qbittorrent_4[.]6[.]4_x64_setup[.]exe

resource
qbittorrent_4.6.4_x64_setup.exe
unpack001/$PLUGINSDIR/FindProcDLL.dll
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/UAC.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsisFirewallW.dll
unpack001/qbittorrent.exe
unpack001/uninst.exe
unpack002/$PLUGINSDIR/FindProcDLL.dll
unpack002/$PLUGINSDIR/LangDLL.dll
unpack002/$PLUGINSDIR/System.dll
unpack002/$PLUGINSDIR/UAC.dll
unpack002/$PLUGINSDIR/nsisFirewallW.dll

qbittorrent_4.6.4_x64_setup.exe

IMPHASH 9dda1a1d1f8a1d13ae0297b47046b26e
SHA256 96bac43faac2b1fa5e0bc495975b2e642af5da181e313a9c8f541912b83c0edb
MD5 918224925563095d15dbab7c34b3bf17
SHA1 33902285adf411e5824547e849a4adcfc6531114
SHA512 4d6bd949693ea60671ddb8dc19ec87d8e02bf4888aca290318488ca696e495e13bf49161ac8f75cfff9befb72589ab2bedcd1138fa9d81c5bf071191d6344b28
SSDEEP 786432:7KMXiEtPqJO5MB3/UOd64S49KmFRc85C2uWF3Dzn:7DXioy0DOd6o1HtuW5/
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13893

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

RemoveDirectoryW lstrcmpiA GetTempFileNameW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW WriteFile ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize CreateFileW GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject CopyFileW

$PLUGINSDIR/FindProcDLL.dll

IMPHASH 0cd94af3a016a5de4ab9a5a9a02d4173
SHA256 c0948b2ec36a69f82c08935fac4b212238b6792694f009b93b4bdb478c4f26e3
MD5 b4faf654de4284a89eaf7d073e4e1e63
SHA1 8efcfd1ca648e942cbffd27af429784b7fcf514b
SHA512 eef31e332be859cf2a64c928bf3b96442f36fe51f1a372c5628264a0d4b2fc7b3e670323c8fb5ffa72db995b8924da2555198e7de7b4f549d9e0f9e6dbb6b388
MD5 SHA1 SHA512

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/LangDLL.dll

IMPHASH fe3375e7e4529b73ba45ab2246b9269b
SHA256 32230128c18574c1e860dfe4b17fe0334f685740e27bc182e0d525a8948c9c2e
MD5 50016010fb0d8db2bc4cd258ceb43be5
SHA1 44ba95ee12e69da72478cf358c93533a9c7a01dc
SHA512 ed4cf49f756fbf673449dca20e63dce6d3a612b61f294efc9c3ccebeffa6a1372667932468816d3a7afdb7e5a652760689d8c6d3f331cedee7247404c879a233
SSDEEP 48:S46+/pTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8m/ofjLl:zbuPbO5tCZBVEAWyMEFv2CmCL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
MD5 4add245d4ba34b04f213409bfe504c07
SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UAC.dll

IMPHASH 0ef725341a4aecf8398c0e2132f38049
SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
MD5 adb29e6b186daa765dc750128649b63d
SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10632

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetLastError GetCurrentProcessId GetCommandLineW GetProcAddress CreateThread GlobalFree LoadLibraryA OpenProcess GlobalAlloc CreateFileMappingW Sleep MapViewOfFile GetModuleHandleW UnmapViewOfFile CreateEventW SetCurrentDirectoryW GetVersionExW GetExitCodeProcess lstrcatW LocalFree GetPrivateProfileStringW FormatMessageW GetPrivateProfileIntW CreateProcessW CloseHandle GetLastError DuplicateHandle GetCurrentThreadId lstrlenW SetEvent WaitForSingleObject lstrcmpiW GetExitCodeThread GetModuleFileNameW

user32

SetWindowPos GetClientRect GetWindowThreadProcessId SetWindowLongW DefWindowProcW GetDlgItem CallWindowProcW CallNextHookEx GetClassNameW PeekMessageW DestroyWindow SendMessageW SetForegroundWindow IsWindowVisible MsgWaitForMultipleObjects LoadStringW EndDialog EnableWindow DialogBoxParamW LoadImageW MessageBoxW GetWindowLongW DispatchMessageW ShowWindow wsprintfW CreateDialogParamW GetWindowRect IsDialogMessageW FindWindowExW CharNextW CreateWindowExW LoadIconW PostMessageW SetWindowsHookExW UnhookWindowsHookEx TranslateMessage

shell32

ShellExecuteExW

advapi32

OpenServiceW QueryServiceStatus CloseServiceHandle OpenProcessToken OpenSCManagerW GetUserNameW AdjustTokenPrivileges LookupPrivilegeValueW GetTokenInformation EqualSid

ole32

CoInitialize

$PLUGINSDIR/modern-header.bmp

SHA256 766a893fe962aefd27c574cb05f25cf895d3fc70a00db5a6fa73d573f571aefc
MD5 940c56737bf9bb69ce7a31c623d4e87a
SHA1 f2f3b4e7b9c28df6687ceeaed300a793e3bac445
SHA512 81c60431619d7eb826b8da997c227c4f7077cc754caa15df6e0e7ae0e33690432bc2a27a7e295998f15e33a17b3d80e492d7cc09fd70dc43daf1cfe86b8746ff
SSDEEP 192:TYw3C/LSnMoejFXnknIHbGoijTr3dBZ9KPPsnY/T0x9j:TY3LSnlepnknIHKoUrdBZ9uPsY/Ix9j
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/nsDialogs.dll

IMPHASH 3b477381217c97b22146297f93df2a92
SHA256 4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed
MD5 1d8f01a83ddd259bc339902c1d33c8f1
SHA1 9f7806af462c94c39e2ec6cc9c7ad05c44eba04e
SHA512 28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567
SSDEEP 96:o4Ev02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YsNqkzfFc:o4EvCu5e81785qHFcU0PuAw0uyGIFc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsisFirewallW.dll

IMPHASH 18ecfc7436b69f8c13ec22664f9f1857
SHA256 53be5716ad80945cb99681d5dbda60492f5dfb206fbfdb776b769b3eeb18d2c2
MD5 f5bf81a102de52a4add21b8a367e54e0
SHA1 cf1e76ffe4a3ecd4dad453112afd33624f16751c
SHA512 6e280a75f706474ad31b2ce770fa34f54cb598528fac4477c466200a608b79c0f9b84011545595d9ba94331ad08e2f51bd42de91f92379db27686a28ba351256
SSDEEP 96:8SMPv+eLDUDp+weLv2lstU+0IgNB2Aa20kdArfOwJKbFrMiRsuHdRYL:wnxLDUwp6sgN2RDrzJMMmsuYL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6903

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

qbittorrent.exe

IMPHASH 1b808774e915d7bae0ae17f2d54477d4
SHA256 1fac780feaa2e263dbd0ee2103d1815d97b4d6a676f5b83e9320120dc15ee6bb
MD5 b9dfd00c5fbb9cfaa2c4e1b3f9e218bf
SHA1 4dad2d51c73dffdd2cfc4d17146ac0253d74e3bf
SHA512 baec0664acfb41b96939f6462df5b9390f6cec16e71960f77ead222ad2bdf7f5f8bc4cb1937413472d4abe1ff6053eb8e89a9a6291c7b979138272dac780ab6c
SSDEEP 393216:Q943f9XQuqc+GJi2piZ09Br9UhfrZfndOj/HS4UfrBq9BKFdu9CwJsv6t/kubD:QuZfyrZgqrAZbD
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

17971072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

qbittorrent.pdb

uxtheme

GetThemeTransitionDuration GetThemeInt GetThemeEnumValue GetThemePropertyOrigin GetThemeColor IsThemeBackgroundPartiallyTransparent OpenThemeData IsThemeActive IsAppThemed SetWindowTheme CloseThemeData ord47 GetThemeBool GetCurrentThemeName GetThemeMargins GetThemeBackgroundRegion GetThemePartSize

d3d11

D3D11CreateDevice

dxgi

CreateDXGIFactory1 CreateDXGIFactory2

dwrite

DWriteCreateFactory

gdi32

GetStockObject CreateFontIndirectW GetFontData EnumFontFamiliesExW AddFontMemResourceEx RemoveFontMemResourceEx GetTextMetricsW AddFontResourceExW RemoveFontResourceExW CreateBitmap GetOutlineTextMetricsW GetCharWidthI GetTextExtentPoint32W SetGraphicsMode SetWorldTransform GetGlyphOutlineW GetCharABCWidthsFloatW GetDIBits SelectClipRgn GetRegionData GetCharABCWidthsI GetCharABCWidthsW SetTextColor SetBkMode GdiFlush CreateDIBSection CreateCompatibleDC DeleteDC SelectObject DeleteObject CombineRgn CreateRectRgn GetObjectW GetBitmapBits CreateCompatibleBitmap CreateDCW OffsetRgn CreateSolidBrush SetLayout BitBlt GetDeviceCaps GetTextFaceW ExtTextOutW SetTextAlign

dwmapi

DwmEnableBlurBehindWindow DwmGetWindowAttribute DwmSetWindowAttribute

imm32

ImmNotifyIME ImmReleaseContext ImmGetOpenStatus ImmAssociateContextEx ImmAssociateContext ImmSetCompositionWindow ImmSetCandidateWindow ImmGetDefaultIMEWnd ImmGetCompositionStringW ImmGetVirtualKey ImmGetContext

oleaut32

VariantInit SysStringLen GetErrorInfo VariantClear SysFreeString SafeArrayCreateVector SafeArrayPutElement SysAllocString SetErrorInfo

shlwapi

AssocQueryStringW

wtsapi32

WTSFreeMemory WTSQuerySessionInformationW

api-ms-win-shcore-scaling-l1-1-1

GetProcessDpiAwareness GetDpiForMonitor SetProcessDpiAwareness

comdlg32

GetOpenFileNameW GetSaveFileNameW

d3d9

Direct3DCreate9

powrprof

SetSuspendState

wsock32

htonl ntohs WSASetLastError WSAGetLastError htons setsockopt inet_ntoa getsockopt connect getsockname listen select closesocket bind accept __WSAFDIsSet getpeername ord1141 ord1142 socket ntohl WSACleanup WSAStartup

iphlpapi

CancelMibChangeNotify2 NotifyUnicastIpAddressChange ConvertInterfaceLuidToIndex ConvertInterfaceIndexToLuid ConvertInterfaceLuidToNameW ConvertInterfaceLuidToGuid ConvertInterfaceNameToLuidW GetAdaptersAddresses

winhttp

WinHttpGetProxyForUrl WinHttpGetIEProxyConfigForCurrentUser WinHttpGetDefaultProxyConfiguration WinHttpOpen WinHttpCloseHandle

secur32

ApplyControlToken EncryptMessage FreeContextBuffer InitSecurityInterfaceW DeleteSecurityContext QueryContextAttributesW AcquireCredentialsHandleW FreeCredentialsHandle DecryptMessage AcceptSecurityContext InitializeSecurityContextW

bcrypt

BCryptOpenAlgorithmProvider BCryptDestroyKey BCryptGenRandom BCryptGenerateSymmetricKey BCryptSetProperty BCryptCloseAlgorithmProvider BCryptDecrypt BCryptEncrypt

crypt32

CertCloseStore PFXImportCertStore CertAddStoreToCollection CertFindChainInStore CertGetCertificateChain CertVerifyTimeValidity CertEnumCertificatesInStore CertDuplicateCertificateContext CertFreeCertificateChain CertFindCertificateInStore CertOpenStore CertCreateCertificateContext CertAddCertificateContextToStore CertGetCertificateContextProperty CertFreeCertificateContext CertOpenSystemStoreW CertOpenSystemStoreA

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

mpr

WNetGetUniversalNameW

userenv

GetUserProfileDirectoryW

advapi32

CryptSetHashParam AdjustTokenPrivileges LookupPrivilegeValueW GetUserNameW InitiateSystemShutdownW RegCloseKey RegEnumKeyExW RegFlushKey RegSetValueExW RegDeleteValueW RegDeleteKeyW RegEnumValueW RegCreateKeyExW LookupAccountSidW GetNamedSecurityInfoW AddAccessAllowedAceEx AddAccessDeniedAceEx DuplicateToken CopySid SystemFunction036 GetSidSubAuthorityCount GetSidSubAuthority CryptDestroyKey CryptGetUserKey CryptAcquireContextW CryptEnumProvidersW CryptDecrypt CryptExportKey CryptCreateHash OpenProcessToken CryptDestroyHash CryptSignHashW CryptGetProvParam CryptReleaseContext DeregisterEventSource RegisterEventSourceW ReportEventW RegNotifyChangeKeyValue LookupAccountNameW SetSecurityDescriptorDacl SetSecurityDescriptorGroup SetSecurityDescriptorOwner FreeSid AddAccessAllowedAce InitializeAcl GetLengthSid AllocateAndInitializeSid GetTokenInformation InitializeSecurityDescriptor RegQueryValueExW RegQueryInfoKeyW RegOpenKeyExW

authz

AuthzFreeResourceManager AuthzInitializeContextFromSid AuthzInitializeContextFromToken AuthzFreeContext AuthzAccessCheck AuthzInitializeResourceManager

kernel32

FileTimeToSystemTime MoveFileExW MoveFileW GetCurrentDirectoryW GetLogicalDrives SetErrorMode SetFileTime GetFileInformationByHandleEx FlsSetValue FlsGetValue FlsAlloc GetExitCodeThread CloseThreadpoolWork EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry FindFirstFileExW SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW FindFirstChangeNotificationW RtlUnwindEx InterlockedPushEntrySList InterlockedFlushSList RtlUnwind LoadLibraryExW SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns InitOnceComplete GetVolumePathNamesForVolumeNameW TzSpecificLocalTimeToSystemTime VirtualQuery OpenFileMappingW FindCloseChangeNotification FindNextChangeNotification SetConsoleCtrlHandler GetConsoleOutputCP ExitProcess ExitThread FreeLibraryAndExitThread SystemTimeToTzSpecificLocalTime GetCommandLineA SetStdHandle IsValidLocale GetVolumeNameForVolumeMountPointW GetDiskFreeSpaceExW GetUserGeoID GetGeoInfoW CreateSemaphoreW ReleaseSemaphore K32GetModuleFileNameExW FlsFree InitializeCriticalSectionEx GetTimeZoneInformation InitializeSListHead UnhandledExceptionFilter EnumSystemLocalesW SetEnvironmentVariableW IsValidCodePage GetOEMCP WriteConsoleW GetUserDefaultLocaleName InitOnceBeginInitialize SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable InitializeConditionVariable TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive InitializeSRWLock RaiseException RtlPcToFileHeader SetFileAttributesW GetLocaleInfoEx VirtualAlloc VirtualFree HeapDestroy CloseHandle GetCurrentProcess GetCurrentThread SetThreadPriority GetProcAddress LoadLibraryW LocalFree FormatMessageA FormatMessageW WideCharToMultiByte GetCurrentProcessId GetLastError ReleaseMutex WaitForSingleObject CreateMutexW OpenMutexW Sleep WaitForMultipleObjects RtlCaptureStackBackTrace MultiByteToWideChar GetDriveTypeW GetVolumePathNameW GetSystemDirectoryW VerSetConditionMask VerifyVersionInfoW SetThreadExecutionState GetVolumeInformationW lstrcmpW GetConsoleWindow GetLongPathNameW GetUserDefaultLangID LocalAlloc GetModuleHandleW GetCurrentThreadId WTSGetActiveConsoleSessionId OpenProcess CheckRemoteDebuggerPresent GlobalAlloc GlobalLock GlobalUnlock GetLocaleInfoW ExpandEnvironmentStringsW CreateProcessW GlobalSize EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection CreateFileW UnmapViewOfFile GetFileSize CreateFileMappingW MapViewOfFile PostQueuedCompletionStatus SetWaitableTimer SetLastError InitializeCriticalSectionAndSpinCount GetQueuedCompletionStatus CreateEventW SetEvent TerminateThread QueueUserAPC SleepEx CreateIoCompletionPort GetFileAttributesExW CreateDirectoryW RemoveDirectoryW CreateHardLinkW GetFileInformationByHandle DeleteFileW CopyFileW ReadFile FindFirstFileW GetFileSizeEx FindNextFileW WriteFile DeviceIoControl SetEndOfFile FindClose LoadLibraryA GetOverlappedResult SetFilePointerEx CreateEventA CreateWaitableTimerA GetACP CancelIoEx CancelIo GetModuleHandleA GetSystemTimeAsFileTime GlobalMemoryStatusEx WaitForMultipleObjectsEx WaitNamedPipeW DisconnectNamedPipe CreateNamedPipeW ConnectNamedPipe ResetEvent GlobalFree SystemTimeToFileTime GetSystemTime GetModuleHandleExW DeleteFiber SwitchToFiber CreateFiber TlsSetValue TlsAlloc TlsGetValue TlsFree GetStdHandle GetEnvironmentVariableW GetFileType RtlVirtualUnwind QueryPerformanceCounter ConvertFiberToThread ConvertThreadToFiber FreeLibrary SetConsoleMode ReadConsoleA GetConsoleMode ReadConsoleW AreFileApisANSI TryEnterCriticalSection HeapCreate HeapFree GetFullPathNameW GetDiskFreeSpaceW OutputDebugStringA LockFile SetFilePointer GetFullPathNameA UnlockFileEx GetTempPathW GetFileAttributesW HeapValidate HeapSize GetTempPathA GetDiskFreeSpaceA GetFileAttributesA OutputDebugStringW FlushViewOfFile CreateFileA WaitForSingleObjectEx DeleteFileA HeapReAlloc GetSystemInfo HeapAlloc HeapCompact GetModuleFileNameW UnlockFile LockFileEx GetProcessHeap GetTickCount FlushFileBuffers CompareStringEx GetNativeSystemInfo IsProcessorFeaturePresent TerminateProcess GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetExitCodeProcess GetProcessId GetLocalTime DuplicateHandle CreateThread SwitchToThread GetThreadPriority ResumeThread QueryPerformanceFrequency CompareStringW LCMapStringW GetUserDefaultLCID GetCurrencyFormatW GetDateFormatW GetTimeFormatW GetUserPreferredUILanguages SetThreadpoolWait WaitForThreadpoolWaitCallbacks CreateThreadpoolWait CloseThreadpoolWait PeekNamedPipe

netapi32

NetApiBufferFree NetShareEnum

ole32

OleInitialize CoGetMalloc OleUninitialize RegisterDragDrop CoTaskMemFree StringFromGUID2 CoCreateGuid CoInitializeEx CoUninitialize DoDragDrop CoCreateInstance OleIsCurrentClipboard OleSetClipboard RevokeDragDrop OleFlushClipboard CoLockObjectExternal CoGetApartmentType CoGetObjectContext OleGetClipboard ReleaseStgMedium CoCreateFreeThreadedMarshaler

user32

DestroyIcon GetSystemMenu EnableMenuItem GetSysColor GetSystemMetrics SystemParametersInfoW DestroyWindow GetDesktopWindow GetDC ReleaseDC MessageBoxW CreateIconIndirect GetIconInfo DrawIconEx SystemParametersInfoForDpi IsWindow GetCaretBlinkTime GetDoubleClickTime MessageBeep UpdateLayeredWindowIndirect DefWindowProcW DestroyCursor GetWindowLongPtrW GetAncestor GetCapture GetClientRect ClientToScreen ScreenToClient SetWindowLongPtrW GetWindowPlacement GetWindowRect GetParent IsWindowVisible UpdateLayeredWindow SetLayeredWindowAttributes InvalidateRect GetSystemMetricsForDpi MonitorFromPoint GetDpiForWindow CreateWindowExW SetWindowPos AdjustWindowRectEx AdjustWindowRectExForDpi IsTouchWindow SetWindowTextW SetParent ShowWindow UnregisterTouchWindow SetForegroundWindow GetForegroundWindow IsChild GetWindow SetWindowPlacement IsIconic MoveWindow FillRect GetUpdateRect BeginPaint EndPaint AllowSetForegroundWindow GetMenu SetWindowRgn GetWindowThreadProcessId AttachThreadInput SetFocus SetCapture PostMessageW SetCursor FlashWindowEx SendMessageW RegisterTouchWindow GetKeyboardLayoutList GetAwarenessFromDpiAwarenessContext GetWindowDpiAwarenessContext EnableNonClientDpiScaling UnregisterPowerSettingNotification RegisterPowerSettingNotification ShutdownBlockReasonDestroy GetSysColorBrush GetClassInfoW LoadImageW RegisterClassExW UnregisterClassW ChildWindowFromPointEx WindowFromPoint GetCursorPos GetFocus AddClipboardFormatListener SetClipboardViewer RemoveClipboardFormatListener ChangeClipboardChain IsHungAppWindow RegisterClipboardFormatW GetMessageW GetPointerInfo SendInput GetDisplayConfigBufferSizes QueryDisplayConfig DisplayConfigGetDeviceInfo GetMonitorInfoW EnumDisplayMonitors MonitorFromWindow GetKeyboardLayout RegisterWindowMessageW FindWindowA IsWindowEnabled CreateCaret ShowCaret DestroyCaret SetCaretPos GetMenuItemInfoW SetMenuItemInfoW ModifyMenuW RemoveMenu InsertMenuW AppendMenuW CreateMenu DestroyMenu CreatePopupMenu TrackPopupMenu SetMenu DrawMenuBar ToUnicode GetKeyboardState ToAscii IsZoomed TrackPopupMenuEx PeekMessageW GetKeyState MapVirtualKeyW LoadIconW GetClipboardFormatNameW EnumDisplayDevicesW CreateCursor GetCursor GetCursorInfo SetCursorPos LoadCursorW GetAsyncKeyState GetMessageExtraInfo TrackMouseEvent GetTouchInputInfo CloseTouchInputHandle GetPointerType GetPointerFrameTouchInfo GetPointerFrameTouchInfoHistory GetPointerPenInfo GetPointerPenInfoHistory SkipPointerFrameMessages GetPointerDeviceRects ChangeWindowMessageFilterEx GetProcessWindowStation GetUserObjectInformationW EnumWindows PostThreadMessageW CharNextExA KillTimer GetQueueStatus SetTimer RegisterClassW SetCoalescableTimer MsgWaitForMultipleObjectsEx TranslateMessage DispatchMessageW UnregisterDeviceNotification RegisterDeviceNotificationW ShutdownBlockReasonCreate SetProcessDpiAwarenessContext ReleaseCapture

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

ws2_32

WSAHtonl WSAAccept WSAConnect WSANtohs getnameinfo WSAIoctl WSASendTo WSARecvFrom WSASend WSASocketW getaddrinfo WSARecv freeaddrinfo WSAStringToAddressW WSAAddressToStringW WSAAsyncSelect gethostname WSANtohl

winmm

timeKillEvent timeSetEvent PlaySoundW

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

shell32

SHGetStockIconInfo SHCreateItemFromParsingName SHGetKnownFolderIDList SHCreateItemFromIDList SHGetPathFromIDListW SHBrowseForFolderW SHGetMalloc Shell_NotifyIconGetRect Shell_NotifyIconW ShellExecuteExW SHGetKnownFolderPath CommandLineToArgvW ord155 SHChangeNotify ord727 ord190 SHOpenFolderAndSelectItems ShellExecuteW SHGetFileInfoW

dbgeng

DebugCreate

Name

.text

Size

17.8MB

Virtual Size

17.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11.4MB

Virtual Size

11.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

385KB

Virtual Size

506KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

659KB

Virtual Size

659KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.qtmimed

Size

331KB

Virtual Size

330KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

149KB

Virtual Size

149KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

132KB

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

qbittorrent.pdb

SHA256 f8861d92c7609d41ee0f1b14eed1e31dedc1c735c36a47391e21c5e79be8b1e5
MD5 9ea92840d804f74aab17c79b820af2b7
SHA1 42a2f607757b6cb129935dad261f0a86ddc2fceb
SHA512 0a163163899aff81a7175bef5db9323a5b44b8ee00deb203d8741fa42d0ef12a9e92eb3bcde54605cb0c31a702d136d5239aea532f2aa7eff98edb238da022b9
SSDEEP 393216:qYZBCzIX4Y0jTSMLGzgKb6BkaZIaCbLeTaUh94fSNzXUt4X:pfX4YDgpBkX3+
MD5 SHA1 SHA512 SSDEEP

qt.conf

SHA256 fdb8fa58a6ffc14771ca2b1ef6438061a6cba638594d76d9021b91e755d030d3
MD5 af7f56a63958401da8bea1f5e419b2af
SHA1 f66ee8779ca6d570dea22fe34ef8600e5d3c5f38
SHA512 02f70ca7f1291b25402989be74408eb82343ab500e15e4ac22fbc7162eb9230cd7061eaa7e34acf69962b57ed0827f51ceaf0fa63da3154b53469c7b7511d23d
MD5 SHA1 SHA512

translations/qt_gl.qm

SHA256 204a01ac7deb6b5bae193afecbd1e50d18c73bf7d94badeb2bbfdf6123c4ed93
MD5 0661ffabfbc50187f3ba38876b721946
SHA1 eb5e7205355cfc6bcb4df27e224079842c97b296
SHA512 65ab66cc54d65e7678fa731a5c5f2cc9d6fc217b91ad47d538440811e09a23e49cd95ce62a79e3e8c275e250ac1a0b54bd289f6dd067573876da7aff54381d02
SSDEEP 3072:OYSG8zxWSDjq73Pf6FT1f4uh50QGrRfFD54YyUY0Ou4/tnra3Z0uYhB5YHfHRRn2:O39WSD3TMQGrxFD5EUVQ
MD5 SHA1 SHA512 SSDEEP

translations/qt_lt.qm

SHA256 47eb5f97467df769261421d54a5bea1131c9fb9b6388791d38bb6574335b64bf
MD5 8992b652d1499f5d2f12674f3f875a35
SHA1 e22766a49612f79156c550d83c6c230345dda433
SHA512 9b8b6dbff432f2a46c14bc183a6baf84acbf02bf2c5bb8c306c6538fbd9be1c0a9015bd46728f2f652f9163afc56b1e16d16eb95d8f7728f3c562ae9f4f1ae1e
SSDEEP 1536:i5v3+zmayloj6yJjhnBAbnrKnGrhA7WgdXclIsooY9i:SvOzAloj6yJ9BA7riGr+7WKXc+s5ui
MD5 SHA1 SHA512 SSDEEP

translations/qt_pt_PT.qm

SHA256 2c1e7bbf5168a64b43752dd4c547601c0bde6d610f8671fa3e3af38597e84783
MD5 6656500f7a28ef820ae9f97fd47fb5bb
SHA1 cc112b9c9513bcf7497f3417168b4c8a9f7640a9
SHA512 5c3cbfcf86af6b4d949c1d914cd379e512e73ba350af661033a386ee7fb981fbfcb43d9a35fde7656e17bb09f64f1469f84867a780573c3359d645269461d5a6
SSDEEP 768:OKGUuWW+WHjS0gMBd483+Y7bDPs4RHBloLUIltlzAJnx4nnliM1OPlOibLG:JGUuWPuSgm0Jn+n4Mhj
MD5 SHA1 SHA512 SSDEEP

translations/qt_sl.qm

SHA256 c44e0313a9414cc0e490b65b0c036fa11bca959353b228886547bc2c8492034f
MD5 d35a0fe35476be8bd149cee46e42b5e9
SHA1 9f3c85c115a283e5230d1eead84c8cb73a71fa03
SHA512 beeb1751882af081e80be93f7464d4c6322b724efa2cbd3e1cbe709181d380c1c57e770fa962bb706d6fcf4a8cb393e3f6e187c1f604f8ceefb201ca3200bd1c
SSDEEP 3072:9zQH0hOtgmiAZu0eeAEv+v49JnnSmICgr3n7jhCQUeinqyU5UggtRLGrQ2LZO+Y1:RpUsSpGr36wsR
MD5 SHA1 SHA512 SSDEEP

translations/qt_sv.qm

SHA256 4b4b6ff7fd237c9da0301b4946132e68653d15eb5faf38e4c5fbfebb12dd97f7
MD5 0e85e0e0e7ddfe3d4bde302f27047f9c
SHA1 ae59348e0c2e4f86f99da6cf5dab3b7e92504b7c
SHA512 8caab6c61e9fa26a3a289a9e4dc515d157b3092d6d4ed43861220261bd2b7cc79b35b52f9ade4ef558b5385b37eac14575420dd55c475f435bb95b6c1e2561b6
SSDEEP 1536:4u6DkpgyKmRmG15mGM6iFPi6Q/qTlOQZY2dKN8gKw:4u6DotUG1sGMZPi6Q/qTlO2Y2YKw
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_ar.qm

SHA256 e03fe68d83201543698fd7fe267dd5dfc5bfd195147e74ff2f19ac3491401263
MD5 a7e4d0ba0fc5df07f62cc66ec9878979
SHA1 21fd131b23bdd1bba7bbb86f3ed5c83876f45638
SHA512 d9e6b10506fcf20b5b783f011908083d9df6c5df88e21b10d07f53a01ad6506a4b921c85335a25bae54e27bad7d01b6e240d58fdeeaabc7ff32014ec120c2ecf
SSDEEP 1536:XGlAMfkX1M0RdaCkR8lfv8vtc8EFrVYA2I4AJZWEWgHg1C8COvzHKHC6Jp9NV0V7:XUr0RACkIwDEpV1Lgf1ubtw3Bb
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_bg.qm

SHA256 e448ac9e3f16c29eb27af3012efe21052daa78fabfb34cd6dff2f69ee3bd3cdb
MD5 660413ad666a6b31a1acf8f216781d6e
SHA1 654409cdf3f551555957d3dbcf8d6a0d8f03a6c5
SHA512 c6ae4b784c3d302d7ec6b9ce7b27ddaf00713adf233f1246cd0475697a59c84d6a86baa1005283b1f89fcc0835fd131e5cf07b3534b66a0a0aa6ac6356006b8f
SSDEEP 1536:9ULiyUxPoT6qx+J7FJlaaMJnxjqxq+0Uiff0mbVeb7wiEwYuYqDKBkKHMXHCIMll:9ULpIVFnpwUiEujw27ncUQUz
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_ca.qm

SHA256 425023f1b530456d0ba012e32b84daaaa5aa3bc385d9a076e7751393db393d77
MD5 ef15e764e49bb4cd7bb91cb8abdbd8c5
SHA1 6e73576ee5349870eeb72373596dad6975688755
SHA512 a3516c2dc13410394c592f568912189a64d1b00c272874996143c8388e9351294f5eb36287f18845e5385578718535a66901a5693bec3401ff0a6589fc352081
SSDEEP 3072:7v+fArFDLAdtPstp2S+BvXERjaePzCTcQ1Z:7tt4UOS+TB1Z
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_cs.qm

SHA256 03028b42df5479270371e4c3bdc7df2f56cbbe6dda956a2864ac6f6415861fe8
MD5 c57d0de9d8458a5beb2114e47b0fde47
SHA1 3a0e777539c51bb65ee76b8e1d8dce4386cbc886
SHA512 f7970c132064407752c3d42705376fe04facafd2cfe1021e615182555f7ba82e7970edf5d14359f9d5ca69d4d570aa9ddc46d48ce787cff13d305341a3e4af79
SSDEEP 3072:5WjuhX0CVRaakGjW9E8SSOQfX/JlwVOMxrboRPqWxXfQvO7zjBf:5iFGj1QfXr8Gd
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_da.qm

SHA256 7d1e5ca3310b54d104c19bf2abd402b38e584e87039a70e153c4a9af74b25c22
MD5 859ce522a233af31ed8d32822da7755b
SHA1 70b19b2a6914da7d629f577f8987553713cd5d3f
SHA512 f9faa5a19c2fd99ccd03151b7be5dda613e9c69678c028cdf678adb176c23c7de9eb846cf915bc3cc67abd5d62d9cd483a5f47a57d5e6bb2f2053563d62e1ef5
SSDEEP 3072:XzswP2UvZ5aZ9jFTkmq/gnBNW/+PcWrqm2Vliz0DGdaS4KSLZjwTTgwUR0toT:j3m27AjCT
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_de.qm

SHA256 8286eb14d44bb83f869a51feab3e19ab7a9e7756adc8aa103e995a64913f1ed9
MD5 6d8a9cc6f56a598a35a9a61b672f62c4
SHA1 5cb04f893de7abaf95954a6c6bab9ebafd671f27
SHA512 3af8b4eb00a0155ec44491185b16c7dbc5da43c0c544927172900a22d68cfc88235e5a69d9e9b2d2d0c57a89e1798980104e171cb7f5aaf8762dbd3481103a92
SSDEEP 3072:iLsFuh3JmB8xVXE7YXEfgQZaDMN8DDiEfugwoulh15ce4M+UwsPYXCZPb7Ufq3wy:igFjss86Os/i2
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_es.qm

SHA256 4ffda56ba3bb5414ab0482d1dde64a6f226e3488f6b7f3f11a150e01f53fa4c8
MD5 c7c58a6d683797bfdd3ef676a37e2a40
SHA1 809e580cdbf2ffda10c77f8be9bac081978c102b
SHA512 c5aed1a1aa13b8e794c83739b7fddeafd96785655c287993469f39607c8b9b0d2d8d222ecd1c13cf8445e623b195192f64de373a8fb6fe43743baf50e153cda5
SSDEEP 1536:JVwzuvb+Ta64KQd84arHX5pxiVhA8QlOD/BnFNa8NsvsfFsfcoZtIx6F:JVwSTG4KqVaLX5pEVK7OJFczstgRtIx8
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_fa.qm

SHA256 f78e59b5bdd586181a999034ba418868ed17fe9c05707fb65e523f70e92253d2
MD5 b4222dd74c92c888a7c25dc42e989d83
SHA1 b0adbe950790924242806f671712c57b584b58fb
SHA512 e7f048a7dab56ffd6c0f316962684c01c86c3c7c1d516d71b6a23ed0fc00a04ba5dda919321697eb81290acbb9984de97bae0170f54c5880873741fcd23e68a0
SSDEEP 1536:p0hbtxBPlwdOgOP6RT9MnrtrnfpSglHPPkzF0BGF8APbyuQQdJFK:ehZxXLgK6RGnrtNVlHPcp9hOurdLK
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_fi.qm

SHA256 e47fe13713e184d07fa4495dde0c589b0e8f562e91574a3558a9363443a4fa72
MD5 8472cf0bf6c659177ad45aa9e3a3247c
SHA1 7b5313cda126bb7863001499fb66fb1b56c255fc
SHA512 de36a1f033bd7a4d6475681edc93cc7b0b5dcb6a7051831f2ee6f397c971b843e1c10b66c4fb2eff2a23dc07433e80fbf7b95e62c5b93e121ab5ad88354d9cb8
SSDEEP 3072:lvdTgO2Yl97ZWnbgTLt/Tf9IlqAeiy5uWkYGM0wNCdRjSK2YUlUs:lvdkA9vh5uWkY0MK2YXs
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_fr.qm

SHA256 314243a55c32679ad473fdfe48dc7d66e973ad0fc8bf2164480c58dddb50c1a7
MD5 aa1140597635ff68d264f274c0f38b87
SHA1 170839a937a77c588614fdf31063c165ddc16b86
SHA512 9be7efa11fcc0c27009b4db08483141ac0d35e10e844550416c090ba863995107b60f4f8b0166fbd5932e4c02eebb67981d64564085143ceb5ba80dab275f3d1
SSDEEP 1536:YqXh2acowfpfcvgCZwmGPIDeirKTrig+sj7irWa:YsYacowxfc4KwmbC1CJGgWa
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_gd.qm

SHA256 63b439dd44139aa3aed54c2ebe03fa9bc77f22c14ed8fba8eff2608445bb233d
MD5 eb1fb93b0be51c2ad78fc7ba2f8b9f42
SHA1 24f7ff809e2f11c579cd388fea5a4c552ff8d4d0
SHA512 e13770aef33b6666ed7d54e03ee20ca291d4167d673ba6c61d8e64cdd5f7ffe0a9521b95af67be719bf263932ecf16e2b2d0b5f3404f9bcd7879114fcc6fc474
SSDEEP 1536:SiaI3C87jhakhR0VGkw7ys7CskUH6y4e6IFB4xyMuhvDnJGhFaCo527arBbm07LZ:S2yGjh17yGqxTXhvQoejJd8FUjVgk
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_he.qm

SHA256 e1ebca16afe8994356f81ca007fbdb9ddf865842010fe908923d873b687cad3f
MD5 deaf87d45ee87794ab2dc821f250a87a
SHA1 db39c6baa443aa9bb208043ef7fb7e3403c12d90
SHA512 276fce81249effe19e95607c39f9acb3a4afa3f90745da21b737a03fea956b079bca958039978223fd03f75ac270ec16e46095d0c6dda327366c948ec2d05b9c
SSDEEP 3072:XSue8Z7T3iJsqBejt/zNHSLzdetY2ZISfC/S:XSueK3w7Ijt8zUtYAISfC/S
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_hr.qm

SHA256 bb9eec9a9a652c1340dc75eb2e749be50df00f885b3d6900dfc76799c45b244d
MD5 8799d8cc6739637c9859e981db122a6e
SHA1 c95a416388521ef5bdb3ee5d11e9dcd4ce22ebbd
SHA512 332d2ee630c5bbaa28bd49307f3d36fcac0d025c7ce3ae33e7179cd7e030efee04c569c1fa9fa8e339404ef63d45d57fb425615e5d7bb6d0c7b1e40c6b4bf264
SSDEEP 3072:c5s0kXuz8fKXjSE/21DZVRtaKSfReeo4McCn/Xw9sufWB4Elq7Flcfrc+R:6+oC/fq8R
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_hu.qm

SHA256 c61b67bb9d1e84f0ab0792b6518fe055414a68e44d0c7bc7c862773800fa8299
MD5 e9d302a698b9272bda41d6de1d8313fb
SHA1 bbf35c04177cf290b43f7d2533be44a15d929d02
SHA512 12947b306874cf93aba64bb46fac48179c2d055e770d41af32e50fffb9f0c092f583afcea8b53fe9e238ef9370e9fffbeb581270dfa1a7cb74ebe54d9bff459f
SSDEEP 3072:BmOMZadV9n51xXeQvjOiIzz7/Vs9Db3ihuJNvMfWxBNlYzYbTrIkfwb03l24cNKu:HkWa5pg0MahBHDd
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_it.qm

SHA256 7808ed542a7833c4bd94ec8bdfbbca00bb4f2fe15979b9121ce3249323687300
MD5 19dbf4aad2cce123cdc9ecf5f12ab4a1
SHA1 98ad7a889db2059d3079b0335f9bf18de81f035e
SHA512 8c4b63a515c80283a20ac2a992b565ec5ac6666fa307075216a90cab47f9823f611279c6543d69902c385a1447e37280fbe0ec8cab97a1403f5b51ba8441c015
SSDEEP 1536:E/FKffdO4BKJb0td5pqCOIUPdPFIM7gxGQ9sRrFM6QJ4m8ihkM:E/F8FO4BKJb0td5pnOr1Cqg9mRK4IkM
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_ja.qm

SHA256 2b9581c69b975f59be505b127cd3c19d403ef3d12e0e8386fb97238223e9c1df
MD5 11d3d147bed6c705801c82c69948f304
SHA1 35848337b5f0a4b33ba3929a4d93dd09a2fa4170
SHA512 9215953bc7ea5141e04a6656726af5592388961294da1910ffeb21da5aef4d6719c74f65e4fe3d29d0090ee6dc390728d45b402e8f99e398642a998f0e6c4ad5
SSDEEP 1536:9NmR3BJ26c1Z7f25pVmuLXpxfqt7FEUWNifQje9kWI23pKXvx:9q3BJ01Z7u5pQuLbESUWNcAAI23pKfx
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_ko.qm

SHA256 0179ed1b136e1cb3f583351eaa2c545ba3d83a6ee3f82c32505926a1a5f5f183
MD5 082e361cbac2e3a0849f87b76ef6e121
SHA1 f10e882762dcd2e60041bdd6cc57598fc3df4343
SHA512 f378a42116924e30fa0b8fff1d3c3cb185dc35b2746dce2818be7c2aa95c5de103df44aac74da969c36c557f1d4de42ac7647ec41066247f8ad2697bded667ea
SSDEEP 1536:rvTy18hhPekHs1iNXVExWbStnn8TExgkYOvYejZOvXx4Mmf0MwUL8smk/pDZyy:y18hJ61nMStnn8TOgknQRLWZmkxNyy
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_lv.qm

SHA256 846e047573ae40c83671c3ba7f73e27efc24b98c82701da0df9973e574178bb2
MD5 bd8bdc7bbdb7a80c56dcb61b1108961d
SHA1 9538c4d8bb9a95c0d9dc57c7708a99dd53a32d1f
SHA512 f040ec410ebfea21145f944e71adcae8e5f60907d1d3716a937a9a59a48f70c6b7eaac91c2c554f59357a7bc820cdbd17c73a4decc20b51f68eb79edd35c5554
SSDEEP 3072:y5pmbKIhooMbGe91MrjOhmGzP6LJbWz5XIxELpU6:yObeqrjPGzeJyJLy6
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_nl.qm

SHA256 f61513bcdbb6ad800585f9437a95d018aab17fa12ee414aa31462ff279d8240e
MD5 5034443529b94a017f63aadcf4be76a3
SHA1 5cce892cd7ed9243b0b57923ee92c79ad626153b
SHA512 7085718a81418ce18c8bea2c1a8f5f75f55f4c001bfec1f04abb73be1d37ef1069490ee9c99610dda7597c170135a17dd58290082225558101ccebd148261079
SSDEEP 3072:qufM3bk4pXtXJB/Pz9DLjlrIQatXqRIqv5C5PwhgwIbUrwiCqT0voFN:TE3ljncQl35N
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_nn.qm

SHA256 983734b40aa4d250421ba0d1614416cb8b424d6f140f4a7dbf8b11e65eef63dc
MD5 6dac3cad287cd86a5b047c3651f05be0
SHA1 69fc47ff3a33adc23415f4f87272053998d6149a
SHA512 2d8308a0e1b0405a2a16d2c28c0187d510bc249c7716f14cec2b1f8695232036ae0cd2684620e178f345c9b3b2ec82ad45927ad68edabb41409e0ec6eb38abb2
SSDEEP 3072:ocFM5fgnggr7pNt4uiQjYc/giREtCSAKl8DzMm81MviqEcMIJ:9MZHY+eYc1nisJ
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_pl.qm

SHA256 ce99032a3b0bf8abad758895cc22837088ead99fd2d2514e2d180693081cfe57
MD5 f9475a909a0baf4b6b7a1937d58293c3
SHA1 76b97225a11dd1f77cac6ef144812f91bd8734bd
SHA512 8a4f1b802b6b81ff25c44251fb4a880e93e9a5fe25e36825a24bfe0efb34e764e7e1ee585d3a56554964b7921e7813c67f12d200d6e0c5eaf4bb76b064b5c890
SSDEEP 1536:sXpestp/YIFtDT8FIWYbIJmPYuIpnmxAk6mwyJNqSm9+P:sxpTDT8FIWfJmdCmxApmbnqSm9+P
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_pt_BR.qm

SHA256 8344f5bc333c45d37cfd425a09124eb11f12439f33737ec0b8683d04a416746e
MD5 c9d3d4f3a7bd0b50fd7256a360026756
SHA1 fd1373417c7e93d63c97b3be7956cd7dd80cebe9
SHA512 294301aef9d8b1cc14dc442cc59f5e9004007ad0f2558d97c83bcab0bbac7fb40768b24fb3b2f8f75f58fc02a28447d94f9d1f2c29f4c5664a36cddf0a27c4c8
SSDEEP 3072:3xbdpdlyy2nnN0wu3oV+4qftiDfEY3kHwlH:hbdpKNsoVhP4qH
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_ru.qm

SHA256 3da6605668f9178d11a838c4515478084dcfb4f9cf22f99d7a92b492db9c224b
MD5 5096ad2743bf89a334fba6a2964300d4
SHA1 405f45361a537c7923c240d51b0ff1c46621c203
SHA512 7b88b501792b5831426baa669138192ed94cc3f8323a3df9d5287655dc4d877706908c517ab7523ae8a283bf50b47123f13b8ae40ea2f3081c3459edc47fc8dd
SSDEEP 1536:hn4dEJ63pdhPpy6gu5fs4MHQv6sLlxnrncF423ZL9xyuXwdcX8LZuf76CW+WeXFx:aN3pdV5fZbpItXsttRY+WSq
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_sk.qm

SHA256 d586ae2c314074cf398417fdecb40709d5478dfeb0a67c2fe60d509ee9b59ed7
MD5 3d60e50dcbcbd70ee699bc9b1524fcb9
SHA1 0211b4911b5b74cc1a46c0fca87d3bf5632aa44a
SHA512 f98211867f1dbcb8a342c00e23fa5718be6e999f7449cb8470b41bf0f527c7f78cc4d6666e28968f32e96026907156753979bfada7e6bf4225d02a902d24906d
SSDEEP 3072:roXDuC1u/2lUBGjJirE5tsd/aev1GIfOdvhw:OucMGjH5tbm
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_tr.qm

SHA256 6a0bf6e70e7920c2b193e76e92f78f315936955d3b06ac039d917f2e06c43281
MD5 6cbc5d8e1eabec96c281065ecc51e35e
SHA1 4e1e6ba3772428227cb033747006b4887e5d9ad1
SHA512 ce1f9ee180176153d5f523d71e0db06f4dea65c24e5e2cd56341cfaee349a8e9a0f606d99f7219a35dd4516d1528c90aea4bb87548a55392b8f2b36164d478b1
SSDEEP 3072:yRRhAFCvqDBitD/iDG9AOH+l4TcwZBPqHo9fd9CFRK+2IKAimxsjucV2p0ZqvRu7:yRRHs5mksWVX3lA3
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_uk.qm

SHA256 51b8ff55b37dc5907d637a8ddda12fbe816852b0244c74eb4f0fb84867a786e0
MD5 d6234e4e21021102b021744d5fa22346
SHA1 63a14327d0cf0941d6d6b58bfa7e8b10337f557b
SHA512 37d24a092c5f29bacb7a4ca8207c4eefd0f073b7e74a492402867f758084091bf1d79d2ba2b4a28b35fef42e8023c371fde97578f74bb2033551154e77102de6
SSDEEP 1536:jXwjFVUDdMUD4TzdAhpQgO5poZHvJllEnhmdK4I77/dnPJX/imfb1jhvv3BxT8ue:jBzD4Tzaw5pCvJ8hVPdlvj3p8
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_zh_CN.qm

SHA256 98fd4b97dbec8af5cdd15f85a16c33efc77301b1aeb0469daafc04b9ab2f3570
MD5 4c8a57b5405b7cfea0a5a98362dd3b2d
SHA1 3561f95f646b2172d2e870973b6d81e983ed00a6
SHA512 8bf1c1e01a10f356ab775cc96ead12f6981349ebfacb9f5f1a2337058b4745faad4361f054884ec3cdaa005ad3a4a85920ba47b16b73851200bc604d4311e3b1
SSDEEP 1536:axTFoXJaVZyqPtoMaOBlmxTRnYtKi0mqElZ1djWIWTcc8Z:axi6yqPe/OBlyTRYYvmbxbc8Z
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_zh_TW.qm

SHA256 21012b2b427f8d09d31ce9cae582ca27955b478ca3dc2ec18a3068d808638c6a
MD5 ca0a16eb14d6c36a0ea90a4d4ca3832e
SHA1 62f789e8fa0c13c5fd4fe250576bf45b07c85781
SHA512 94094ef2fe663d752311777660730bdd3c44627b816aa973424b780e90efdae5ed49d3a1e2df6c513f1810f69876906c147772ce9c986b326ff65fef6c148700
SSDEEP 3072:59WqMP10JBOs6ZcFOsJoYqaWFzerP5P8pa:3wAYs6uFOEor/x28pa
MD5 SHA1 SHA512 SSDEEP

uninst.exe

IMPHASH 9dda1a1d1f8a1d13ae0297b47046b26e
SHA256 c917c60b1bb35ed4677b1631c3b06574fc034fd45ed901051545396ff74a783c
MD5 f32962b1f79d5132fff8267a04b9c46c
SHA1 d7886c2c455b72259281a768bb9d149a1aa44eb7
SHA512 fcc1fad8532eb5c94953a7ed3235de29f83732ed62db5b326c758711610d89befb0cca213a2f3bb15768530ddb3fb2a4483ee1bc9cdec51c5841a6998aebe170
SSDEEP 3072:dnPdzuK8Jdw4TMJw3uXceAu3qPgn2yiG01NiP9roOVkMVoIq5X7o:dnPdudwDzmuPn2yimP99lxn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13893

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

RemoveDirectoryW lstrcmpiA GetTempFileNameW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW WriteFile ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize CreateFileW GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject CopyFileW

$PLUGINSDIR/FindProcDLL.dll

IMPHASH 0cd94af3a016a5de4ab9a5a9a02d4173
SHA256 c0948b2ec36a69f82c08935fac4b212238b6792694f009b93b4bdb478c4f26e3
MD5 b4faf654de4284a89eaf7d073e4e1e63
SHA1 8efcfd1ca648e942cbffd27af429784b7fcf514b
SHA512 eef31e332be859cf2a64c928bf3b96442f36fe51f1a372c5628264a0d4b2fc7b3e670323c8fb5ffa72db995b8924da2555198e7de7b4f549d9e0f9e6dbb6b388
MD5 SHA1 SHA512

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/LangDLL.dll

IMPHASH fe3375e7e4529b73ba45ab2246b9269b
SHA256 32230128c18574c1e860dfe4b17fe0334f685740e27bc182e0d525a8948c9c2e
MD5 50016010fb0d8db2bc4cd258ceb43be5
SHA1 44ba95ee12e69da72478cf358c93533a9c7a01dc
SHA512 ed4cf49f756fbf673449dca20e63dce6d3a612b61f294efc9c3ccebeffa6a1372667932468816d3a7afdb7e5a652760689d8c6d3f331cedee7247404c879a233
SSDEEP 48:S46+/pTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8m/ofjLl:zbuPbO5tCZBVEAWyMEFv2CmCL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
MD5 4add245d4ba34b04f213409bfe504c07
SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UAC.dll

IMPHASH 0ef725341a4aecf8398c0e2132f38049
SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
MD5 adb29e6b186daa765dc750128649b63d
SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10632

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetLastError GetCurrentProcessId GetCommandLineW GetProcAddress CreateThread GlobalFree LoadLibraryA OpenProcess GlobalAlloc CreateFileMappingW Sleep MapViewOfFile GetModuleHandleW UnmapViewOfFile CreateEventW SetCurrentDirectoryW GetVersionExW GetExitCodeProcess lstrcatW LocalFree GetPrivateProfileStringW FormatMessageW GetPrivateProfileIntW CreateProcessW CloseHandle GetLastError DuplicateHandle GetCurrentThreadId lstrlenW SetEvent WaitForSingleObject lstrcmpiW GetExitCodeThread GetModuleFileNameW

user32

SetWindowPos GetClientRect GetWindowThreadProcessId SetWindowLongW DefWindowProcW GetDlgItem CallWindowProcW CallNextHookEx GetClassNameW PeekMessageW DestroyWindow SendMessageW SetForegroundWindow IsWindowVisible MsgWaitForMultipleObjects LoadStringW EndDialog EnableWindow DialogBoxParamW LoadImageW MessageBoxW GetWindowLongW DispatchMessageW ShowWindow wsprintfW CreateDialogParamW GetWindowRect IsDialogMessageW FindWindowExW CharNextW CreateWindowExW LoadIconW PostMessageW SetWindowsHookExW UnhookWindowsHookEx TranslateMessage

shell32

ShellExecuteExW

advapi32

OpenServiceW QueryServiceStatus CloseServiceHandle OpenProcessToken OpenSCManagerW GetUserNameW AdjustTokenPrivileges LookupPrivilegeValueW GetTokenInformation EqualSid

ole32

CoInitialize

$PLUGINSDIR/modern-header.bmp

SHA256 766a893fe962aefd27c574cb05f25cf895d3fc70a00db5a6fa73d573f571aefc
MD5 940c56737bf9bb69ce7a31c623d4e87a
SHA1 f2f3b4e7b9c28df6687ceeaed300a793e3bac445
SHA512 81c60431619d7eb826b8da997c227c4f7077cc754caa15df6e0e7ae0e33690432bc2a27a7e295998f15e33a17b3d80e492d7cc09fd70dc43daf1cfe86b8746ff
SSDEEP 192:TYw3C/LSnMoejFXnknIHbGoijTr3dBZ9KPPsnY/T0x9j:TY3LSnlepnknIHKoUrdBZ9uPsY/Ix9j
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/nsisFirewallW.dll

IMPHASH 18ecfc7436b69f8c13ec22664f9f1857
SHA256 53be5716ad80945cb99681d5dbda60492f5dfb206fbfdb776b769b3eeb18d2c2
MD5 f5bf81a102de52a4add21b8a367e54e0
SHA1 cf1e76ffe4a3ecd4dad453112afd33624f16751c
SHA512 6e280a75f706474ad31b2ce770fa34f54cb598528fac4477c466200a608b79c0f9b84011545595d9ba94331ad08e2f51bd42de91f92379db27686a28ba351256
SSDEEP 96:8SMPv+eLDUDp+weLv2lstU+0IgNB2Aa20kdArfOwJKbFrMiRsuHdRYL:wnxLDUwp6sgN2RDrzJMMmsuYL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6903

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer