Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
QMEmulatorService.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
QMEmulatorService.exe
Resource
win10v2004-20230220-en
Target
QMEmulatorService.exe
Size
239KB
MD5
758d190704f09e874ec88e172f8d057c
SHA1
330aab9d3805c50db6e93b34b8fe96c96c863bb6
SHA256
e8384ecdf810ea96621fa117866612477e1af406616f664820593ee22a17ffb6
SHA512
5e06253d8a78571a60e615fe67ffedd85e998668b1721c5ff2ab2e5272e67c06916a3b345008715b3348988d9d7ef6378fe89ce21f5ba6f8af043db66174e255
SSDEEP
6144:Gxk6UEnZmnbQos3N+bFN33v3a+vGjYEzGOmx:Gx2WmnbQJ3Na3PK+RSmx
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
htonl
htons
LockResource
LoadResource
FindResourceW
FindResourceExW
CreateFileW
DeviceIoControl
CloseHandle
GetTickCount
WriteFile
SetFilePointer
ReadFile
WideCharToMultiByte
GetCurrentProcess
GetFileAttributesExW
GetLogicalDrives
GetDriveTypeW
GetDiskFreeSpaceExW
MoveFileW
GetLocalTime
FreeLibrary
GetCurrentThreadId
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
CreateThread
CreateToolhelp32Snapshot
SizeofResource
ProcessIdToSessionId
Process32NextW
OpenProcess
K32EnumProcesses
K32GetProcessImageFileNameW
RaiseException
InitializeCriticalSection
GetSystemInfo
GetVersionExW
VirtualQuery
GetSystemDefaultLangID
LoadLibraryA
SwitchToThread
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
Sleep
DeleteFileW
GetFileAttributesW
GetModuleHandleW
GetProcAddress
GetPrivateProfileSectionW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetCommandLineW
GetModuleFileNameW
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
Process32FirstW
InitializeSListHead
WaitForSingleObjectEx
ResetEvent
SetEvent
OutputDebugStringW
IsDebuggerPresent
DuplicateTokenEx
LookupPrivilegeValueW
GetTokenInformation
OpenProcessToken
RegQueryValueExA
RegisterServiceCtrlHandlerExW
SetServiceStatus
StartServiceCtrlDispatcherW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
CreateProcessAsUserW
SHCreateDirectoryExW
CommandLineToArgvW
SHGetSpecialFolderPathW
CoCreateGuid
PathAppendW
PathRemoveFileSpecW
PathFileExistsW
?_BADOFF@std@@3_JB
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ
_Xtime_get_ticks
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
CreateEnvironmentBlock
WTSQueryUserToken
GetProcessMemoryInfo
wcsstr
__std_exception_copy
__std_exception_destroy
memmove
_purecall
wcsrchr
__std_terminate
_CxxThrowException
__CxxFrameHandler3
memcpy
memset
__vcrt_InitializeCriticalSectionEx
_except_handler4_common
wcscpy_s
strnlen
toupper
wcsnlen
_wcsupr_s
_wcslwr_s
wmemcpy_s
_wcsicmp
wcsncpy_s
_errno
_invalid_parameter_noinfo
_register_thread_local_exe_atexit_callback
_controlfp_s
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
terminate
_seh_filter_exe
_set_app_type
_invalid_parameter_noinfo_noreturn
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
exit
_exit
_c_exit
_callnewh
_recalloc
free
_set_new_mode
malloc
calloc
localeconv
_configthreadlocale
strtod
_wtoi
strtoull
strtoll
_wsplitpath_s
_set_fmode
__stdio_common_vsprintf
__p__commode
__stdio_common_vswprintf
__stdio_common_vswprintf_s
__stdio_common_vsprintf_s
__stdio_common_vswscanf
__setusermatherr
_dsign
_dtest
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ