qbittorrent_5[.]0[.]1_x64_setup[.]exe

resource
qbittorrent_5.0.1_x64_setup.exe
unpack001/$PLUGINSDIR/FindProcDLL.dll
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/UAC.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsisFirewallW.dll
unpack001/qbittorrent.exe
unpack001/uninst.exe
unpack002/$PLUGINSDIR/FindProcDLL.dll
unpack002/$PLUGINSDIR/LangDLL.dll
unpack002/$PLUGINSDIR/System.dll
unpack002/$PLUGINSDIR/UAC.dll
unpack002/$PLUGINSDIR/nsisFirewallW.dll

qbittorrent_5.0.1_x64_setup.exe

IMPHASH 9dda1a1d1f8a1d13ae0297b47046b26e
SHA256 5513812584a5ba7810b812db7ceec2d0e9cb214cef95a2580e29927cf4fe9921
MD5 fd6ea4e1d7b3adb820908ec26b729ea7
SHA1 485b31d0f8394efdaa860c0d4a54227033f40579
SHA512 e587c67bd4da787226187918206acfdb9ef4192e884b41e0680cf96458799eeeabde97376dbdfdd89c7de12839a062bd8f8da50b9e6a49c33018461783535c66
SSDEEP 786432:7fFBmZOcw9i54tPYrFrQAEODhrbt+Fn1/Zo2NCILF5Iud3gIwmbN:79BH1e+sFspIteZtQILFDdQIwm5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13893

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

RemoveDirectoryW lstrcmpiA GetTempFileNameW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW WriteFile ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize CreateFileW GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject CopyFileW

$PLUGINSDIR/FindProcDLL.dll

IMPHASH 0cd94af3a016a5de4ab9a5a9a02d4173
SHA256 c0948b2ec36a69f82c08935fac4b212238b6792694f009b93b4bdb478c4f26e3
MD5 b4faf654de4284a89eaf7d073e4e1e63
SHA1 8efcfd1ca648e942cbffd27af429784b7fcf514b
SHA512 eef31e332be859cf2a64c928bf3b96442f36fe51f1a372c5628264a0d4b2fc7b3e670323c8fb5ffa72db995b8924da2555198e7de7b4f549d9e0f9e6dbb6b388
MD5 SHA1 SHA512

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/LangDLL.dll

IMPHASH fe3375e7e4529b73ba45ab2246b9269b
SHA256 32230128c18574c1e860dfe4b17fe0334f685740e27bc182e0d525a8948c9c2e
MD5 50016010fb0d8db2bc4cd258ceb43be5
SHA1 44ba95ee12e69da72478cf358c93533a9c7a01dc
SHA512 ed4cf49f756fbf673449dca20e63dce6d3a612b61f294efc9c3ccebeffa6a1372667932468816d3a7afdb7e5a652760689d8c6d3f331cedee7247404c879a233
SSDEEP 48:S46+/pTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8m/ofjLl:zbuPbO5tCZBVEAWyMEFv2CmCL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
MD5 4add245d4ba34b04f213409bfe504c07
SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UAC.dll

IMPHASH 0ef725341a4aecf8398c0e2132f38049
SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
MD5 adb29e6b186daa765dc750128649b63d
SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10632

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetLastError GetCurrentProcessId GetCommandLineW GetProcAddress CreateThread GlobalFree LoadLibraryA OpenProcess GlobalAlloc CreateFileMappingW Sleep MapViewOfFile GetModuleHandleW UnmapViewOfFile CreateEventW SetCurrentDirectoryW GetVersionExW GetExitCodeProcess lstrcatW LocalFree GetPrivateProfileStringW FormatMessageW GetPrivateProfileIntW CreateProcessW CloseHandle GetLastError DuplicateHandle GetCurrentThreadId lstrlenW SetEvent WaitForSingleObject lstrcmpiW GetExitCodeThread GetModuleFileNameW

user32

SetWindowPos GetClientRect GetWindowThreadProcessId SetWindowLongW DefWindowProcW GetDlgItem CallWindowProcW CallNextHookEx GetClassNameW PeekMessageW DestroyWindow SendMessageW SetForegroundWindow IsWindowVisible MsgWaitForMultipleObjects LoadStringW EndDialog EnableWindow DialogBoxParamW LoadImageW MessageBoxW GetWindowLongW DispatchMessageW ShowWindow wsprintfW CreateDialogParamW GetWindowRect IsDialogMessageW FindWindowExW CharNextW CreateWindowExW LoadIconW PostMessageW SetWindowsHookExW UnhookWindowsHookEx TranslateMessage

shell32

ShellExecuteExW

advapi32

OpenServiceW QueryServiceStatus CloseServiceHandle OpenProcessToken OpenSCManagerW GetUserNameW AdjustTokenPrivileges LookupPrivilegeValueW GetTokenInformation EqualSid

ole32

CoInitialize

$PLUGINSDIR/modern-header.bmp

SHA256 766a893fe962aefd27c574cb05f25cf895d3fc70a00db5a6fa73d573f571aefc
MD5 940c56737bf9bb69ce7a31c623d4e87a
SHA1 f2f3b4e7b9c28df6687ceeaed300a793e3bac445
SHA512 81c60431619d7eb826b8da997c227c4f7077cc754caa15df6e0e7ae0e33690432bc2a27a7e295998f15e33a17b3d80e492d7cc09fd70dc43daf1cfe86b8746ff
SSDEEP 192:TYw3C/LSnMoejFXnknIHbGoijTr3dBZ9KPPsnY/T0x9j:TY3LSnlepnknIHKoUrdBZ9uPsY/Ix9j
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/nsDialogs.dll

IMPHASH 3b477381217c97b22146297f93df2a92
SHA256 4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed
MD5 1d8f01a83ddd259bc339902c1d33c8f1
SHA1 9f7806af462c94c39e2ec6cc9c7ad05c44eba04e
SHA512 28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567
SSDEEP 96:o4Ev02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YsNqkzfFc:o4EvCu5e81785qHFcU0PuAw0uyGIFc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsisFirewallW.dll

IMPHASH 18ecfc7436b69f8c13ec22664f9f1857
SHA256 53be5716ad80945cb99681d5dbda60492f5dfb206fbfdb776b769b3eeb18d2c2
MD5 f5bf81a102de52a4add21b8a367e54e0
SHA1 cf1e76ffe4a3ecd4dad453112afd33624f16751c
SHA512 6e280a75f706474ad31b2ce770fa34f54cb598528fac4477c466200a608b79c0f9b84011545595d9ba94331ad08e2f51bd42de91f92379db27686a28ba351256
SSDEEP 96:8SMPv+eLDUDp+weLv2lstU+0IgNB2Aa20kdArfOwJKbFrMiRsuHdRYL:wnxLDUwp6sgN2RDrzJMMmsuYL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6903

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

qbittorrent.exe

IMPHASH d7fe1989b38d66b5cd44fd34b83300fc
SHA256 c8169df564f2b6bc12b0e0c1d8f628f5e7daafac5b94c5d92211ed631b68a551
MD5 bebf18e9f646943cfe8067ab60b3ad9e
SHA1 d9dd3bb1190e70bcb338ffd713fd0c906b29d2c1
SHA512 531e0d546b02b1946010ca4b4ba8a26f34648efc315f75ba48d7ac534a7656c6c05d2c1a23e5a0ca80ffdc78ec133f4ba6601bb3ab6ce8392a88a8ec93093acb
SSDEEP 393216:klvHNg/cBByBwR93k0p9O/m/j/ALv7cS+s6gwGex4pvUyrOnRKFdu9CwJsv6tQU6:e7tUS/ALv7cxPx4p8yrMQU6
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

21584160

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

qbittorrent.pdb

d3d11

D3D11CreateDevice

dxgi

CreateDXGIFactory2

d3d12

D3D12SerializeVersionedRootSignature ord102 ord101

uxtheme

GetThemeColor GetThemePropertyOrigin GetThemeEnumValue GetThemeInt GetThemeBool GetThemeTransitionDuration GetCurrentThemeName CloseThemeData ord47 IsThemeBackgroundPartiallyTransparent OpenThemeData GetThemePartSize GetThemeMargins IsThemeActive IsAppThemed SetWindowTheme GetThemeBackgroundRegion

dwrite

DWriteCreateFactory

gdi32

GdiFlush CreateDIBSection CreateCompatibleDC SelectClipRgn SelectObject DeleteObject CombineRgn CreateRectRgn DeleteDC GetBitmapBits GetDIBits GetObjectW CreateBitmap CreateCompatibleBitmap CreateDCW OffsetRgn SetLayout BitBlt GetDeviceCaps ExtTextOutW SetTextAlign SetBkMode SetTextColor GetCharABCWidthsW GetCharABCWidthsI GetCharABCWidthsFloatW GetGlyphOutlineW SetWorldTransform SetGraphicsMode GetTextExtentPoint32W GetCharWidthI GetStockObject GetTextFaceW RemoveFontResourceExW AddFontResourceExW GetTextMetricsW GetOutlineTextMetricsW RemoveFontMemResourceEx AddFontMemResourceEx EnumFontFamiliesExW GetFontData CreateFontIndirectW GetRegionData

dwmapi

DwmSetWindowAttribute DwmGetWindowAttribute DwmEnableBlurBehindWindow

imm32

ImmNotifyIME ImmReleaseContext ImmGetOpenStatus ImmAssociateContextEx ImmAssociateContext ImmSetCompositionWindow ImmSetCandidateWindow ImmGetVirtualKey ImmGetCompositionStringW ImmGetDefaultIMEWnd ImmGetContext

setupapi

SetupDiGetDeviceInterfaceDetailW SetupDiOpenDeviceInterfaceW SetupDiGetClassDevsW SetupDiDestroyDeviceInfoList SetupDiOpenDevRegKey

shlwapi

AssocQueryStringW

wtsapi32

WTSFreeMemory WTSQuerySessionInformationW

api-ms-win-shcore-scaling-l1-1-1

GetDpiForMonitor

comdlg32

GetOpenFileNameW GetSaveFileNameW

d3d9

Direct3DCreate9

wsock32

ord1142 socket WSAStartup getpeername __WSAFDIsSet accept bind closesocket select WSACleanup getsockname ntohl htonl ntohs WSASetLastError WSAGetLastError htons setsockopt listen inet_ntoa getsockopt ord1141 connect

iphlpapi

ConvertInterfaceIndexToLuid ConvertInterfaceLuidToIndex GetAdaptersAddresses CancelMibChangeNotify2 ConvertInterfaceLuidToGuid ConvertInterfaceNameToLuidW NotifyUnicastIpAddressChange ConvertInterfaceLuidToNameW

winhttp

WinHttpGetProxyForUrl WinHttpOpen WinHttpGetDefaultProxyConfiguration WinHttpGetIEProxyConfigForCurrentUser WinHttpCloseHandle

oleaut32

SysAllocString VariantClear VariantInit GetErrorInfo SysStringLen SetErrorInfo SafeArrayPutElement SafeArrayCreateVector SysFreeString

secur32

AcceptSecurityContext DeleteSecurityContext QueryContextAttributesW EncryptMessage FreeCredentialsHandle DecryptMessage InitializeSecurityContextW ApplyControlToken AcquireCredentialsHandleW FreeContextBuffer InitSecurityInterfaceW

bcrypt

BCryptDecrypt BCryptGenerateSymmetricKey BCryptSetProperty BCryptCloseAlgorithmProvider BCryptOpenAlgorithmProvider BCryptFreeBuffer BCryptDestroyKey BCryptEncrypt BCryptEnumContextFunctions

ncrypt

NCryptSetProperty NCryptExportKey

crypt32

CertAddCertificateContextToStore CertOpenSystemStoreW CertGetCertificateContextProperty CertCompareCertificate CryptEncodeObject CertOpenStore CertFindCertificateInStore CertFreeCertificateChain CertDuplicateCertificateContext CertVerifyTimeValidity CertGetCertificateChain CertOpenSystemStoreA CertFindChainInStore CertAddStoreToCollection PFXImportCertStore CertCloseStore CertEnumCertificatesInStore CertFreeCertificateContext CertCreateCertificateContext

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

mpr

WNetGetUniversalNameW

userenv

GetUserProfileDirectoryW

advapi32

CryptEnumProvidersW FreeSid AddAccessAllowedAce InitializeAcl GetLengthSid AllocateAndInitializeSid GetTokenInformation InitializeSecurityDescriptor RegFlushKey RegSetValueExW RegDeleteValueW RegDeleteKeyW RegEnumValueW RegCreateKeyExW LookupAccountSidW GetNamedSecurityInfoW AddAccessAllowedAceEx AddAccessDeniedAceEx DuplicateToken CopySid SystemFunction036 GetSidSubAuthorityCount GetSidSubAuthority DeregisterEventSource RegisterEventSourceW ReportEventW CryptDecrypt CryptExportKey CryptCreateHash CryptSetHashParam CryptDestroyHash CryptSignHashW CryptAcquireContextW CryptGetUserKey CryptDestroyKey CryptGenRandom CryptGetProvParam CryptReleaseContext RegNotifyChangeKeyValue LookupAccountNameW GetUserNameW RegQueryValueExW SetSecurityDescriptorDacl SetSecurityDescriptorGroup OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW InitiateSystemShutdownW RegCloseKey RegEnumKeyExW RegOpenKeyExW RegQueryInfoKeyW SetSecurityDescriptorOwner

authz

AuthzInitializeResourceManager AuthzFreeResourceManager AuthzInitializeContextFromSid AuthzInitializeContextFromToken AuthzFreeContext AuthzAccessCheck

kernel32

SetFileTime GetFileInformationByHandleEx GetVolumePathNamesForVolumeNameW TzSpecificLocalTimeToSystemTime VirtualQuery OpenFileMappingW GetModuleFileNameW PeekNamedPipe CloseThreadpoolWait CreateThreadpoolWait WaitForThreadpoolWaitCallbacks SetThreadpoolWait GetUserPreferredUILanguages GetTimeFormatW GetDateFormatW GetCurrencyFormatW GetUserDefaultLCID LocaleNameToLCID GetCurrentPackageFullName LoadLibraryExW LocalAlloc IsProcessorFeaturePresent SystemTimeToTzSpecificLocalTime FreeLibraryAndExitThread ExitThread GetLogicalDrives GetCurrentDirectoryW MoveFileW MoveFileExW FileTimeToSystemTime SetFileInformationByHandle GetTimeZoneInformation FindFirstFileExW FindFirstChangeNotificationW FindCloseChangeNotification FindNextChangeNotification SetErrorMode GetVolumeNameForVolumeMountPointW GetDiskFreeSpaceExW GetUserGeoID GetGeoInfoW CreateSemaphoreW K32GetModuleFileNameExW ExitProcess LCMapStringW CompareStringW GetComputerNameExW GetNativeSystemInfo ResumeThread GetThreadPriority SwitchToThread CreateThread GetConsoleOutputCP SetConsoleCtrlHandler RtlUnwind InterlockedFlushSList InterlockedPushEntrySList RtlUnwindEx InitializeSListHead GetStartupInfoW IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlLookupFunctionEntry RtlCaptureContext GetCPInfo GetStringTypeW LCMapStringEx DecodePointer GetCommandLineA SetStdHandle EncodePointer TryAcquireSRWLockExclusive RtlPcToFileHeader QueryPerformanceFrequency InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW InitOnceBeginInitialize InitOnceComplete IsValidLocale EnumSystemLocalesW SetEnvironmentVariableW FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetLocaleInfoEx FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx IsValidCodePage GetOEMCP WriteConsoleW OutputDebugStringW CloseHandle GetCurrentProcess GetCurrentThread SetThreadPriority GetProcAddress LoadLibraryW LocalFree FormatMessageA FormatMessageW WideCharToMultiByte GetCurrentProcessId GetLastError ReleaseMutex WaitForSingleObject CreateMutexW OpenMutexW Sleep WaitForMultipleObjects RtlCaptureStackBackTrace MultiByteToWideChar GetDriveTypeW GetVolumePathNameW CreateFileW WriteFile GetSystemDirectoryW GetFileAttributesW SetFileAttributesW SetThreadExecutionState GetVolumeInformationW lstrcmpW GetConsoleWindow GetLongPathNameW GetUserDefaultLangID CreateEventW InitializeSRWLock AcquireSRWLockShared ReleaseSRWLockShared AcquireSRWLockExclusive ReleaseSRWLockExclusive GetUserDefaultLocaleName GetModuleHandleW GetCurrentThreadId WTSGetActiveConsoleSessionId OpenProcess CheckRemoteDebuggerPresent GlobalAlloc GlobalLock GlobalUnlock ExpandEnvironmentStringsW CreateProcessW GlobalSize GetACP GetLocaleInfoW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection UnmapViewOfFile GetFileSize CreateFileMappingW MapViewOfFile PostQueuedCompletionStatus SetWaitableTimer SetLastError InitializeCriticalSectionAndSpinCount GetQueuedCompletionStatus SetEvent TerminateThread QueueUserAPC SleepEx CreateIoCompletionPort GetFileAttributesExW CreateDirectoryW RemoveDirectoryW CreateHardLinkW GetFileInformationByHandle DeleteFileW CopyFileW ReadFile FindFirstFileW GetFileSizeEx FindNextFileW DeviceIoControl SetEndOfFile FindClose LoadLibraryA GetOverlappedResult SetFilePointerEx CreateEventA CreateWaitableTimerA CancelIoEx CancelIo GetModuleHandleA GetSystemTimeAsFileTime GlobalMemoryStatusEx WaitForMultipleObjectsEx WaitNamedPipeW DisconnectNamedPipe CreateNamedPipeW ConnectNamedPipe ResetEvent GlobalFree GetModuleHandleExW FreeLibrary DeleteFiber SwitchToFiber CreateFiberEx VirtualFree VirtualAlloc GetSystemInfo TlsSetValue TlsAlloc TlsGetValue TlsFree SystemTimeToFileTime GetSystemTime TryEnterCriticalSection ReleaseSemaphore GetExitCodeThread CreateSemaphoreA GetEnvironmentVariableW RtlVirtualUnwind GetStdHandle GetFileType ConvertThreadToFiberEx ConvertFiberToThread SetConsoleMode ReadConsoleA GetConsoleMode ReadConsoleW AreFileApisANSI HeapCreate HeapFree GetFullPathNameW GetDiskFreeSpaceW OutputDebugStringA LockFile SetFilePointer GetFullPathNameA UnlockFileEx GetTempPathW HeapValidate HeapSize GetTempPathA GetDiskFreeSpaceA GetFileAttributesA DuplicateHandle FlushViewOfFile CreateFileA WaitForSingleObjectEx DeleteFileA HeapReAlloc RaiseException HeapAlloc HeapCompact HeapDestroy UnlockFile LockFileEx GetProcessHeap QueryPerformanceCounter GetTickCount FlushFileBuffers CompareStringEx FreeConsole AllocConsole AttachConsole GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW TerminateProcess GetExitCodeProcess GetProcessId GetLocalTime

netapi32

NetShareEnum NetApiBufferFree

ole32

CoTaskMemFree CoUninitialize CoCreateGuid CoCreateInstance CoLockObjectExternal StringFromGUID2 RevokeDragDrop OleInitialize OleUninitialize OleGetClipboard OleFlushClipboard OleSetClipboard OleIsCurrentClipboard DoDragDrop ReleaseStgMedium CoGetApartmentType CoGetObjectContext CoGetMalloc RegisterDragDrop CoInitializeEx CoCreateFreeThreadedMarshaler

user32

DrawIconEx RegisterDeviceNotificationW UnregisterDeviceNotification DispatchMessageW TranslateMessage MsgWaitForMultipleObjectsEx SetCoalescableTimer RegisterClassW SetTimer GetQueueStatus KillTimer CharPrevExA PostThreadMessageW EnumWindows ShutdownBlockReasonCreate ShutdownBlockReasonDestroy AllowSetForegroundWindow GetSystemMenu EnableMenuItem GetSysColor GetSystemMetricsForDpi SystemParametersInfoForDpi SystemParametersInfoW DestroyWindow GetDesktopWindow GetDC ReleaseDC GetSystemMetrics MessageBoxW GetDisplayConfigBufferSizes QueryDisplayConfig GetMonitorInfoW DisplayConfigGetDeviceInfo DestroyIcon IsWindow GetCaretBlinkTime GetDoubleClickTime MessageBeep UpdateLayeredWindowIndirect DefWindowProcW DestroyCursor GetWindowLongPtrW GetAncestor GetCapture GetClientRect ClientToScreen ScreenToClient SetWindowLongPtrW GetWindowPlacement GetWindowRect GetParent IsWindowVisible UpdateLayeredWindow SetLayeredWindowAttributes InvalidateRect MonitorFromPoint GetDpiForWindow CreateWindowExW SetWindowPos AdjustWindowRectEx AdjustWindowRectExForDpi IsTouchWindow SetWindowTextW SetParent ShowWindow UnregisterTouchWindow SetForegroundWindow GetForegroundWindow IsChild GetWindow SetWindowPlacement IsZoomed IsIconic MonitorFromWindow MoveWindow GetUpdateRect BeginPaint EndPaint ReleaseCapture GetMenu SetWindowRgn AttachThreadInput SetFocus SendMessageTimeoutW GetWindowThreadProcessId BringWindowToTop SetActiveWindow SetCapture PostMessageW SetCursor FlashWindowEx SendMessageW RegisterTouchWindow RegisterWindowMessageW ChangeWindowMessageFilter GetKeyboardLayoutList UnregisterPowerSettingNotification RegisterPowerSettingNotification IsValidDpiAwarenessContext AreDpiAwarenessContextsEqual GetWindowDpiAwarenessContext GetThreadDpiAwarenessContext SetProcessDpiAwarenessContext GetClassInfoW LoadImageW RegisterClassExW UnregisterClassW ChildWindowFromPointEx WindowFromPoint EnableNonClientDpiScaling GetCursorPos GetFocus AddClipboardFormatListener SetClipboardViewer RemoveClipboardFormatListener ChangeClipboardChain IsHungAppWindow RegisterClipboardFormatW GetMessageW GetPointerInfo SendInput EnumDisplayMonitors GetKeyboardLayout FindWindowA IsWindowEnabled CreateCaret ShowCaret DestroyCaret SetCaretPos GetMenuItemInfoW SetMenuItemInfoW ModifyMenuW RemoveMenu InsertMenuW AppendMenuW CreateMenu DestroyMenu CreatePopupMenu TrackPopupMenu SetMenu DrawMenuBar LoadIconW GetClipboardFormatNameW EnumDisplayDevicesW CreateIconIndirect CreateCursor GetCursor GetCursorInfo SetCursorPos LoadCursorW GetIconInfo ToUnicode GetKeyboardState ToAscii HiliteMenuItem SetMenuDefaultItem TrackPopupMenuEx PeekMessageW GetKeyState MapVirtualKeyW GetAsyncKeyState GetMessageExtraInfo TrackMouseEvent GetTouchInputInfo CloseTouchInputHandle GetPointerType GetPointerFrameTouchInfo GetPointerFrameTouchInfoHistory GetPointerPenInfo GetPointerPenInfoHistory SkipPointerFrameMessages GetPointerDeviceRects ChangeWindowMessageFilterEx GetProcessWindowStation GetUserObjectInformationW

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

ws2_32

WSAAsyncSelect WSAAddressToStringW WSAHtonl WSAAccept WSAConnect WSAStringToAddressW freeaddrinfo WSARecv getaddrinfo WSASocketW WSASend WSARecvFrom WSASendTo WSAIoctl getnameinfo WSANtohs WSANtohl

winmm

timeKillEvent timeSetEvent PlaySoundW

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

shell32

SHGetStockIconInfo SHGetFileInfoW ord727 SHCreateItemFromIDList SHGetKnownFolderIDList CommandLineToArgvW ord190 SHOpenFolderAndSelectItems SHGetKnownFolderPath ShellExecuteW ord6 ord155 SHCreateItemFromParsingName ShellExecuteExW Shell_NotifyIconW Shell_NotifyIconGetRect SHGetMalloc SHBrowseForFolderW SHGetPathFromIDListW

powrprof

SetSuspendState

dbgeng

DebugCreate

Name

.text

Size

21.2MB

Virtual Size

21.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

12.2MB

Virtual Size

12.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

413KB

Virtual Size

531KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

766KB

Virtual Size

765KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.qtmimed

Size

44KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

149KB

Virtual Size

149KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

162KB

Virtual Size

161KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

qbittorrent.pdb

SHA256 746a57aec4c0f7f7e4da21d3f6b18c989ea36582acdb00b0e0c3d16331959d5a
MD5 1a7cb8a5dc6a23b2fd0d5b4e0bf1638f
SHA1 97124f273d2202572d7ac9c35ff33810d291c63f
SHA512 bb974fab9fe3068fcf1d2a8a33887f14b942f33ec6ace10e90aaff47a67f80a02be9edcd279876bee89dde9fbcb1edb6f1383330cdec4eaf465e1f45d01bba68
SSDEEP 393216:4NX806H0hHQexrBAqC91DU31qqyh8emQ5lz8jspZx0xMCbNI+CLX5551z+Ec+Tu:Uc0hHHdBFU9MUqy8M0e1ZB
MD5 SHA1 SHA512 SSDEEP

qt.conf

SHA256 fdb8fa58a6ffc14771ca2b1ef6438061a6cba638594d76d9021b91e755d030d3
MD5 af7f56a63958401da8bea1f5e419b2af
SHA1 f66ee8779ca6d570dea22fe34ef8600e5d3c5f38
SHA512 02f70ca7f1291b25402989be74408eb82343ab500e15e4ac22fbc7162eb9230cd7061eaa7e34acf69962b57ed0827f51ceaf0fa63da3154b53469c7b7511d23d
MD5 SHA1 SHA512

translations/qt_gl.qm

SHA256 204a01ac7deb6b5bae193afecbd1e50d18c73bf7d94badeb2bbfdf6123c4ed93
MD5 0661ffabfbc50187f3ba38876b721946
SHA1 eb5e7205355cfc6bcb4df27e224079842c97b296
SHA512 65ab66cc54d65e7678fa731a5c5f2cc9d6fc217b91ad47d538440811e09a23e49cd95ce62a79e3e8c275e250ac1a0b54bd289f6dd067573876da7aff54381d02
SSDEEP 3072:OYSG8zxWSDjq73Pf6FT1f4uh50QGrRfFD54YyUY0Ou4/tnra3Z0uYhB5YHfHRRn2:O39WSD3TMQGrxFD5EUVQ
MD5 SHA1 SHA512 SSDEEP

translations/qt_lt.qm

SHA256 47eb5f97467df769261421d54a5bea1131c9fb9b6388791d38bb6574335b64bf
MD5 8992b652d1499f5d2f12674f3f875a35
SHA1 e22766a49612f79156c550d83c6c230345dda433
SHA512 9b8b6dbff432f2a46c14bc183a6baf84acbf02bf2c5bb8c306c6538fbd9be1c0a9015bd46728f2f652f9163afc56b1e16d16eb95d8f7728f3c562ae9f4f1ae1e
SSDEEP 1536:i5v3+zmayloj6yJjhnBAbnrKnGrhA7WgdXclIsooY9i:SvOzAloj6yJ9BA7riGr+7WKXc+s5ui
MD5 SHA1 SHA512 SSDEEP

translations/qt_pt_PT.qm

SHA256 2c1e7bbf5168a64b43752dd4c547601c0bde6d610f8671fa3e3af38597e84783
MD5 6656500f7a28ef820ae9f97fd47fb5bb
SHA1 cc112b9c9513bcf7497f3417168b4c8a9f7640a9
SHA512 5c3cbfcf86af6b4d949c1d914cd379e512e73ba350af661033a386ee7fb981fbfcb43d9a35fde7656e17bb09f64f1469f84867a780573c3359d645269461d5a6
SSDEEP 768:OKGUuWW+WHjS0gMBd483+Y7bDPs4RHBloLUIltlzAJnx4nnliM1OPlOibLG:JGUuWPuSgm0Jn+n4Mhj
MD5 SHA1 SHA512 SSDEEP

translations/qt_sl.qm

SHA256 c44e0313a9414cc0e490b65b0c036fa11bca959353b228886547bc2c8492034f
MD5 d35a0fe35476be8bd149cee46e42b5e9
SHA1 9f3c85c115a283e5230d1eead84c8cb73a71fa03
SHA512 beeb1751882af081e80be93f7464d4c6322b724efa2cbd3e1cbe709181d380c1c57e770fa962bb706d6fcf4a8cb393e3f6e187c1f604f8ceefb201ca3200bd1c
SSDEEP 3072:9zQH0hOtgmiAZu0eeAEv+v49JnnSmICgr3n7jhCQUeinqyU5UggtRLGrQ2LZO+Y1:RpUsSpGr36wsR
MD5 SHA1 SHA512 SSDEEP

translations/qt_sv.qm

SHA256 0032c8cbaf79e836027f64696d012d3a7b89e5f5b8259e0331b97638adf38cff
MD5 70487cb8d7f7c82bedf886c3abe44d7f
SHA1 357d4ce6caff243541aeeb19f664611cf959d39e
SHA512 8a281df6baf54f44c8b6fcce8626638482364cac2226bd91f27b20dc1914cb2e13d303b1472a66431102b9e3053b3c655aba39c4a082ad932d8108df14964b59
SSDEEP 1536:Uu6DkpgyKmRmG15mGM6iFPi6Q/qTlOQZY2dKN8gK8:Uu6DotUG1sGMZPi6Q/qTlO2Y2YK8
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_ar.qm

SHA256 e03fe68d83201543698fd7fe267dd5dfc5bfd195147e74ff2f19ac3491401263
MD5 a7e4d0ba0fc5df07f62cc66ec9878979
SHA1 21fd131b23bdd1bba7bbb86f3ed5c83876f45638
SHA512 d9e6b10506fcf20b5b783f011908083d9df6c5df88e21b10d07f53a01ad6506a4b921c85335a25bae54e27bad7d01b6e240d58fdeeaabc7ff32014ec120c2ecf
SSDEEP 1536:XGlAMfkX1M0RdaCkR8lfv8vtc8EFrVYA2I4AJZWEWgHg1C8COvzHKHC6Jp9NV0V7:XUr0RACkIwDEpV1Lgf1ubtw3Bb
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_bg.qm

SHA256 e448ac9e3f16c29eb27af3012efe21052daa78fabfb34cd6dff2f69ee3bd3cdb
MD5 660413ad666a6b31a1acf8f216781d6e
SHA1 654409cdf3f551555957d3dbcf8d6a0d8f03a6c5
SHA512 c6ae4b784c3d302d7ec6b9ce7b27ddaf00713adf233f1246cd0475697a59c84d6a86baa1005283b1f89fcc0835fd131e5cf07b3534b66a0a0aa6ac6356006b8f
SSDEEP 1536:9ULiyUxPoT6qx+J7FJlaaMJnxjqxq+0Uiff0mbVeb7wiEwYuYqDKBkKHMXHCIMll:9ULpIVFnpwUiEujw27ncUQUz
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_ca.qm

SHA256 005b0aa0c9a5b930dfdd870661958a8069bbec862d75f98bce20bf7401bea13d
MD5 79172e893f4e5f8315542bcc6dc409a5
SHA1 bd4b8bc44a94cb540112b29dfaa64a25280abcd1
SHA512 5962e05f87c6218f156b0454687a9f6179dcaad524105b0729c65451796cc1377e0120b3a5f6011f06e59e924f461d801035bf85e7f8310fc8757bcf4222af31
SSDEEP 1536:BRLqRQFkzaZd4PIc83HuXrL+o3QEsAj1guyXELq+Iaw3Vp5ysCAGi05cDFLe:BRLRkz6dHcsu7Hg+B2XEWjaePzCTcBLe
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_cs.qm

SHA256 03028b42df5479270371e4c3bdc7df2f56cbbe6dda956a2864ac6f6415861fe8
MD5 c57d0de9d8458a5beb2114e47b0fde47
SHA1 3a0e777539c51bb65ee76b8e1d8dce4386cbc886
SHA512 f7970c132064407752c3d42705376fe04facafd2cfe1021e615182555f7ba82e7970edf5d14359f9d5ca69d4d570aa9ddc46d48ce787cff13d305341a3e4af79
SSDEEP 3072:5WjuhX0CVRaakGjW9E8SSOQfX/JlwVOMxrboRPqWxXfQvO7zjBf:5iFGj1QfXr8Gd
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_da.qm

SHA256 7d1e5ca3310b54d104c19bf2abd402b38e584e87039a70e153c4a9af74b25c22
MD5 859ce522a233af31ed8d32822da7755b
SHA1 70b19b2a6914da7d629f577f8987553713cd5d3f
SHA512 f9faa5a19c2fd99ccd03151b7be5dda613e9c69678c028cdf678adb176c23c7de9eb846cf915bc3cc67abd5d62d9cd483a5f47a57d5e6bb2f2053563d62e1ef5
SSDEEP 3072:XzswP2UvZ5aZ9jFTkmq/gnBNW/+PcWrqm2Vliz0DGdaS4KSLZjwTTgwUR0toT:j3m27AjCT
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_de.qm

SHA256 8e6c0b5a773e36d60942795e8971d729439d77a8613ec466fc24d0f73a2ce663
MD5 f77cc111780332fb6d3e68393f5337d6
SHA1 3c1db44416a99576e4c51d629ffcfc983840c228
SHA512 b906740a4f9e96b39495d951a4d96b37c25adbdd870dcfe6a280c1ae6bf80b92dbd963586b278c3a424eb38b25b9f0459a4042d2928cae5f6ee915e05feea39c
SSDEEP 3072:3iPAWlh77aB8KVXE7YXE0gQWaDesK2NvDDiEfuBwoulh15ce4M+ywsPYXCZPb7UI:32AEsFv656kWL
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_es.qm

SHA256 4ffda56ba3bb5414ab0482d1dde64a6f226e3488f6b7f3f11a150e01f53fa4c8
MD5 c7c58a6d683797bfdd3ef676a37e2a40
SHA1 809e580cdbf2ffda10c77f8be9bac081978c102b
SHA512 c5aed1a1aa13b8e794c83739b7fddeafd96785655c287993469f39607c8b9b0d2d8d222ecd1c13cf8445e623b195192f64de373a8fb6fe43743baf50e153cda5
SSDEEP 1536:JVwzuvb+Ta64KQd84arHX5pxiVhA8QlOD/BnFNa8NsvsfFsfcoZtIx6F:JVwSTG4KqVaLX5pEVK7OJFczstgRtIx8
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_fa.qm

SHA256 f78e59b5bdd586181a999034ba418868ed17fe9c05707fb65e523f70e92253d2
MD5 b4222dd74c92c888a7c25dc42e989d83
SHA1 b0adbe950790924242806f671712c57b584b58fb
SHA512 e7f048a7dab56ffd6c0f316962684c01c86c3c7c1d516d71b6a23ed0fc00a04ba5dda919321697eb81290acbb9984de97bae0170f54c5880873741fcd23e68a0
SSDEEP 1536:p0hbtxBPlwdOgOP6RT9MnrtrnfpSglHPPkzF0BGF8APbyuQQdJFK:ehZxXLgK6RGnrtNVlHPcp9hOurdLK
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_fi.qm

SHA256 e47fe13713e184d07fa4495dde0c589b0e8f562e91574a3558a9363443a4fa72
MD5 8472cf0bf6c659177ad45aa9e3a3247c
SHA1 7b5313cda126bb7863001499fb66fb1b56c255fc
SHA512 de36a1f033bd7a4d6475681edc93cc7b0b5dcb6a7051831f2ee6f397c971b843e1c10b66c4fb2eff2a23dc07433e80fbf7b95e62c5b93e121ab5ad88354d9cb8
SSDEEP 3072:lvdTgO2Yl97ZWnbgTLt/Tf9IlqAeiy5uWkYGM0wNCdRjSK2YUlUs:lvdkA9vh5uWkY0MK2YXs
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_fr.qm

SHA256 314243a55c32679ad473fdfe48dc7d66e973ad0fc8bf2164480c58dddb50c1a7
MD5 aa1140597635ff68d264f274c0f38b87
SHA1 170839a937a77c588614fdf31063c165ddc16b86
SHA512 9be7efa11fcc0c27009b4db08483141ac0d35e10e844550416c090ba863995107b60f4f8b0166fbd5932e4c02eebb67981d64564085143ceb5ba80dab275f3d1
SSDEEP 1536:YqXh2acowfpfcvgCZwmGPIDeirKTrig+sj7irWa:YsYacowxfc4KwmbC1CJGgWa
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_gd.qm

SHA256 63b439dd44139aa3aed54c2ebe03fa9bc77f22c14ed8fba8eff2608445bb233d
MD5 eb1fb93b0be51c2ad78fc7ba2f8b9f42
SHA1 24f7ff809e2f11c579cd388fea5a4c552ff8d4d0
SHA512 e13770aef33b6666ed7d54e03ee20ca291d4167d673ba6c61d8e64cdd5f7ffe0a9521b95af67be719bf263932ecf16e2b2d0b5f3404f9bcd7879114fcc6fc474
SSDEEP 1536:SiaI3C87jhakhR0VGkw7ys7CskUH6y4e6IFB4xyMuhvDnJGhFaCo527arBbm07LZ:S2yGjh17yGqxTXhvQoejJd8FUjVgk
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_he.qm

SHA256 e1ebca16afe8994356f81ca007fbdb9ddf865842010fe908923d873b687cad3f
MD5 deaf87d45ee87794ab2dc821f250a87a
SHA1 db39c6baa443aa9bb208043ef7fb7e3403c12d90
SHA512 276fce81249effe19e95607c39f9acb3a4afa3f90745da21b737a03fea956b079bca958039978223fd03f75ac270ec16e46095d0c6dda327366c948ec2d05b9c
SSDEEP 3072:XSue8Z7T3iJsqBejt/zNHSLzdetY2ZISfC/S:XSueK3w7Ijt8zUtYAISfC/S
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_hr.qm

SHA256 bb9eec9a9a652c1340dc75eb2e749be50df00f885b3d6900dfc76799c45b244d
MD5 8799d8cc6739637c9859e981db122a6e
SHA1 c95a416388521ef5bdb3ee5d11e9dcd4ce22ebbd
SHA512 332d2ee630c5bbaa28bd49307f3d36fcac0d025c7ce3ae33e7179cd7e030efee04c569c1fa9fa8e339404ef63d45d57fb425615e5d7bb6d0c7b1e40c6b4bf264
SSDEEP 3072:c5s0kXuz8fKXjSE/21DZVRtaKSfReeo4McCn/Xw9sufWB4Elq7Flcfrc+R:6+oC/fq8R
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_hu.qm

SHA256 6cf10d2b00cf6910e9d04a814684fe0213c395650baabfa04fd6adf49c00a16b
MD5 7bb60be22548739214363f6317fc2142
SHA1 41477d59b0bfbae081ad846f35420a136caf6c9a
SHA512 383211b1317809908ba2fc09cf13713cc7a1a6d92f7fed38489bae297a45f74f6062dcff0f0a3819f35f3e11f1e26caf95386ee0ba13b2d420dcfd3b5e990f72
SSDEEP 3072:Upggry5Qx/6+Qv/FLVYV6ktWrXq8t1nw4HVWCuhr57krAU+6gzsq2l2xczG7FKa/:MlNdUZ8ORa7
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_it.qm

SHA256 7808ed542a7833c4bd94ec8bdfbbca00bb4f2fe15979b9121ce3249323687300
MD5 19dbf4aad2cce123cdc9ecf5f12ab4a1
SHA1 98ad7a889db2059d3079b0335f9bf18de81f035e
SHA512 8c4b63a515c80283a20ac2a992b565ec5ac6666fa307075216a90cab47f9823f611279c6543d69902c385a1447e37280fbe0ec8cab97a1403f5b51ba8441c015
SSDEEP 1536:E/FKffdO4BKJb0td5pqCOIUPdPFIM7gxGQ9sRrFM6QJ4m8ihkM:E/F8FO4BKJb0td5pnOr1Cqg9mRK4IkM
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_ja.qm

SHA256 2b9581c69b975f59be505b127cd3c19d403ef3d12e0e8386fb97238223e9c1df
MD5 11d3d147bed6c705801c82c69948f304
SHA1 35848337b5f0a4b33ba3929a4d93dd09a2fa4170
SHA512 9215953bc7ea5141e04a6656726af5592388961294da1910ffeb21da5aef4d6719c74f65e4fe3d29d0090ee6dc390728d45b402e8f99e398642a998f0e6c4ad5
SSDEEP 1536:9NmR3BJ26c1Z7f25pVmuLXpxfqt7FEUWNifQje9kWI23pKXvx:9q3BJ01Z7u5pQuLbESUWNcAAI23pKfx
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_ka.qm

SHA256 e55e4b72fa620bebee5297ca59dfe2f49894a1e544f2b7485b1cfd8829289d6f
MD5 fc7fbff8f72f19314771eacada271b93
SHA1 0c1b747522bb2a1e326729bbf91a46e2997a6740
SHA512 e9ffd58095cdbbf32b66ac6390ce1ae7899ed29b12f4dc2c796085d10edb7c9bfd8830782f29bfb66cf0a9cc469ed753948743ae2248d066c8a5dcefb50f4c0b
SSDEEP 3072:v5rWfeR7liv/JC1YWnuGdQsA0VUrY4xBNPVs2Ph:vRbivRClnuG4JrhBNPVs2Ph
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_ko.qm

SHA256 0179ed1b136e1cb3f583351eaa2c545ba3d83a6ee3f82c32505926a1a5f5f183
MD5 082e361cbac2e3a0849f87b76ef6e121
SHA1 f10e882762dcd2e60041bdd6cc57598fc3df4343
SHA512 f378a42116924e30fa0b8fff1d3c3cb185dc35b2746dce2818be7c2aa95c5de103df44aac74da969c36c557f1d4de42ac7647ec41066247f8ad2697bded667ea
SSDEEP 1536:rvTy18hhPekHs1iNXVExWbStnn8TExgkYOvYejZOvXx4Mmf0MwUL8smk/pDZyy:y18hJ61nMStnn8TOgknQRLWZmkxNyy
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_lv.qm

SHA256 846e047573ae40c83671c3ba7f73e27efc24b98c82701da0df9973e574178bb2
MD5 bd8bdc7bbdb7a80c56dcb61b1108961d
SHA1 9538c4d8bb9a95c0d9dc57c7708a99dd53a32d1f
SHA512 f040ec410ebfea21145f944e71adcae8e5f60907d1d3716a937a9a59a48f70c6b7eaac91c2c554f59357a7bc820cdbd17c73a4decc20b51f68eb79edd35c5554
SSDEEP 3072:y5pmbKIhooMbGe91MrjOhmGzP6LJbWz5XIxELpU6:yObeqrjPGzeJyJLy6
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_nl.qm

SHA256 f61513bcdbb6ad800585f9437a95d018aab17fa12ee414aa31462ff279d8240e
MD5 5034443529b94a017f63aadcf4be76a3
SHA1 5cce892cd7ed9243b0b57923ee92c79ad626153b
SHA512 7085718a81418ce18c8bea2c1a8f5f75f55f4c001bfec1f04abb73be1d37ef1069490ee9c99610dda7597c170135a17dd58290082225558101ccebd148261079
SSDEEP 3072:qufM3bk4pXtXJB/Pz9DLjlrIQatXqRIqv5C5PwhgwIbUrwiCqT0voFN:TE3ljncQl35N
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_nn.qm

SHA256 983734b40aa4d250421ba0d1614416cb8b424d6f140f4a7dbf8b11e65eef63dc
MD5 6dac3cad287cd86a5b047c3651f05be0
SHA1 69fc47ff3a33adc23415f4f87272053998d6149a
SHA512 2d8308a0e1b0405a2a16d2c28c0187d510bc249c7716f14cec2b1f8695232036ae0cd2684620e178f345c9b3b2ec82ad45927ad68edabb41409e0ec6eb38abb2
SSDEEP 3072:ocFM5fgnggr7pNt4uiQjYc/giREtCSAKl8DzMm81MviqEcMIJ:9MZHY+eYc1nisJ
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_pl.qm

SHA256 3cf6b5c14d5eb0cf81e9af2066e66b3aa579a6b9b3c323ed670761f6254a8c54
MD5 5d91f52d86e7dcb67456e7d380c6fd0c
SHA1 6e4eb1120df6d5f9a1c0b151ff3f787313219eaf
SHA512 fba45b9c757f1ac525e7422312305f60f97822c056d6ef1ef85c38906847394b0d46c55abd1639f7d907114f206ffdc5a6f3fde7d09192ffcbc22c880716207c
SSDEEP 1536:I60p/YIFtDT8FIWYbIJmPYuIpnmxAk6vwyJNqSm9+P:GpTDT8FIWfJmdCmxApvbnqSm9+P
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_pt_BR.qm

SHA256 8344f5bc333c45d37cfd425a09124eb11f12439f33737ec0b8683d04a416746e
MD5 c9d3d4f3a7bd0b50fd7256a360026756
SHA1 fd1373417c7e93d63c97b3be7956cd7dd80cebe9
SHA512 294301aef9d8b1cc14dc442cc59f5e9004007ad0f2558d97c83bcab0bbac7fb40768b24fb3b2f8f75f58fc02a28447d94f9d1f2c29f4c5664a36cddf0a27c4c8
SSDEEP 3072:3xbdpdlyy2nnN0wu3oV+4qftiDfEY3kHwlH:hbdpKNsoVhP4qH
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_ru.qm

SHA256 3da6605668f9178d11a838c4515478084dcfb4f9cf22f99d7a92b492db9c224b
MD5 5096ad2743bf89a334fba6a2964300d4
SHA1 405f45361a537c7923c240d51b0ff1c46621c203
SHA512 7b88b501792b5831426baa669138192ed94cc3f8323a3df9d5287655dc4d877706908c517ab7523ae8a283bf50b47123f13b8ae40ea2f3081c3459edc47fc8dd
SSDEEP 1536:hn4dEJ63pdhPpy6gu5fs4MHQv6sLlxnrncF423ZL9xyuXwdcX8LZuf76CW+WeXFx:aN3pdV5fZbpItXsttRY+WSq
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_sk.qm

SHA256 d586ae2c314074cf398417fdecb40709d5478dfeb0a67c2fe60d509ee9b59ed7
MD5 3d60e50dcbcbd70ee699bc9b1524fcb9
SHA1 0211b4911b5b74cc1a46c0fca87d3bf5632aa44a
SHA512 f98211867f1dbcb8a342c00e23fa5718be6e999f7449cb8470b41bf0f527c7f78cc4d6666e28968f32e96026907156753979bfada7e6bf4225d02a902d24906d
SSDEEP 3072:roXDuC1u/2lUBGjJirE5tsd/aev1GIfOdvhw:OucMGjH5tbm
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_tr.qm

SHA256 4013c3340dab7ae2ae594bfb779a15d9e65c8ee3e7b34e11074ef9295250de02
MD5 ed4c3a374b744a2193373dc2fdf0873a
SHA1 623ed6241d942155d49bc9eb4bf92985bd8ea691
SHA512 080e0f9e8d55b48034e3deb96d91912edc6176865df2c5e9ea17c272f56438b08e8b4e069a10d9df5fa5e96bf32ee7b279e16c57a873f786c2ecc24e8ee03a49
SSDEEP 3072:xAi2LinnCR1ht+uZDG9AaaKgRUwZI3Tko7XjFR5+2sawfpIPaan/5z84/1+xwJK5:K4/uG2Dg/4NTnSk
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_uk.qm

SHA256 51b8ff55b37dc5907d637a8ddda12fbe816852b0244c74eb4f0fb84867a786e0
MD5 d6234e4e21021102b021744d5fa22346
SHA1 63a14327d0cf0941d6d6b58bfa7e8b10337f557b
SHA512 37d24a092c5f29bacb7a4ca8207c4eefd0f073b7e74a492402867f758084091bf1d79d2ba2b4a28b35fef42e8023c371fde97578f74bb2033551154e77102de6
SSDEEP 1536:jXwjFVUDdMUD4TzdAhpQgO5poZHvJllEnhmdK4I77/dnPJX/imfb1jhvv3BxT8ue:jBzD4Tzaw5pCvJ8hVPdlvj3p8
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_zh_CN.qm

SHA256 98fd4b97dbec8af5cdd15f85a16c33efc77301b1aeb0469daafc04b9ab2f3570
MD5 4c8a57b5405b7cfea0a5a98362dd3b2d
SHA1 3561f95f646b2172d2e870973b6d81e983ed00a6
SHA512 8bf1c1e01a10f356ab775cc96ead12f6981349ebfacb9f5f1a2337058b4745faad4361f054884ec3cdaa005ad3a4a85920ba47b16b73851200bc604d4311e3b1
SSDEEP 1536:axTFoXJaVZyqPtoMaOBlmxTRnYtKi0mqElZ1djWIWTcc8Z:axi6yqPe/OBlyTRYYvmbxbc8Z
MD5 SHA1 SHA512 SSDEEP

translations/qtbase_zh_TW.qm

SHA256 21012b2b427f8d09d31ce9cae582ca27955b478ca3dc2ec18a3068d808638c6a
MD5 ca0a16eb14d6c36a0ea90a4d4ca3832e
SHA1 62f789e8fa0c13c5fd4fe250576bf45b07c85781
SHA512 94094ef2fe663d752311777660730bdd3c44627b816aa973424b780e90efdae5ed49d3a1e2df6c513f1810f69876906c147772ce9c986b326ff65fef6c148700
SSDEEP 3072:59WqMP10JBOs6ZcFOsJoYqaWFzerP5P8pa:3wAYs6uFOEor/x28pa
MD5 SHA1 SHA512 SSDEEP

uninst.exe

IMPHASH 9dda1a1d1f8a1d13ae0297b47046b26e
SHA256 ba1ec2684ceee82f817b250417985a9ef33dd679f5e97a18e0f8f3fda8a055b1
MD5 7ef2fd299b7bffdd88a53223cb6ac426
SHA1 ea63fc81cc8a9ea3031f5eca4e9ec4c8be25f46e
SHA512 47da0192a634ae7ea7553ad2e158c505b7cdb0c13ec956424f8777522609544bf059ac7b6919c877a2c67e7576e8237071d0962cfa59b321eb0ff7d53245e6f6
SSDEEP 3072:dnPdzuK8Jdw4TMJw3uXceAgF88Q0ejM6ocOSlH/Hs9:dnPdudwDzmgO8iPOSJM9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13893

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

RemoveDirectoryW lstrcmpiA GetTempFileNameW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW WriteFile ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize CreateFileW GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject CopyFileW

$PLUGINSDIR/FindProcDLL.dll

IMPHASH 0cd94af3a016a5de4ab9a5a9a02d4173
SHA256 c0948b2ec36a69f82c08935fac4b212238b6792694f009b93b4bdb478c4f26e3
MD5 b4faf654de4284a89eaf7d073e4e1e63
SHA1 8efcfd1ca648e942cbffd27af429784b7fcf514b
SHA512 eef31e332be859cf2a64c928bf3b96442f36fe51f1a372c5628264a0d4b2fc7b3e670323c8fb5ffa72db995b8924da2555198e7de7b4f549d9e0f9e6dbb6b388
MD5 SHA1 SHA512

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/LangDLL.dll

IMPHASH fe3375e7e4529b73ba45ab2246b9269b
SHA256 32230128c18574c1e860dfe4b17fe0334f685740e27bc182e0d525a8948c9c2e
MD5 50016010fb0d8db2bc4cd258ceb43be5
SHA1 44ba95ee12e69da72478cf358c93533a9c7a01dc
SHA512 ed4cf49f756fbf673449dca20e63dce6d3a612b61f294efc9c3ccebeffa6a1372667932468816d3a7afdb7e5a652760689d8c6d3f331cedee7247404c879a233
SSDEEP 48:S46+/pTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8m/ofjLl:zbuPbO5tCZBVEAWyMEFv2CmCL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
MD5 4add245d4ba34b04f213409bfe504c07
SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UAC.dll

IMPHASH 0ef725341a4aecf8398c0e2132f38049
SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
MD5 adb29e6b186daa765dc750128649b63d
SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10632

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetLastError GetCurrentProcessId GetCommandLineW GetProcAddress CreateThread GlobalFree LoadLibraryA OpenProcess GlobalAlloc CreateFileMappingW Sleep MapViewOfFile GetModuleHandleW UnmapViewOfFile CreateEventW SetCurrentDirectoryW GetVersionExW GetExitCodeProcess lstrcatW LocalFree GetPrivateProfileStringW FormatMessageW GetPrivateProfileIntW CreateProcessW CloseHandle GetLastError DuplicateHandle GetCurrentThreadId lstrlenW SetEvent WaitForSingleObject lstrcmpiW GetExitCodeThread GetModuleFileNameW

user32

SetWindowPos GetClientRect GetWindowThreadProcessId SetWindowLongW DefWindowProcW GetDlgItem CallWindowProcW CallNextHookEx GetClassNameW PeekMessageW DestroyWindow SendMessageW SetForegroundWindow IsWindowVisible MsgWaitForMultipleObjects LoadStringW EndDialog EnableWindow DialogBoxParamW LoadImageW MessageBoxW GetWindowLongW DispatchMessageW ShowWindow wsprintfW CreateDialogParamW GetWindowRect IsDialogMessageW FindWindowExW CharNextW CreateWindowExW LoadIconW PostMessageW SetWindowsHookExW UnhookWindowsHookEx TranslateMessage

shell32

ShellExecuteExW

advapi32

OpenServiceW QueryServiceStatus CloseServiceHandle OpenProcessToken OpenSCManagerW GetUserNameW AdjustTokenPrivileges LookupPrivilegeValueW GetTokenInformation EqualSid

ole32

CoInitialize

$PLUGINSDIR/modern-header.bmp

SHA256 766a893fe962aefd27c574cb05f25cf895d3fc70a00db5a6fa73d573f571aefc
MD5 940c56737bf9bb69ce7a31c623d4e87a
SHA1 f2f3b4e7b9c28df6687ceeaed300a793e3bac445
SHA512 81c60431619d7eb826b8da997c227c4f7077cc754caa15df6e0e7ae0e33690432bc2a27a7e295998f15e33a17b3d80e492d7cc09fd70dc43daf1cfe86b8746ff
SSDEEP 192:TYw3C/LSnMoejFXnknIHbGoijTr3dBZ9KPPsnY/T0x9j:TY3LSnlepnknIHKoUrdBZ9uPsY/Ix9j
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/nsisFirewallW.dll

IMPHASH 18ecfc7436b69f8c13ec22664f9f1857
SHA256 53be5716ad80945cb99681d5dbda60492f5dfb206fbfdb776b769b3eeb18d2c2
MD5 f5bf81a102de52a4add21b8a367e54e0
SHA1 cf1e76ffe4a3ecd4dad453112afd33624f16751c
SHA512 6e280a75f706474ad31b2ce770fa34f54cb598528fac4477c466200a608b79c0f9b84011545595d9ba94331ad08e2f51bd42de91f92379db27686a28ba351256
SSDEEP 96:8SMPv+eLDUDp+weLv2lstU+0IgNB2Aa20kdArfOwJKbFrMiRsuHdRYL:wnxLDUwp6sgN2RDrzJMMmsuYL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6903

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer