbase_cs.qm170KB
-
translations/qtbase_da.qm177KB
-
translations/qtbase_de.qm208KB
-
translations/qtbase_es.qm161KB
-
translations/qtbase_fa.qm144KB
-
translations/qtbase_fi.qm175KB
-
translations/qtbase_fr.qm155KB
-
translations/qtbase_gd.qm185KB
-
translations/qtbase_he.qm135KB
-
translations/qtbase_hr.qm146KB
-
translations/qtbase_hu.qm156KB
-
translations/qtbase_it.qm157KB
-
translations/qtbase_ja.qm126KB
-
translations/qtbase_ko.qm153KB
-
translations/qtbase_lv.qm150KB
-
translations/qtbase_nl.qm198KB
-
translations/qtbase_nn.qm191KB
-
translations/qtbase_pl.qm159KB
-
translations/qtbase_pt_BR.qm203KB
-
translations/qtbase_ru.qm198KB
-
translations/qtbase_sk.qm122KB
-
translations/qtbase_tr.qm189KB
-
translations/qtbase_uk.qm154KB
-
translations/qtbase_zh_CN.qm133KB
-
translations/qtbase_zh_TW.qm123KB
-
uninst.exe.exe 140KB
-
$PLUGINSDIR/FindProcDLL.dll.dll 3KB
-
$PLUGINSDIR/LangDLL.dll.dll 5KB
-
$PLUGINSDIR/System.dll.dll 12KB
-
$PLUGINSDIR/UAC.dll.dll 14KB
-
$PLUGINSDIR/modern-header.bmp9KB
-
$PLUGINSDIR/nsisFirewallW.dll.dll 8KB
qbit/download.txt
- SHA256 26b0ce706ee351a55bea543ae7cc1866e3f72d67ed73749f5e0e4d9d69c9d6d6
- MD5 e3401a3efd8ec5445fac1e56a022785b
- SHA1 9ebe71e2219ecb2e53413f001c5dac6260b92b7a
- SHA512 f384c557f2fdf54509d4fa0a12d2e161d68a3d32e5e8a8ca237716d4d4d9cd4ba3c19782d63274714bc6dcca41032220f7f88de2e5810e0fbca6537b9622cafb
- MD5 SHA1 SHA512
qbit/qbittorrent_4.6.4_x64_setup.exe
- IMPHASH 9dda1a1d1f8a1d13ae0297b47046b26e
- SHA256 96bac43faac2b1fa5e0bc495975b2e642af5da181e313a9c8f541912b83c0edb
- MD5 918224925563095d15dbab7c34b3bf17
- SHA1 33902285adf411e5824547e849a4adcfc6531114
- SHA512 4d6bd949693ea60671ddb8dc19ec87d8e02bf4888aca290318488ca696e495e13bf49161ac8f75cfff9befb72589ab2bedcd1138fa9d81c5bf071191d6344b28
- SSDEEP 786432:7KMXiEtPqJO5MB3/UOd64S49KmFRc85C2uWF3Dzn:7DXioy0DOd6o1HtuW5/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13893
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
RegEnumValueW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyExW
RegCreateKeyExW
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW
ShellExecuteExW
ole32
CoCreateInstance
OleUninitialize
OleInitialize
IIDFromString
CoTaskMemFree
comctl32
ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_Create
user32
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
CreatePopupMenu
AppendMenuW
TrackPopupMenu
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
IsWindowEnabled
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CharPrevW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
CharNextA
wsprintfA
DispatchMessageW
CreateWindowExW
PeekMessageW
GetSystemMetrics
gdi32
GetDeviceCaps
SetBkColor
SelectObject
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
kernel32
RemoveDirectoryW
lstrcmpiA
GetTempFileNameW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
WriteFile
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
CreateFileW
GetTickCount
Sleep
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
MulDiv
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
CopyFileW
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=163, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/FindProcDLL.dll
- IMPHASH 0cd94af3a016a5de4ab9a5a9a02d4173
- SHA256 c0948b2ec36a69f82c08935fac4b212238b6792694f009b93b4bdb478c4f26e3
- MD5 b4faf654de4284a89eaf7d073e4e1e63
- SHA1 8efcfd1ca648e942cbffd27af429784b7fcf514b
- SHA512 eef31e332be859cf2a64c928bf3b96442f36fe51f1a372c5628264a0d4b2fc7b3e670323c8fb5ffa72db995b8924da2555198e7de7b4f549d9e0f9e6dbb6b388
- MD5 SHA1 SHA512
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalFree
lstrcpyW
CloseHandle
Sleep
GetExitCodeProcess
WaitForSingleObject
TerminateProcess
GetLongPathNameW
lstrcmpiW
QueryDosDeviceW
GetLogicalDriveStringsW
lstrlenW
OpenProcess
GetCurrentProcessId
GetProcAddress
LoadLibraryW
GetVersionExW
FindProc
KillProc
WaitProcEnd
WaitProcStart
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
196B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
$PLUGINSDIR/LangDLL.dll
- IMPHASH fe3375e7e4529b73ba45ab2246b9269b
- SHA256 32230128c18574c1e860dfe4b17fe0334f685740e27bc182e0d525a8948c9c2e
- MD5 50016010fb0d8db2bc4cd258ceb43be5
- SHA1 44ba95ee12e69da72478cf358c93533a9c7a01dc
- SHA512 ed4cf49f756fbf673449dca20e63dce6d3a612b61f294efc9c3ccebeffa6a1372667932468816d3a7afdb7e5a652760689d8c6d3f331cedee7247404c879a233
- SSDEEP 48:S46+/pTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8m/ofjLl:zbuPbO5tCZBVEAWyMEFv2CmCL
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5439
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalFree
lstrlenW
GlobalAlloc
lstrcmpW
GetModuleHandleW
MulDiv
lstrcpyW
lstrcpynW
user32
SetWindowTextW
SetDlgItemTextW
SendDlgItemMessageW
EndDialog
DialogBoxParamW
LoadIconW
SendMessageW
ShowWindow
GetDC
gdi32
CreateFontIndirectW
GetDeviceCaps
DeleteObject
LangDialog
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
681B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
352B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
352B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=23, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/System.dll
- IMPHASH 509a34b3a68a773e0afb4259e68f9f82
- SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
- MD5 4add245d4ba34b04f213409bfe504c07
- SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
- SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
- SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10879
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAlloc
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError
user32
wsprintfW
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
867B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
662B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/UAC.dll
- IMPHASH 0ef725341a4aecf8398c0e2132f38049
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10632
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
SetLastError
GetCurrentProcessId
GetCommandLineW
GetProcAddress
CreateThread
GlobalFree
LoadLibraryA
OpenProcess
GlobalAlloc
CreateFileMappingW
Sleep
MapViewOfFile
GetModuleHandleW
UnmapViewOfFile
CreateEventW
SetCurrentDirectoryW
GetVersionExW
GetExitCodeProcess
lstrcatW
LocalFree
GetPrivateProfileStringW
FormatMessageW
GetPrivateProfileIntW
CreateProcessW
CloseHandle
GetLastError
DuplicateHandle
GetCurrentThreadId
lstrlenW
SetEvent
WaitForSingleObject
lstrcmpiW
GetExitCodeThread
GetModuleFileNameW
user32
SetWindowPos
GetClientRect
GetWindowThreadProcessId
SetWindowLongW
DefWindowProcW
GetDlgItem
CallWindowProcW
CallNextHookEx
GetClassNameW
PeekMessageW
DestroyWindow
SendMessageW
SetForegroundWindow
IsWindowVisible
MsgWaitForMultipleObjects
LoadStringW
EndDialog
EnableWindow
DialogBoxParamW
LoadImageW
MessageBoxW
GetWindowLongW
DispatchMessageW
ShowWindow
wsprintfW
CreateDialogParamW
GetWindowRect
IsDialogMessageW
FindWindowExW
CharNextW
CreateWindowExW
LoadIconW
PostMessageW
SetWindowsHookExW
UnhookWindowsHookEx
TranslateMessage
shell32
ShellExecuteExW
advapi32
OpenServiceW
QueryServiceStatus
CloseServiceHandle
OpenProcessToken
OpenSCManagerW
GetUserNameW
AdjustTokenPrivileges
LookupPrivilegeValueW
GetTokenInformation
EqualSid
ole32
CoInitialize
_
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=123, productName=VS2005 build 50727, version=50727,
count=83, id=1, productName=Unmarked objects,
count=3, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
$PLUGINSDIR/modern-header.bmp
- SHA256 766a893fe962aefd27c574cb05f25cf895d3fc70a00db5a6fa73d573f571aefc
- MD5 940c56737bf9bb69ce7a31c623d4e87a
- SHA1 f2f3b4e7b9c28df6687ceeaed300a793e3bac445
- SHA512 81c60431619d7eb826b8da997c227c4f7077cc754caa15df6e0e7ae0e33690432bc2a27a7e295998f15e33a17b3d80e492d7cc09fd70dc43daf1cfe86b8746ff
- SSDEEP 192:TYw3C/LSnMoejFXnknIHbGoijTr3dBZ9KPPsnY/T0x9j:TY3LSnlepnknIHKoUrdBZ9uPsY/Ix9j
- MD5 SHA1 SHA512 SSDEEP
$PLUGINSDIR/modern-wizard.bmp
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- MD5 SHA1 SHA512 SSDEEP
$PLUGINSDIR/nsDialogs.dll
- IMPHASH 3b477381217c97b22146297f93df2a92
- SHA256 4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed
- MD5 1d8f01a83ddd259bc339902c1d33c8f1
- SHA1 9f7806af462c94c39e2ec6cc9c7ad05c44eba04e
- SHA512 28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567
- SSDEEP 96:o4Ev02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YsNqkzfFc:o4EvCu5e81785qHFcU0PuAw0uyGIFc
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
7527
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
lstrcpyW
GetFileAttributesW
lstrcmpiW
MulDiv
lstrlenW
HeapFree
GetProcessHeap
GetCurrentDirectoryW
HeapReAlloc
GlobalFree
lstrcpynW
GlobalAlloc
HeapAlloc
SetCurrentDirectoryW
user32
GetPropW
DestroyWindow
CallWindowProcW
SetCursor
LoadCursorW
RemovePropW
CharPrevW
GetWindowLongW
DrawTextW
GetWindowTextW
SetWindowLongW
GetDlgItem
GetSysColor
SetWindowPos
CreateDialogParamW
MapWindowPoints
GetWindowRect
SetPropW
CreateWindowExW
IsWindow
SetTimer
KillTimer
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
wsprintfW
MapDialogRect
GetClientRect
CharNextW
SendMessageW
DrawFocusRect
gdi32
SetTextColor
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
comdlg32
GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError
ole32
CoTaskMemFree
Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
638B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=56, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=5, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/nsisFirewallW.dll
- IMPHASH 18ecfc7436b69f8c13ec22664f9f1857
- SHA256 53be5716ad80945cb99681d5dbda60492f5dfb206fbfdb776b769b3eeb18d2c2
- MD5 f5bf81a102de52a4add21b8a367e54e0
- SHA1 cf1e76ffe4a3ecd4dad453112afd33624f16751c
- SHA512 6e280a75f706474ad31b2ce770fa34f54cb598528fac4477c466200a608b79c0f9b84011545595d9ba94331ad08e2f51bd42de91f92379db27686a28ba351256
- SSDEEP 96:8SMPv+eLDUDp+weLv2lstU+0IgNB2Aa20kdArfOwJKbFrMiRsuHdRYL:wnxLDUwp6sgN2RDrzJMMmsuYL
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6903
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalFree
lstrcpyW
lstrcpynW
GlobalAlloc
InterlockedDecrement
LocalFree
user32
wsprintfW
ole32
OleRun
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
GetErrorInfo
SysFreeString
SysAllocString
msvcrt
free
_adjust_fdiv
malloc
_initterm
_CxxThrowException
??2@YAPAXI@Z
??3@YAXPAX@Z
??1type_info@@UAE@XZ
__CxxFrameHandler
AddAuthorizedApplication
RemoveAuthorizedApplication
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
324B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
546B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=11, version=8047,
count=3, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=11, version=8798,
count=9, id=93, version=2179,
count=35, id=1, productName=Unmarked objects,
count=1, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
qbittorrent.exe
- IMPHASH 1b808774e915d7bae0ae17f2d54477d4
- SHA256 1fac780feaa2e263dbd0ee2103d1815d97b4d6a676f5b83e9320120dc15ee6bb
- MD5 b9dfd00c5fbb9cfaa2c4e1b3f9e218bf
- SHA1 4dad2d51c73dffdd2cfc4d17146ac0253d74e3bf
- SHA512 baec0664acfb41b96939f6462df5b9390f6cec16e71960f77ead222ad2bdf7f5f8bc4cb1937413472d4abe1ff6053eb8e89a9a6291c7b979138272dac780ab6c
- SSDEEP 393216:Q943f9XQuqc+GJi2piZ09Br9UhfrZfndOj/HS4UfrBq9BKFdu9CwJsv6t/kubD:QuZfyrZgqrAZbD
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
17971072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
qbittorrent.pdb
uxtheme
GetThemeTransitionDuration
GetThemeInt
GetThemeEnumValue
GetThemePropertyOrigin
GetThemeColor
IsThemeBackgroundPartiallyTransparent
OpenThemeData
IsThemeActive
IsAppThemed
SetWindowTheme
CloseThemeData
ord47
GetThemeBool
GetCurrentThemeName
GetThemeMargins
GetThemeBackgroundRegion
GetThemePartSize
d3d11
D3D11CreateDevice
dxgi
CreateDXGIFactory1
CreateDXGIFactory2
dwrite
DWriteCreateFactory
gdi32
GetStockObject
CreateFontIndirectW
GetFontData
EnumFontFamiliesExW
AddFontMemResourceEx
RemoveFontMemResourceEx
GetTextMetricsW
AddFontResourceExW
RemoveFontResourceExW
CreateBitmap
GetOutlineTextMetricsW
GetCharWidthI
GetTextExtentPoint32W
SetGraphicsMode
SetWorldTransform
GetGlyphOutlineW
GetCharABCWidthsFloatW
GetDIBits
SelectClipRgn
GetRegionData
GetCharABCWidthsI
GetCharABCWidthsW
SetTextColor
SetBkMode
GdiFlush
CreateDIBSection
CreateCompatibleDC
DeleteDC
SelectObject
DeleteObject
CombineRgn
CreateRectRgn
GetObjectW
GetBitmapBits
CreateCompatibleBitmap
CreateDCW
OffsetRgn
CreateSolidBrush
SetLayout
BitBlt
GetDeviceCaps
GetTextFaceW
ExtTextOutW
SetTextAlign
dwmapi
DwmEnableBlurBehindWindow
DwmGetWindowAttribute
DwmSetWindowAttribute
imm32
ImmNotifyIME
ImmReleaseContext
ImmGetOpenStatus
ImmAssociateContextEx
ImmAssociateContext
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetDefaultIMEWnd
ImmGetCompositionStringW
ImmGetVirtualKey
ImmGetContext
oleaut32
VariantInit
SysStringLen
GetErrorInfo
VariantClear
SysFreeString
SafeArrayCreateVector
SafeArrayPutElement
SysAllocString
SetErrorInfo
shlwapi
AssocQueryStringW
wtsapi32
WTSFreeMemory
WTSQuerySessionInformationW
api-ms-win-shcore-scaling-l1-1-1
GetProcessDpiAwareness
GetDpiForMonitor
SetProcessDpiAwareness
comdlg32
GetOpenFileNameW
GetSaveFileNameW
d3d9
Direct3DCreate9
powrprof
SetSuspendState
wsock32
htonl
ntohs
WSASetLastError
WSAGetLastError
htons
setsockopt
inet_ntoa
getsockopt
connect
getsockname
listen
select
closesocket
bind
accept
__WSAFDIsSet
getpeername
ord1141
ord1142
socket
ntohl
WSACleanup
WSAStartup
iphlpapi
CancelMibChangeNotify2
NotifyUnicastIpAddressChange
ConvertInterfaceLuidToIndex
ConvertInterfaceIndexToLuid
ConvertInterfaceLuidToNameW
ConvertInterfaceLuidToGuid
ConvertInterfaceNameToLuidW
GetAdaptersAddresses
winhttp
WinHttpGetProxyForUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetDefaultProxyConfiguration
WinHttpOpen
WinHttpCloseHandle
secur32
ApplyControlToken
EncryptMessage
FreeContextBuffer
InitSecurityInterfaceW
DeleteSecurityContext
QueryContextAttributesW
AcquireCredentialsHandleW
FreeCredentialsHandle
DecryptMessage
AcceptSecurityContext
InitializeSecurityContextW
bcrypt
BCryptOpenAlgorithmProvider
BCryptDestroyKey
BCryptGenRandom
BCryptGenerateSymmetricKey
BCryptSetProperty
BCryptCloseAlgorithmProvider
BCryptDecrypt
BCryptEncrypt
crypt32
CertCloseStore
PFXImportCertStore
CertAddStoreToCollection
CertFindChainInStore
CertGetCertificateChain
CertVerifyTimeValidity
CertEnumCertificatesInStore
CertDuplicateCertificateContext
CertFreeCertificateChain
CertFindCertificateInStore
CertOpenStore
CertCreateCertificateContext
CertAddCertificateContextToStore
CertGetCertificateContextProperty
CertFreeCertificateContext
CertOpenSystemStoreW
CertOpenSystemStoreA
api-ms-win-core-synch-l1-2-0
WakeByAddressAll
WakeByAddressSingle
WaitOnAddress
mpr
WNetGetUniversalNameW
userenv
GetUserProfileDirectoryW
advapi32
CryptSetHashParam
AdjustTokenPrivileges
LookupPrivilegeValueW
GetUserNameW
InitiateSystemShutdownW
RegCloseKey
RegEnumKeyExW
RegFlushKey
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumValueW
RegCreateKeyExW
LookupAccountSidW
GetNamedSecurityInfoW
AddAccessAllowedAceEx
AddAccessDeniedAceEx
DuplicateToken
CopySid
SystemFunction036
GetSidSubAuthorityCount
GetSidSubAuthority
CryptDestroyKey
CryptGetUserKey
CryptAcquireContextW
CryptEnumProvidersW
CryptDecrypt
CryptExportKey
CryptCreateHash
OpenProcessToken
CryptDestroyHash
CryptSignHashW
CryptGetProvParam
CryptReleaseContext
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegNotifyChangeKeyValue
LookupAccountNameW
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
FreeSid
AddAccessAllowedAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
GetTokenInformation
InitializeSecurityDescriptor
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
authz
AuthzFreeResourceManager
AuthzInitializeContextFromSid
AuthzInitializeContextFromToken
AuthzFreeContext
AuthzAccessCheck
AuthzInitializeResourceManager
kernel32
FileTimeToSystemTime
MoveFileExW
MoveFileW
GetCurrentDirectoryW
GetLogicalDrives
SetErrorMode
SetFileTime
GetFileInformationByHandleEx
FlsSetValue
FlsGetValue
FlsAlloc
GetExitCodeThread
CloseThreadpoolWork
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
FindFirstFileExW
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
FindFirstChangeNotificationW
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
LoadLibraryExW
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
InitOnceComplete
GetVolumePathNamesForVolumeNameW
TzSpecificLocalTimeToSystemTime
VirtualQuery
OpenFileMappingW
FindCloseChangeNotification
FindNextChangeNotification
SetConsoleCtrlHandler
GetConsoleOutputCP
ExitProcess
ExitThread
FreeLibraryAndExitThread
SystemTimeToTzSpecificLocalTime
GetCommandLineA
SetStdHandle
IsValidLocale
GetVolumeNameForVolumeMountPointW
GetDiskFreeSpaceExW
GetUserGeoID
GetGeoInfoW
CreateSemaphoreW
ReleaseSemaphore
K32GetModuleFileNameExW
FlsFree
InitializeCriticalSectionEx
GetTimeZoneInformation
InitializeSListHead
UnhandledExceptionFilter
EnumSystemLocalesW
SetEnvironmentVariableW
IsValidCodePage
GetOEMCP
WriteConsoleW
GetUserDefaultLocaleName
InitOnceBeginInitialize
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
RaiseException
RtlPcToFileHeader
SetFileAttributesW
GetLocaleInfoEx
VirtualAlloc
VirtualFree
HeapDestroy
CloseHandle
GetCurrentProcess
GetCurrentThread
SetThreadPriority
GetProcAddress
LoadLibraryW
LocalFree
FormatMessageA
FormatMessageW
WideCharToMultiByte
GetCurrentProcessId
GetLastError
ReleaseMutex
WaitForSingleObject
CreateMutexW
OpenMutexW
Sleep
WaitForMultipleObjects
RtlCaptureStackBackTrace
MultiByteToWideChar
GetDriveTypeW
GetVolumePathNameW
GetSystemDirectoryW
VerSetConditionMask
VerifyVersionInfoW
SetThreadExecutionState
GetVolumeInformationW
lstrcmpW
GetConsoleWindow
GetLongPathNameW
GetUserDefaultLangID
LocalAlloc
GetModuleHandleW
GetCurrentThreadId
WTSGetActiveConsoleSessionId
OpenProcess
CheckRemoteDebuggerPresent
GlobalAlloc
GlobalLock
GlobalUnlock
GetLocaleInfoW
ExpandEnvironmentStringsW
CreateProcessW
GlobalSize
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
CreateFileW
UnmapViewOfFile
GetFileSize
CreateFileMappingW
MapViewOfFile
PostQueuedCompletionStatus
SetWaitableTimer
SetLastError
InitializeCriticalSectionAndSpinCount
GetQueuedCompletionStatus
CreateEventW
SetEvent
TerminateThread
QueueUserAPC
SleepEx
CreateIoCompletionPort
GetFileAttributesExW
CreateDirectoryW
RemoveDirectoryW
CreateHardLinkW
GetFileInformationByHandle
DeleteFileW
CopyFileW
ReadFile
FindFirstFileW
GetFileSizeEx
FindNextFileW
WriteFile
DeviceIoControl
SetEndOfFile
FindClose
LoadLibraryA
GetOverlappedResult
SetFilePointerEx
CreateEventA
CreateWaitableTimerA
GetACP
CancelIoEx
CancelIo
GetModuleHandleA
GetSystemTimeAsFileTime
GlobalMemoryStatusEx
WaitForMultipleObjectsEx
WaitNamedPipeW
DisconnectNamedPipe
CreateNamedPipeW
ConnectNamedPipe
ResetEvent
GlobalFree
SystemTimeToFileTime
GetSystemTime
GetModuleHandleExW
DeleteFiber
SwitchToFiber
CreateFiber
TlsSetValue
TlsAlloc
TlsGetValue
TlsFree
GetStdHandle
GetEnvironmentVariableW
GetFileType
RtlVirtualUnwind
QueryPerformanceCounter
ConvertFiberToThread
ConvertThreadToFiber
FreeLibrary
SetConsoleMode
ReadConsoleA
GetConsoleMode
ReadConsoleW
AreFileApisANSI
TryEnterCriticalSection
HeapCreate
HeapFree
GetFullPathNameW
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
SetFilePointer
GetFullPathNameA
UnlockFileEx
GetTempPathW
GetFileAttributesW
HeapValidate
HeapSize
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
OutputDebugStringW
FlushViewOfFile
CreateFileA
WaitForSingleObjectEx
DeleteFileA
HeapReAlloc
GetSystemInfo
HeapAlloc
HeapCompact
GetModuleFileNameW
UnlockFile
LockFileEx
GetProcessHeap
GetTickCount
FlushFileBuffers
CompareStringEx
GetNativeSystemInfo
IsProcessorFeaturePresent
TerminateProcess
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetExitCodeProcess
GetProcessId
GetLocalTime
DuplicateHandle
CreateThread
SwitchToThread
GetThreadPriority
ResumeThread
QueryPerformanceFrequency
CompareStringW
LCMapStringW
GetUserDefaultLCID
GetCurrencyFormatW
GetDateFormatW
GetTimeFormatW
GetUserPreferredUILanguages
SetThreadpoolWait
WaitForThreadpoolWaitCallbacks
CreateThreadpoolWait
CloseThreadpoolWait
PeekNamedPipe
netapi32
NetApiBufferFree
NetShareEnum
ole32
OleInitialize
CoGetMalloc
OleUninitialize
RegisterDragDrop
CoTaskMemFree
StringFromGUID2
CoCreateGuid
CoInitializeEx
CoUninitialize
DoDragDrop
CoCreateInstance
OleIsCurrentClipboard
OleSetClipboard
RevokeDragDrop
OleFlushClipboard
CoLockObjectExternal
CoGetApartmentType
CoGetObjectContext
OleGetClipboard
ReleaseStgMedium
CoCreateFreeThreadedMarshaler
user32
DestroyIcon
GetSystemMenu
EnableMenuItem
GetSysColor
GetSystemMetrics
SystemParametersInfoW
DestroyWindow
GetDesktopWindow
GetDC
ReleaseDC
MessageBoxW
CreateIconIndirect
GetIconInfo
DrawIconEx
SystemParametersInfoForDpi
IsWindow
GetCaretBlinkTime
GetDoubleClickTime
MessageBeep
UpdateLayeredWindowIndirect
DefWindowProcW
DestroyCursor
GetWindowLongPtrW
GetAncestor
GetCapture
GetClientRect
ClientToScreen
ScreenToClient
SetWindowLongPtrW
GetWindowPlacement
GetWindowRect
GetParent
IsWindowVisible
UpdateLayeredWindow
SetLayeredWindowAttributes
InvalidateRect
GetSystemMetricsForDpi
MonitorFromPoint
GetDpiForWindow
CreateWindowExW
SetWindowPos
AdjustWindowRectEx
AdjustWindowRectExForDpi
IsTouchWindow
SetWindowTextW
SetParent
ShowWindow
UnregisterTouchWindow
SetForegroundWindow
GetForegroundWindow
IsChild
GetWindow
SetWindowPlacement
IsIconic
MoveWindow
FillRect
GetUpdateRect
BeginPaint
EndPaint
AllowSetForegroundWindow
GetMenu
SetWindowRgn
GetWindowThreadProcessId
AttachThreadInput
SetFocus
SetCapture
PostMessageW
SetCursor
FlashWindowEx
SendMessageW
RegisterTouchWindow
GetKeyboardLayoutList
GetAwarenessFromDpiAwarenessContext
GetWindowDpiAwarenessContext
EnableNonClientDpiScaling
UnregisterPowerSettingNotification
RegisterPowerSettingNotification
ShutdownBlockReasonDestroy
GetSysColorBrush
GetClassInfoW
LoadImageW
RegisterClassExW
UnregisterClassW
ChildWindowFromPointEx
WindowFromPoint
GetCursorPos
GetFocus
AddClipboardFormatListener
SetClipboardViewer
RemoveClipboardFormatListener
ChangeClipboardChain
IsHungAppWindow
RegisterClipboardFormatW
GetMessageW
GetPointerInfo
SendInput
GetDisplayConfigBufferSizes
QueryDisplayConfig
DisplayConfigGetDeviceInfo
GetMonitorInfoW
EnumDisplayMonitors
MonitorFromWindow
GetKeyboardLayout
RegisterWindowMessageW
FindWindowA
IsWindowEnabled
CreateCaret
ShowCaret
DestroyCaret
SetCaretPos
GetMenuItemInfoW
SetMenuItemInfoW
ModifyMenuW
RemoveMenu
InsertMenuW
AppendMenuW
CreateMenu
DestroyMenu
CreatePopupMenu
TrackPopupMenu
SetMenu
DrawMenuBar
ToUnicode
GetKeyboardState
ToAscii
IsZoomed
TrackPopupMenuEx
PeekMessageW
GetKeyState
MapVirtualKeyW
LoadIconW
GetClipboardFormatNameW
EnumDisplayDevicesW
CreateCursor
GetCursor
GetCursorInfo
SetCursorPos
LoadCursorW
GetAsyncKeyState
GetMessageExtraInfo
TrackMouseEvent
GetTouchInputInfo
CloseTouchInputHandle
GetPointerType
GetPointerFrameTouchInfo
GetPointerFrameTouchInfoHistory
GetPointerPenInfo
GetPointerPenInfoHistory
SkipPointerFrameMessages
GetPointerDeviceRects
ChangeWindowMessageFilterEx
GetProcessWindowStation
GetUserObjectInformationW
EnumWindows
PostThreadMessageW
CharNextExA
KillTimer
GetQueueStatus
SetTimer
RegisterClassW
SetCoalescableTimer
MsgWaitForMultipleObjectsEx
TranslateMessage
DispatchMessageW
UnregisterDeviceNotification
RegisterDeviceNotificationW
ShutdownBlockReasonCreate
SetProcessDpiAwarenessContext
ReleaseCapture
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
ws2_32
WSAHtonl
WSAAccept
WSAConnect
WSANtohs
getnameinfo
WSAIoctl
WSASendTo
WSARecvFrom
WSASend
WSASocketW
getaddrinfo
WSARecv
freeaddrinfo
WSAStringToAddressW
WSAAddressToStringW
WSAAsyncSelect
gethostname
WSANtohl
winmm
timeKillEvent
timeSetEvent
PlaySoundW
api-ms-win-core-winrt-string-l1-1-0
WindowsCreateStringReference
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
shell32
SHGetStockIconInfo
SHCreateItemFromParsingName
SHGetKnownFolderIDList
SHCreateItemFromIDList
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc
Shell_NotifyIconGetRect
Shell_NotifyIconW
ShellExecuteExW
SHGetKnownFolderPath
CommandLineToArgvW
ord155
SHChangeNotify
ord727
ord190
SHOpenFolderAndSelectItems
ShellExecuteW
SHGetFileInfoW
dbgeng
DebugCreate
qt_startup_hook
Name
.text
Size
17.8MB
Virtual Size
17.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
11.4MB
Virtual Size
11.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
385KB
Virtual Size
506KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
659KB
Virtual Size
659KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.qtmimed
Size
331KB
Virtual Size
330KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
149KB
Virtual Size
149KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
132KB
Virtual Size
132KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=30, id=259, version=30795,
count=1, id=253, version=31823,
count=20, id=260, version=31823,
count=115, id=261, version=31823,
count=14, id=259, version=31823,
count=54, id=260, version=30795,
count=28, productName=Unmarked objects (old),
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=211, id=261, version=30795,
count=65, id=257, version=30795,
count=762, id=1, productName=Unmarked objects,
count=220, id=261, version=31937,
count=1614, id=265, version=31937,
count=1, id=256, version=31937,
count=1, id=255, version=31937,
count=1, id=151,
count=1, id=258, version=31937,
qbittorrent.pdb
- SHA256 f8861d92c7609d41ee0f1b14eed1e31dedc1c735c36a47391e21c5e79be8b1e5
- MD5 9ea92840d804f74aab17c79b820af2b7
- SHA1 42a2f607757b6cb129935dad261f0a86ddc2fceb
- SHA512 0a163163899aff81a7175bef5db9323a5b44b8ee00deb203d8741fa42d0ef12a9e92eb3bcde54605cb0c31a702d136d5239aea532f2aa7eff98edb238da022b9
- SSDEEP 393216:qYZBCzIX4Y0jTSMLGzgKb6BkaZIaCbLeTaUh94fSNzXUt4X:pfX4YDgpBkX3+
- MD5 SHA1 SHA512 SSDEEP
qt.conf
- SHA256 fdb8fa58a6ffc14771ca2b1ef6438061a6cba638594d76d9021b91e755d030d3
- MD5 af7f56a63958401da8bea1f5e419b2af
- SHA1 f66ee8779ca6d570dea22fe34ef8600e5d3c5f38
- SHA512 02f70ca7f1291b25402989be74408eb82343ab500e15e4ac22fbc7162eb9230cd7061eaa7e34acf69962b57ed0827f51ceaf0fa63da3154b53469c7b7511d23d
- MD5 SHA1 SHA512
translations/qt_gl.qm
- SHA256 204a01ac7deb6b5bae193afecbd1e50d18c73bf7d94badeb2bbfdf6123c4ed93
- MD5 0661ffabfbc50187f3ba38876b721946
- SHA1 eb5e7205355cfc6bcb4df27e224079842c97b296
- SHA512 65ab66cc54d65e7678fa731a5c5f2cc9d6fc217b91ad47d538440811e09a23e49cd95ce62a79e3e8c275e250ac1a0b54bd289f6dd067573876da7aff54381d02
- SSDEEP 3072:OYSG8zxWSDjq73Pf6FT1f4uh50QGrRfFD54YyUY0Ou4/tnra3Z0uYhB5YHfHRRn2:O39WSD3TMQGrxFD5EUVQ
- MD5 SHA1 SHA512 SSDEEP
translations/qt_lt.qm
- SHA256 47eb5f97467df769261421d54a5bea1131c9fb9b6388791d38bb6574335b64bf
- MD5 8992b652d1499f5d2f12674f3f875a35
- SHA1 e22766a49612f79156c550d83c6c230345dda433
- SHA512 9b8b6dbff432f2a46c14bc183a6baf84acbf02bf2c5bb8c306c6538fbd9be1c0a9015bd46728f2f652f9163afc56b1e16d16eb95d8f7728f3c562ae9f4f1ae1e
- SSDEEP 1536:i5v3+zmayloj6yJjhnBAbnrKnGrhA7WgdXclIsooY9i:SvOzAloj6yJ9BA7riGr+7WKXc+s5ui
- MD5 SHA1 SHA512 SSDEEP
translations/qt_pt_PT.qm
- SHA256 2c1e7bbf5168a64b43752dd4c547601c0bde6d610f8671fa3e3af38597e84783
- MD5 6656500f7a28ef820ae9f97fd47fb5bb
- SHA1 cc112b9c9513bcf7497f3417168b4c8a9f7640a9
- SHA512 5c3cbfcf86af6b4d949c1d914cd379e512e73ba350af661033a386ee7fb981fbfcb43d9a35fde7656e17bb09f64f1469f84867a780573c3359d645269461d5a6
- SSDEEP 768:OKGUuWW+WHjS0gMBd483+Y7bDPs4RHBloLUIltlzAJnx4nnliM1OPlOibLG:JGUuWPuSgm0Jn+n4Mhj
- MD5 SHA1 SHA512 SSDEEP
translations/qt_sl.qm
- SHA256 c44e0313a9414cc0e490b65b0c036fa11bca959353b228886547bc2c8492034f
- MD5 d35a0fe35476be8bd149cee46e42b5e9
- SHA1 9f3c85c115a283e5230d1eead84c8cb73a71fa03
- SHA512 beeb1751882af081e80be93f7464d4c6322b724efa2cbd3e1cbe709181d380c1c57e770fa962bb706d6fcf4a8cb393e3f6e187c1f604f8ceefb201ca3200bd1c
- SSDEEP 3072:9zQH0hOtgmiAZu0eeAEv+v49JnnSmICgr3n7jhCQUeinqyU5UggtRLGrQ2LZO+Y1:RpUsSpGr36wsR
- MD5 SHA1 SHA512 SSDEEP
translations/qt_sv.qm
- SHA256 4b4b6ff7fd237c9da0301b4946132e68653d15eb5faf38e4c5fbfebb12dd97f7
- MD5 0e85e0e0e7ddfe3d4bde302f27047f9c
- SHA1 ae59348e0c2e4f86f99da6cf5dab3b7e92504b7c
- SHA512 8caab6c61e9fa26a3a289a9e4dc515d157b3092d6d4ed43861220261bd2b7cc79b35b52f9ade4ef558b5385b37eac14575420dd55c475f435bb95b6c1e2561b6
- SSDEEP 1536:4u6DkpgyKmRmG15mGM6iFPi6Q/qTlOQZY2dKN8gKw:4u6DotUG1sGMZPi6Q/qTlO2Y2YKw
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_ar.qm
- SHA256 e03fe68d83201543698fd7fe267dd5dfc5bfd195147e74ff2f19ac3491401263
- MD5 a7e4d0ba0fc5df07f62cc66ec9878979
- SHA1 21fd131b23bdd1bba7bbb86f3ed5c83876f45638
- SHA512 d9e6b10506fcf20b5b783f011908083d9df6c5df88e21b10d07f53a01ad6506a4b921c85335a25bae54e27bad7d01b6e240d58fdeeaabc7ff32014ec120c2ecf
- SSDEEP 1536:XGlAMfkX1M0RdaCkR8lfv8vtc8EFrVYA2I4AJZWEWgHg1C8COvzHKHC6Jp9NV0V7:XUr0RACkIwDEpV1Lgf1ubtw3Bb
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_bg.qm
- SHA256 e448ac9e3f16c29eb27af3012efe21052daa78fabfb34cd6dff2f69ee3bd3cdb
- MD5 660413ad666a6b31a1acf8f216781d6e
- SHA1 654409cdf3f551555957d3dbcf8d6a0d8f03a6c5
- SHA512 c6ae4b784c3d302d7ec6b9ce7b27ddaf00713adf233f1246cd0475697a59c84d6a86baa1005283b1f89fcc0835fd131e5cf07b3534b66a0a0aa6ac6356006b8f
- SSDEEP 1536:9ULiyUxPoT6qx+J7FJlaaMJnxjqxq+0Uiff0mbVeb7wiEwYuYqDKBkKHMXHCIMll:9ULpIVFnpwUiEujw27ncUQUz
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_ca.qm
- SHA256 425023f1b530456d0ba012e32b84daaaa5aa3bc385d9a076e7751393db393d77
- MD5 ef15e764e49bb4cd7bb91cb8abdbd8c5
- SHA1 6e73576ee5349870eeb72373596dad6975688755
- SHA512 a3516c2dc13410394c592f568912189a64d1b00c272874996143c8388e9351294f5eb36287f18845e5385578718535a66901a5693bec3401ff0a6589fc352081
- SSDEEP 3072:7v+fArFDLAdtPstp2S+BvXERjaePzCTcQ1Z:7tt4UOS+TB1Z
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_cs.qm
- SHA256 03028b42df5479270371e4c3bdc7df2f56cbbe6dda956a2864ac6f6415861fe8
- MD5 c57d0de9d8458a5beb2114e47b0fde47
- SHA1 3a0e777539c51bb65ee76b8e1d8dce4386cbc886
- SHA512 f7970c132064407752c3d42705376fe04facafd2cfe1021e615182555f7ba82e7970edf5d14359f9d5ca69d4d570aa9ddc46d48ce787cff13d305341a3e4af79
- SSDEEP 3072:5WjuhX0CVRaakGjW9E8SSOQfX/JlwVOMxrboRPqWxXfQvO7zjBf:5iFGj1QfXr8Gd
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_da.qm
- SHA256 7d1e5ca3310b54d104c19bf2abd402b38e584e87039a70e153c4a9af74b25c22
- MD5 859ce522a233af31ed8d32822da7755b
- SHA1 70b19b2a6914da7d629f577f8987553713cd5d3f
- SHA512 f9faa5a19c2fd99ccd03151b7be5dda613e9c69678c028cdf678adb176c23c7de9eb846cf915bc3cc67abd5d62d9cd483a5f47a57d5e6bb2f2053563d62e1ef5
- SSDEEP 3072:XzswP2UvZ5aZ9jFTkmq/gnBNW/+PcWrqm2Vliz0DGdaS4KSLZjwTTgwUR0toT:j3m27AjCT
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_de.qm
- SHA256 8286eb14d44bb83f869a51feab3e19ab7a9e7756adc8aa103e995a64913f1ed9
- MD5 6d8a9cc6f56a598a35a9a61b672f62c4
- SHA1 5cb04f893de7abaf95954a6c6bab9ebafd671f27
- SHA512 3af8b4eb00a0155ec44491185b16c7dbc5da43c0c544927172900a22d68cfc88235e5a69d9e9b2d2d0c57a89e1798980104e171cb7f5aaf8762dbd3481103a92
- SSDEEP 3072:iLsFuh3JmB8xVXE7YXEfgQZaDMN8DDiEfugwoulh15ce4M+UwsPYXCZPb7Ufq3wy:igFjss86Os/i2
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_es.qm
- SHA256 4ffda56ba3bb5414ab0482d1dde64a6f226e3488f6b7f3f11a150e01f53fa4c8
- MD5 c7c58a6d683797bfdd3ef676a37e2a40
- SHA1 809e580cdbf2ffda10c77f8be9bac081978c102b
- SHA512 c5aed1a1aa13b8e794c83739b7fddeafd96785655c287993469f39607c8b9b0d2d8d222ecd1c13cf8445e623b195192f64de373a8fb6fe43743baf50e153cda5
- SSDEEP 1536:JVwzuvb+Ta64KQd84arHX5pxiVhA8QlOD/BnFNa8NsvsfFsfcoZtIx6F:JVwSTG4KqVaLX5pEVK7OJFczstgRtIx8
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_fa.qm
- SHA256 f78e59b5bdd586181a999034ba418868ed17fe9c05707fb65e523f70e92253d2
- MD5 b4222dd74c92c888a7c25dc42e989d83
- SHA1 b0adbe950790924242806f671712c57b584b58fb
- SHA512 e7f048a7dab56ffd6c0f316962684c01c86c3c7c1d516d71b6a23ed0fc00a04ba5dda919321697eb81290acbb9984de97bae0170f54c5880873741fcd23e68a0
- SSDEEP 1536:p0hbtxBPlwdOgOP6RT9MnrtrnfpSglHPPkzF0BGF8APbyuQQdJFK:ehZxXLgK6RGnrtNVlHPcp9hOurdLK
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_fi.qm
- SHA256 e47fe13713e184d07fa4495dde0c589b0e8f562e91574a3558a9363443a4fa72
- MD5 8472cf0bf6c659177ad45aa9e3a3247c
- SHA1 7b5313cda126bb7863001499fb66fb1b56c255fc
- SHA512 de36a1f033bd7a4d6475681edc93cc7b0b5dcb6a7051831f2ee6f397c971b843e1c10b66c4fb2eff2a23dc07433e80fbf7b95e62c5b93e121ab5ad88354d9cb8
- SSDEEP 3072:lvdTgO2Yl97ZWnbgTLt/Tf9IlqAeiy5uWkYGM0wNCdRjSK2YUlUs:lvdkA9vh5uWkY0MK2YXs
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_fr.qm
- SHA256 314243a55c32679ad473fdfe48dc7d66e973ad0fc8bf2164480c58dddb50c1a7
- MD5 aa1140597635ff68d264f274c0f38b87
- SHA1 170839a937a77c588614fdf31063c165ddc16b86
- SHA512 9be7efa11fcc0c27009b4db08483141ac0d35e10e844550416c090ba863995107b60f4f8b0166fbd5932e4c02eebb67981d64564085143ceb5ba80dab275f3d1
- SSDEEP 1536:YqXh2acowfpfcvgCZwmGPIDeirKTrig+sj7irWa:YsYacowxfc4KwmbC1CJGgWa
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_gd.qm
- SHA256 63b439dd44139aa3aed54c2ebe03fa9bc77f22c14ed8fba8eff2608445bb233d
- MD5 eb1fb93b0be51c2ad78fc7ba2f8b9f42
- SHA1 24f7ff809e2f11c579cd388fea5a4c552ff8d4d0
- SHA512 e13770aef33b6666ed7d54e03ee20ca291d4167d673ba6c61d8e64cdd5f7ffe0a9521b95af67be719bf263932ecf16e2b2d0b5f3404f9bcd7879114fcc6fc474
- SSDEEP 1536:SiaI3C87jhakhR0VGkw7ys7CskUH6y4e6IFB4xyMuhvDnJGhFaCo527arBbm07LZ:S2yGjh17yGqxTXhvQoejJd8FUjVgk
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_he.qm
- SHA256 e1ebca16afe8994356f81ca007fbdb9ddf865842010fe908923d873b687cad3f
- MD5 deaf87d45ee87794ab2dc821f250a87a
- SHA1 db39c6baa443aa9bb208043ef7fb7e3403c12d90
- SHA512 276fce81249effe19e95607c39f9acb3a4afa3f90745da21b737a03fea956b079bca958039978223fd03f75ac270ec16e46095d0c6dda327366c948ec2d05b9c
- SSDEEP 3072:XSue8Z7T3iJsqBejt/zNHSLzdetY2ZISfC/S:XSueK3w7Ijt8zUtYAISfC/S
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_hr.qm
- SHA256 bb9eec9a9a652c1340dc75eb2e749be50df00f885b3d6900dfc76799c45b244d
- MD5 8799d8cc6739637c9859e981db122a6e
- SHA1 c95a416388521ef5bdb3ee5d11e9dcd4ce22ebbd
- SHA512 332d2ee630c5bbaa28bd49307f3d36fcac0d025c7ce3ae33e7179cd7e030efee04c569c1fa9fa8e339404ef63d45d57fb425615e5d7bb6d0c7b1e40c6b4bf264
- SSDEEP 3072:c5s0kXuz8fKXjSE/21DZVRtaKSfReeo4McCn/Xw9sufWB4Elq7Flcfrc+R:6+oC/fq8R
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_hu.qm
- SHA256 c61b67bb9d1e84f0ab0792b6518fe055414a68e44d0c7bc7c862773800fa8299
- MD5 e9d302a698b9272bda41d6de1d8313fb
- SHA1 bbf35c04177cf290b43f7d2533be44a15d929d02
- SHA512 12947b306874cf93aba64bb46fac48179c2d055e770d41af32e50fffb9f0c092f583afcea8b53fe9e238ef9370e9fffbeb581270dfa1a7cb74ebe54d9bff459f
- SSDEEP 3072:BmOMZadV9n51xXeQvjOiIzz7/Vs9Db3ihuJNvMfWxBNlYzYbTrIkfwb03l24cNKu:HkWa5pg0MahBHDd
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_it.qm
- SHA256 7808ed542a7833c4bd94ec8bdfbbca00bb4f2fe15979b9121ce3249323687300
- MD5 19dbf4aad2cce123cdc9ecf5f12ab4a1
- SHA1 98ad7a889db2059d3079b0335f9bf18de81f035e
- SHA512 8c4b63a515c80283a20ac2a992b565ec5ac6666fa307075216a90cab47f9823f611279c6543d69902c385a1447e37280fbe0ec8cab97a1403f5b51ba8441c015
- SSDEEP 1536:E/FKffdO4BKJb0td5pqCOIUPdPFIM7gxGQ9sRrFM6QJ4m8ihkM:E/F8FO4BKJb0td5pnOr1Cqg9mRK4IkM
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_ja.qm
- SHA256 2b9581c69b975f59be505b127cd3c19d403ef3d12e0e8386fb97238223e9c1df
- MD5 11d3d147bed6c705801c82c69948f304
- SHA1 35848337b5f0a4b33ba3929a4d93dd09a2fa4170
- SHA512 9215953bc7ea5141e04a6656726af5592388961294da1910ffeb21da5aef4d6719c74f65e4fe3d29d0090ee6dc390728d45b402e8f99e398642a998f0e6c4ad5
- SSDEEP 1536:9NmR3BJ26c1Z7f25pVmuLXpxfqt7FEUWNifQje9kWI23pKXvx:9q3BJ01Z7u5pQuLbESUWNcAAI23pKfx
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_ko.qm
- SHA256 0179ed1b136e1cb3f583351eaa2c545ba3d83a6ee3f82c32505926a1a5f5f183
- MD5 082e361cbac2e3a0849f87b76ef6e121
- SHA1 f10e882762dcd2e60041bdd6cc57598fc3df4343
- SHA512 f378a42116924e30fa0b8fff1d3c3cb185dc35b2746dce2818be7c2aa95c5de103df44aac74da969c36c557f1d4de42ac7647ec41066247f8ad2697bded667ea
- SSDEEP 1536:rvTy18hhPekHs1iNXVExWbStnn8TExgkYOvYejZOvXx4Mmf0MwUL8smk/pDZyy:y18hJ61nMStnn8TOgknQRLWZmkxNyy
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_lv.qm
- SHA256 846e047573ae40c83671c3ba7f73e27efc24b98c82701da0df9973e574178bb2
- MD5 bd8bdc7bbdb7a80c56dcb61b1108961d
- SHA1 9538c4d8bb9a95c0d9dc57c7708a99dd53a32d1f
- SHA512 f040ec410ebfea21145f944e71adcae8e5f60907d1d3716a937a9a59a48f70c6b7eaac91c2c554f59357a7bc820cdbd17c73a4decc20b51f68eb79edd35c5554
- SSDEEP 3072:y5pmbKIhooMbGe91MrjOhmGzP6LJbWz5XIxELpU6:yObeqrjPGzeJyJLy6
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_nl.qm
- SHA256 f61513bcdbb6ad800585f9437a95d018aab17fa12ee414aa31462ff279d8240e
- MD5 5034443529b94a017f63aadcf4be76a3
- SHA1 5cce892cd7ed9243b0b57923ee92c79ad626153b
- SHA512 7085718a81418ce18c8bea2c1a8f5f75f55f4c001bfec1f04abb73be1d37ef1069490ee9c99610dda7597c170135a17dd58290082225558101ccebd148261079
- SSDEEP 3072:qufM3bk4pXtXJB/Pz9DLjlrIQatXqRIqv5C5PwhgwIbUrwiCqT0voFN:TE3ljncQl35N
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_nn.qm
- SHA256 983734b40aa4d250421ba0d1614416cb8b424d6f140f4a7dbf8b11e65eef63dc
- MD5 6dac3cad287cd86a5b047c3651f05be0
- SHA1 69fc47ff3a33adc23415f4f87272053998d6149a
- SHA512 2d8308a0e1b0405a2a16d2c28c0187d510bc249c7716f14cec2b1f8695232036ae0cd2684620e178f345c9b3b2ec82ad45927ad68edabb41409e0ec6eb38abb2
- SSDEEP 3072:ocFM5fgnggr7pNt4uiQjYc/giREtCSAKl8DzMm81MviqEcMIJ:9MZHY+eYc1nisJ
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_pl.qm
- SHA256 ce99032a3b0bf8abad758895cc22837088ead99fd2d2514e2d180693081cfe57
- MD5 f9475a909a0baf4b6b7a1937d58293c3
- SHA1 76b97225a11dd1f77cac6ef144812f91bd8734bd
- SHA512 8a4f1b802b6b81ff25c44251fb4a880e93e9a5fe25e36825a24bfe0efb34e764e7e1ee585d3a56554964b7921e7813c67f12d200d6e0c5eaf4bb76b064b5c890
- SSDEEP 1536:sXpestp/YIFtDT8FIWYbIJmPYuIpnmxAk6mwyJNqSm9+P:sxpTDT8FIWfJmdCmxApmbnqSm9+P
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_pt_BR.qm
- SHA256 8344f5bc333c45d37cfd425a09124eb11f12439f33737ec0b8683d04a416746e
- MD5 c9d3d4f3a7bd0b50fd7256a360026756
- SHA1 fd1373417c7e93d63c97b3be7956cd7dd80cebe9
- SHA512 294301aef9d8b1cc14dc442cc59f5e9004007ad0f2558d97c83bcab0bbac7fb40768b24fb3b2f8f75f58fc02a28447d94f9d1f2c29f4c5664a36cddf0a27c4c8
- SSDEEP 3072:3xbdpdlyy2nnN0wu3oV+4qftiDfEY3kHwlH:hbdpKNsoVhP4qH
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_ru.qm
- SHA256 3da6605668f9178d11a838c4515478084dcfb4f9cf22f99d7a92b492db9c224b
- MD5 5096ad2743bf89a334fba6a2964300d4
- SHA1 405f45361a537c7923c240d51b0ff1c46621c203
- SHA512 7b88b501792b5831426baa669138192ed94cc3f8323a3df9d5287655dc4d877706908c517ab7523ae8a283bf50b47123f13b8ae40ea2f3081c3459edc47fc8dd
- SSDEEP 1536:hn4dEJ63pdhPpy6gu5fs4MHQv6sLlxnrncF423ZL9xyuXwdcX8LZuf76CW+WeXFx:aN3pdV5fZbpItXsttRY+WSq
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_sk.qm
- SHA256 d586ae2c314074cf398417fdecb40709d5478dfeb0a67c2fe60d509ee9b59ed7
- MD5 3d60e50dcbcbd70ee699bc9b1524fcb9
- SHA1 0211b4911b5b74cc1a46c0fca87d3bf5632aa44a
- SHA512 f98211867f1dbcb8a342c00e23fa5718be6e999f7449cb8470b41bf0f527c7f78cc4d6666e28968f32e96026907156753979bfada7e6bf4225d02a902d24906d
- SSDEEP 3072:roXDuC1u/2lUBGjJirE5tsd/aev1GIfOdvhw:OucMGjH5tbm
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_tr.qm
- SHA256 6a0bf6e70e7920c2b193e76e92f78f315936955d3b06ac039d917f2e06c43281
- MD5 6cbc5d8e1eabec96c281065ecc51e35e
- SHA1 4e1e6ba3772428227cb033747006b4887e5d9ad1
- SHA512 ce1f9ee180176153d5f523d71e0db06f4dea65c24e5e2cd56341cfaee349a8e9a0f606d99f7219a35dd4516d1528c90aea4bb87548a55392b8f2b36164d478b1
- SSDEEP 3072:yRRhAFCvqDBitD/iDG9AOH+l4TcwZBPqHo9fd9CFRK+2IKAimxsjucV2p0ZqvRu7:yRRHs5mksWVX3lA3
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_uk.qm
- SHA256 51b8ff55b37dc5907d637a8ddda12fbe816852b0244c74eb4f0fb84867a786e0
- MD5 d6234e4e21021102b021744d5fa22346
- SHA1 63a14327d0cf0941d6d6b58bfa7e8b10337f557b
- SHA512 37d24a092c5f29bacb7a4ca8207c4eefd0f073b7e74a492402867f758084091bf1d79d2ba2b4a28b35fef42e8023c371fde97578f74bb2033551154e77102de6
- SSDEEP 1536:jXwjFVUDdMUD4TzdAhpQgO5poZHvJllEnhmdK4I77/dnPJX/imfb1jhvv3BxT8ue:jBzD4Tzaw5pCvJ8hVPdlvj3p8
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_zh_CN.qm
- SHA256 98fd4b97dbec8af5cdd15f85a16c33efc77301b1aeb0469daafc04b9ab2f3570
- MD5 4c8a57b5405b7cfea0a5a98362dd3b2d
- SHA1 3561f95f646b2172d2e870973b6d81e983ed00a6
- SHA512 8bf1c1e01a10f356ab775cc96ead12f6981349ebfacb9f5f1a2337058b4745faad4361f054884ec3cdaa005ad3a4a85920ba47b16b73851200bc604d4311e3b1
- SSDEEP 1536:axTFoXJaVZyqPtoMaOBlmxTRnYtKi0mqElZ1djWIWTcc8Z:axi6yqPe/OBlyTRYYvmbxbc8Z
- MD5 SHA1 SHA512 SSDEEP
translations/qtbase_zh_TW.qm
- SHA256 21012b2b427f8d09d31ce9cae582ca27955b478ca3dc2ec18a3068d808638c6a
- MD5 ca0a16eb14d6c36a0ea90a4d4ca3832e
- SHA1 62f789e8fa0c13c5fd4fe250576bf45b07c85781
- SHA512 94094ef2fe663d752311777660730bdd3c44627b816aa973424b780e90efdae5ed49d3a1e2df6c513f1810f69876906c147772ce9c986b326ff65fef6c148700
- SSDEEP 3072:59WqMP10JBOs6ZcFOsJoYqaWFzerP5P8pa:3wAYs6uFOEor/x28pa
- MD5 SHA1 SHA512 SSDEEP
uninst.exe
- IMPHASH 9dda1a1d1f8a1d13ae0297b47046b26e
- SHA256 c917c60b1bb35ed4677b1631c3b06574fc034fd45ed901051545396ff74a783c
- MD5 f32962b1f79d5132fff8267a04b9c46c
- SHA1 d7886c2c455b72259281a768bb9d149a1aa44eb7
- SHA512 fcc1fad8532eb5c94953a7ed3235de29f83732ed62db5b326c758711610d89befb0cca213a2f3bb15768530ddb3fb2a4483ee1bc9cdec51c5841a6998aebe170
- SSDEEP 3072:dnPdzuK8Jdw4TMJw3uXceAu3qPgn2yiG01NiP9roOVkMVoIq5X7o:dnPdudwDzmuPn2yimP99lxn
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13893
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
RegEnumValueW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyExW
RegCreateKeyExW
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW
ShellExecuteExW
ole32
CoCreateInstance
OleUninitialize
OleInitialize
IIDFromString
CoTaskMemFree
comctl32
ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_Create
user32
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
CreatePopupMenu
AppendMenuW
TrackPopupMenu
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
IsWindowEnabled
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CharPrevW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
CharNextA
wsprintfA
DispatchMessageW
CreateWindowExW
PeekMessageW
GetSystemMetrics
gdi32
GetDeviceCaps
SetBkColor
SelectObject
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
kernel32
RemoveDirectoryW
lstrcmpiA
GetTempFileNameW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
WriteFile
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
CreateFileW
GetTickCount
Sleep
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
MulDiv
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
CopyFileW
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=163, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/FindProcDLL.dll
- IMPHASH 0cd94af3a016a5de4ab9a5a9a02d4173
- SHA256 c0948b2ec36a69f82c08935fac4b212238b6792694f009b93b4bdb478c4f26e3
- MD5 b4faf654de4284a89eaf7d073e4e1e63
- SHA1 8efcfd1ca648e942cbffd27af429784b7fcf514b
- SHA512 eef31e332be859cf2a64c928bf3b96442f36fe51f1a372c5628264a0d4b2fc7b3e670323c8fb5ffa72db995b8924da2555198e7de7b4f549d9e0f9e6dbb6b388
- MD5 SHA1 SHA512
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalFree
lstrcpyW
CloseHandle
Sleep
GetExitCodeProcess
WaitForSingleObject
TerminateProcess
GetLongPathNameW
lstrcmpiW
QueryDosDeviceW
GetLogicalDriveStringsW
lstrlenW
OpenProcess
GetCurrentProcessId
GetProcAddress
LoadLibraryW
GetVersionExW
FindProc
KillProc
WaitProcEnd
WaitProcStart
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
196B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
$PLUGINSDIR/LangDLL.dll
- IMPHASH fe3375e7e4529b73ba45ab2246b9269b
- SHA256 32230128c18574c1e860dfe4b17fe0334f685740e27bc182e0d525a8948c9c2e
- MD5 50016010fb0d8db2bc4cd258ceb43be5
- SHA1 44ba95ee12e69da72478cf358c93533a9c7a01dc
- SHA512 ed4cf49f756fbf673449dca20e63dce6d3a612b61f294efc9c3ccebeffa6a1372667932468816d3a7afdb7e5a652760689d8c6d3f331cedee7247404c879a233
- SSDEEP 48:S46+/pTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8m/ofjLl:zbuPbO5tCZBVEAWyMEFv2CmCL
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5439
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalFree
lstrlenW
GlobalAlloc
lstrcmpW
GetModuleHandleW
MulDiv
lstrcpyW
lstrcpynW
user32
SetWindowTextW
SetDlgItemTextW
SendDlgItemMessageW
EndDialog
DialogBoxParamW
LoadIconW
SendMessageW
ShowWindow
GetDC
gdi32
CreateFontIndirectW
GetDeviceCaps
DeleteObject
LangDialog
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
681B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
352B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
352B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=23, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/System.dll
- IMPHASH 509a34b3a68a773e0afb4259e68f9f82
- SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
- MD5 4add245d4ba34b04f213409bfe504c07
- SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
- SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
- SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10879
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAlloc
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError
user32
wsprintfW
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
867B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
662B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/UAC.dll
- IMPHASH 0ef725341a4aecf8398c0e2132f38049
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10632
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
SetLastError
GetCurrentProcessId
GetCommandLineW
GetProcAddress
CreateThread
GlobalFree
LoadLibraryA
OpenProcess
GlobalAlloc
CreateFileMappingW
Sleep
MapViewOfFile
GetModuleHandleW
UnmapViewOfFile
CreateEventW
SetCurrentDirectoryW
GetVersionExW
GetExitCodeProcess
lstrcatW
LocalFree
GetPrivateProfileStringW
FormatMessageW
GetPrivateProfileIntW
CreateProcessW
CloseHandle
GetLastError
DuplicateHandle
GetCurrentThreadId
lstrlenW
SetEvent
WaitForSingleObject
lstrcmpiW
GetExitCodeThread
GetModuleFileNameW
user32
SetWindowPos
GetClientRect
GetWindowThreadProcessId
SetWindowLongW
DefWindowProcW
GetDlgItem
CallWindowProcW
CallNextHookEx
GetClassNameW
PeekMessageW
DestroyWindow
SendMessageW
SetForegroundWindow
IsWindowVisible
MsgWaitForMultipleObjects
LoadStringW
EndDialog
EnableWindow
DialogBoxParamW
LoadImageW
MessageBoxW
GetWindowLongW
DispatchMessageW
ShowWindow
wsprintfW
CreateDialogParamW
GetWindowRect
IsDialogMessageW
FindWindowExW
CharNextW
CreateWindowExW
LoadIconW
PostMessageW
SetWindowsHookExW
UnhookWindowsHookEx
TranslateMessage
shell32
ShellExecuteExW
advapi32
OpenServiceW
QueryServiceStatus
CloseServiceHandle
OpenProcessToken
OpenSCManagerW
GetUserNameW
AdjustTokenPrivileges
LookupPrivilegeValueW
GetTokenInformation
EqualSid
ole32
CoInitialize
_
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=123, productName=VS2005 build 50727, version=50727,
count=83, id=1, productName=Unmarked objects,
count=3, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
$PLUGINSDIR/modern-header.bmp
- SHA256 766a893fe962aefd27c574cb05f25cf895d3fc70a00db5a6fa73d573f571aefc
- MD5 940c56737bf9bb69ce7a31c623d4e87a
- SHA1 f2f3b4e7b9c28df6687ceeaed300a793e3bac445
- SHA512 81c60431619d7eb826b8da997c227c4f7077cc754caa15df6e0e7ae0e33690432bc2a27a7e295998f15e33a17b3d80e492d7cc09fd70dc43daf1cfe86b8746ff
- SSDEEP 192:TYw3C/LSnMoejFXnknIHbGoijTr3dBZ9KPPsnY/T0x9j:TY3LSnlepnknIHKoUrdBZ9uPsY/Ix9j
- MD5 SHA1 SHA512 SSDEEP
$PLUGINSDIR/nsisFirewallW.dll
- IMPHASH 18ecfc7436b69f8c13ec22664f9f1857
- SHA256 53be5716ad80945cb99681d5dbda60492f5dfb206fbfdb776b769b3eeb18d2c2
- MD5 f5bf81a102de52a4add21b8a367e54e0
- SHA1 cf1e76ffe4a3ecd4dad453112afd33624f16751c
- SHA512 6e280a75f706474ad31b2ce770fa34f54cb598528fac4477c466200a608b79c0f9b84011545595d9ba94331ad08e2f51bd42de91f92379db27686a28ba351256
- SSDEEP 96:8SMPv+eLDUDp+weLv2lstU+0IgNB2Aa20kdArfOwJKbFrMiRsuHdRYL:wnxLDUwp6sgN2RDrzJMMmsuYL
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6903
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalFree
lstrcpyW
lstrcpynW
GlobalAlloc
InterlockedDecrement
LocalFree
user32
wsprintfW
ole32
OleRun
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
GetErrorInfo
SysFreeString
SysAllocString
msvcrt
free
_adjust_fdiv
malloc
_initterm
_CxxThrowException
??2@YAPAXI@Z
??3@YAXPAX@Z
??1type_info@@UAE@XZ
__CxxFrameHandler
AddAuthorizedApplication
RemoveAuthorizedApplication
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
324B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
546B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=11, version=8047,
count=3, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=11, version=8798,
count=9, id=93, version=2179,
count=35, id=1, productName=Unmarked objects,
count=1, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,