2026-07-22_9e20aa4a713795a167d9a53b024f1b2d_conti_elex

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-22_9e20aa4a713795a167d9a53b024f1b2d_conti_elex
Size 245KB
Sample260723-b3mlrayhjc
SHA256 5a152685189d240541b505d31f1e3998f7b993932e7cd1aba1ed54814fe7bb5e
MD5 9e20aa4a713795a167d9a53b024f1b2d
SHA1 388fda5c14ba0ede1ff0ee19153e11c00deb2005
SHA512 09f7ff4b9bcbf65a58ee6bef49a144bb9a57ceb5e60af750b93f9e0fd7df36feddd495d708243f1afdd168c337a9aa82207e8177cbbe2873584be75dc5ca5dbd
SSDEEP 6144:RNDFj99d9OnzXB5UG2BvQaQKvmpTXb8cTaO:R1Fjrd9OnzXB5UG2ZQKup1aO
TLSH
T1DC342A5AEA024CB1EE9281F5518BE7ABA62CF9314C23CDD2F7D51F0564B2DEA510E313
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-07-22_9e20aa4a713795a167d9a53b024f1b2d_conti_elex

.exe 245KB

2026-07-22_9e20aa4a713795a167d9a53b024f1b2d_conti_elex

IMPHASH fb6c444b26329f6428085274e9e30bdc
SHA256 5a152685189d240541b505d31f1e3998f7b993932e7cd1aba1ed54814fe7bb5e
MD5 9e20aa4a713795a167d9a53b024f1b2d
SHA1 388fda5c14ba0ede1ff0ee19153e11c00deb2005
SHA512 09f7ff4b9bcbf65a58ee6bef49a144bb9a57ceb5e60af750b93f9e0fd7df36feddd495d708243f1afdd168c337a9aa82207e8177cbbe2873584be75dc5ca5dbd
SSDEEP 6144:RNDFj99d9OnzXB5UG2BvQaQKvmpTXb8cTaO:R1Fjrd9OnzXB5UG2ZQKup1aO
TLSH
T1DC342A5AEA024CB1EE9281F5518BE7ABA62CF9314C23CDD2F7D51F0564B2DEA510E313
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

db:88:a8:b1:c8:8d:c5:ab:91:63:3e:80:cc:26:ec:26:c5:de:ca:4a:5a:37:33:1c:ae:a1:9e:6b:9c:fd:e0:ff

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=9144030027939873X7,CN=ZTE CORPORATION,O=ZTE CORPORATION,L=Shenzhen,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13085368656e7a68656e,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Apr 21, 2026

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

04:d8:ad:08:92:85:75:79:7e:89:0c:64:a1:eb:de:35

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 19, 2025 - Nov 14, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

5296

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW

kernel32

CheckRemoteDebuggerPresent CloseHandle CreateFileMappingA DeleteCriticalSection EnterCriticalSection FreeLibrary GetCommandLineW GetCurrentProcess GetLastError GetModuleHandleA GetModuleHandleW GetProcAddress GetStartupInfoA InitializeCriticalSection IsDebuggerPresent LeaveCriticalSection LoadLibraryA LocalFree MapViewOfFile OpenProcess SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnmapViewOfFile VirtualProtect VirtualQuery WideCharToMultiByte

msvcrt

__getmainargs __initenv __lconv_init __p__acmdln __p__commode __p__fmode __set_app_type __setusermatherr _amsg_exit _cexit _errno _initterm _iob _onexit _vsnprintf abort calloc exit fclose fopen_s fprintf free fwrite malloc memcmp memcpy memset signal strcmp strlen strncmp strtol vfprintf wcslen

libwinpthread-1

pthread_mutex_destroy pthread_mutex_init pthread_mutex_lock pthread_mutex_unlock

shell32

CommandLineToArgvW

libgcc_s_dw2-1

_Unwind_Resume __deregister_frame_info __register_frame_info

libssp-0

__stack_chk_fail __stack_chk_guard

libstdc++-6

_ZNKSt5ctypeIcE13_M_widen_initEv _ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE4findEPKcjj _ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE7compareEPKc _ZNSo3putEc _ZNSo5flushEv _ZNSt12__basic_fileIcED1Ev _ZNSt13basic_filebufIcSt11char_traitsIcEE4openEPKcSt13_Ios_Openmode _ZNSt13basic_filebufIcSt11char_traitsIcEE5closeEv _ZNSt13basic_filebufIcSt11char_traitsIcEEC1Ev _ZNSt13basic_filebufIcSt11char_traitsIcEED1Ev _ZNSt14basic_ifstreamIcSt11char_traitsIcEED1Ev _ZNSt14basic_ofstreamIcSt11char_traitsIcEED1Ev _ZNSt6localeC1Ev _ZNSt6localeD1Ev _ZNSt6thread15_M_start_threadESt10unique_ptrINS_6_StateESt14default_deleteIS1_EEPFvvE _ZNSt6thread6_StateD2Ev _ZNSt6thread6detachEv _ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_replaceEjjPKcj _ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE12_M_constructEjc _ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE14_M_replace_auxEjjjc _ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE6appendEPKc _ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE7reserveEj _ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_appendEPKcj _ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_assignERKS4_ _ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_createERjj _ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_mutateEjjPKcj _ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEC1EOS4_ _ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEC1ERKS4_ _ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE9_M_createERjj _ZNSt7__cxx1119basic_ostringstreamIcSt11char_traitsIcESaIcEED1Ev _ZNSt8ios_base4InitC1Ev _ZNSt8ios_base4InitD1Ev _ZNSt8ios_baseC2Ev _ZNSt8ios_baseD2Ev _ZNSt9basic_iosIcSt11char_traitsIcEE4initEPSt15basic_streambufIcS1_E _ZNSt9basic_iosIcSt11char_traitsIcEE5clearESt12_Ios_Iostate _ZSt16__ostream_insertIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_PKS3_i _ZSt16__throw_bad_castv _ZSt17__throw_bad_allocv _ZSt18_Rb_tree_decrementPSt18_Rb_tree_node_base _ZSt18_Rb_tree_incrementPSt18_Rb_tree_node_base _ZSt19__throw_logic_errorPKc _ZSt20__throw_length_errorPKc _ZSt20__throw_out_of_rangePKc _ZSt20__throw_system_errori _ZSt24__throw_invalid_argumentPKc _ZSt24__throw_out_of_range_fmtPKcz _ZSt29_Rb_tree_insert_and_rebalancebPSt18_Rb_tree_node_baseS0_RS_ _ZSt7getlineIcSt11char_traitsIcESaIcEERSt13basic_istreamIT_T0_ES7_RNSt7__cxx1112basic_stringIS4_S5_T1_EES4_ _ZSt9terminatev _ZTTNSt7__cxx1119basic_ostringstreamIcSt11char_traitsIcESaIcEEE _ZTTSt14basic_ifstreamIcSt11char_traitsIcEE _ZTTSt14basic_ofstreamIcSt11char_traitsIcEE _ZTVN10__cxxabiv117__class_type_infoE _ZTVN10__cxxabiv120__si_class_type_infoE _ZTVN10__cxxabiv121__vmi_class_type_infoE _ZTVNSt7__cxx1115basic_stringbufIcSt11char_traitsIcESaIcEEE _ZTVNSt7__cxx1119basic_ostringstreamIcSt11char_traitsIcESaIcEEE _ZTVSt13basic_filebufIcSt11char_traitsIcEE _ZTVSt14basic_ifstreamIcSt11char_traitsIcEE _ZTVSt14basic_ofstreamIcSt11char_traitsIcEE _ZTVSt15basic_streambufIcSt11char_traitsIcEE _ZTVSt9basic_iosIcSt11char_traitsIcEE _ZdaPv _ZdlPv _Znaj _Znwj __cxa_begin_catch __cxa_end_catch __cxa_guard_abort __cxa_guard_acquire __cxa_guard_release __cxa_rethrow __gxx_personality_v0

libsafecrt

memset_s

libcrypto-3

AES_cbc_encrypt AES_set_decrypt_key AES_set_encrypt_key

qt5core

_Z21qRegisterResourceDataiPKhS0_S0_ _Z22qInstallMessageHandlerPFv9QtMsgTypeRK18QMessageLogContextRK7QStringE _Z23qUnregisterResourceDataiPKhS0_S0_ _Z9qunsetenvPKc _ZN10QArrayData10deallocateEPS_jj _ZN10QArrayData11shared_nullE _ZN10QByteArray11reallocDataEj6QFlagsIN10QArrayData16AllocationOptionEE _ZN10QByteArray7fromHexERKS_ _ZN10QByteArrayC1EPKci _ZN10QByteArrayaSEPKc _ZN10QEventLoop4execE6QFlagsINS_17ProcessEventsFlagEE _ZN10QEventLoop4quitEv _ZN10QEventLoopC1EP7QObject _ZN10QEventLoopD1Ev _ZN10QJsonArrayD1Ev _ZN10QJsonValue27stringDataFromQStringHelperERK7QString _ZN10QJsonValueD1Ev _ZN10QTextCodec12codecForNameERK10QByteArray _ZN11QFileDevice5closeEv _ZN11QFileDevice5flushEv _ZN11QJsonObjectC1Ev _ZN11QJsonObjectD1Ev _ZN11QMetaObject10ConnectionD1Ev _ZN11QMetaObject18connectSlotsByNameEP7QObject _ZN11QMetaObject8activateEP7QObjectPKS_iPPv _ZN11QTextStreamC1EP9QIODevice _ZN11QTextStreamD1Ev _ZN11QTextStreamlsEPKc _ZN11QTextStreamlsERK7QString _ZN11QTextStreamlsEc _ZN11QTextStreamlsEi _ZN11QTranslator4loadERK7QStringS2_S2_S2_ _ZN11QTranslatorC1EP7QObject _ZN13QJsonDocument8fromJsonERK10QByteArrayP15QJsonParseError _ZN13QJsonDocumentC1Ev _ZN13QJsonDocumentD1Ev _ZN16QCoreApplication16setSetuidAllowedEb _ZN16QCoreApplication17installTranslatorEP11QTranslator _ZN16QCoreApplication18applicationDirPathEv _ZN16QCoreApplication9translateEPKcS1_S1_i _ZN16QRandomGenerator10_fillRangeEPvS0_ _ZN16QRandomGeneratorC1EPKjS1_ _ZN18QCryptographicHash4hashERK10QByteArrayNS_9AlgorithmE _ZN18QRegularExpressionC1ERK7QString6QFlagsINS_13PatternOptionEE _ZN18QRegularExpressionD1Ev _ZN19QProcessEnvironment17systemEnvironmentEv _ZN19QProcessEnvironmentD1Ev _ZN23QRegularExpressionMatchD1Ev _ZN4QDir10setCurrentERK7QString _ZN4QDirC1ERK7QString _ZN4QDirD1Ev _ZN4QUrl17toPercentEncodingERK7QStringRK10QByteArrayS5_ _ZN4QUrlC1ERK7QStringNS_11ParsingModeE _ZN4QUrlC1Ev _ZN4QUrlD1Ev _ZN5QFile4copyERK7QString _ZN5QFile4openE6QFlagsIN9QIODevice12OpenModeFlagEE _ZN5QFile6existsERK7QString _ZN5QFile6removeERK7QString _ZN5QFile6removeEv _ZN5QFileC1ERK7QString _ZN5QFileD1Ev _ZN5QTime11currentTimeEv _ZN6QDebug9putStringEPK5QCharj _ZN6QDebugD1Ev _ZN6QMutex4lockEv _ZN6QMutex6unlockEv _ZN6QMutexC1ENS_13RecursionModeE _ZN6QMutexD1Ev _ZN6QTimer11setIntervalEi _ZN6QTimer16staticMetaObjectE _ZN6QTimer4stopEv _ZN6QTimer5startEv _ZN6QTimer7timeoutENS_14QPrivateSignalE _ZN6QTimerC1EP7QObject _ZN6QTimerD1Ev _ZN7QLocaleC1Ev _ZN7QLocaleD1Ev _ZN7QObject10childEventEP11QChildEvent _ZN7QObject10timerEventEP11QTimerEvent _ZN7QObject11connectImplEPKS_PPvS1_S3_PN9QtPrivate15QSlotObjectBaseEN2Qt14ConnectionTypeEPKiPK11QMetaObject _ZN7QObject11customEventEP6QEvent _ZN7QObject11deleteLaterEv _ZN7QObject11eventFilterEPS_P6QEvent _ZN7QObject11qt_metacallEN11QMetaObject4CallEiPPv _ZN7QObject11qt_metacastEPKc _ZN7QObject13connectNotifyERK11QMetaMethod _ZN7QObject13setObjectNameERK7QString _ZN7QObject14disconnectImplEPKS_PPvS1_S3_PK11QMetaObject _ZN7QObject16disconnectNotifyERK11QMetaMethod _ZN7QObject16staticMetaObjectE _ZN7QObject5eventEP6QEvent _ZN7QObjectC2EPS_ _ZN7QObjectD2Ev _ZN7QRegExpC1ERK7QStringN2Qt15CaseSensitivityENS_13PatternSyntaxE _ZN7QRegExpD1Ev _ZN7QString13toUtf8_helperERKS_ _ZN7QString14compare_helperEPK5QChariPKciN2Qt15CaseSensitivityE _ZN7QString14trimmed_helperERKS_ _ZN7QString15fromUtf8_helperEPKci _ZN7QString15toLatin1_helperERKS_ _ZN7QString16fromAscii_helperEPKci _ZN7QString17simplified_helperERKS_ _ZN7QString18toLocal8Bit_helperEPK5QChari _ZN7QString20fromLocal8Bit_helperEPKci _ZN7QString6appendERKS_ _ZN7QString6numberEii _ZN7QString6removeE5QCharN2Qt15CaseSensitivityE _ZN7QString6removeERKS_N2Qt15CaseSensitivityE _ZN7QString6removeEii _ZN7QString7replaceERK7QRegExpRKS_ _ZN7QString7replaceERKS_S1_N2Qt15CaseSensitivityE _ZN7QString8truncateEi _ZN7QStringaSERKS_ _ZN8QLibrary11setFileNameERK7QString _ZN8QLibrary4loadEv _ZN8QLibrary6unloadEv _ZN8QLibrary7resolveEPKc _ZN8QLibraryC1EP7QObject _ZN8QProcess13startDetachedERK7QString _ZN8QProcess14waitForStartedEi _ZN8QProcessC1EP7QObject _ZN8QProcessD1Ev _ZN8QVariantD1Ev _ZN9QDateTime15currentDateTimeEv _ZN9QDateTimeD1Ev _ZN9QIODevice7readAllEv _ZN9QListData11detach_growEPii _ZN9QListData11shared_nullE _ZN9QListData6appendEv _ZN9QListData6detachEi _ZN9QListData7disposeEPNS_4DataE _ZN9QSettings10beginGroupERK7QString _ZN9QSettings11setIniCodecEP10QTextCodec _ZN9QSettings8endGroupEv _ZN9QSettingsC1ERK7QStringNS_6FormatEP7QObject _ZN9QSettingsD1Ev _ZN9QtPrivate16QStringList_joinEPK11QStringListPK5QChari _ZNK10QByteArray4leftEi _ZNK10QByteArray5toHexEv _ZNK10QByteArray6isNullEv _ZNK10QJsonArray2atEi _ZNK10QJsonValue4typeEv _ZNK10QJsonValue7toArrayEv _ZNK10QJsonValue8toObjectEv _ZNK10QJsonValue8toStringEv _ZNK11QJsonObject5valueERK7QString _ZNK11QMetaObject2trEPKcS1_i _ZNK11QObjectData17dynamicMetaObjectEv _ZNK13QJsonDocument6objectEv _ZNK14QMessageLogger4infoEPKcz _ZNK14QMessageLogger4infoEv _ZNK14QMessageLogger5debugEv _ZNK14QMessageLogger7warningEv _ZNK14QMessageLogger8criticalEv _ZNK18QRegularExpression5matchERK7QStringiNS_9MatchTypeE6QFlagsINS_11MatchOptionEE _ZNK19QProcessEnvironment4keysEv _ZNK23QRegularExpressionMatch8capturedEi _ZNK23QRegularExpressionMatch8hasMatchEv _ZNK4QDir5mkdirERK7QString _ZNK4QDir6existsERK7QString _ZNK5QFile4sizeEv _ZNK5QTime4msecEv _ZNK7QLocale8languageEv _ZNK7QObject10objectNameEv _ZNK7QString11lastIndexOfE5QChariN2Qt15CaseSensitivityE _ZNK7QString11lastIndexOfERKS_iN2Qt15CaseSensitivityE _ZNK7QString3argERKS_i5QChar _ZNK7QString3argExii5QChar _ZNK7QString3midEii _ZNK7QString4leftEi _ZNK7QString5rightEi _ZNK7QString5splitERKS_NS_13SplitBehaviorEN2Qt15CaseSensitivityE _ZNK7QString7indexOfE5QChariN2Qt15CaseSensitivityE _ZNK7QString7indexOfERKS_iN2Qt15CaseSensitivityE _ZNK8QLibrary11errorStringEv _ZNK8QLibrary8isLoadedEv _ZNK8QVariant5toIntEPb _ZNK8QVariant8toStringEv _ZNK9QDateTime17toMSecsSinceEpochEv _ZNK9QDateTime8toStringERK7QString _ZNK9QSettings5valueERK7QStringRK8QVariant _ZeqRK7QStringS1_

qt5gui

_ZN7QCursorC1EN2Qt11CursorShapeE _ZN7QCursorD1Ev _ZN7QPixmap12loadFromDataEPKhjPKc6QFlagsIN2Qt19ImageConversionFlagEE _ZN7QPixmapC1Ev _ZN7QPixmapD1Ev _ZNK7QPixmap4saveERK7QStringPKci _ZNK7QPixmap6scaledERK5QSizeN2Qt15AspectRatioModeENS3_18TransformationModeE

qt5network

_ZN13QNetworkReply16staticMetaObjectE _ZN13QNetworkReply8finishedEv _ZN15QNetworkRequest12setRawHeaderERK10QByteArrayS2_ _ZN15QNetworkRequest19setSslConfigurationERK17QSslConfiguration _ZN15QNetworkRequest6setUrlERK4QUrl _ZN15QNetworkRequestC1ERK4QUrl _ZN15QNetworkRequestD1Ev _ZN17QSslConfiguration11setProtocolEN4QSsl11SslProtocolE _ZN17QSslConfiguration17setPeerVerifyModeEN10QSslSocket14PeerVerifyModeE _ZN17QSslConfiguration20defaultConfigurationEv _ZN17QSslConfigurationD1Ev _ZN21QNetworkAccessManager3getERK15QNetworkRequest _ZN21QNetworkAccessManager4postERK15QNetworkRequestRK10QByteArray _ZN21QNetworkAccessManagerC1EP7QObject _ZN21QNetworkAccessManagerD1Ev

qt5widgets

_ZN10QBoxLayout10addStretchEi _ZN10QBoxLayout10setSpacingEi _ZN10QBoxLayout9addLayoutEP7QLayouti _ZN10QBoxLayout9addWidgetEP7QWidgeti6QFlagsIN2Qt13AlignmentFlagEE _ZN10QStatusBarC1EP7QWidget _ZN11QHBoxLayoutC1EP7QWidget _ZN11QHBoxLayoutC1Ev _ZN11QMainWindow10addToolBarEP8QToolBar _ZN11QMainWindow10setMenuBarEP8QMenuBar _ZN11QMainWindow11qt_metacallEN11QMetaObject4CallEiPPv _ZN11QMainWindow11qt_metacastEPKc _ZN11QMainWindow12setStatusBarEP10QStatusBar _ZN11QMainWindow15createPopupMenuEv _ZN11QMainWindow16contextMenuEventEP17QContextMenuEvent _ZN11QMainWindow16setCentralWidgetEP7QWidget _ZN11QMainWindow16staticMetaObjectE _ZN11QMainWindow5eventEP6QEvent _ZN11QMainWindowC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE _ZN11QMainWindowD2Ev _ZN11QPushButtonC1ERK7QStringP7QWidget _ZN11QVBoxLayoutC1EP7QWidget _ZN12QApplicationC1ERiPPci _ZN15QAbstractButton16staticMetaObjectE _ZN15QAbstractButton7clickedEb _ZN6QFrameC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE _ZN6QLabel11setWordWrapEb _ZN6QLabel12setAlignmentE6QFlagsIN2Qt13AlignmentFlagEE _ZN6QLabelC1ERK7QStringP7QWidget6QFlagsIN2Qt10WindowTypeEE _ZN7QDialog10closeEventEP11QCloseEvent _ZN7QDialog10setVisibleEb _ZN7QDialog11eventFilterEP7QObjectP6QEvent _ZN7QDialog11qt_metacallEN11QMetaObject4CallEiPPv _ZN7QDialog11qt_metacastEPKc _ZN7QDialog11resizeEventEP12QResizeEvent _ZN7QDialog13keyPressEventEP9QKeyEvent _ZN7QDialog16contextMenuEventEP17QContextMenuEvent _ZN7QDialog16staticMetaObjectE _ZN7QDialog4doneEi _ZN7QDialog4execEv _ZN7QDialog4openEv _ZN7QDialog6acceptEv _ZN7QDialog6rejectEv _ZN7QDialog8acceptedEv _ZN7QDialog8rejectedEv _ZN7QDialog9showEventEP10QShowEvent _ZN7QDialogC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE _ZN7QDialogD2Ev _ZN7QLayout18setContentsMarginsEiiii _ZN7QWidget10closeEventEP11QCloseEvent _ZN7QWidget10enterEventEP6QEvent _ZN7QWidget10leaveEventEP6QEvent _ZN7QWidget10paintEventEP11QPaintEvent _ZN7QWidget10setVisibleEb _ZN7QWidget10wheelEventEP11QWheelEvent _ZN7QWidget11actionEventEP12QActionEvent _ZN7QWidget11changeEventEP6QEvent _ZN7QWidget11nativeEventERK10QByteArrayPvPl _ZN7QWidget11resizeEventEP12QResizeEvent _ZN7QWidget11tabletEventEP12QTabletEvent _ZN7QWidget12focusInEventEP11QFocusEvent _ZN7QWidget12setFixedSizeEii _ZN7QWidget13dragMoveEventEP14QDragMoveEvent _ZN7QWidget13focusOutEventEP11QFocusEvent _ZN7QWidget13keyPressEventEP9QKeyEvent _ZN7QWidget13setStyleSheetERK7QString _ZN7QWidget14activateWindowEv _ZN7QWidget14dragEnterEventEP15QDragEnterEvent _ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent _ZN7QWidget14mouseMoveEventEP11QMouseEvent _ZN7QWidget14setFixedHeightEi _ZN7QWidget14setWindowFlagsE6QFlagsIN2Qt10WindowTypeEE _ZN7QWidget14setWindowTitleERK7QString _ZN7QWidget15keyReleaseEventEP9QKeyEvent _ZN7QWidget15mousePressEventEP11QMouseEvent _ZN7QWidget15setMaximumWidthEi _ZN7QWidget15setMinimumWidthEi _ZN7QWidget16inputMethodEventEP17QInputMethodEvent _ZN7QWidget17mouseReleaseEventEP11QMouseEvent _ZN7QWidget18focusNextPrevChildEb _ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent _ZN7QWidget4showEv _ZN7QWidget5eventEP6QEvent _ZN7QWidget5raiseEv _ZN7QWidget6resizeERK5QSize _ZN7QWidget8setFocusEN2Qt11FocusReasonE _ZN7QWidget9dropEventEP10QDropEvent _ZN7QWidget9hideEventEP10QHideEvent _ZN7QWidget9moveEventEP10QMoveEvent _ZN7QWidget9setCursorERK7QCursor _ZN7QWidget9showEventEP10QShowEvent _ZN7QWidgetC1EPS_6QFlagsIN2Qt10WindowTypeEE _ZN8QMenuBarC1EP7QWidget _ZN8QToolBarC1EP7QWidget _ZNK7QDialog15minimumSizeHintEv _ZNK7QDialog8sizeHintEv _ZNK7QWidget10redirectedEP6QPoint _ZNK7QWidget11initPainterEP8QPainter _ZNK7QWidget11paintEngineEv _ZNK7QWidget13sharedPainterEv _ZNK7QWidget14heightForWidthEi _ZNK7QWidget15minimumSizeHintEv _ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE _ZNK7QWidget17hasHeightForWidthEv _ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE _ZNK7QWidget7devTypeEv _ZNK7QWidget8sizeHintEv _ZThn8_NK7QWidget10redirectedEP6QPoint _ZThn8_NK7QWidget11initPainterEP8QPainter _ZThn8_NK7QWidget11paintEngineEv _ZThn8_NK7QWidget13sharedPainterEv _ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE _ZThn8_NK7QWidget7devTypeEv

libcurl

curl_easy_init curl_easy_perform curl_easy_cleanup curl_easy_setopt curl_slist_append curl_slist_free_all

qoelog

qoe_log_set_cfginfo qoe_log_notify_report qoe_log_init

Name

.text

Size

163KB

Virtual Size

162KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

124B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-22_9e20aa4a713795a167d9a53b024f1b2d_conti_elex

advapi32

kernel32

msvcrt

libwinpthread-1

shell32

libgcc_s_dw2-1

libssp-0

libstdc++-6

libsafecrt

libcrypto-3

qt5core

qt5gui

qt5network

qt5widgets

libcurl

qoelog

generic