4b4bf74465b17c0c9776277d69ed8af8

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2016-Dec-11 21:50:48
Detected languages English - United States
CompanyName The qBittorrent project
FileDescription qBittorrent - A Bittorrent Client
FileVersion 4.3.0.1
LegalCopyright Copyright ©2006-2020 The qBittorrent project
ProductName qBittorrent

Plugin Output

Suspicious PEiD Signature: UPX V2.00-V2.90 -> Markus Oberhumer & Laszlo Molnar & John Reiser
UPX v2.0 -> Markus, Laszlo & Reiser (h)
UPX -> www.upx.sourceforge.net
UPX V2.00-V2.90 -> Markus Oberhumer & Laszlo Molnar & John Reiser
Suspicious The PE is packed with UPX Unusual section name found: UPX0
Section UPX0 is both writable and executable.
Unusual section name found: UPX1
Section UPX1 is both writable and executable.
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • LoadLibraryA
  • GetProcAddress
 Can access the registry:
  • RegCloseKey
 Possibly launches other programs:
  • ShellExecuteW
Info The PE's resources present abnormal characteristics. Resource 110 is possibly compressed or encrypted.
Resource 103 is possibly compressed or encrypted.
Resource 104 is possibly compressed or encrypted.
Resource 105 is possibly compressed or encrypted.
Resource 106 is possibly compressed or encrypted.
Resource 109 is possibly compressed or encrypted.
Resource 111 is possibly compressed or encrypted.
Resource 203 is possibly compressed or encrypted.
Resource 204 is possibly compressed or encrypted.
Resource 205 is possibly compressed or encrypted.
Resource 206 is possibly compressed or encrypted.
Resource 209 is possibly compressed or encrypted.
Resource 211 is possibly compressed or encrypted.
Resource 303 is possibly compressed or encrypted.
Resource 304 is possibly compressed or encrypted.
Resource 305 is possibly compressed or encrypted.
Resource 306 is possibly compressed or encrypted.
Resource 309 is possibly compressed or encrypted.
Resource 311 is possibly compressed or encrypted.
Resource 405 is possibly compressed or encrypted.
Resource 406 is possibly compressed or encrypted.
Resource 411 is possibly compressed or encrypted.
Resource 503 is possibly compressed or encrypted.
Resource 504 is possibly compressed or encrypted.
Resource 505 is possibly compressed or encrypted.
Resource 603 is possibly compressed or encrypted.
Resource 604 is possibly compressed or encrypted.
Resource 605 is possibly compressed or encrypted.
Resource 606 is possibly compressed or encrypted.
Resource 703 is possibly compressed or encrypted.
Resource 704 is possibly compressed or encrypted.
Resource 705 is possibly compressed or encrypted.
Resource 803 is possibly compressed or encrypted.
Resource 804 is possibly compressed or encrypted.
Resource 805 is possibly compressed or encrypted.
Resource 806 is possibly compressed or encrypted.
Suspicious The file contains overlay data. 23473537 bytes of data starting at offset 0xa200.
The overlay data has an entropy of 7.99999 and is possibly compressed or encrypted.
Overlay data amounts for 99.8236% of the executable.
Safe VirusTotal score: 0/66 (Scanned on 2020-10-26 23:36:46) All the AVs think this file is safe.

Hashes

MD5 4b4bf74465b17c0c9776277d69ed8af8
SHA1 7501d3b5fc1b78b9d97cff5b130563a46e5d659d
SHA256 ae0c531cc8f868a7c11abd5e25c19a4f3e7562255ae0bbf79d72d6029e8bf3db
SHA3 19b40e688e2d0defff0cce20979dcefd4ba9576ca6d17a1fd7493e151903d453
SSDeep 393216:Z/vnh/MD79wNoUHK7HpGAo5v8iBeYcLnYj2Xtr1vQSbxlwvI3IbT15k2TZwHy5zb:Z/vZM/9wNfq7HQP9iF1vLxl/3IbniHyx
Imports Hash 4669eff8b7f461e29e051975ca3785d0

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0xc8

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2016-Dec-11 21:50:48
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 6.0
SizeOfCode 0x5000
SizeOfInitializedData 0x5000
SizeOfUninitializedData 0x44000
AddressOfEntryPoint 0x00049D30 (Section: UPX1)
BaseOfCode 0x45000
BaseOfData 0x4a000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 6.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x4f000
SizeOfHeaders 0x1000
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

UPX0

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0x44000
VirtualAddress 0x1000
SizeOfRawData 0
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1

MD5 544d3b3bb627ef3a8546f02f70dd5600
SHA1 b2ea52cca0dd3d561fa1132cf86a01f276e79b53
SHA256 b0dcaf257d50c934388b1602965f580f0b90d11053b435830bb79cf6df981c09
SHA3 da15d0bfc154ed9933ab4854321fdb4de57508ca0a8971c07340716a1a5b8d15
VirtualSize 0x5000
VirtualAddress 0x45000
SizeOfRawData 0x5000
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 7.856

.rsrc

MD5 941442bc8ba3b552c9586fa3729de2e9
SHA1 ae425716a159878b0771ad48bc738fb00b43f485
SHA256 a4333508b7d50cb0fc4a5900003b99add03b8460ebc73c0298c8f83e717b242f
SHA3 1de75dc8ef55ca6cb4af1a027c4720655956b36db60d53cbd93609ad2810bd23
VirtualSize 0x5000
VirtualAddress 0x4a000
SizeOfRawData 0x4e00
PointerToRawData 0x5400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 5.71644

Imports

ADVAPI32.dll RegCloseKey
COMCTL32.dll #17
GDI32.dll SetBkMode
KERNEL32.DLL LoadLibraryA
ExitProcess
GetProcAddress
VirtualProtect
ole32.dll OleInitialize
SHELL32.dll ShellExecuteW
USER32.dll GetDC

Delayed Imports

110

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0x666
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.86826
MD5 acce3c3333e9e28631a040c81b045cb0
SHA1 236dc507e19bbb4ef0a862508b340b74e0130666
SHA256 816a5c764b7add194cbe81291646f105b38bf344907f1323eea4eb49d2790b77
SHA3 e273924e2825d3780aa546494ae0ef4fdae32e347a8222d71a648802853c5a8f
Preview

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.26612
MD5 0ec0a0948a526b9c7eebe39bb02b6b0b
SHA1 867b304f20fd74abeb5c30515837f1c41cd3bf8f
SHA256 d442adb90ba296c7e617d2f58d6fa6f308bcd8ef65e5e9c66db4dd27f93fcfbe
SHA3 5bc458755a2ca5c7475620389d9b6b67952973c4366c6777d45c969b8bc67cd4

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.9993
MD5 6b224e01af48ec8e4c17a59d9534e885
SHA1 de787d2a1e840618ba2c7eb69d28f6966c404d1d
SHA256 50279c9885b490e74b49ac0273940b6e0891b62fc9ffb5c52e35422a694f248b
SHA3 71b543301bccda64ba61a27873c952890233e0cbec10e0b59245fc303bcfadbc

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.24459
MD5 ca82d899b1d402941b5c92ed9028cd95
SHA1 fb329ec4455d5caf1753305debcc14ab6ebb9015
SHA256 9da1013c864092e49c2676b3ba68a0d4513457d77d251730ed73cc5f4a4813b1
SHA3 768277223731ffdcb799e50961d0afccf23bbae54118d53b834617ccbd0c5cd9

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.01502
MD5 05e60fd47096a729dda2aaa4ab05ebc7
SHA1 de8ec9b484fa4f565b14f55503c9cd95231b633b
SHA256 61f762babde9942f43ee97154b8734efeed0632a6ea778dc395793ae3e3e7507
SHA3 f8ba0d4a91389414904cc66226099f27f482055e90ba449e2396193f139713d8

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.16057
MD5 d9ee3a2962251a241bce41b0524cfc0e
SHA1 2ba919aaa7237367a158e4b95385ab1ee07643d8
SHA256 69e6579a37fcaec037634e7fecbfc6a26093ea81dc4bd555d8a12187d2cd0866
SHA3 a1699668464f7edf9a748dfc264f9d30e3c69a228be0a18cade30c14aa6c77ba

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.34146
MD5 53482d364aa2d4ae7ca05199dad7651a
SHA1 ccb213408acc7f5ddb94753e6410be23aab5cedd
SHA256 ff06189b43a5c1d6cc5d1b7cbf6ab56b1157ec52807945d652274a211462cba5
SHA3 60659e39ef3f267c267093f8bc4c87ed61eea4ef96ac0f583184f580844573e5

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04232
MD5 636ad42555a835e3a94209043df4a45a
SHA1 c878613bda5cba6cb5769846e60229890c5df248
SHA256 491e52ded039ec6684277e6f1f820e288763ae6d20e682bcfffb6cee4518ac23
SHA3 4b79e60727e0f7be7495c59fb949e22bd753cff6e145e4694257a21a7b5dba8c

103

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x120
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.26915
MD5 4710ba6bc4bc39d7c7d50f789a19071e
SHA1 c0564a22795693d257f0b7cae08d4114e80e3484
SHA256 76b6a6623f7e3d7e2167f1b19341fc94cd49b801ccbd8b929f2ede96ff26570b
SHA3 020e14c622ec432f2219959296b4254a3ef986c5217160c48c83548e55b86c3b

104

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x118
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.25263
MD5 65e4e0de93ed92a22fe875a3734ad8fd
SHA1 07d4dd946d12bc15f300c1d3eff272497ed79ed6
SHA256 a7123b133e4b04e3ebf589a77e2d22de9b4fbb7c2bc5c8abee437a052b3eeb1c
SHA3 7caed578482035f732da5cd033277a2ae728ddb8330d13320fc716371b8e91b0

105

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x200
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.66371
MD5 8880d7be496d1ff5166d2251130c1bc3
SHA1 1a35b9d3e1cc09021283b1dc75ca0173d34f7af9
SHA256 6ca7854e3a8648daffccbabbd8645c56ddb6b27d296db6a6a28432b9b76e182b
SHA3 389f7d05722d99e9bd899e1aa4e554b8b0d571f4a76169fcf6ca9916002c55f3

106

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xf8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.19846
MD5 ce553db5f472c1d0133901bad3b3a73e
SHA1 e043ad611a86faf04baa8453412adc234c7bdd8f
SHA256 b19d6037af721bb7246524dbb0470eaa306c2d7fc2e7e25daa4715c2bbad75c6
SHA3 8362f97d00a780bbb0257a83cc5120c25fffb963837066c16262e4f97af8e703

107

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xa0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.83277
MD5 99dfb473d4751293f100a402cac6f439
SHA1 76bf3a9da53a037b747f3590e73f5c70aad3c195
SHA256 1beb50cb1c3d17b2fa847f3c610a1785e6a79588659c6738285a123fece163bd
SHA3 0f023b3fce2ef070b2a6b1954cef917f04c4f62f4219732b133e7105e20afbac

109

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xd4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.06208
MD5 26b4ac6fe9844691b0cfd0867788c1bb
SHA1 b723ecaf90b639e59614c71b69a69cbe03bc7ee9
SHA256 5f9ca7ddeb4d2f79cc82ed4c608bb8c43cc13a66a9267b9bfe3d11db14cd12dd
SHA3 475ee813d1fe3bdaa260648f26eb66a8f6b7592d61212ac1cd1233947c0755d8

111

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xee
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.03857
MD5 aa1091bcacfa92d41f850cf07ea5f2d6
SHA1 14a2acedae9096d542ba7cf309ba590515b530b2
SHA256 49f7365924ac1af1b15be5fd130a18d83dc200603235d429a3c57baefea81068
SHA3 d39ec324c7ec690334e5eed8ba35dff69d2f6f3c6a6177c56bb5f137478269a3

203

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x120
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.21263
MD5 d6215da4c8a76a852c1a273553fec2c0
SHA1 7bb8b515dce8f6785292311290b1fd6511f1a554
SHA256 347e50d2ae04b0e2ed2d31aa156aef9c9bf00067fe8d4240540f228c961a7822
SHA3 875d7af68be6b2a9134e6410390ea59c5a818b4674efe31c238f52ca8929adbf

204

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x118
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.22945
MD5 47b8b076c4ff0fdc960c35b70fd5c58c
SHA1 b22ed13f78e7aeebc0dd9a7170902238a235fde5
SHA256 2def0faf3d2e457fb8ba5d22548f45d4a09da41994f7657e772a3a124988797f
SHA3 fbe3d77c8b0e2410477217ff3622f7c48df8a00ec13df1922cf2fc95264ac5ba

205

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x200
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.56349
MD5 23b9aaaa4aaa7bea0f3e1ef6a48d5614
SHA1 c51ab6162daea14e0975b5dac33aaf8f6122449f
SHA256 ff465839b0f3ef13c0dbeee66706053fe0119976657970643dda1a38c0c0974c
SHA3 01e8f0cd5c363ca6604327bcf29429928613c3011096f5f854d54fad3bed5790

206

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xf8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.08342
MD5 3679b45b95a84de45f1099023b89ece7
SHA1 e63e5f14e22bade70ada6493249451570f0502a3
SHA256 ebe3bd208af06511271e46fa9eb0a9a0dc36356bd7f310785198be703b0d037d
SHA3 bbd010aa234adb626f135bb3a50e0983ece97261c132b1b13e02bd35a615422c

207

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xa0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.71634
MD5 5f81ad77a7e5d7915f8418ce1d36989b
SHA1 858aa3a7e84afd29816467f5d71daacc6428a218
SHA256 ada3428b1ea227f5ce85bdd01546dc51f1a32bf031e962c2f3500c6055292830
SHA3 989954ab3a7b0497799ede53ce8a2ab4e8be058aee46e0201d1154b9e5f150e3

209

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xd4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.03425
MD5 107eea0cfc29d0f266c043d28428c33a
SHA1 7ef5821c955c1c7bb0a2bd4ae60fd079a613a6c5
SHA256 655d0f79a305736dbab0bcf1a4beaa5d8f2367326f2bf2f3865b00d731170ee8
SHA3 7280e0de941de5de8231118617c8467262b5808519120c25924caf89ca8ca34f

211

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xee
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.14823
MD5 26508981bed227ed3b93940e5181ceca
SHA1 b8324d7f312bf1b647e2adc509a10011703645be
SHA256 f5b5dc250746e0ee2d6c074511dfce0303a86af1fd8d818049503d5e67db6245
SHA3 07b951bdceb06925aea8aa05424b568427bcd3bdd46e1170a4381e2955005c6f

303

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x120
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.24478
MD5 10f9fc0a24ab5680e1d5fad708523d24
SHA1 b47bdcf02fb9e0afb639d2eafca9cd8883a3baca
SHA256 fbb521874d656dfc08d138a3a0595e441f3cab3d2dc2494bfd39adfa220c5841
SHA3 12366cecaeb358968d7e519c6b955245226225b2de2b662a90828638677fb51b

304

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x118
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.19234
MD5 77f11bc9fcd3fbffb7be898b1e63f31e
SHA1 0de67d1b6d636d4c32655f13eb929a361d951bc2
SHA256 a62f1dc89f0fc5c3fa367f06674513b9c5a36b975ef4e805967693e80cd68d83
SHA3 26fb536e3dfeecd0120fe4c1d978c076a5cac169a975f82182378a67518753a6

305

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x200
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.49668
MD5 96c3de5d369d6c4b000378126d3d0afe
SHA1 4de8d99b216e94ad6eed4b0a7df1f1ff779109d1
SHA256 d50c2c127d645bcda697fd65ef098ebf505b69e438cce612b2fb906026a37863
SHA3 d56c2e9dea25bd17095ef9e823ee01f92d23ea2d25c8f3f067f02705b5540cc2

306

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xf8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.2155
MD5 3a8dfcbfb0d0e3a87403008b5ea73cd6
SHA1 d9c1e9696970eb06146e5dd09b4a396dfea98fca
SHA256 759dccb9d233eab3660a1e5b72e232dfe7f784af8b116d6f1c9ee58c18473569
SHA3 5991d53022236b065427b0cac9b8acecb44fd3001fbd22d31d3593e1c7a67de5

307

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xa0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.81249
MD5 b30f22d6b34db94d2829a6bb606467da
SHA1 25ccc18c67ec88b23eb648a56cf0188e17b9f835
SHA256 ac0e33609b31da5f85cbc941ba7b31f94a6bbc38c9ab466d39a250037ab9527f
SHA3 60a724e1470e365265245d5e2cb05aac578a34d4f9bbebf48569464672a65b52

309

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xd4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.04908
MD5 3c68ce224897c04f1682ad8e84e47f8c
SHA1 7cdf2ddc5fab587d77c9500ec11a1173b4e7bcc6
SHA256 201157c7b3af839f05a1dc1b45b0cb18d793f6107799a928c982857505430bb1
SHA3 4f3ffbf1e8f898d8d201385fbcd0ca3c47a04f1e9147655fd4324c37c40370df

311

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xee
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.16657
MD5 e1108d6660e2e44bafbc9cb4c1ae26d4
SHA1 c6faca467598718fc5ae28c31611535261852766
SHA256 e26edd24eb5e583ed57f32445cc4769bca41e8d71beacc278765cc7d68238667
SHA3 bfe424b1674bd28c24da4a332f16f5cbc90025b50387d2437d57221b7189ab81

403

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x120
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.92828
MD5 f432b3dfe5ef136654235a838cd2ffed
SHA1 6e8cc8f88ec6177905cebafb8ea5ee7a7f599adb
SHA256 4332385737fb4303bfaa85f40e45bdcec8a648fcca1a866901efeed8aac17d38
SHA3 97e9a57775c107b398b2bf32ecf163e31f4c0fabdc111690e71cde8ffa817254

404

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x118
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.68089
MD5 ad09819abd8e90fc465dfe1ebe8a61bb
SHA1 90e019c9ff1fb4cba1d07378d1ce3c4a6e2c89b8
SHA256 58329912b0826eeb1618e829e4a4ac16a3f8ccf6f6dd3790a690011b4488b151
SHA3 e42ab33377be56f0b489ef4c82cae4c9395e40c96cd606f096d8a3158889679b

405

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x200
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.32722
MD5 82cc1ef380c9095feac820a434fd4ad9
SHA1 edce2fb74dcb72f9b782f52f39925a8e31e3e893
SHA256 fb7615f2245af58a18c68f22b9cc2cba92b646068ab350b1c50538f4975c6bcd
SHA3 fb9ef5dab80c79d73402c2f936ec1721e2cc565dc442a52c048242f892d40a39

406

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xf8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.0706
MD5 793445254fe039fd7f02c526122d8e77
SHA1 e7af2dc4dc4255aab80c3ac699a42ab79ef5810e
SHA256 fcc832e5cccc493f24de66b37453ae63998da662b25c84fa437d397f31078de2
SHA3 cf2995cb08893b0576457a9a45190403428f2f525e976611f9f705327d80320f

407

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xa0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.70612
MD5 d112c5db14373352086825daf5ece660
SHA1 ede50bcbeb73590ade9a5d32d205702c47505263
SHA256 96b1e6524256d9bf78cb456a784dfbb3e3bc10013361448177eb2438fea8d4ff
SHA3 589e9e99a4ea24ad13df8e14ecc01ee09e0414bee1cb12a6dd7c951928a73391

409

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xd4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.81797
MD5 f5f65794db5fd0c45ea5c73f70e10405
SHA1 34dd979c44b1caf0b3348e9737abaf307ed77135
SHA256 7f2128b24574de5bfdea8f5209ed5177f592d3959722eb84e0d5a29599c2de3c
SHA3 dc246a803908e07437df5e153f955494515fe77a803f942725b6c9b39717607a

411

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xee
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.04269
MD5 d30e9564cd65bf60482ad97def76f50d
SHA1 7bc700fe1d1bc15963dbe2e84dbbe295596f38fb
SHA256 c44e7ce483677e7a030d20794690e22917755edbdd1f01eb677e9b06cb9f08bf
SHA3 681acf3bb12734a0bbb1a94773419d6e21b0bc97c42794013015590749a1027d

503

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x118
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.06403
MD5 36b1471012af151dc23cba40c598f165
SHA1 9ca468f8f76307a7aa94607b4ce8e3c3e3616e40
SHA256 fa512af0c49a500394c90e2b8158233d8553e432d54d2f3a3de076fd08873423
SHA3 c80c58c6b744a0e4bbe144af114fc0c45dd4a6f45a7d1f5f39f14f4526f53169

504

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x110
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.08075
MD5 78e26160d6ec38703c21b40aa81a40b7
SHA1 6a3b297620bc4398893b940ce217f7cf474fbe8d
SHA256 668f5ec68df2061eb1999e865fd9116e6c9b58fb8ffbbe9e05e91b69eb67a55c
SHA3 4e1c6543b133f6ff23e45bc9754f9d43895dc28d4e46d594b97db287147f49ef

505

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x1f8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.43352
MD5 e6ed081ed4923bc9a64b2a0bad29cceb
SHA1 f3407445883a79f23637cffba204772bad062920
SHA256 f022eac427d4b508b5896782d3094d48205e46bc0c1a956c23f7b7884278ece6
SHA3 688be8456d99a463125ab1b23d678fe7b7d0ddb21ae1cf1b532eedd2fb71023e

506

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xf0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.95148
MD5 629857dcafca60ff86b6b99d57bfb190
SHA1 8b5d84636fab8e676e3860c86fd9fa3318f55028
SHA256 e48bc43c1c7d50f2fe3abbfa41f92f79a84a5186ab09292798a6ba858e0fa49a
SHA3 f83f1c7af2721eecdb0895f581c41abc04e715941c007a5a741629afea6551b5

507

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x98
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.67369
MD5 6577c2fa2bdf5f08d08bfb30b561de11
SHA1 4fd2680c25cd9c8970f40454a082da48743d2d77
SHA256 b90d1086f8657f2f2172930f6dab172918e689076446046490349cc3094c86ff
SHA3 1e622e27ba93dcde3d0446eb650795751bb3544c3d9254492cc4b1b9764736e0

509

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xcc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.95716
MD5 bfb9559e8c43cb866736d0e7018ccd28
SHA1 b5ff8765d75146aed04d81fe0f489064f5b3fa6e
SHA256 e23df400da970ac4642c6fd0ebd8e716e4744819a146be3c253e0e5e4566cd17
SHA3 d766c1186c39d7b51297a76c5cfb922232c52dd98f84e01e1a264cfd0f451164

511

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xe6
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.92479
MD5 302982b2f8d42d1e1e3330f68fc985e6
SHA1 cae85ac26b5891c7b64b5d989233ea2d6c075cdf
SHA256 0f55bb275ecab2e6cc84c8ba71c61c6dcf27f6310e353f06b3b20301c5dbfbab
SHA3 5b7b3f55b4cbe93dfe058dc08deaad3e5df89f444e878eb8dfe8babe695e4220

603

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x10c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.08119
MD5 5e8b19f888edaa6c58c5db8cd93da756
SHA1 ae19354a98c1ab8c672f7ce5066a2fbe87404802
SHA256 0bb9ff6b8c3d26858eebbdaebb136a7edfbbf3a3424e760deb5d5c489004e835
SHA3 3c47bbec5a7ed52fb179eb41fb395ffd127b8165e4e69ae4069f9241dc0c4f86

604

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x104
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.13503
MD5 d6d88a93647813a5fbd5fc97fa5f0422
SHA1 56a4ba8186a8ce92dd00ecb1ef0732bdb6055263
SHA256 4579fe024b96100ee31771bc6272d86ba2577222d80de92d8879807d7cf50025
SHA3 e7dc91f7ab89cbcc72ce11e0da5e730d854dfb3bd81643763774558864f8ffbc

605

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x1ec
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.45724
MD5 9d30a94053a36059cf40dd869391d8de
SHA1 fc7cc5c72205ed31490759e5eead648933361edf
SHA256 19733a9fb4a30258d0f06785824882dce74ae3401e7d5c7bc58c674f54dbf84d
SHA3 456adf91c2c121c3a33a85f298b62d718f38fc45eb2378976574e6f7c7dce919

606

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xe4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.02956
MD5 d3bc52a898539b03cffcc641cdd68af6
SHA1 19057e14651c0d4d60ac4a91732a6846b851141c
SHA256 95131cde9c83188fa625eb3648af567e5bb4213bf1ee3d2b774f982b26a56da4
SHA3 83a6964335471c48483c362a388bf937b4fac03195a9149dbe87f6ba4526e495

607

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x8c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.50511
MD5 d7dd943729c8b66fec9786eb63b4f7e8
SHA1 6302a0e94dda9f595c620821315b4b2bd0330005
SHA256 e7d459a15fff562564ee45621796f702bf59de800453dc5420214766955f3553
SHA3 1b25547a36b999ba2192cdb2fb6271af93515743e82c046d2497b2d4eaa79d17

609

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xc0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.75208
MD5 39b2faceaa5fa607b2ee269479c4bb46
SHA1 e1b64cd2e1d4634493a3eb9365e2210b79c2574b
SHA256 0f08dfa045f2caccb6e9fe6017ef8e3ad87ec2e4cd09053d2d6236bea358987d
SHA3 5f277fa280ace146a1f98fb569897df8d57262b4a96f383e10ddd6b21453ed1f

611

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xda
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.94815
MD5 3f159010dc5722a8144087a455fb2600
SHA1 0e9525422e1d0b9815a328c892ae3a9be9d40bfb
SHA256 7d00ecfc70c8e975640a88700bf5bbf74109a88b460b0ba5e963b86c8138aacc
SHA3 4bfed03b1bc2fd827de41426490694295c91eff631771524bd1ec049f5a864e4

703

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x10c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.15773
MD5 1d8c559ec66024904cc98ae2608ece54
SHA1 9682dc5a4d31cd7d0f4461498081b153694d9803
SHA256 a8fae4fec7a858a19acaf6af5444caad5c52433c0f4fa44e658edef496eed2d2
SHA3 c554c0d4be31b10a323b14d7fb389cfc88fe686138f87a7d643cb937ebc4ce53

704

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x104
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.06369
MD5 070029b0a34823c2102af1001ce0bf33
SHA1 e080e31ccc78b57cf8beaa0ffe24137c54be544a
SHA256 98409de7ef814a8c066a265b297ae02240a2fe395a042d7b927007b2216e58a9
SHA3 4f5dad7d8141a97e36d8b2362edee3f473a4190949ff692a5194242898adbb50

705

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x1ec
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.43369
MD5 1071b5407e0c82075fb1096fcee66b63
SHA1 e97afac19e49d8a41ddca15fa080620ac1aee43f
SHA256 aedf70697e7b3f23b521d9cd9e50a35f465b0c3c8996c477fe93b2d0339efe08
SHA3 6308b28016cd88847d9ab8d3f2baa1d8185906e1b6dff5440b1da959ecc7bdf1

706

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xe4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.98785
MD5 3a99046bf7fbd1f71719163ff9696752
SHA1 180fe400d44fe099a53e422afd5335e75b908707
SHA256 4e539f153420018bc4a0c4cd12b56be69c6678e7aa4f19d84894970cd1818d2e
SHA3 866e2b2da3e5e59d0a6d79dace1f26a4a77142fdb9bb880c815d133f22339a01

707

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x8c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.65057
MD5 99ed102aefa4fe3b7dc17f18abc41e8a
SHA1 93b2a5caf250b8c699409de00905f0bfc01f8504
SHA256 7748213e058445f45a1e2903f0fbe71091f10646cfee83cefaa861e0e72d8ca3
SHA3 d1937297bca783c649ec78a523880b28626d2309f9d3bfbc7da484b03d169571

709

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xc0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.83797
MD5 6189abae3ab0acf5fc92777234c652e5
SHA1 9d18feb625ac638d7e6c8ce88c7e64d33e6e6dbb
SHA256 cb67589ac596202e59f376a5edfb359b343ceabb3987a6b18517ab5bcfc67039
SHA3 914ccc727c9a7c2435073b51a2202e931f69a46291fd4cb485afb57ca7b473a3

711

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xda
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.94224
MD5 2b666f8da23bdc13a9a3d4404b90335c
SHA1 50448d6909c94ffc51daa5b5557b74c2838ea52d
SHA256 2031490836f2e94cd1578f862c93e406e44ff39069869fcc25edd911c12a943a
SHA3 c7c0697ded7dff1dd829f89b56b4461de1514b41ad7e4969037aefced57ec60f

803

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x110
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.17999
MD5 8406008ab12ee08c863344b2c54f87ea
SHA1 0a0da50fa750bc3b647e042ed1e1d1e3911a0f06
SHA256 2a782c264dc70fdc497800af1e0bb2882ee9628d352be66ed648e4c37e242e2b
SHA3 df0e08625bf6ea0cb0543fc1a907689fe6adf9e140ebed506910e72eb8fc6247

804

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x108
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.15698
MD5 15a0a73f01aad14d336cfe95e55ebe9c
SHA1 1004d0183f5c0c4571bb67e65e87f31f15f9f8e9
SHA256 ca1eada9ca411b285ddb0bca396eeeb3a36d769a9300501b9e173867f7df035b
SHA3 dd595deb445228d2dce67a22e7d853e743726de43534b4ba2cacf7e4d4c753c5

805

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x1f0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.457
MD5 ad8befe6c9ed8561416070867bc817bb
SHA1 c67188faefbd6db7f41cf94766db44d6e33cf40c
SHA256 5f2fbcb2f6f8f5e9440d6690d900b9906d8ab2b6c21d43d0c074fdf5804a231d
SHA3 6dad3c6b67ca1abffd1bdea178d18b35efae39b41b87800fde33d3c68d1bb8c9

806

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xe8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.02198
MD5 87aa162dd61850b1d688d67936ea556d
SHA1 40604925fbd955ed2afab5967a94ad9f1688363b
SHA256 649dc42c2f694db0711d14863ee67512a7f64820996d35c24e2234cf4ecb3ee5
SHA3 e2ff2ad1886d1101aeac77eff73e9ddc8323ccb2994c6471f02348aa7c124e09

807

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x90
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.62799
MD5 5275e3ed237fa3593e57aa49945ee7b8
SHA1 68c70a6c43b60e75070e7fcc9bce45c8639931d0
SHA256 709db7b313fbd6d05390ad4a5dbfddcc6990b39f128cd30df21d043cb39ba33b
SHA3 8c5e5d3fa29ce258f11c8e7f898fd70be1410f988105515ad54a788cad81bc4b

809

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xc4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.88617
MD5 661ac0e40f616d3ca1b8b3fb20afefa5
SHA1 a4283f79c677e704ef8b87b58098762fd1d7345a
SHA256 f53974428203045317efc7d6be2184db1703baa9098ac8d51a0c10a6597346c1
SHA3 5dcfaa6b2a5aeba44bd6bf553e698cd6094a0553007e052eb30b771467bb7f22

811

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xde
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.99476
MD5 e1926282d5f365dc251b11a9dd8b511d
SHA1 6a39c132f0f6eb39d795dbafb5b9ad0deffd249b
SHA256 5dbcfa15e32c6a920a3bc6929046190abc56221bc0f375f807c318aaf2f3dab8
SHA3 729eefbf0f7600901edcaa6c9a4f217b967c43698adc7c2f8ba69d557f0be3c5

103 (#2)

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.6691
Detected Filetype Icon file
MD5 e624f041c921d299a6da3a8c5f48f989
SHA1 ffa07c86ac3dac45398ee07b26610dfb5c99d8ea
SHA256 fed46e06346fb8f64b14c18408a82caf955929ac0e65151630539dc5bd194584
SHA3 b51d47dbe9cbe18b1f520275504256022a827f919672b081943ae45cd4ff44c9

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x280
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.31134
MD5 52cbbe7fb6569723427b556f9ddc0c59
SHA1 91211b5108ef5031501dbae136a3ccb87754e68c
SHA256 4f1f7660f21115535eef7f50a34acf88c654bf46e9e9220c28d95547e01a78b0
SHA3 cd43dd1e421fd14e36a211e437a7fca556fd76cfa3dc46bbfc8fc803f0036023

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x4e1
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.28648
MD5 39f0593dbc8bc6680527c98cd860976b
SHA1 4e544add6938df63bb57564a23283d70dbc32044
SHA256 3de4829ed957d7719d3672cd007b2b428d5667a3def16e1cb5dac37a1bcf1f99
SHA3 5fb6a053a08d31901b83c3931d7946110b265657d71953f2e9a16422435385a7

Version Info

Signature 0xfeef04bd
StructVersion 0
FileVersion 4.3.0.1
ProductVersion 4.3.0.1
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language English - United States
CompanyName The qBittorrent project
FileDescription qBittorrent - A Bittorrent Client
FileVersion (#2) 4.3.0.1
LegalCopyright Copyright ©2006-2020 The qBittorrent project
ProductName qBittorrent
Resource LangID English - United States

TLS Callbacks

Load Configuration

RICH Header

XOR Key 0xd28650e9
Unmarked objects 0
C objects (VS2003 (.NET) build 4035) 2
Total imports 166
Imports (VS2003 (.NET) build 4035) 15
48 (9044) 10
Resource objects (VS98 SP6 cvtres build 1736) 1

Errors

[*] Warning: Section UPX0 has a size of 0!
<-- -->