Patch[.]rar | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

Patch.rar
Size

322KB
MD5

03932286baee46ff24dd0d50ee09f1d5
SHA1

3401e4cd88fd7cf0368b642868a53afcd7416257
SHA256

5d792dd4ef4632c415479c456fe910b58f4d08c7dc82448e096ca7b4ed919dd6
SHA512

fdc81d23d9c5bbf5c7e29dc76dafe8add33dfa9b0c5f871eadf560022e5a6eee873ce84a667028fd46f573ebf8475c9dd0711912d8e1ca87655099574d2bfd5b
SSDEEP

6144:fPjSOEfw5EpL4AH/pRJsqjzDvBQrIymcrtco3k06j1+yJ50GWTr:fPjSOkw5EZ42Ruq/DvWsymcrt3Ak+56

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Patch.exe
unpack001/network.dll

Files

Patch.rar
.rar
Patch.exe
.exe windows:5 windows x86 arch:x86

dc73a9bd8de0fd640549c85ac4089b87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempPathA
LoadLibraryA
LoadResource
RtlMoveMemory
SizeofResource
VirtualAlloc
lstrcatA
CloseHandle
CreateFileA
FlushFileBuffers
WriteFile

Sections

.text
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
network.dll
.dll windows:6 windows x64 arch:x64

5fb3c6f8122769c5c4eeac1f66996ceb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Topaz\topaz-build-agent\_work\3\b\build\network\network.pdb

Imports

imagedata

?imwrite@ImageData@@QEBA_NAEBVQString@@@Z

qt6qml

??1QQmlModuleRegistration@@QEAA@XZ
??0QQmlModuleRegistration@@QEAA@PEBDP6AXXZ@Z
?qmlRegisterModule@@YAXPEBDHH@Z
?qmlregister@QQmlPrivate@@YAHW4RegistrationType@1@PEAX@Z
?qdeclarativeelement_destructor@QQmlPrivate@@YAXPEAVQObject@@@Z

qt6network

?error@QNetworkReply@@QEBA?AW4NetworkError@1@XZ
?staticMetaObject@QNetworkAccessManager@@2UQMetaObject@@B
?supportedSchemes@QNetworkAccessManager@@UEBA?AV?$QList@VQString@@@@XZ
?qt_metacast@QNetworkAccessManager@@UEAAPEAXPEBD@Z
?qt_metacall@QNetworkAccessManager@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?metaObject@QNetworkAccessManager@@UEBAPEBUQMetaObject@@XZ
?createRequest@QNetworkAccessManager@@MEAAPEAVQNetworkReply@@W4Operation@1@AEBVQNetworkRequest@@PEAVQIODevice@@@Z
?downloadProgress@QNetworkReply@@QEAAX_J0@Z
?request@QNetworkReply@@QEBA?AVQNetworkRequest@@XZ
?finished@QNetworkAccessManager@@QEAAXPEAVQNetworkReply@@@Z
?setTransferTimeout@QNetworkAccessManager@@QEAAXH@Z
?deleteResource@QNetworkAccessManager@@QEAAPEAVQNetworkReply@@AEBVQNetworkRequest@@@Z
?put@QNetworkAccessManager@@QEAAPEAVQNetworkReply@@AEBVQNetworkRequest@@AEBVQByteArray@@@Z
?post@QNetworkAccessManager@@QEAAPEAVQNetworkReply@@AEBVQNetworkRequest@@AEBVQByteArray@@@Z
?get@QNetworkAccessManager@@QEAAPEAVQNetworkReply@@AEBVQNetworkRequest@@@Z
?head@QNetworkAccessManager@@QEAAPEAVQNetworkReply@@AEBVQNetworkRequest@@@Z
??1QNetworkAccessManager@@UEAA@XZ
??0QNetworkAccessManager@@QEAA@PEAVQObject@@@Z
?setAttribute@QNetworkRequest@@QEAAXW4Attribute@1@AEBVQVariant@@@Z
?attribute@QNetworkRequest@@QEBA?AVQVariant@@W4Attribute@1@AEBV2@@Z
?setRawHeader@QNetworkRequest@@QEAAXAEBVQByteArray@@0@Z
?hasRawHeader@QNetworkRequest@@QEBA_NAEBVQByteArray@@@Z
?setHeader@QNetworkRequest@@QEAAXW4KnownHeaders@1@AEBVQVariant@@@Z
??1QNetworkRequest@@QEAA@XZ
??0QNetworkRequest@@QEAA@AEBVQUrl@@@Z
?attribute@QNetworkReply@@QEBA?AVQVariant@@W4Attribute@QNetworkRequest@@@Z
?staticMetaObject@QNetworkReply@@2UQMetaObject@@B

qt6core

?constData@QByteArray@@QEBAPEBDXZ
?append@QByteArray@@QEAAAEAV1@AEBV1@@Z
?fromBase64@QByteArray@@SA?AV1@AEBV1@V?$QFlags@W4Base64Option@QByteArray@@@@@Z
?toLower@QString@@QEHAA?AV1@XZ
?split@QString@@QEBA?AV?$QList@VQString@@@@AEBV1@V?$QFlags@W4SplitBehaviorFlags@Qt@@@@W4CaseSensitivity@Qt@@@Z
?toUtf8@QString@@QEGBA?AVQByteArray@@XZ
?toUtf8@QString@@QEHAA?AVQByteArray@@XZ
??9QString@@QEBA_NPEBD@Z
?toStdString@QString@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??0QVariant@@QEAA@$$QEAV0@@Z
?toLongLong@QVariant@@QEBA_JPEA_N@Z
?toMap@QVariant@@QEBA?AV?$QMap@VQString@@VQVariant@@@@XZ
?hash@QCryptographicHash@@SA?AVQByteArray@@VQByteArrayView@@W4Algorithm@1@@Z
?daysTo@QDate@@QEBA_JV1@@Z
?currentDate@QDate@@SA?AV1@XZ
?fromString@QDate@@SA?AV1@AEBVQString@@W4DateFormat@Qt@@@Z
??0QDateTime@@QEAA@XZ
??1QDateTime@@QEAA@XZ
?setSecsSinceEpoch@QDateTime@@QEAAX_J@Z
?secsTo@QDateTime@@QEBA_JAEBV1@@Z
?currentDateTime@QDateTime@@SA?AV1@XZ
??6@YA?AVQDebug@@V0@AEBVQDateTime@@@Z
??1QJsonValue@@QEAA@XZ
?toString@QJsonValue@@QEBA?AVQString@@XZ
??1QJsonDocument@@QEAA@XZ
?toVariant@QJsonDocument@@QEBA?AVQVariant@@XZ
?fromJson@QJsonDocument@@SA?AV1@AEBVQByteArray@@PEAUQJsonParseError@@@Z
?isEmpty@QJsonDocument@@QEBA_NXZ
?object@QJsonDocument@@QEBA?AVQJsonObject@@XZ
?isNull@QJsonDocument@@QEBA_NXZ
??6@YA?AVQDebug@@V0@AEBVQJsonDocument@@@Z
??1QJsonObject@@QEAA@XZ
?value@QJsonObject@@QEBA?AVQJsonValue@@AEBVQString@@@Z
?contains@QJsonObject@@QEBA_NAEBVQString@@@Z
??6@YA?AVQDebug@@V0@AEBVQJsonObject@@@Z
?setListData@SegmentStorage@QVersionNumber@@QEAAXAEBV?$QList@H@@@Z
?segments@QVersionNumber@@QEBA?AV?$QList@H@@XZ
?compare@QVersionNumber@@SAHAEBV1@0@Z
?fromString@QVersionNumber@@SA?AV1@VQAnyStringView@@PEA_J@Z
??6@YA?AVQDebug@@V0@AEBVQVersionNumber@@@Z
??0QDate@@QEAA@HHH@Z
??0QJsonValue@@QEAA@AEBVQString@@@Z
?toInt@QJsonValueRef@@QEBAHH@Z
?toString@QJsonValueRef@@QEBA?AVQString@@AEBV2@@Z
?toArray@QJsonValueRef@@QEBA?AVQJsonArray@@XZ
?toObject@QJsonValueRef@@QEBA?AVQJsonObject@@XZ
??9QJsonValueRef@@QEBA_NAEBVQJsonValue@@@Z
?begin@QJsonArray@@QEAA?AViterator@1@XZ
?end@QJsonArray@@QEAA?AViterator@1@XZ
??AQJsonObject@@QEAA?AVQJsonValueRef@@AEBVQString@@@Z
??0QChar@@QEAA@_S@Z
?toHex@QByteArray@@QEBA?AV1@D@Z
?arg@QString@@QEBA?AV1@AEBV1@HVQChar@@@Z
?fromUtf8@QString@@SA?AV1@VQByteArrayView@@@Z
??YQString@@QEAAAEAV0@PEBD@Z
?addQueryItem@QUrlQuery@@QEAAXAEBVQString@@0@Z
?toString@QUrl@@QEBA?AVQString@@V?$QUrlTwoFlags@W4UrlFormattingOption@QUrl@@W4ComponentFormattingOption@2@@@@Z
?isEmpty@QUrl@@QEBA_NXZ
?toPercentEncoding@QUrl@@SA?AVQByteArray@@AEBVQString@@AEBV2@1@Z
??4QVariant@@QEAAAEAV0@$$QEAV0@@Z
??0QCalendar@@QEAA@XZ
?toString@QDateTime@@QEBA?AVQString@@AEBV2@VQCalendar@@@Z
?currentDateTimeUtc@QDateTime@@SA?AV1@XZ
?currentSecsSinceEpoch@QDateTime@@SA_JXZ
?toString@QUuid@@QEBA?AVQString@@W4StringFormat@1@@Z
?createUuid@QUuid@@SA?AV1@XZ
??0QCryptographicHash@@QEAA@W4Algorithm@0@@Z
??1QCryptographicHash@@QEAA@XZ
?addData@QCryptographicHash@@QEAA_NPEAVQIODevice@@@Z
?result@QCryptographicHash@@QEBA?AVQByteArray@@XZ
??0QJsonValue@@QEAA@_J@Z
??0QJsonValue@@QEAA@PEBD@Z
??0QJsonValue@@QEAA@AEBVQJsonArray@@@Z
??0QJsonValue@@QEAA@AEBVQJsonObject@@@Z
??0QJsonValue@@QEAA@$$QEAVQJsonObject@@@Z
?type@QJsonValue@@QEBA?AW4Type@1@XZ
?toObject@QJsonValue@@QEBA?AVQJsonObject@@XZ
??0QJsonDocument@@QEAA@AEBVQJsonObject@@@Z
?toJson@QJsonDocument@@QEBA?AVQByteArray@@W4JsonFormat@1@@Z
?isObject@QJsonDocument@@QEBA_NXZ
??0QJsonObject@@QEAA@XZ
?fromVariantMap@QJsonObject@@SA?AV1@AEBV?$QMap@VQString@@VQVariant@@@@@Z
?toVariantMap@QJsonObject@@QEBA?AV?$QMap@VQString@@VQVariant@@@@XZ
?insert@QJsonObject@@QEAA?AViterator@1@AEBVQString@@AEBVQJsonValue@@@Z
??0QJsonArray@@QEAA@V?$initializer_list@VQJsonValue@@@std@@@Z
??1QMimeType@@QEAA@XZ
?name@QMimeType@@QEBA?AVQString@@XZ
??0QMimeDatabase@@QEAA@XZ
??1QMimeDatabase@@QEAA@XZ
?mimeTypeForFile@QMimeDatabase@@QEBA?AVQMimeType@@AEBVQString@@W4MatchMode@1@@Z
??0QFile@@QEAA@AEBVQString@@@Z
??1QFile@@UEAA@XZ
?open@QFile@@UEAA_NV?$QFlags@W4OpenModeFlag@QIODeviceBase@@@@@Z
?tempPath@QDir@@SA?AVQString@@XZ
??0QTemporaryFile@@QEAA@AEBVQString@@@Z
??1QTemporaryFile@@UEAA@XZ
??0QByteArray@@QEAA@PEBD_J@Z
?number@QByteArray@@SA?AV1@_JH@Z
?length@QString@@QEBA_JXZ
?toLatin1@QString@@QEGBA?AVQByteArray@@XZ
?number@QString@@SA?AV1@HH@Z
?append@QString@@QEAAAEAV1@PEBD@Z
??6QDebug@@QEAAAEAV0@AEBVQByteArray@@@Z
?deleteLater@QObject@@QEAAXXZ
?toByteArray@QVariant@@QEBA?AVQByteArray@@XZ
?toList@QVariant@@QEBA?AV?$QList@VQVariant@@@@XZ
?peek@QIODevice@@QEAA?AVQByteArray@@_J@Z
?errorString@QIODevice@@QEBA?AVQString@@XZ
?currentCpuArchitecture@QSysInfo@@SA?AVQString@@XZ
?lengthHelperCharArray@QByteArrayView@@CA_JPEBD_K@Z
??0QByteArrayView@@QEAA@XZ
??8QByteArray@@QEBA_NAEBVQString@@@Z
?fromStdString@QString@@SA?AV1@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?fileName@QUrl@@QEBA?AVQString@@V?$QFlags@W4ComponentFormattingOption@QUrl@@@@@Z
??0QVariant@@QEAA@AEBVQByteArray@@@Z
?write@QIODevice@@QEAA_JAEBVQByteArray@@@Z
?close@QFileDevice@@UEAAXXZ
?exists@QFile@@QEBA_NXZ
?remove@QFile@@QEAA_NXZ
??0QFileInfo@@QEAA@AEBVQString@@@Z
??1QFileInfo@@QEAA@XZ
?fileName@QFileInfo@@QEBA?AVQString@@XZ
?absolutePath@QFileInfo@@QEBA?AVQString@@XZ
??0QDir@@QEAA@AEBVQString@@@Z
??1QDir@@QEAA@XZ
?filePath@QDir@@QEBA?AVQString@@AEBV2@@Z
??1QUrlQuery@@QEAA@XZ
?root@QDir@@SA?AV1@XZ
??0QMessageAuthenticationCode@@QEAA@W4Algorithm@QCryptographicHash@@VQByteArrayView@@@Z
??1QMessageAuthenticationCode@@QEAA@XZ
?setKey@QMessageAuthenticationCode@@QEAAXVQByteArrayView@@@Z
?addData@QMessageAuthenticationCode@@QEAAXVQByteArrayView@@@Z
?result@QMessageAuthenticationCode@@QEBA?AVQByteArray@@XZ
?current@QOperatingSystemVersion@@SA?AV1@XZ
?majorVersion@QOperatingSystemVersion@@QEBAHXZ
?minorVersion@QOperatingSystemVersion@@QEBAHXZ
??0QProcess@@QEAA@PEAVQObject@@@Z
??1QProcess@@UEAA@XZ
?startDetached@QProcess@@SA_NAEBVQString@@AEBV?$QList@VQString@@@@0PEA_J@Z
?writableLocation@QStandardPaths@@SA?AVQString@@W4StandardLocation@1@@Z
?toBool@QJsonValue@@QEBA_N_N@Z
?toString@QJsonValue@@QEBA?AVQString@@AEBV2@@Z
?toArray@QJsonValue@@QEBA?AVQJsonArray@@XZ
??6@YA?AVQDebug@@V0@AEBVQJsonValue@@@Z
?size@QJsonArray@@QEBA_JXZ
?at@QJsonArray@@QEBA?AVQJsonValue@@_J@Z
?start@QThread@@QEAAXW4Priority@1@@Z
?createThreadImpl@QThread@@CAPEAV1@$$QEAV?$future@X@std@@@Z
??0QUrlQuery@@QEAA@XZ
?readAll@QIODevice@@QEAA?AVQByteArray@@XZ
?value@QSettings@@QEBA?AVQVariant@@VQAnyStringView@@@Z
?setValue@QSettings@@QEAAXVQAnyStringView@@AEBVQVariant@@@Z
?sync@QSettings@@QEAAXXZ
??0QSettings@@QEAA@PEAVQObject@@@Z
?toString@QVariant@@QEBA?AVQString@@XZ
?toInt@QVariant@@QEBAHPEA_N@Z
??0QVariant@@QEAA@PEBD@Z
??0QVariant@@QEAA@AEBVQString@@@Z
??0QVariant@@QEAA@H@Z
?setQuery@QUrl@@QEAAXAEBVQUrlQuery@@@Z
??0QUrl@@QEAA@AEBVQString@@W4ParsingMode@0@@Z
?connectImpl@QObject@@CA?AVConnection@QMetaObject@@PEBV1@PEAPEAX01PEAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PEBHPEBU3@@Z
??0QObject@@QEAA@PEAV0@@Z
??8QString@@QEBA_NPEBD@Z
?prepend@QString@@QEAAAEAV1@PEBD@Z
?warning@QMessageLogger@@QEBA?AVQDebug@@XZ
??4QString@@QEAAAEAV0@AEBVQByteArray@@@Z
??4QString@@QEAAAEAV0@PEBD@Z
??0QString@@QEAA@AEBVQByteArray@@@Z
??0QString@@QEAA@PEBD@Z
?append@QString@@QEAAAEAV1@V?$QBasicUtf8StringView@$0A@@@@Z
?append@QString@@QEAAAEAV1@AEBV1@@Z
?endsWith@QString@@QEBA_NAEBV1@W4CaseSensitivity@Qt@@@Z
?chopped@QString@@QEBA?AV1@_J@Z
?indexOf@QString@@QEBA_JAEBV1@_JW4CaseSensitivity@Qt@@@Z
?isEmpty@QString@@QEBA_NXZ
??1Connection@QMetaObject@@QEAA@XZ
?qgetenv@@YA?AVQByteArray@@PEBD@Z
?critical@QMessageLogger@@QEBA?AVQDebug@@XZ
?info@QMessageLogger@@QEBA?AVQDebug@@XZ
?debug@QMessageLogger@@QEBA?AVQDebug@@XZ
??0QMessageLogger@@QEAA@PEBDH0@Z
?machineHostName@QSysInfo@@SA?AVQString@@XZ
?qUnregisterResourceData@@YA_NHPEBE00@Z
?qRegisterResourceData@@YA_NHPEBE00@Z
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
??0QMetaSequence@@QEAA@XZ
?staticMetaObject@QObject@@2UQMetaObject@@B
??5@YAAEAVQDataStream@@AEAV0@AEAVQJsonArray@@@Z
??6@YAAEAVQDataStream@@AEAV0@AEBVQJsonArray@@@Z
??6@YA?AVQDebug@@V0@AEBVQJsonArray@@@Z
??8QJsonArray@@QEBA_NAEBV0@@Z
??4QJsonArray@@QEAAAEAV0@$$QEAV0@@Z
??0QJsonArray@@QEAA@$$QEAV0@@Z
??0QJsonArray@@QEAA@AEBV0@@Z
??1QJsonArray@@QEAA@XZ
??0QJsonArray@@QEAA@XZ
??1QSettings@@UEAA@XZ
??6@YAAEAVQDataStream@@AEAV0@AEBVQVariant@@@Z
??5@YAAEAVQDataStream@@AEAV0@AEAVQVariant@@@Z
?equals@QVariant@@IEBA_NAEBV1@@Z
?qdebugHelper@QVariant@@AEBA?AVQDebug@@V2@@Z
??4QVariant@@QEAAAEAV0@AEBV0@@Z
??0QVariant@@QEAA@AEBV0@@Z
??1QVariant@@QEAA@XZ
??0QVariant@@QEAA@XZ
?qt_QMetaEnum_debugOperator@@YA?AVQDebug@@AEAV1@_JPEBUQMetaObject@@PEBD@Z
??1QDebugStateSaver@@QEAA@XZ
??0QDebugStateSaver@@QEAA@AEAVQDebug@@@Z
??6QDebug@@QEAAAEAV0@AEBVQString@@@Z
??6QDebug@@QEAAAEAV0@PEBD@Z
??6QDebug@@QEAAAEAV0@_K@Z
??6QDebug@@QEAAAEAV0@_J@Z
??6QDebug@@QEAAAEAV0@H@Z
??6QDebug@@QEAAAEAV0@D@Z
??6QDebug@@QEAAAEAV0@_N@Z
??1QDebug@@QEAA@XZ
??0QDebug@@QEAA@$$QEAV0@@Z
??6@YA?AVQDebug@@V0@AEBVQUrl@@@Z
??5@YAAEAVQDataStream@@AEAV0@AEAVQUrl@@@Z
??6@YAAEAVQDataStream@@AEAV0@AEBVQUrl@@@Z
??8QUrl@@QEBA_NAEBV0@@Z
??MQUrl@@QEBA_NAEBV0@@Z
??1QUrl@@QEAA@XZ
??0QUrl@@QEAA@$$QEAV0@@Z
??0QUrl@@QEAA@AEBV0@@Z
??0QUrl@@QEAA@XZ
??1QObject@@UEAA@XZ
?qt_metacall@QObject@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QObject@@UEAAPEAXPEBD@Z
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
?unregisterMutableViewFunction@QMetaType@@SAXV1@0@Z
?registerMutableViewFunction@QMetaType@@SA_NAEBV?$function@$$A6A_NPEAX0@Z@std@@V1@1@Z
?unregisterConverterFunction@QMetaType@@SAXV1@0@Z
?registerConverterFunction@QMetaType@@SA_NAEBV?$function@$$A6A_NPEBXPEAX@Z@std@@V1@1@Z
?hasRegisteredMutableViewFunction@QMetaType@@SA_NV1@0@Z
?hasRegisteredConverterFunction@QMetaType@@SA_NV1@0@Z
?id@QMetaType@@QEBAHH@Z
??0QMetaType@@QEAA@XZ
?registerNormalizedTypedef@QMetaType@@SAXAEBVQByteArray@@V1@@Z
?isDeviceTransactionStarted@QDataStream@@QEBA_NXZ
??6QDataStream@@QEAAAEAV0@_N@Z
??6QDataStream@@QEAAAEAV0@_J@Z
??6QDataStream@@QEAAAEAV0@H@Z
??5QDataStream@@QEAAAEAV0@AEA_N@Z
??5QDataStream@@QEAAAEAV0@AEA_J@Z
??5QDataStream@@QEAAAEAV0@AEAH@Z
?resetStatus@QDataStream@@QEAAXXZ
?setStatus@QDataStream@@QEAAXW4Status@1@@Z
?status@QDataStream@@QEBA?AW4Status@1@XZ
??5@YAAEAVQDataStream@@AEAV0@AEAVQString@@@Z
??6@YAAEAVQDataStream@@AEAV0@AEBVQString@@@Z
?isNull@QString@@QEBA_NXZ
?data@QString@@QEBAPEBVQChar@@XZ
?size@QString@@QEBA_JXZ
??4QString@@QEAAAEAV0@$$QEAV0@@Z
??0QString@@QEAA@$$QEAV0@@Z
??4QString@@QEAAAEAV0@AEBV0@@Z
??1QString@@QEAA@XZ
??0QString@@QEAA@AEBV0@@Z
??0QString@@QEAA@XZ
?equalStrings@QtPrivate@@YA_NVQStringView@@0@Z
?compareStrings@QtPrivate@@YAHVQStringView@@0W4CaseSensitivity@Qt@@@Z
?isNull@QByteArray@@QEBA_NXZ
?size@QByteArray@@QEBA_JXZ
?append@QByteArray@@QEAAAEAV1@PEBD_J@Z
?append@QByteArray@@QEAAAEAV1@PEBD@Z
?append@QByteArray@@QEAAAEAV1@D@Z
?data@QByteArray@@QEBAPEBDXZ
?reserve@QByteArray@@QEAAX_J@Z
??1QByteArray@@QEAA@XZ
??0QByteArray@@QEAA@XZ
?data@QByteArrayView@@QEBAPEBDXZ
?size@QByteArrayView@@QEBA_JXZ
?castHelper@QByteArrayView@@CAPEBDPEBD@Z
?reallocateUnaligned@QArrayData@@SA?AU?$pair@PEAUQArrayData@@PEAX@std@@PEAU1@PEAX_J2W4AllocationOption@1@@Z
?allocate@QArrayData@@SAPEAXPEAPEAU1@_J11W4AllocationOption@1@@Z
?activate@QMetaObject@@SAXPEAVQObject@@PEBU1@HPEAPEAX@Z
?tr@QMetaObject@@QEBA?AVQString@@PEBD0H@Z
?className@QMetaObject@@QEBAPEBDXZ
?qBadAlloc@@YAXXZ
qt_version_tag_6_6
??4QUrl@@QEAAAEAV0@AEBV0@@Z
?mkpath@QDir@@QEBA_NAEBVQString@@@Z

aiengine

?getMachineId@SystemInfo@aiutils@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetInstance@SystemInfo@aiutils@@SAAEAV12@_N@Z

libcrypto-3-x64

EVP_PKEY_verify
EVP_PKEY_verify_init
EVP_PKEY_CTX_free
EVP_PKEY_CTX_set_rsa_padding
PEM_read_bio_PUBKEY
EVP_PKEY_CTX_set_signature_md
EVP_PKEY_free
EVP_sha256
BIO_new_mem_buf
EVP_PKEY_CTX_new

ws2_32

accept
bind
closesocket
getpeername
getsockname
listen
ntohs
recv
select
WSAStartup
send
setsockopt
shutdown
socket
WSASocketW
getaddrinfo
freeaddrinfo
getnameinfo
WSACleanup

msvcp140

?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
??Bid@locale@std@@QEAA_KXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
_Strxfrm
_Strcoll
?_Syserror_map@std@@YAPEBDH@Z
?_Xbad_function_call@std@@YAXXZ
?_Throw_Cpp_error@std@@YAXH@Z
?_Throw_C_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Cnd_unregister_at_thread_exit
_Cnd_register_at_thread_exit
_Cnd_signal
_Cnd_broadcast
_Cnd_wait
_Cnd_destroy_in_situ
_Cnd_init_in_situ
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Thrd_id
_Thrd_hardware_concurrency
_Thrd_sleep
_Thrd_join
_Query_perf_frequency
_Query_perf_counter
_Xtime_get_ticks
?_Xout_of_range@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?uncaught_exceptions@std@@YAHXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
_Mbrtowc
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
??0task_continuation_context@Concurrency@@AEAA@XZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Random_device@std@@YAIXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z

vcruntime140

__std_type_info_destroy_list
__current_exception_context
__current_exception
__C_specific_handler
strchr
__std_exception_copy
__std_type_info_compare
_purecall
memset
__std_terminate
memchr
memmove
memcpy
memcmp
__std_exception_destroy
_CxxThrowException

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_seh_filter_dll
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_invalid_parameter_noinfo_noreturn
_beginthreadex
_errno
_initterm_e
strerror
terminate
abort
_initterm
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table

api-ms-win-crt-heap-l1-1-0

free
realloc
_callnewh
malloc
calloc

api-ms-win-crt-convert-l1-1-0

strtoll
strtoul
strtoull

api-ms-win-crt-stdio-l1-1-0

fsetpos
fread
fputc
fgetpos
fgetc
fflush
fclose
_get_stream_buffer_pointers
fwrite
setvbuf
ungetc
__stdio_common_vsprintf
_fseeki64

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file
_access_s

api-ms-win-crt-string-l1-1-0

strncpy
_stricmp
isdigit
tolower

kernel32

ResumeThread
LeaveCriticalSection
Sleep
SetWaitableTimer
OpenEventA
CreateEventA
WaitForMultipleObjectsEx
ReleaseSemaphore
GetProcessHeap
HeapFree
HeapAlloc
QueryPerformanceFrequency
GetLastError
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
EnterCriticalSection
CloseHandle
InitOnceComplete
WideCharToMultiByte
CreateWaitableTimerA
FormatMessageW
FormatMessageA
LocalFree
GetModuleHandleA
GetLogicalProcessorInformation
GetSystemInfo
TlsFree
TlsSetValue
TlsGetValue
InitOnceBeginInitialize
TlsAlloc
InitializeCriticalSectionAndSpinCount

Exports

Exports

??0TAuth@@QEAA@AEBVQString@@H00_N111@Z
??0TEventTracker@@QEAA@PEAVQObject@@@Z
??0TEventTracker@@QEAA@_NPEAVQObject@@@Z
??0TNetwork@@QEAA@PEAVQObject@@@Z
??1TAuth@@UEAA@XZ
??1TEventTracker@@UEAA@XZ
??1TNetwork@@UEAA@XZ
??_7TAuth@@6B@
??_7TEventTracker@@6B@
??_7TNetwork@@6B@
??_FTEventTracker@@QEAAXXZ
??_FTNetwork@@QEAAXXZ
?abortRequest@TNetwork@@QEAA_NVQString@@@Z
?authenticate@TAuth@@QEAAXAEBV?$QMap@VQString@@VQVariant@@@@@Z
?busy@TAuth@@QEBA_NXZ
?busyChanged@TAuth@@QEAAXXZ
?checkAuth@TAuth@@AEAAXXZ
?checkForUpdates@TAuth@@QEAAX_N@Z
?checkResponse@TAuth@@AEAAXPEAVQNetworkReply@@@Z
?checkingForUpdates@TAuth@@QEBA_NXZ
?checkingForUpdatesChanged@TAuth@@QEAAXXZ
?claimedSeats@TAuth@@QEBA?AVQJsonArray@@XZ
?claimedSeatsChanged@TAuth@@QEAAXXZ
?deleteRequest@TNetwork@@QEAA?AVQString@@VQUrl@@AEBV?$QMap@VQString@@VQVariant@@@@V?$QMap@VQString@@V1@@@@Z
?deleteSeat@TAuth@@QEAAXAEBVQString@@@Z
?downloadProgress@TNetwork@@QEAAXVQString@@PEAVQNetworkReply@@_J2@Z
?email@TAuth@@QEBA?AVQString@@XZ
?emailChanged@TAuth@@QEAAXXZ
?enabledChanged@TEventTracker@@QEAAXXZ
?finishAuth@TAuth@@AEAAXW4AuthState@1@@Z
?get@TNetwork@@QEAA?AVQString@@VQUrl@@AEBV?$QMap@VQString@@VQVariant@@@@AEBV?$QMap@VQString@@V1@@@@Z
?getFriendlyName@TAuth@@AEAA?AVQString@@XZ
?getMimeType@TEventTracker@@AEBA?AVQString@@VQUrl@@@Z
?getSeats@TAuth@@AEAAXXZ
?handleNetworkError@TAuth@@AEAAXPEAVQNetworkReply@@@Z
?handleReply@TEventTracker@@QEAAXVQString@@PEAVQNetworkReply@@@Z
?head@TNetwork@@QEAA?AVQString@@VQUrl@@V?$QMap@VQString@@V1@@@@Z
?latestOwnedUpdate@TAuth@@QEBA?AV?$QMap@VQString@@VQVariant@@@@XZ
?latestOwnedUpdateChanged@TAuth@@QEAAXXZ
?licenseExpiration@TAuth@@QEBA?AVQString@@XZ
?licenseExpirationChanged@TAuth@@QEAAXXZ
?m_sessionId@TEventTracker@@0VQUuid@@B
?metaObject@TAuth@@UEBAPEBUQMetaObject@@XZ
?metaObject@TEventTracker@@UEBAPEBUQMetaObject@@XZ
?metaObject@TNetwork@@UEBAPEBUQMetaObject@@XZ
?networkError@TAuth@@QEBA?AVQString@@XZ
?networkErrorChanged@TAuth@@QEAAXXZ
?post@TNetwork@@QEAA?AVQString@@VQUrl@@AEBV2@V?$QMap@VQString@@V1@@@_N@Z
?put@TNetwork@@QEAA?AVQString@@VQUrl@@AEBV2@V?$QMap@VQString@@V1@@@_N@Z
?putFileToS3@TNetwork@@QEAA?AVQString@@VQUrl@@AEBV3@AEBV?$QMap@VQString@@VQVariant@@@@@Z
?qml_register_types_TNetwork@@YAXXZ
?qt_metacall@TAuth@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacall@TEventTracker@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacall@TNetwork@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@TAuth@@UEAAPEAXPEBD@Z
?qt_metacast@TEventTracker@@UEAAPEAXPEBD@Z
?qt_metacast@TNetwork@@UEAAPEAXPEBD@Z
?qt_static_metacall@TAuth@@CAXPEAVQObject@@W4Call@QMetaObject@@HPEAPEAX@Z
?qt_static_metacall@TEventTracker@@CAXPEAVQObject@@W4Call@QMetaObject@@HPEAPEAX@Z
?qt_static_metacall@TNetwork@@CAXPEAVQObject@@W4Call@QMetaObject@@HPEAPEAX@Z
?refresh@TAuth@@QEAAX_N@Z
?replyReceived@TAuth@@QEAAXVQString@@PEAVQNetworkReply@@@Z
?replyRecieved@TNetwork@@QEAAXVQString@@PEAVQNetworkReply@@@Z
?requestAborted@TNetwork@@QEAAXVQString@@PEAVQNetworkReply@@@Z
?requestFinished@TNetwork@@QEAAXPEAVQNetworkReply@@@Z
?reset@TAuth@@QEAAXXZ
?sendImageToS3@TEventTracker@@QEAAXAEBVQUrl@@AEBVQString@@@Z
?sendImageToS3@TEventTracker@@QEAAXV?$shared_ptr@VImageData@@@std@@AEBVQString@@@Z
?setDev@TEventTracker@@QEAAX_N@Z
?setEnabled@TEventTracker@@QEAAX_N@Z
?setMachineId@TEventTracker@@QEAAXAEBVQString@@@Z
?settingsChanged@TAuth@@QEAAXVQString@@0@Z
?state@TAuth@@QEBA?AW4AuthState@1@XZ
?stateChanged@TAuth@@QEAAXXZ
?staticMetaObject@TAuth@@2UQMetaObject@@B
?staticMetaObject@TEventTracker@@2UQMetaObject@@B
?staticMetaObject@TNetwork@@2UQMetaObject@@B
?totalSeats@TAuth@@QEBAHXZ
?totalSeatsChanged@TAuth@@QEAAXXZ
?tr@TAuth@@SA?AVQString@@PEBD0H@Z
?tr@TEventTracker@@SA?AVQString@@PEBD0H@Z
?tr@TNetwork@@SA?AVQString@@PEBD0H@Z
?track@TEventTracker@@QEBA_NAEBVQString@@AEBV?$QMap@VQString@@VQVariant@@@@@Z
?trackBacktrace@TEventTracker@@QEBA_NAEBVQString@@AEBV?$QMap@VQString@@VQVariant@@@@@Z
?updateResponseReceived@TAuth@@QEAAXAEBVTUpdateCheckerResponse@@@Z
?useCachedCredentials@TAuth@@AEAAXXZ
?writeTempFile@TEventTracker@@QEAA?AVQString@@V?$shared_ptr@VImageData@@@std@@AEBV2@@Z

Sections

.text
Size: 788KB - Virtual size: 788KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qtversi
Size: 512B - Virtual size: 275B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 795B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc73a9bd8de0fd640549c85ac4089b87

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 512B - Virtual size: 502B

.rdata Size: 512B - Virtual size: 472B

.data Size: 512B - Virtual size: 52B

.rsrc Size: 59KB - Virtual size: 58KB

.reloc Size: 512B - Virtual size: 82B

5fb3c6f8122769c5c4eeac1f66996ceb

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

imagedata

qt6qml

qt6network

qt6core

aiengine

libcrypto-3-x64

ws2_32

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-string-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 788KB - Virtual size: 788KB

.rdata Size: 170KB - Virtual size: 170KB

.data Size: 41KB - Virtual size: 44KB

.pdata Size: 42KB - Virtual size: 41KB

.idata Size: 40KB - Virtual size: 39KB

.qtversi Size: 512B - Virtual size: 275B

.tls Size: 1024B - Virtual size: 795B

.00cfg Size: 512B - Virtual size: 337B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 512B - Virtual size: 502B

.rdata
Size: 512B - Virtual size: 472B

.data
Size: 512B - Virtual size: 52B

.rsrc
Size: 59KB - Virtual size: 58KB

.reloc
Size: 512B - Virtual size: 82B

.text
Size: 788KB - Virtual size: 788KB

.rdata
Size: 170KB - Virtual size: 170KB

.data
Size: 41KB - Virtual size: 44KB

.pdata
Size: 42KB - Virtual size: 41KB

.idata
Size: 40KB - Virtual size: 39KB

.qtversi
Size: 512B - Virtual size: 275B

.tls
Size: 1024B - Virtual size: 795B

.00cfg
Size: 512B - Virtual size: 337B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 5KB