0e3b1c129309d68ae636d640d498dc50afa48979bac6c1af06f387fae338f8f6

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2024-Sep-19 07:17:18
Detected languages English - United States
Debug artifacts C:\Users\qt\work\qt\qtbase_build\plugins\generic\qtuiotouchplugin.pdb
CompanyName The Qt Company Ltd.
FileDescription C++ Application Development Framework
FileVersion 6.7.3.0
LegalCopyright Copyright (C) The Qt Company Ltd. and other contributors.
OriginalFilename qtuiotouchplugin.dll
ProductName Qt6
ProductVersion 6.7.3.0

Plugin Output

Suspicious The PE is possibly packed. Unusual section name found: .qtmetad
Info The PE is digitally signed. Signer: The Qt Company Oy
Issuer: Entrust Extended Validation Code Signing CA - EVCS2
Safe VirusTotal score: 0/67 (Scanned on 2025-02-08 05:14:32) All the AVs think this file is safe.

Hashes

MD5 acc32fcf3836c255c531375b8e8dc02a
SHA1 ce72996e015165500458fa1b033a82d61ca5979a
SHA256 0e3b1c129309d68ae636d640d498dc50afa48979bac6c1af06f387fae338f8f6
SHA3 f6879d5bf2b2c15e457bed3a42ebd2e2e54002677810089f5b975bae432f61df
SSDeep 3072:cWBD6utSD34bueL3QMT0TCc4DR2HOhjKf:cWBZtSDUvL3Sm7DR9ef
Imports Hash 566df76d65b1194620667beff92de74d

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x110

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 7
TimeDateStamp 2024-Sep-19 07:17:18
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0xee00
SizeOfInitializedData 0x7600
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000000000000F2D0 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x180000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x1b000
SizeOfHeaders 0x400
Checksum 0x1d66e
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 c32b6357de47e7d839b26a86bbc6d636
SHA1 50bd10a4697678a232b1044a8aee76a7107352dc
SHA256 73453b1e4c2d550652ed2926399fab620c4f3c734d00451320060f0a71d35d91
SHA3 e3a2e5d6588cbdd058e450064691609111b4e46af49beafb2dc810a164a73645
VirtualSize 0xec0e
VirtualAddress 0x1000
SizeOfRawData 0xee00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.25424

.rdata

MD5 0f4ebdee88d2933d2513571370371876
SHA1 4f82266e4174235a88ccb3e29b330850e5683dfe
SHA256 bb48edbb9c1e43910a097a5af182eb5b34cc7b4eb68063cf7e2139f1040ecd25
SHA3 3e97f72f429c3d4d679a90f1e930775e038a45d99b167598f8ed6d406b0daf1a
VirtualSize 0x50f8
VirtualAddress 0x10000
SizeOfRawData 0x5200
PointerToRawData 0xf200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.1259

.data

MD5 dc94b9b7251666a65d192afbc47ae6bb
SHA1 353cc75335b31cca75485203b9bd1e6ab7ab3440
SHA256 3c20ead835d81a04c6dbd38fea5a56ae42ddbd6b186005c777166fa161fd8104
SHA3 4ee715da28bf4dd20ff0b25d428d7c5fe76df59ed8665ebee5dc10ef31514ea1
VirtualSize 0xa88
VirtualAddress 0x16000
SizeOfRawData 0x400
PointerToRawData 0x14400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.59409

.pdata

MD5 225b60668ee7c2e7669fbdea88d2541b
SHA1 0c1a44f18702d43de97941dfeb4ad18caad086d2
SHA256 db2b806b749c08e3f41a6a63a516ddfdda1c830f6ad7ca842dbdf220677fed0b
SHA3 d9b6eb4e8ddfcac9ca62f2534f6b71aa04b6025372f2d8c0b46ecca2c364c3d7
VirtualSize 0xc3c
VirtualAddress 0x17000
SizeOfRawData 0xe00
PointerToRawData 0x14800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.43345

.qtmetad

MD5 9818c210d3f1b72308216fcefa67f336
SHA1 97358091e3b49bb9983d89c2091da37e2c8192c1
SHA256 40d0265c2edeef85bdd55abf1785b96129714d4b8a1120c86ad7cc7a236c029c
SHA3 bb9994b3ea717ae43510e7c7f0db479e6e9e9f0c36de9c4e1e15e81ab5d5fcf5
VirtualSize 0x69
VirtualAddress 0x18000
SizeOfRawData 0x200
PointerToRawData 0x15600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_SHARED
Entropy 1.76333

.rsrc

MD5 965e0c3ed068ed52685258ff4826dddf
SHA1 c499a7bc3f30bc3149312efdd118e57146f089ea
SHA256 e4a8ef7c65727a879a04158aa239ad60decda0b864d0ae488bf4c69e5b617116
SHA3 86af3999d1df993b624c380e6df60a9ad54ae2bcd8f786890b84af9558bde94b
VirtualSize 0x590
VirtualAddress 0x19000
SizeOfRawData 0x600
PointerToRawData 0x15800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.94467

.reloc

MD5 d5d2a1af9d5a56ebefa45a59c5c510bd
SHA1 20990574bf88d7b9b469b615e433739cbba2d124
SHA256 6649e50b5c4cbd2f0ddc0fe1f0103e9b39da6e00b93b1e2513810529ef0e5cb0
SHA3 4491be2ddccae812d5b209f867efbb02292df535a4ffb9648d2c0b1af22b9d29
VirtualSize 0x10c
VirtualAddress 0x1a000
SizeOfRawData 0x200
PointerToRawData 0x15e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 3.43992

Imports

Qt6Network.dll ?hasPendingDatagrams@QUdpSocket@@QEBA_NXZ
?bind@QUdpSocket@@QEAA_NW4SpecialAddress@QHostAddress@@GV?$QFlags@W4BindFlag@QAbstractSocket@@@@@Z
??1QUdpSocket@@UEAA@XZ
??0QUdpSocket@@QEAA@PEAVQObject@@@Z
??1QHostAddress@@QEAA@XZ
?pendingDatagramSize@QUdpSocket@@QEBA_JXZ
?readDatagram@QUdpSocket@@QEAA_JPEAD_JPEAVQHostAddress@@PEAG@Z
??0QHostAddress@@QEAA@XZ
Qt6Gui.dll ?qt_metacall@QPointingDevice@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QPointingDevice@@UEAAPEAXPEBD@Z
??0QGenericPlugin@@QEAA@PEAVQObject@@@Z
?metaObject@QPointingDevice@@UEBAPEBUQMetaObject@@XZ
??$handleTouchEvent@UDefaultDelivery@QWindowSystemInterface@@@QWindowSystemInterface@@SA_NPEAVQWindow@@PEBVQPointingDevice@@AEBV?$QList@UTouchPoint@QWindowSystemInterface@@@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z
??0QPointingDevice@@QEAA@AEBVQString@@_JW4DeviceType@QInputDevice@@W4PointerType@0@V?$QFlags@W4Capability@QInputDevice@@@@HH0VQPointingDeviceUniqueId@@PEAVQObject@@@Z
??1QPointingDevice@@UEAA@XZ
?mapToGlobal@QWindow@@QEBA?AVQPoint@@AEBV2@@Z
?focusWindow@QGuiApplication@@SAPEAVQWindow@@XZ
?topLevelWindows@QGuiApplication@@SA?AV?$QList@PEAVQWindow@@@@XZ
?fromTranslate@QTransform@@SA?AV1@NN@Z
?map@QTransform@@QEBA?AVQPointF@@AEBV2@@Z
?staticMetaObject@QGenericPlugin@@2UQMetaObject@@B
?qt_metacast@QGenericPlugin@@UEAAPEAXPEBD@Z
?qt_metacall@QGenericPlugin@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?registerInputDevice@QWindowSystemInterface@@SAXPEBVQInputDevice@@@Z
??1QGenericPlugin@@UEAA@XZ
??0QTransform@@QEAA@XZ
?type@QTransform@@QEBA?AW4TransformationType@1@XZ
?translate@QTransform@@QEAAAEAV1@NN@Z
?scale@QTransform@@QEAAAEAV1@NN@Z
?rotate@QTransform@@QEAAAEAV1@NW4Axis@Qt@@@Z
??XQTransform@@QEAAAEAV0@AEBV0@@Z
Qt6Core.dll ?staticMetaObject@QIODevice@@2UQMetaObject@@B
?toByteArray@QVariant@@QEBA?AVQByteArray@@XZ
?toFloat@QVariant@@QEBAMPEA_N@Z
?compare@QString@@QEBAHVQLatin1String@@W4CaseSensitivity@Qt@@@Z
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPEAU12@PEBVQObject@@@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
??0QMessageLogger@@QEAA@PEBDH00@Z
?warning@QMessageLogger@@QEBAXPEBDZZ
?debug@QMessageLogger@@QEBA?AVQDebug@@XZ
?allocate@QArrayData@@SAPEAXPEAPEAU1@_J11W4AllocationOption@1@@Z
?reallocateUnaligned@QArrayData@@SA?AU?$pair@PEAUQArrayData@@PEAX@std@@PEAU1@PEAX_J2W4AllocationOption@1@@Z
??0QByteArray@@QEAA@XZ
??0QByteArray@@QEAA@PEBD_J@Z
??0QByteArray@@QEAA@AEBV0@@Z
??1QByteArray@@QEAA@XZ
??0QByteArray@@QEAA@$$QEAV0@@Z
??4QByteArray@@QEAAAEAV0@$$QEAV0@@Z
?data@QByteArray@@QEBAPEBDXZ
?constData@QByteArray@@QEBAPEBDXZ
?indexOf@QByteArray@@QEBA_JD_J@Z
?mid@QByteArray@@QEGBA?AV1@_J0@Z
?startsWith@QByteArray@@QEBA_NVQByteArrayView@@@Z
?startsWith@QByteArray@@QEBA_ND@Z
?toHex@QByteArray@@QEBA?AV1@D@Z
?size@QByteArray@@QEBA_JXZ
?isNull@QByteArray@@QEBA_NXZ
??1QDebug@@QEAA@XZ
??6QDebug@@QEAAAEAV0@AEBVQByteArray@@@Z
??1QVariant@@QEAA@XZ
??0QLoggingCategory@@QEAA@PEBDW4QtMsgType@@@Z
??1QLoggingCategory@@QEAA@XZ
?isDebugEnabled@QLoggingCategory@@QEBA_NXZ
?isWarningEnabled@QLoggingCategory@@QEBA_NXZ
?warning@QMessageLogger@@QEBA?AVQDebug@@XZ
??4QByteArray@@QEAAAEAV0@AEBV0@@Z
?at@QByteArray@@QEBAD_J@Z
??0QDebug@@QEAA@$$QEAV0@@Z
??6QDebug@@QEAAAEAV0@D@Z
??6QDebug@@QEAAAEAV0@PEBD@Z
??0QDebugStateSaver@@QEAA@AEAVQDebug@@@Z
??1QDebugStateSaver@@QEAA@XZ
??0QVariant@@QEAA@AEBV0@@Z
??0QVariant@@QEAA@H@Z
??0QVariant@@QEAA@M@Z
??0QVariant@@QEAA@AEBVQByteArray@@@Z
??0QVariant@@QEAA@$$QEAV0@@Z
?qdebugHelper@QVariant@@AEBA?AVQDebug@@V2@@Z
?staticMetaObject@QObject@@2UQMetaObject@@B
?qEnvironmentVariableIsSet@@YA_NPEBD@Z
?resize@QByteArray@@QEAAX_J@Z
?data@QByteArray@@QEAAPEADXZ
??0QString@@QEAA@XZ
??0QString@@QEAA@VQLatin1String@@@Z
??1QString@@QEAA@XZ
?section@QString@@QEBA?AV1@VQChar@@_J1V?$QFlags@W4SectionFlag@QString@@@@@Z
?startsWith@QString@@QEBA_NAEBV1@W4CaseSensitivity@Qt@@@Z
?split@QString@@QEBA?AV?$QList@VQString@@@@VQChar@@V?$QFlags@W4SplitBehaviorFlags@Qt@@@@W4CaseSensitivity@Qt@@@Z
?toInt@QString@@QEBAHPEA_NH@Z
??0QString@@QEAA@PEBD@Z
??8QString@@QEBA_NPEBD@Z
??1Connection@QMetaObject@@QEAA@XZ
?qt_metacast@QObject@@UEAAPEAXPEBD@Z
?qt_metacall@QObject@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
??0QObject@@QEAA@PEAV0@@Z
??1QObject@@UEAA@XZ
?connectImpl@QObject@@CA?AVConnection@QMetaObject@@PEBV1@PEAPEAX01PEAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PEBHPEBU3@@Z
?errorString@QIODevice@@QEBA?AVQString@@XZ
?readyRead@QIODevice@@QEAAXXZ
??6QDebug@@QEAAAEAV0@H@Z
??6QDebug@@QEAAAEAV0@_J@Z
??6QDebug@@QEAAAEAV0@M@Z
??6QDebug@@QEAAAEAV0@AEBVQString@@@Z
?moveCenter@QRectF@@QEAAXAEBVQPointF@@@Z
?userType@QVariant@@QEBAHXZ
?toInt@QVariant@@QEBAHPEA_N@Z
MSVCP140.dll ?_Xlength_error@std@@YAXPEBD@Z
VCRUNTIME140.dll __std_exception_destroy
memcmp
_CxxThrowException
__std_type_info_destroy_list
__C_specific_handler
__std_exception_copy
memmove
memset
VCRUNTIME140_1.dll __CxxFrameHandler4
api-ms-win-crt-heap-l1-1-0.dll free
_callnewh
malloc
api-ms-win-crt-runtime-l1-1-0.dll _seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm_e
_initterm
KERNEL32.dll RtlLookupFunctionEntry
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
EnterCriticalSection
RtlCaptureContext
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
CloseHandle

Delayed Imports

qt_plugin_instance

Ordinal 1
Address 0x11d0

qt_plugin_query_metadata_v2

Ordinal 2
Address 0x12e0

1

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x370
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.4414
MD5 0960440e8890746c8d47b977cbd97acd
SHA1 695125958b55a3e301c2ce11f4243a3eed1675ce
SHA256 555d584e99d89a19fa4136c867944a4002d07f774f38d161ed103826f400f111
SHA3 53f4dd3d25bfb697acae63eebb1ad089426946faae95f4a85f25ed6aa64f2005

2

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x17d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.91161
MD5 1e4a89b11eae0fcf8bb5fdd5ec3b6f61
SHA1 4260284ce14278c397aaf6f389c1609b0ab0ce51
SHA256 4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df
SHA3 4bb9e8b5a714cae82782f3831cc2d45f4bf4a50a755fe584d2d1893129d68353

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 6.7.3.0
ProductVersion 6.7.3.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
FileType VFT_DLL
Language English - United States
CompanyName The Qt Company Ltd.
FileDescription C++ Application Development Framework
FileVersion (#2) 6.7.3.0
LegalCopyright Copyright (C) The Qt Company Ltd. and other contributors.
OriginalFilename qtuiotouchplugin.dll
ProductName Qt6
ProductVersion (#2) 6.7.3.0
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2024-Sep-19 07:17:18
Version 0.0
SizeofData 94
AddressOfRawData 0x11d38
PointerToRawData 0x10f38
Referenced File C:\Users\qt\work\qt\qtbase_build\plugins\generic\qtuiotouchplugin.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2024-Sep-19 07:17:18
Version 0.0
SizeofData 20
AddressOfRawData 0x11d98
PointerToRawData 0x10f98

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2024-Sep-19 07:17:18
Version 0.0
SizeofData 920
AddressOfRawData 0x11dac
PointerToRawData 0x10fac

TLS Callbacks

StartAddressOfRawData 0x180012168
EndAddressOfRawData 0x180012170
AddressOfIndex 0x1800164e0
AddressOfCallbacks 0x1800105b8
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_4BYTES
Callbacks (EMPTY)

Load Configuration

Size 0x138
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x1800161d8
GuardCFCheckFunctionPointer 6442517848
GuardCFDispatchFunctionPointer 0
GuardCFFunctionTable 0
GuardCFFunctionCount 0
GuardFlags (EMPTY)
CodeIntegrity.Flags 0
CodeIntegrity.Catalog 0
CodeIntegrity.CatalogOffset 0
CodeIntegrity.Reserved 0
GuardAddressTakenIatEntryTable 0
GuardAddressTakenIatEntryCount 0
GuardLongJumpTargetTable 0
GuardLongJumpTargetCount 0

RICH Header

XOR Key 0x37a74e23
Unmarked objects 0
Imports (VS2008 SP1 build 30729) 4
Imports (30034) 6
C++ objects (30034) 19
C objects (30034) 8
ASM objects (30034) 3
Imports (30795) 2
Imports (30151) 7
Total imports 169
C++ objects (30151) 5
Exports (30151) 1
Resource objects (30151) 1
151 1
Linker (30151) 1

Errors

Leave a comment

No comments yet.