LinkenSphere 6.7 MOD(7.0) NULL.rar
- SHA256 b4f12a6621e439dde3f679ec33b55da6f27b494c4e08b8c66342ce6d3d9b7acd
Static task
static1
1 signatures
General
- Target LinkenSphere 6.7 MOD(7.0) NULL.rar
- Size 227.0MB
- Sample260919-hd6rnahn6s
- SHA256 b4f12a6621e439dde3f679ec33b55da6f27b494c4e08b8c66342ce6d3d9b7acd
- MD5 e9ed77769499ab9c48b3454fefa4f379
- SHA1 88db59bf617645fc8db820ba3a503129ee55d07d
- SHA512 f078d1ed5ad26947bed2a0b55588c30854bdfceaabab4e9b5ee26a2e57739e6476737e8c75c0e0fe001554c2e85cbc91bb7364efc0989243a6856889a61704a2
- SSDEEP 6291456:3Q3KgXV4B5Fkm7Om2lzWLyDWm683Y23GqDmi3/Uw7oCvK3xRhSn:3SKgXV4fFkEoWLy4C9xUw7ZvKBC
- TLSH T101B833EDDA17B55EDA4CE2EC9B4954A0ECCB496C40EE76D33CDCE7C340A0660D698836
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/D3Dcompiler_47.dll unpack001/LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/bearer/qgenericbearer.dll unpack001/LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/bearer/qnativewifibearer.dll
File Explorer
-
LinkenSphere 6.7 MOD(7.0) NULL.rar.rar 227.0MB
-
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/D3Dcompiler_47.dll.dll 4.1MB
-
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/Database/cnf.db267.4MB
-
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/Database/lng.db88KB
-
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/Database/maxmind/1077443288.db96.9MB
-
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/Database/maxmind/1264844683.db90.6MB
-
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/Database/maxmind/1453844864.db90.9MB
-
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/Database/maxmind/1616782338.db91.1MB
-
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/Database/maxmind/16777216.db91.2MB
-
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/Database/maxmind/2056702018.db95.8MB
-
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/Database/maxmind/2911367424.db94.6MB
-
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/Database/maxmind/3126534656.db94.2MB
-
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/Database/maxmind/3431195488.db4.0MB
-
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/bearer/qgenericbearer.dll.dll 47KB
-
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/bearer/qnativewifibearer.dll.dll 49KB
-
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/components.xml585B
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/D3Dcompiler_47.dll
- IMPHASH 7496e9d131b44a1c967871e28cb75c8d
- SHA256 fd3cc271308e1c1fd21821e0ecaf29498edd46839a4a2712b2fab7aa96b755e2
- MD5 dface0e54e6f3fa1dc0092b6b16f390c
- SHA1 b8f809cfa6937b09fc28884c49407e366f2fe481
- SHA512 d2c74183ab4fcfbc49cb42d20a99227b47fe236014cf28a0deb360598f26ff14212ec4fa281fcbdb4bbe78dd6a4965283b0611db0fc66e0458c1771dd8746629
- SSDEEP 49152:36yY9fmU0hJ/gHQd+3J6TAf+dnKu21L4i2lD8/ZcE8zRnPKXJH2Gl:qJ7feilX0FF5tG
- TLSH T1F2167C46B2A440F5C6ABC13886674607EBB0781413349BEF1590D625EF73FE26A7F728
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
w#aLIKF
Minor OS version
3
Major OS version
6
Entry point
3181552
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D3DCompiler_47.pdb
msvcrt
__dllonexit
_unlock
_lock
?terminate@@YAXXZ
??1type_info@@UEAA@XZ
__C_specific_handler
_initterm
_amsg_exit
_XcptFilter
_strtoui64
sscanf
_vsnprintf
_isnan
strtoul
isxdigit
atof
setlocale
_strdup
_mbstrlen
_vsnwprintf
strnlen
modf
strrchr
strncpy_s
memcpy_s
isalnum
_finite
_clearfp
_controlfp
strcpy_s
malloc
_strnicmp
_fpclass
strncmp
isspace
strstr
strchr
free
sprintf_s
_stricmp
_purecall
memmove
qsort
isalpha
toupper
atoi
_onexit
tolower
??2@YAPEAX_K@Z
getenv
??3@YAXPEAX@Z
wcsncmp
wcsncpy_s
_wcsicmp
memcpy
memset
fclose
bsearch
strcat_s
_CxxThrowException
memcmp
_snwprintf_s
__unDName
fread
fseek
_wfsopen
wcstoul
towlower
_wcsnicmp
_wsplitpath_s
wcscpy_s
??_U@YAPEAX_K@Z
??_V@YAXPEAX@Z
wcsncat_s
wcsrchr
swprintf_s
_wfullpath
_wmakepath_s
_time64
_chsize_s
_close
_read
_write
_lseeki64
_get_osfhandle
_open_osfhandle
_wcsdup
wcscat_s
ftell
_mbscmp
_memicmp
_wgetenv
isdigit
_wsopen
__CxxFrameHandler3
acos
asin
atan
atan2
ceil
cos
cosh
exp
floor
floorf
fmod
log
pow
sin
sinh
sqrt
strcmp
tan
tanh
advapi32
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
RegOpenKeyExW
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW
kernel32
LocalFree
LocalAlloc
GetVersion
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SetLastError
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
GetFileSize
GetSystemInfo
VirtualAlloc
VirtualFree
GetProcAddress
LoadLibraryExW
GetEnvironmentVariableA
GetFullPathNameA
GetFullPathNameW
TlsFree
TlsGetValue
TlsSetValue
TlsAlloc
Sleep
LCMapStringW
GetFileAttributesW
SetFileAttributesW
CopyFileExW
DeleteFileW
GetFileType
DeviceIoControl
ExpandEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
SetFilePointer
MapViewOfFileEx
FlushViewOfFile
GetModuleFileNameA
CreateFileA
DisableThreadLibraryCalls
CreateFileW
GetLastError
GetFileSizeEx
ReadFile
CloseHandle
WriteFile
WideCharToMultiByte
FreeLibrary
lstrcmpiA
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
HeapCreate
HeapDestroy
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetProcessHeap
HeapFree
rpcrt4
UuidCreate
D3DAssemble
D3DCompile
D3DCompile2
D3DCompileFromFile
D3DCompressShaders
D3DCreateBlob
D3DCreateFunctionLinkingGraph
D3DCreateLinker
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DDisassemble11Trace
D3DDisassembleRegion
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DGetTraceInstructionOffsets
D3DLoadModule
D3DPreprocess
D3DReadFileToBlob
D3DReflect
D3DReflectLibrary
D3DReturnFailure1
D3DSetBlobPart
D3DStripShader
D3DWriteBlobToFile
DebugSetMute
Name
.text
Size
3.9MB
Virtual Size
3.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
35KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
135KB
Virtual Size
134KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=57, id=207, version=65501,
count=3, id=205, version=65501,
count=209, id=1, productName=Unmarked objects,
count=9, id=203, version=65501,
count=18, id=206, version=65501,
count=1, id=202, version=65501,
count=132, id=211, version=65501,
count=1, id=201, version=65501,
count=1, id=204, version=65501,
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/Database/cnf.db
- SHA256 637b766b28ee6efcd77557b7cf81f7b2768ffddcf6c93378ad1eb532dcf57ce1
- MD5 28ffa945b7686c6675dcc619a243f1dc
- SHA1 baf825e322b087afc0c4b275f49cbddbf18bd261
- SHA512 3b5930f84b7be913f999f0695c613e9acb536e072c93d57ebc506b05589c5af19096d4224b93b133e43ef904d439dceb9a7aee00f1ed5e42ba7b146c89a1e368
- SSDEEP 49152:4IsP7r4pygLaM/a1pke4nqsmt5HB213/RuE5+w56bvM3eFAmy1XYwENvvNbI8VXC:G4L/
- TLSH T173D81B5D8C211C39C7776AF33583B94620FA4386D1C6E9C1E4EF0F2C59987E633A6896
- MD5 SHA1 SHA512 SSDEEP TLSH
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/Database/lng.db
- SHA256 1d88a1ca76ac2b124e99e98cdc2ff4b69a4afeb9feb199e4bbd31b8f0c2924c3
- MD5 28d48ea0abf9ad91bc66dcaab713c346
- SHA1 7af94c28fdc00f1be61944223c0c5318032b79e1
- SHA512 8bad0517d439b7799928ec0b5eff86625dc690208da370d0c15655e034106b4ca70305051f3c82294a3fdfbef481b36a4662020dc4ca2d0ad63944669e065fca
- SSDEEP 1536:Kqly3D3I5RZZmxqly3D3I5RZZmFlCFR6EAvcEh92K5YvDgvwUo4H7h1IgnjHhGqf:KqcI5RZZmxqcI5RZZmbCFR6Hg+gbgqgT
- TLSH T1C2939BA492B3F84ED678217DD00F6C914E5BE10DA8906772BB916187D0BE28F573B09F
- MD5 SHA1 SHA512 SSDEEP TLSH
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/Database/maxmind/1077443288.db
- SHA256 94aa74caff87e9adf48afa6e3c299ab4cf9f0882e454b8a1517b9a951e8c99d0
- MD5 961eaf74f8502929e9182e92ec07b55f
- SHA1 b69fe0485ffd4948c45a92d6508d64b6bbdc6b9a
- SHA512 f27fbff6a961120510cbced7c1aab3bf14aac992bbf85a341663ea562f9d368acfae38ed1faa4d3729e87ec29d46bd82accad99fd1facd84587744f0c6906daf
- SSDEEP 393216:6cRso2Op9ONWNElE+dDab9R35cccHl1lnTnkQL6KphryqgC:6cSeONGElE+C5pcFrTkQL6KXryqJ
- TLSH T17228BFF148E41A9AFEC671B93445E3F87C0A511DAAC88E4C6C7C614BA184DFF632DD98
- MD5 SHA1 SHA512 SSDEEP TLSH
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/Database/maxmind/1264844683.db
- SHA256 36d0125b1bbbba0b156aaab72481eab37b56297fa580500b0cc371248a653c19
- MD5 15a8b477723277c23dffee72bb5519ea
- SHA1 06e4d80bde5b90cab4156dc0e821966353312fd0
- SHA512 969a5b65e28408e8cc892b6a8293f38f0218fc472846507b5b65cb621623d51008983c6f62a41ef4ef6f6d72b2bcd75887631e6ea2654356cd0dc34fd178a112
- SSDEEP 786432:zGfkwsD8k0eIym2mT6nY7uB3Go216gSAxBTdhdm2klnROH:Ukm2Xgzm2gM
- TLSH T11F28A5604852778BF743FD3074C8BDB63849A21585DE891FEB7C190BA260EA1673993F
- MD5 SHA1 SHA512 SSDEEP TLSH
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/Database/maxmind/1453844864.db
- SHA256 23a315998a24109d60ba37d05d67083f5f43d248ee16fff21d6e6abf85702c0c
- MD5 3ce727242e3762814a471ee4e1b79285
- SHA1 877b2bd2d66894bbff20bf9254f658ec2a134cad
- SHA512 d4d96b1dcdffb5b6f1806b4e834686c5601e0ee84190a3dcc6daf2c9654a179582ec715034664600365b501ea9f1000657687d9e3682bab5a01614a975c92f2d
- SSDEEP 786432:Y/oEHarNeC4QI2ildq/HmrsEMlrdlcdFTuAmJK42j6qFA67:TIC4zldqBEM/cduAWK42uWA67
- TLSH T1E228B5604592774BFB5BFD7070C9BEBA3845510481CE894FEBBC0507A1A1FA6336A92F
- MD5 SHA1 SHA512 SSDEEP TLSH
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/Database/maxmind/1616782338.db
- SHA256 d21148eb3599e8a7434cd560fe561ad59923701e9e08572b25aab8c6064bc3f0
- MD5 f099a508f81b3b72bdaec27655d562b7
- SHA1 c207912977bb1908ab693d5f70590e341022fd5a
- SHA512 c7c45764c9cd656ca6db36732f368bd640cccff2ac50508cbebf0caaa570e3c25dac571b9c1e391b489419ee6927a05da8c618eb51a72fd87a99ed0882fe2d36
- SSDEEP 786432:azzpXNOmpdZX2YW9FYGiPAlVcJGD4S1In5kvy5bQpA9IB3lSHDkq3mA:orf2Y9IXeZ
- TLSH T1F328B8B146A2364DFB85F53870DABEB4B902A115DDC58D4C3A3C23DB6258DE63739C28
- MD5 SHA1 SHA512 SSDEEP TLSH
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/Database/maxmind/16777216.db
- SHA256 3aea3d5851fabcb9475a609947db6fae5d1dfe754075d212083e76dade54483a
- MD5 7b99531159285a00d3b1e5a2eca63716
- SHA1 31a49ae455cfc99e759901aeb6e6f85c3f8e3c40
- SHA512 f64692d25ff91f9ba511d43ebdd68b1929a11c26bb82bed6d42463167e01493bad56082d3c5393fd1d09fca0c3f1298ca3cdc69e440c2fc69aebc7ecfff29a91
- SSDEEP 786432:q+NI0+MnWhH2/jmV5PWnbsPIn3fUXKl8PWOoxHLsV:Os4V
- TLSH T18328B6B004D2774AFB86F97430C9BEF838155219A9C98A0D6E7C5207E294DFA732DC9D
- MD5 SHA1 SHA512 SSDEEP TLSH
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/Database/maxmind/2056702018.db
- SHA256 04c73da44f7da43c7c84a332c1b104667f47f384872df870fdf1a4588c46e1e5
- MD5 22646afc4c7fc0fbd7ca6a00f78f98ca
- SHA1 24dcdf56ebcccaecbca93cb53412e20157f12839
- SHA512 5e57a9b868a6b30a084f454402f50607d39127298032fc56c20665fa6418834c6e7b8b2737b9a80e9a450d5771367b898dfaa4441740a220f31ba40901fece52
- SSDEEP 393216:r8Og3t/Kdpb4D5Fskqc13DHjBsFvQgNgqHc0dIv:r833guLXldyFIpZ0dIv
- TLSH T17528B5B105E17805E8C7B5F8308ABABC6D465417E9C98F4C2A7C238BA195DE7372BC5C
- MD5 SHA1 SHA512 SSDEEP TLSH
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/Database/maxmind/2911367424.db
- SHA256 8c7fb7f5455fb08bbdceb478b66d3a92c4b3ea641bebbc87aa4b9d332783ce24
- MD5 baee619bd939f13a8619f683f0d3f9bc
- SHA1 7550c460ff41261ef88b975359e5d6c8e3f34040
- SHA512 e956a3c31036b5ba3bfa026c226d4a2efa037008728a12879cf4c9e75738475f065065d935c40d73d4b66fb87ebe539557d68bed5fb641ae88d8c13bf4758341
- SSDEEP 393216:UTwo0/UW9Y7CrBCt39cx7SSQ11NbqeJMWSMmlp6cltuNoBbQNeXZV:mwoe99Y76BCt39cx7w1UWSMmlp6cCE
- TLSH T1FA2864714592F402E48BEAB130CABE7E2C554107D4C99F4E9BAD034791B3BA6739B48F
- MD5 SHA1 SHA512 SSDEEP TLSH
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/Database/maxmind/3126534656.db
- SHA256 3f3b57a4d9a0b64589ea10611266af7ff3462469c8a36c6873acb05379b1a35d
- MD5 d6294147864a0d81a99417ffeb75db14
- SHA1 7c8b48af9296c99b1637879bf25c7adab275e1c1
- SHA512 cf93731479bdf73282b16cd305eb08cbe35b1d935f40b7321e257c3cef79cf478c56093b676e8a06d6f09f5f011006db41db3399b308d7a87f381d9542b5fea8
- SSDEEP 393216:SBqreayoSjN8xMngO3KvXoQJrH7HIqIRegg:S0ea/SjNtLavXoQVH7B2Pg
- TLSH T1F128C37900D6B813E98B75F13088FBEE1C525617A8C88F0D6E6C164790A7FD2727B85E
- MD5 SHA1 SHA512 SSDEEP TLSH
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/Database/maxmind/3431195488.db
- SHA256 aea59c121ddffbb5dcb9f23ab91f3294a5d3456321a0ef32b7df99677b030432
- MD5 8d6ef70d15ad63591367a6fed6360015
- SHA1 d49e2b56093e66c821ab48e9e2973417a59b0d19
- SHA512 402da063f215e89c08e0312c50d1e0627d651b3f1ea8898949f3bae43fbb828be3988282f8e11bce2b7e60d8b4a8380a9d76c643d52dedfc21f568856bf69dce
- SSDEEP 49152:dVNdj2MpGyuUgdcLSxfZJs3qdIca5oHupgEdybAPGHs1j:jaMpGyrj
- TLSH T1BC16FFF189D45842EDC721FD3445E3FC6D165A1BBAC84F0C5C6C214BA18AEFA662FD88
- MD5 SHA1 SHA512 SSDEEP TLSH
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/bearer/qgenericbearer.dll
- IMPHASH 13d74dbee1edefe64ff38844407c0d14
- SHA256 f45686e9cbd2f3f510b513b0223bad606aeac5e7dd764b7e1cca68b63734955d
- MD5 17bc5ca5e58ae0cfc34c77ed9edf397a
- SHA1 37ee58d8aa5e0056e32b2f13c65be88dfd53f2af
- SHA512 0dce683920a70b78fb188a968a32105ff104fd260809d120868906a9a79e5ddd7f2791bd566f804f9086e4d582daada9f020100340a80649427b59fb765efdad
- SSDEEP 768:CoVsMSQjhuXyJ/huZBx3cE1gqmMllCcaPeAAE/b:KFQok/huKCgq7AAWb
- TLSH T12423079633578092C026C379C4A70E0AD2BAF2118B63DBCF5269936E1FA37D12D7E311
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
w#aLIKF
Minor OS version
0
Major OS version
6
Entry point
22652
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
iphlpapi
ConvertInterfaceNameToLuidW
qt5network
?qt_metacall@QBearerEngine@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QBearerEngine@@UEAAPEAXPEBD@Z
?staticMetaObject@QBearerEngine@@2UQMetaObject@@B
?qt_metacall@QNetworkSessionPrivate@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QNetworkSessionPrivate@@UEAAPEAXPEBD@Z
?staticMetaObject@QNetworkSessionPrivate@@2UQMetaObject@@B
??1QBearerEnginePlugin@@UEAA@XZ
??0QBearerEnginePlugin@@QEAA@PEAVQObject@@@Z
?qt_metacall@QBearerEnginePlugin@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QBearerEnginePlugin@@UEAAPEAXPEBD@Z
?staticMetaObject@QBearerEnginePlugin@@2UQMetaObject@@B
?usagePoliciesChanged@QNetworkSessionPrivate@@QEAAXV?$QFlags@W4UsagePolicy@QNetworkSession@@@@@Z
?newConfigurationActivated@QNetworkSessionPrivate@@QEAAXXZ
?closed@QNetworkSessionPrivate@@QEAAXXZ
?stateChanged@QNetworkSessionPrivate@@QEAAXW4State@QNetworkSession@@@Z
?error@QNetworkSessionPrivate@@QEAAXW4SessionError@QNetworkSession@@@Z
?quitPendingWaitsForOpened@QNetworkSessionPrivate@@QEAAXXZ
?qNetworkConfigurationManagerPrivate@@YAPEAVQNetworkConfigurationManagerPrivate@@XZ
?engines@QNetworkConfigurationManagerPrivate@@QEBA?AV?$QList@PEAVQBearerEngine@@@@XZ
?interfaceFromName@QNetworkInterface@@SA?AV1@AEBVQString@@@Z
??0QNetworkInterface@@QEAA@XZ
?isValid@QNetworkConfiguration@@QEBA_NXZ
?children@QNetworkConfiguration@@QEBA?AV?$QList@VQNetworkConfiguration@@@@XZ
?identifier@QNetworkConfiguration@@QEBA?AVQString@@XZ
?type@QNetworkConfiguration@@QEBA?AW4Type@1@XZ
?state@QNetworkConfiguration@@QEBA?AV?$QFlags@W4StateFlag@QNetworkConfiguration@@@@XZ
??8QNetworkConfiguration@@QEBA_NAEBV0@@Z
??1QNetworkConfiguration@@QEAA@XZ
??4QNetworkConfiguration@@QEAAAEAV0@AEBV0@@Z
??0QNetworkConfiguration@@QEAA@AEBV0@@Z
??0QNetworkConfiguration@@QEAA@XZ
?setALREnabled@QNetworkSessionPrivate@@UEAAX_N@Z
?requiresPolling@QBearerEngine@@UEBA_NXZ
??1QNetworkSessionPrivate@@UEAA@XZ
??0QNetworkSessionPrivate@@QEAA@XZ
?updateCompleted@QBearerEngine@@QEAAXXZ
?configurationChanged@QBearerEngine@@QEAAXV?$QExplicitlySharedDataPointer@VQNetworkConfigurationPrivate@@@@@Z
?configurationRemoved@QBearerEngine@@QEAAXV?$QExplicitlySharedDataPointer@VQNetworkConfigurationPrivate@@@@@Z
?configurationAdded@QBearerEngine@@QEAAXV?$QExplicitlySharedDataPointer@VQNetworkConfigurationPrivate@@@@@Z
??1QBearerEngine@@UEAA@XZ
??0QBearerEngine@@QEAA@PEAVQObject@@@Z
?allInterfaces@QNetworkInterface@@SA?AV?$QList@VQNetworkInterface@@@@XZ
?interfaceFromIndex@QNetworkInterface@@SA?AV1@H@Z
?addressEntries@QNetworkInterface@@QEBA?AV?$QList@VQNetworkAddressEntry@@@@XZ
?hardwareAddress@QNetworkInterface@@QEBA?AVQString@@XZ
?flags@QNetworkInterface@@QEBA?AV?$QFlags@W4InterfaceFlag@QNetworkInterface@@@@XZ
?humanReadableName@QNetworkInterface@@QEBA?AVQString@@XZ
?name@QNetworkInterface@@QEBA?AVQString@@XZ
?index@QNetworkInterface@@QEBAHXZ
?isValid@QNetworkInterface@@QEBA_NXZ
??1QNetworkInterface@@QEAA@XZ
??0QNetworkInterface@@QEAA@AEBV0@@Z
??1QNetworkAddressEntry@@QEAA@XZ
qt5core
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPEAU12@PEBVQObject@@@Z
?currentSecsSinceEpoch@QDateTime@@SA_JXZ
?toInt@QVariant@@QEBAHPEA_N@Z
??0QVariant@@QEAA@H@Z
??0QVariant@@QEAA@XZ
?disconnect@QObject@@SA_NPEBV1@PEBD01@Z
?connect@QObject@@SA?AVConnection@QMetaObject@@PEBV1@PEBD01W4ConnectionType@Qt@@@Z
??1QObject@@UEAA@XZ
??0QObject@@QEAA@PEAV0@@Z
?qt_metacall@QObject@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QObject@@UEAAPEAXPEBD@Z
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
?registerNormalizedType@QMetaType@@SAHAEBVQByteArray@@P6AXPEAX@ZP6APEAX1PEBX@ZHV?$QFlags@W4TypeFlag@QMetaType@@@@PEBUQMetaObject@@@Z
??1Connection@QMetaObject@@QEAA@XZ
?activate@QMetaObject@@SAXPEAVQObject@@PEBU1@HPEAPEAX@Z
?normalizedType@QMetaObject@@SA?AVQByteArray@@PEBD@Z
?tr@QMetaObject@@QEBA?AVQString@@PEBD0H@Z
?cast@QMetaObject@@QEBAPEAVQObject@@PEAV2@@Z
??8QString@@QEBA_NVQLatin1String@@@Z
??1QByteArray@@QEAA@XZ
?staticMetaObject@QObject@@2UQMetaObject@@B
?shared_null@QMapDataBase@@2U1@B
?shared_null@QListData@@2UData@1@B
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
??0QString@@QEAA@XZ
??0QString@@QEAA@VQLatin1String@@@Z
??0QString@@QEAA@AEBV0@@Z
??1QString@@QEAA@XZ
??4QString@@QEAAAEAV0@AEBV0@@Z
??0QString@@QEAA@$$QEAV0@@Z
??4QString@@QEAAAEAV0@$$QEAV0@@Z
?append@QString@@QEAAAEAV1@AEBV1@@Z
?number@QString@@SA?AV1@HH@Z
?number@QString@@SA?AV1@IH@Z
??8@YA_NAEBVQString@@0@Z
??M@YA_NAEBVQString@@0@Z
?toStdWString@QString@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?qHash@@YAIAEBVQString@@I@Z
?detach@QListData@@QEAAPEAUData@1@H@Z
?detach_grow@QListData@@QEAAPEAUData@1@PEAHH@Z
?realloc@QListData@@QEAAXH@Z
?dispose@QListData@@SAXPEAUData@1@@Z
?erase@QListData@@QEAAPEAPEAXPEAPEAX@Z
?append@QListData@@QEAAPEAPEAXXZ
?allocateNode@QHashData@@QEAAPEAXH@Z
?freeNode@QHashData@@QEAAXPEAX@Z
?detach_helper@QHashData@@QEAAPEAU1@P6AXPEAUNode@1@PEAX@ZP6AX0@ZHH@Z
?hasShrunk@QHashData@@QEAAXXZ
?rehash@QHashData@@QEAAXH@Z
?free_helper@QHashData@@QEAAXP6AXPEAUNode@1@@Z@Z
?nextNode@QHashData@@SAPEAUNode@1@PEAU21@@Z
??0QSharedData@@QEAA@XZ
??0QMutex@@QEAA@W4RecursionMode@0@@Z
??1QMutex@@QEAA@XZ
?lock@QMutex@@QEAAXXZ
?unlock@QMutex@@QEAAXXZ
?unlock@QMutexLocker@@QEAAXXZ
?relock@QMutexLocker@@QEAAXXZ
?freeNodeAndRebalance@QMapDataBase@@QEAAXPEAUQMapNodeBase@@@Z
?recalcMostLeftNode@QMapDataBase@@QEAAXXZ
?createNode@QMapDataBase@@QEAAPEAUQMapNodeBase@@HHPEAU2@_N@Z
?freeTree@QMapDataBase@@QEAAXPEAUQMapNodeBase@@H@Z
?createData@QMapDataBase@@SAPEAU1@XZ
?freeData@QMapDataBase@@SAXPEAU1@@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
kernel32
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
CloseHandle
vcruntime140
_purecall
__C_specific_handler
__vcrt_InitializeCriticalSectionEx
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memset
__std_type_info_destroy_list
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_seh_filter_dll
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
free
qt_plugin_instance
qt_plugin_query_metadata
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.qtmetad
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
356B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=24123,
count=2, id=259, version=24123,
count=17, id=261, version=24123,
count=10, id=260, version=24123,
count=4, id=257, productName=VS2015 UPD3.1 build 24215, version=24215,
count=5, id=257, version=24610,
count=176, id=1, productName=Unmarked objects,
count=6, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/bearer/qnativewifibearer.dll
- IMPHASH bbeff854b1dfcb65fa96d1954c00fa22
- SHA256 c91eec5d85440b90d6bc0f45e404143ef7e508aea64b2c3355d5e0d513bdb432
- MD5 bd8c6db8b576685a88c6b4413d435f78
- SHA1 7325e97880268ac9c43eb522d9f92f12b6a8c3f9
- SHA512 79904eced07e7f3e9dc62ef1ddbfaa3ac109e684361e92a27268040915dffe0446a944ca3661ed35fa44f06b5413904be0d8adbb797f414d6e54e724190b65d5
- SSDEEP 768:stkMsXCSifH97qaTtfVr8WEx7XyC3gqHaxYkeEQtoS:seXXO/97nT7IVyKgqGYdEMoS
- TLSH T11933089B73664192C03AC379C4A70E49E2B2F0528B6297CF5339972E1F73BD1697D244
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
w#aLIKF
Minor OS version
0
Major OS version
6
Entry point
24032
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
qt5network
?qt_metacall@QBearerEngine@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QBearerEngine@@UEAAPEAXPEBD@Z
?staticMetaObject@QBearerEngine@@2UQMetaObject@@B
?qt_metacall@QNetworkSessionPrivate@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QNetworkSessionPrivate@@UEAAPEAXPEBD@Z
?staticMetaObject@QNetworkSessionPrivate@@2UQMetaObject@@B
?usagePoliciesChanged@QNetworkSessionPrivate@@QEAAXV?$QFlags@W4UsagePolicy@QNetworkSession@@@@@Z
?newConfigurationActivated@QNetworkSessionPrivate@@QEAAXXZ
?closed@QNetworkSessionPrivate@@QEAAXXZ
?stateChanged@QNetworkSessionPrivate@@QEAAXW4State@QNetworkSession@@@Z
?error@QNetworkSessionPrivate@@QEAAXW4SessionError@QNetworkSession@@@Z
?quitPendingWaitsForOpened@QNetworkSessionPrivate@@QEAAXXZ
?qNetworkConfigurationManagerPrivate@@YAPEAVQNetworkConfigurationManagerPrivate@@XZ
?engines@QNetworkConfigurationManagerPrivate@@QEBA?AV?$QList@PEAVQBearerEngine@@@@XZ
?interfaceFromName@QNetworkInterface@@SA?AV1@AEBVQString@@@Z
??0QNetworkInterface@@QEAA@XZ
?isValid@QNetworkConfiguration@@QEBA_NXZ
?children@QNetworkConfiguration@@QEBA?AV?$QList@VQNetworkConfiguration@@@@XZ
?identifier@QNetworkConfiguration@@QEBA?AVQString@@XZ
?type@QNetworkConfiguration@@QEBA?AW4Type@1@XZ
?state@QNetworkConfiguration@@QEBA?AV?$QFlags@W4StateFlag@QNetworkConfiguration@@@@XZ
??8QNetworkConfiguration@@QEBA_NAEBV0@@Z
??1QNetworkConfiguration@@QEAA@XZ
??4QNetworkConfiguration@@QEAAAEAV0@AEBV0@@Z
??0QNetworkConfiguration@@QEAA@AEBV0@@Z
??0QNetworkConfiguration@@QEAA@XZ
?setALREnabled@QNetworkSessionPrivate@@UEAAX_N@Z
?requiresPolling@QBearerEngine@@UEBA_NXZ
??1QNetworkSessionPrivate@@UEAA@XZ
??0QNetworkSessionPrivate@@QEAA@XZ
?updateCompleted@QBearerEngine@@QEAAXXZ
?configurationChanged@QBearerEngine@@QEAAXV?$QExplicitlySharedDataPointer@VQNetworkConfigurationPrivate@@@@@Z
?configurationRemoved@QBearerEngine@@QEAAXV?$QExplicitlySharedDataPointer@VQNetworkConfigurationPrivate@@@@@Z
?configurationAdded@QBearerEngine@@QEAAXV?$QExplicitlySharedDataPointer@VQNetworkConfigurationPrivate@@@@@Z
??1QBearerEngine@@UEAA@XZ
??0QBearerEngine@@QEAA@PEAVQObject@@@Z
??1QBearerEnginePlugin@@UEAA@XZ
??0QBearerEnginePlugin@@QEAA@PEAVQObject@@@Z
?qt_metacall@QBearerEnginePlugin@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QBearerEnginePlugin@@UEAAPEAXPEBD@Z
?staticMetaObject@QBearerEnginePlugin@@2UQMetaObject@@B
qt5core
?currentSecsSinceEpoch@QDateTime@@SA_JXZ
?toInt@QVariant@@QEBAHPEA_N@Z
??0QVariant@@QEAA@H@Z
??0QVariant@@QEAA@XZ
?disconnect@QObject@@SA_NPEBV1@PEBD01@Z
??1QObject@@UEAA@XZ
??0QObject@@QEAA@PEAV0@@Z
?qt_metacall@QObject@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QObject@@UEAAPEAXPEBD@Z
?registerNormalizedType@QMetaType@@SAHAEBVQByteArray@@P6AXPEAX@ZP6APEAX1PEBX@ZHV?$QFlags@W4TypeFlag@QMetaType@@@@PEBUQMetaObject@@@Z
?activate@QMetaObject@@SAXPEAVQObject@@PEBU1@HPEAPEAX@Z
?normalizedType@QMetaObject@@SA?AVQByteArray@@PEBD@Z
?tr@QMetaObject@@QEBA?AVQString@@PEBD0H@Z
??0QString@@QEAA@VQLatin1String@@@Z
??1QString@@QEAA@XZ
??8QString@@QEBA_NVQLatin1String@@@Z
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPEAU12@PEBVQObject@@@Z
??0QLibrary@@QEAA@AEBVQString@@PEAVQObject@@@Z
??1QLibrary@@UEAA@XZ
?resolve@QLibrary@@QEAAP6AXXZPEBD@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
??0QChar@@QEAA@UQLatin1Char@@@Z
?deallocate@QArrayData@@SAXPEAU1@_K1@Z
??0QByteArray@@QEAA@PEBDH@Z
??1QByteArray@@QEAA@XZ
??0QString@@QEAA@XZ
??0QString@@QEAA@AEBV0@@Z
??4QString@@QEAAAEAV0@AEBV0@@Z
??0QString@@QEAA@$$QEAV0@@Z
??4QString@@QEAAAEAV0@$$QEAV0@@Z
?clear@QString@@QEAAXXZ
?arg@QString@@QEBA?AV1@KHHVQChar@@@Z
?arg@QString@@QEBA?AV1@HHHVQChar@@@Z
?arg@QString@@QEBA?AV1@GHHVQChar@@@Z
?midRef@QString@@QEBA?AVQStringRef@@HH@Z
?toUpper@QString@@QEGBA?AV1@XZ
?append@QString@@QEAAAEAV1@AEBV1@@Z
?utf16@QString@@QEBAPEBGXZ
?fromWCharArray@QString@@SA?AV1@PEB_WH@Z
?toUInt@QString@@QEBAIPEA_NH@Z
?number@QString@@SA?AV1@IH@Z
??8@YA_NAEBVQString@@0@Z
??4QString@@QEAAAEAV0@AEBVQByteArray@@@Z
?fromAscii_helper@QString@@CAPEAU?$QTypedArrayData@G@@PEBDH@Z
?split@QStringRef@@QEBA?AV?$QVector@VQStringRef@@@@VQChar@@W4SplitBehavior@QString@@W4CaseSensitivity@Qt@@@Z
?left@QStringRef@@QEBA?AV1@H@Z
?right@QStringRef@@QEBA?AV1@H@Z
?mid@QStringRef@@QEBA?AV1@HH@Z
?toUShort@QStringRef@@QEBAGPEA_NH@Z
?toUInt@QStringRef@@QEBAIPEA_NH@Z
?qHash@@YAIAEBVQString@@I@Z
?detach@QListData@@QEAAPEAUData@1@H@Z
?detach_grow@QListData@@QEAAPEAUData@1@PEAHH@Z
?realloc@QListData@@QEAAXH@Z
?dispose@QListData@@SAXPEAUData@1@@Z
?erase@QListData@@QEAAPEAPEAXPEAPEAX@Z
?append@QListData@@QEAAPEAPEAXXZ
?cast@QMetaObject@@QEBAPEAVQObject@@PEAV2@@Z
?invokeMethod@QMetaObject@@SA_NPEAVQObject@@PEBDW4ConnectionType@Qt@@VQGenericReturnArgument@@VQGenericArgument@@444444444@Z
??1Connection@QMetaObject@@QEAA@XZ
?allocateNode@QHashData@@QEAAPEAXH@Z
?freeNode@QHashData@@QEAAXPEAX@Z
?detach_helper@QHashData@@QEAAPEAU1@P6AXPEAUNode@1@PEAX@ZP6AX0@ZHH@Z
?hasShrunk@QHashData@@QEAAXXZ
?rehash@QHashData@@QEAAXH@Z
?free_helper@QHashData@@QEAAXP6AXPEAUNode@1@@Z@Z
?nextNode@QHashData@@SAPEAUNode@1@PEAU21@@Z
??0QSharedData@@QEAA@XZ
??0QMutex@@QEAA@W4RecursionMode@0@@Z
??1QMutex@@QEAA@XZ
?lock@QMutex@@QEAAXXZ
?unlock@QMutex@@QEAAXXZ
?unlock@QMutexLocker@@QEAAXXZ
?relock@QMutexLocker@@QEAAXXZ
?freeTree@QMapDataBase@@QEAAXPEAUQMapNodeBase@@H@Z
?freeData@QMapDataBase@@SAXPEAU1@@Z
?connect@QObject@@SA?AVConnection@QMetaObject@@PEBV1@PEBD01W4ConnectionType@Qt@@@Z
?WindowsVersion@QSysInfo@@2W4WinVersion@1@B
?shared_null@QListData@@2UData@1@B
?shared_null@QMapDataBase@@2U1@B
?self@QCoreApplication@@0PEAV1@EA
?staticMetaObject@QObject@@2UQMetaObject@@B
?QStringList_contains@QtPrivate@@YA_NPEBVQStringList@@AEBVQString@@W4CaseSensitivity@Qt@@@Z
kernel32
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
CloseHandle
vcruntime140
_purecall
__C_specific_handler
__vcrt_InitializeCriticalSectionEx
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memset
__std_type_info_destroy_list
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
free
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_seh_filter_dll
qt_plugin_instance
qt_plugin_query_metadata
Name
.text
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.qtmetad
Size
512B
Virtual Size
260B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
856B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
356B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=24123,
count=2, id=257, version=24610,
count=2, id=259, version=24123,
count=17, id=261, version=24123,
count=10, id=260, version=24123,
count=5, id=257, productName=VS2015 UPD3.1 build 24215, version=24215,
count=181, id=1, productName=Unmarked objects,
count=6, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
LinkenSphere 6.7 MOD(7.0) NULL/Linken Sphere app/components.xml
- SHA256 9ddd51d6bde70fecf39c8f206b6cfb231c4e4db1f46586f076d3057f34f05d37
- MD5 09d954ee103b1d1114cd6affe6486e10
- SHA1 98005d53b6954c09e79798a73576acc59ec5cba6
- SHA512 6266a988847465206d6cc5df83574595984c4b3766866e291fc2a90970cfe8195280b7fbf37e4127e4fc2a784f48b1a231fbaaab0282113398585ed1252541cc
- TLSH T126F084E410F112B0A2472F5E2E2295C4AEBAA37E78C84088B19E48022F4465E015F636
- MD5 SHA1 SHA512 TLSH