0b33791dc1c370322444508ba78bb9eaa8efb368746c0cd6ff70aef36faf1d94
Summary
| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2025-Jul-10 01:20:04 |
| Detected languages |
English - United States
|
Plugin Output
| Info | Matching compiler(s): | MASM/TASM - sig1(h) |
| Info | The PE is digitally signed. |
Signer: \xE5\xB9\xBF\xE4\xB8\x9C\xE9\xAB\x98\xE4\xBA\x91\xE5\x8D\x8A\xE5\xAF\xBC\xE4\xBD\x93\xE7\xA7\x91\xE6\x8A\x80\xE8\x82\xA1\xE4\xBB\xBD\xE6\x9C\x89\xE9\x99\x90\xE5\x85\xAC\xE5\x8F\xB8
Issuer: Sectigo Public Code Signing CA EV R36 |
| Safe | VirusTotal score: 0/72 (Scanned on 2025-09-06 19:17:42) | All the AVs think this file is safe. |
Hashes
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x110 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 6 |
| TimeDateStamp | 2025-Jul-10 01:20:04 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
Image Optional Header
| Magic | PE32+ |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x1400 |
| SizeOfInitializedData | 0x10e00 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x00000000000014D0 (Section: .text) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x140000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x17000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0x1835c |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
.rdata
.data
.pdata
.rsrc
.reloc
Imports
| IDE.dll |
?launchIDE@@YAHHQEAPEAD@Z
|
|---|---|
| Qt5Widgets.dll |
??0QApplication@@QEAA@AEAHPEAPEADH@Z
??1QApplication@@UEAA@XZ ?setFont@QApplication@@SAXAEBVQFont@@PEBD@Z |
| Qt5Gui.dll |
?setStyleHint@QFont@@QEAAXW4StyleHint@1@W4StyleStrategy@1@@Z
??0QFont@@QEAA@AEBVQString@@HH_N@Z ?setFamily@QFont@@QEAAXAEBVQString@@@Z ??1QFont@@QEAA@XZ |
| Qt5Core.dll |
??8QString@@QEBA_NPEBD@Z
?fromAscii_helper@QString@@CAPEAU?$QTypedArrayData@G@@PEBDH@Z ??1QLocale@@QEAA@XZ ?name@QLocale@@QEBA?AVQString@@XZ ?system@QLocale@@SA?AV1@XZ ?setAttribute@QCoreApplication@@SAXW4ApplicationAttribute@Qt@@_N@Z ?instance@QCoreApplication@@SAPEAV1@XZ ??1QString@@QEAA@XZ ?qgetenv@@YA?AVQByteArray@@PEBD@Z ?qputenv@@YA_NPEBDAEBVQByteArray@@@Z ??0QByteArray@@QEAA@PEBDH@Z ??0QByteArray@@QEAA@AEBV0@@Z ??1QByteArray@@QEAA@XZ ?append@QByteArray@@QEAAAEAV1@PEBD@Z |
| VCRUNTIME140.dll |
memset
__current_exception_context __C_specific_handler __std_exception_copy __std_exception_destroy __current_exception _CxxThrowException |
| VCRUNTIME140_1.dll |
__CxxFrameHandler4
|
| api-ms-win-crt-runtime-l1-1-0.dll |
terminate
_set_app_type _register_onexit_function _initialize_onexit_table _seh_filter_exe _crt_atexit _register_thread_local_exe_atexit_callback _c_exit _cexit _configure_narrow_argv _exit exit _initterm_e _initterm _get_narrow_winmain_command_line _initialize_narrow_environment |
| api-ms-win-crt-math-l1-1-0.dll |
__setusermatherr
|
| api-ms-win-crt-stdio-l1-1-0.dll |
__p__commode
_set_fmode |
| api-ms-win-crt-locale-l1-1-0.dll |
_configthreadlocale
|
| api-ms-win-crt-heap-l1-1-0.dll |
_set_new_mode
malloc _callnewh free |
| KERNEL32.dll |
GetCurrentProcessId
GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCommandLineW LocalFree WideCharToMultiByte QueryPerformanceCounter |
| SHELL32.dll |
CommandLineToArgvW
|
Delayed Imports
1
2
3
4
5
IDI_ICON1
1 (#2)
Version Info
IMAGE_DEBUG_TYPE_POGO
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2025-Jul-10 01:20:04 |
| Version | 0.0 |
| SizeofData | 720 |
| AddressOfRawData | 0x38a4 |
| PointerToRawData | 0x20a4 |
TLS Callbacks
Load Configuration
| Size | 0x138 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x140005028 |
RICH Header
| XOR Key | 0xa7e4967a |
|---|---|
| Unmarked objects | 0 |
| Imports (VS2008 SP1 build 30729) | 10 |
| Imports (30034) | 4 |
| C++ objects (30034) | 24 |
| C objects (30034) | 9 |
| ASM objects (30034) | 2 |
| Imports (27412) | 4 |
| C++ objects (30148) | 1 |
| Imports (30148) | 6 |
| Imports (30151) | 3 |
| Total imports | 86 |
| C++ objects (30151) | 2 |
| Resource objects (30151) | 1 |
| Linker (30151) | 1 |
Errors
Leave a comment
No comments yet.