Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.55a658c9caff666ca2fd420c45f0dca0.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.55a658c9caff666ca2fd420c45f0dca0.dll
Resource
win10v2004-20231020-en
Target
NEAS.55a658c9caff666ca2fd420c45f0dca0.exe
Size
94KB
MD5
55a658c9caff666ca2fd420c45f0dca0
SHA1
4410fe5569d3116ce55fae740c4fc714f52da7d7
SHA256
53a37d79d7bcbe94f19bf6d5c850a3cabc850fba6d8d828e762076bc23c6182f
SHA512
b58b017dc5a76368f8d55b643ee3422a5f6b9c2e9f863c1b94836c0a04a6aac67ec289092b4b2a5cc1a3052b73f7a1e502733e5e42ab0ff6091a38ea58eb3a04
SSDEEP
1536:GxNHrDJfmA3Dhgf8mcAOkTZiyqBgUINV+7b2Rx:qBfmCeHcShUSQO
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
?qmlregister@QQmlPrivate@@YAHW4RegistrationType@1@PEAX@Z
?qmlRegisterModule@@YAXPEBDHH@Z
??0QQmlModuleRegistration@@QEAA@PEBDP6AXXZ@Z
??1QQmlModuleRegistration@@QEAA@XZ
??0QJSValue@@QEAA@W4SpecialValue@0@@Z
??1QJSValue@@QEAA@XZ
??0QJSValue@@QEAA@AEBV0@@Z
?toVariant@QJSValue@@QEBA?AVQVariant@@XZ
??6@YAAEAVQDataStream@@AEAV0@AEBVQJSValue@@@Z
??5@YAAEAVQDataStream@@AEAV0@AEAVQJSValue@@@Z
??0QQmlParserStatus@@QEAA@XZ
??1QQmlParserStatus@@UEAA@XZ
?qmlWarning@@YA?AVQQmlInfo@@PEBVQObject@@@Z
??1QQmlInfo@@QEAA@XZ
??6QQmlInfo@@QEAAAEAV0@PEBD@Z
?qdeclarativeelement_destructor@QQmlPrivate@@YAXPEAVQObject@@@Z
??0QByteArray@@QEAA@AEBV0@@Z
??1QByteArray@@QEAA@XZ
??0QByteArray@@QEAA@$$QEAV0@@Z
??4QByteArray@@QEAAAEAV0@$$QEAV0@@Z
?reserve@QByteArray@@QEAAX_J@Z
?data@QByteArray@@QEBAPEBDXZ
?append@QByteArray@@QEAAAEAV1@PEBD@Z
?size@QByteArray@@QEBA_JXZ
?isNull@QByteArray@@QEBA_NXZ
??6@YAAEAVQDataStream@@AEAV0@AEBVQByteArray@@@Z
??5@YAAEAVQDataStream@@AEAV0@AEAVQByteArray@@@Z
?compareStrings@QtPrivate@@YAHVQStringView@@0W4CaseSensitivity@Qt@@@Z
?equalStrings@QtPrivate@@YA_NVQStringView@@0@Z
??0QString@@QEAA@XZ
??0QString@@QEAA@AEBV0@@Z
??1QString@@QEAA@XZ
??0QString@@QEAA@$$QEAV0@@Z
??4QString@@QEAAAEAV0@$$QEAV0@@Z
?data@QString@@QEBAPEBVQChar@@XZ
?isNull@QString@@QEBA_NXZ
??6@YAAEAVQDataStream@@AEAV0@AEBVQString@@@Z
??5@YAAEAVQDataStream@@AEAV0@AEAVQString@@@Z
??5QDataStream@@QEAAAEAV0@AEAH@Z
??6QDataStream@@QEAAAEAV0@H@Z
?registerNormalizedTypedef@QMetaType@@SAXAEBVQByteArray@@V1@@Z
?id@QMetaType@@QEBAHH@Z
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
?qt_metacast@QObject@@UEAAPEAXPEBD@Z
?qt_metacall@QObject@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
??0QObject@@QEAA@PEAV0@@Z
??1QObject@@UEAA@XZ
??1QDebug@@QEAA@XZ
??6QDebug@@QEAAAEAV0@H@Z
??6QDebug@@QEAAAEAV0@AEBVQString@@@Z
??6QDebug@@QEAAAEAV0@AEBVQByteArray@@@Z
?qt_QMetaEnum_debugOperator@@YA?AVQDebug@@AEAV1@_JPEBUQMetaObject@@PEBD@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?staticMetaObject@QStandardPaths@@2UQMetaObject@@B
?allocate@QArrayData@@SAPEAXPEAPEAU1@_J11W4AllocationOption@1@@Z
?reallocateUnaligned@QArrayData@@SA?AU?$pair@PEAUQArrayData@@PEAX@std@@PEAU1@PEAX_J2W4AllocationOption@1@@Z
?deallocate@QArrayData@@SAXPEAU1@_J1@Z
?append@QByteArray@@QEAAAEAV1@D@Z
?append@QByteArray@@QEAAAEAV1@PEBD_J@Z
?status@QDataStream@@QEBA?AW4Status@1@XZ
?setStatus@QDataStream@@QEAAXW4Status@1@@Z
?resetStatus@QDataStream@@QEAAXXZ
?isDeviceTransactionStarted@QDataStream@@QEBA_NXZ
?hasRegisteredConverterFunction@QMetaType@@SA_NV1@0@Z
?hasRegisteredMutableViewFunction@QMetaType@@SA_NV1@0@Z
?registerConverterFunction@QMetaType@@SA_NAEBV?$function@$$A6A_NPEBXPEAX@Z@std@@V1@1@Z
?unregisterConverterFunction@QMetaType@@SAXV1@0@Z
?registerMutableViewFunction@QMetaType@@SA_NAEBV?$function@$$A6A_NPEAX0@Z@std@@V1@1@Z
?unregisterMutableViewFunction@QMetaType@@SAXV1@0@Z
??0QDebug@@QEAA@$$QEAV0@@Z
??6QDebug@@QEAAAEAV0@D@Z
??6QDebug@@QEAAAEAV0@PEBD@Z
??0QDebugStateSaver@@QEAA@AEAVQDebug@@@Z
??1QDebugStateSaver@@QEAA@XZ
?machineHostName@QSysInfo@@SA?AVQString@@XZ
??0QUrl@@QEAA@XZ
??0QUrl@@QEAA@AEBV0@@Z
??4QUrl@@QEAAAEAV0@AEBV0@@Z
??4QUrl@@QEAAAEAV0@$$QEAV0@@Z
??1QUrl@@QEAA@XZ
?fromLocalFile@QUrl@@SA?AV1@AEBVQString@@@Z
??MQUrl@@QEBA_NAEBV0@@Z
??0QByteArray@@QEAA@XZ
??6@YAAEAVQDataStream@@AEAV0@AEBVQUrl@@@Z
??5@YAAEAVQDataStream@@AEAV0@AEAVQUrl@@@Z
??6@YA?AVQDebug@@V0@AEBVQUrl@@@Z
?writableLocation@QStandardPaths@@SA?AVQString@@W4StandardLocation@1@@Z
?standardLocations@QStandardPaths@@SA?AV?$QList@VQString@@@@W4StandardLocation@1@@Z
?locate@QStandardPaths@@SA?AVQString@@W4StandardLocation@1@AEBV2@V?$QFlags@W4LocateOption@QStandardPaths@@@@@Z
?locateAll@QStandardPaths@@SA?AV?$QList@VQString@@@@W4StandardLocation@1@AEBVQString@@V?$QFlags@W4LocateOption@QStandardPaths@@@@@Z
?displayName@QStandardPaths@@SA?AVQString@@W4StandardLocation@1@@Z
?findExecutable@QStandardPaths@@SA?AVQString@@AEBV2@AEBV?$QList@VQString@@@@@Z
?qRegisterResourceData@@YA_NHPEBE00@Z
?qUnregisterResourceData@@YA_NHPEBE00@Z
??0QMessageLogger@@QEAA@PEBDH00@Z
?debug@QMessageLogger@@QEBA?AVQDebug@@XZ
?propertyOffset@QMetaObject@@QEBAHXZ
?propertyCount@QMetaObject@@QEBAHXZ
?indexOfSlot@QMetaObject@@QEBAHPEBD@Z
?property@QMetaObject@@QEBA?AVQMetaProperty@@H@Z
?normalizedType@QMetaObject@@SA?AVQByteArray@@PEBD@Z
?connect@QMetaObject@@SA?AVConnection@1@PEBVQObject@@H0HHPEAH@Z
?activate@QMetaObject@@SAXPEAVQObject@@PEBU1@HPEAPEAX@Z
??1Connection@QMetaObject@@QEAA@XZ
?lengthHelperCharArray@QByteArrayView@@CA_JPEBD_K@Z
??0QByteArray@@QEAA@PEBD_J@Z
??4QString@@QEAAAEAV0@AEBV0@@Z
?fromUtf8@QString@@SA?AV1@VQByteArrayView@@@Z
??0QString@@QEAA@$$QEAU?$QArrayDataPointer@_S@@@Z
?globalSeed@QHashSeed@@SA?AU1@XZ
?convert@QMetaType@@SA_NV1@PEBX0PEAX@Z
?startTimer@QObject@@QEAAHHW4TimerType@Qt@@@Z
?killTimer@QObject@@QEAAXH@Z
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPEAU12@PEBVQObject@@@Z
??0QVariant@@QEAA@XZ
??1QVariant@@QEAA@XZ
??0QVariant@@QEAA@AEBV0@@Z
??0QVariant@@QEAA@$$QEAV0@@Z
??4QVariant@@QEAAAEAV0@$$QEAV0@@Z
?metaType@QVariant@@QEBA?AVQMetaType@@XZ
?canConvert@QVariant@@QEBA_NVQMetaType@@@Z
?isValid@QVariant@@QEBA_NXZ
?isNull@QVariant@@QEBA_NXZ
?constData@QVariant@@QEBAPEBXXZ
?qdebugHelper@QVariant@@AEBA?AVQDebug@@V2@@Z
?equals@QVariant@@IEBA_NAEBV1@@Z
??5@YAAEAVQDataStream@@AEAV0@AEAVQVariant@@@Z
??6@YAAEAVQDataStream@@AEAV0@AEBVQVariant@@@Z
?organizationDomain@QCoreApplication@@SA?AVQString@@XZ
?organizationName@QCoreApplication@@SA?AVQString@@XZ
?applicationName@QCoreApplication@@SA?AVQString@@XZ
?isLocalFile@QUrl@@QEBA_NXZ
?toLocalFile@QUrl@@QEBA?AVQString@@XZ
??0QLoggingCategory@@QEAA@PEBDW4QtMsgType@@@Z
??1QLoggingCategory@@QEAA@XZ
?isDebugEnabled@QLoggingCategory@@QEBA_NXZ
?name@QMetaProperty@@QEBAPEBDXZ
?hasNotifySignal@QMetaProperty@@QEBA_NXZ
?notifySignalIndex@QMetaProperty@@QEBAHXZ
?read@QMetaProperty@@QEBA?AVQVariant@@PEBVQObject@@@Z
?write@QMetaProperty@@QEBA_NPEAVQObject@@AEBVQVariant@@@Z
??0QSettings@@QEAA@AEBVQString@@W4Format@0@PEAVQObject@@@Z
??0QSettings@@QEAA@PEAVQObject@@@Z
??1QSettings@@UEAA@XZ
?sync@QSettings@@QEAAXXZ
?status@QSettings@@QEBA?AW4Status@1@XZ
?beginGroup@QSettings@@QEAAXVQAnyStringView@@@Z
?setValue@QSettings@@QEAAXVQAnyStringView@@AEBVQVariant@@@Z
?value@QSettings@@QEBA?AVQVariant@@VQAnyStringView@@AEBV2@@Z
?contains@QSettings@@QEBA_NVQAnyStringView@@@Z
?fileName@QSettings@@QEBA?AVQString@@XZ
?event@QSettings@@MEAA_NPEAVQEvent@@@Z
?metaObject@QSettings@@UEBAPEBUQMetaObject@@XZ
?qt_metacall@QSettings@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QSettings@@UEAAPEAXPEBD@Z
?prettyProductName@QSysInfo@@SA?AVQString@@XZ
?compareMemory@QtPrivate@@YAHVQByteArrayView@@0@Z
?tr@QMetaObject@@QEBA?AVQString@@PEBD0H@Z
?className@QMetaObject@@QEBAPEBDXZ
?bootUniqueId@QSysInfo@@SA?AVQByteArray@@XZ
??8QUrl@@QEBA_NAEBV0@@Z
?machineUniqueId@QSysInfo@@SA?AVQByteArray@@XZ
?productVersion@QSysInfo@@SA?AVQString@@XZ
?productType@QSysInfo@@SA?AVQString@@XZ
?kernelVersion@QSysInfo@@SA?AVQString@@XZ
?kernelType@QSysInfo@@SA?AVQString@@XZ
?buildAbi@QSysInfo@@SA?AVQString@@XZ
?currentCpuArchitecture@QSysInfo@@SA?AVQString@@XZ
?buildCpuArchitecture@QSysInfo@@SA?AVQString@@XZ
?staticMetaObject@QObject@@2UQMetaObject@@B
?qt_QMetaEnum_flagDebugOperator@@YA?AVQDebug@@AEAV1@_KPEBUQMetaObject@@PEBD@Z
memcpy
memcmp
memmove
__C_specific_handler
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memset
__std_type_info_destroy_list
_callnewh
malloc
free
_cexit
_initterm_e
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm
_crt_atexit
strcmp
CloseHandle
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
??0QQmlSettings@@QEAA@PEAVQObject@@@Z
??0QQmlStandardPaths@@QEAA@PEAVQObject@@@Z
??0QQmlSystemInformation@@QEAA@PEAVQObject@@@Z
??1QQmlSettings@@UEAA@XZ
??1QQmlStandardPaths@@UEAA@XZ
??1QQmlSystemInformation@@UEAA@XZ
??_7QQmlSettings@@6BQObject@@@
??_7QQmlSettings@@6BQQmlParserStatus@@@
??_7QQmlStandardPaths@@6B@
??_7QQmlSystemInformation@@6B@
??_FQQmlSettings@@QEAAXXZ
??_FQQmlStandardPaths@@QEAAXXZ
??_FQQmlSystemInformation@@QEAAXXZ
?bootUniqueId@QQmlSystemInformation@@QEBA?AVQByteArray@@XZ
?buildAbi@QQmlSystemInformation@@QEBA?AVQString@@XZ
?buildCpuArchitecture@QQmlSystemInformation@@QEBA?AVQString@@XZ
?byteOrder@QQmlSystemInformation@@QEBA?AW4Endian@1@XZ
?category@QQmlSettings@@QEBA?AVQString@@XZ
?categoryChanged@QQmlSettings@@QEAAXAEBVQString@@@Z
?classBegin@QQmlSettings@@MEAAXXZ
?componentComplete@QQmlSettings@@MEAAXXZ
?currentCpuArchitecture@QQmlSystemInformation@@QEBA?AVQString@@XZ
?d_func@QQmlSettings@@AEAAPEAVQQmlSettingsPrivate@@XZ
?d_func@QQmlSettings@@AEBAPEBVQQmlSettingsPrivate@@XZ
?displayName@QQmlStandardPaths@@QEBA?AVQString@@W4StandardLocation@QStandardPaths@@@Z
?findExecutable@QQmlStandardPaths@@QEBA?AVQUrl@@AEBVQString@@AEBV?$QList@VQString@@@@@Z
?kernelType@QQmlSystemInformation@@QEBA?AVQString@@XZ
?kernelVersion@QQmlSystemInformation@@QEBA?AVQString@@XZ
?locate@QQmlStandardPaths@@QEBA?AVQUrl@@W4StandardLocation@QStandardPaths@@AEBVQString@@V?$QFlags@W4LocateOption@QStandardPaths@@@@@Z
?locateAll@QQmlStandardPaths@@QEBA?AV?$QList@VQUrl@@@@W4StandardLocation@QStandardPaths@@AEBVQString@@V?$QFlags@W4LocateOption@QStandardPaths@@@@@Z
?location@QQmlSettings@@QEBA?AVQUrl@@XZ
?locationChanged@QQmlSettings@@QEAAXAEBVQUrl@@@Z
?machineHostName@QQmlSystemInformation@@QEBA?AVQString@@XZ
?machineUniqueId@QQmlSystemInformation@@QEBA?AVQByteArray@@XZ
?metaObject@QQmlSettings@@UEBAPEBUQMetaObject@@XZ
?metaObject@QQmlStandardPaths@@UEBAPEBUQMetaObject@@XZ
?metaObject@QQmlSystemInformation@@UEBAPEBUQMetaObject@@XZ
?prettyProductName@QQmlSystemInformation@@QEBA?AVQString@@XZ
?productType@QQmlSystemInformation@@QEBA?AVQString@@XZ
?productVersion@QQmlSystemInformation@@QEBA?AVQString@@XZ
?qmlExtendedNamespace@QQmlStandardPaths@@CAPEBUQMetaObject@@XZ
?qml_register_types_QtCore@@YAXXZ
?qt_metacall@QQmlSettings@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacall@QQmlStandardPaths@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacall@QQmlSystemInformation@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QQmlSettings@@UEAAPEAXPEBD@Z
?qt_metacast@QQmlStandardPaths@@UEAAPEAXPEBD@Z
?qt_metacast@QQmlSystemInformation@@UEAAPEAXPEBD@Z
?qt_qmlMarker_extendedNamespace@QQmlStandardPaths@@AEAAXXZ
?qt_qmlMarker_singleton@QQmlStandardPaths@@AEAAXXZ
?qt_qmlMarker_singleton@QQmlSystemInformation@@AEAAXXZ
?qt_static_metacall@QQmlSettings@@CAXPEAVQObject@@W4Call@QMetaObject@@HPEAPEAX@Z
?qt_static_metacall@QQmlStandardPaths@@CAXPEAVQObject@@W4Call@QMetaObject@@HPEAPEAX@Z
?qt_static_metacall@QQmlSystemInformation@@CAXPEAVQObject@@W4Call@QMetaObject@@HPEAPEAX@Z
?setCategory@QQmlSettings@@QEAAXAEBVQString@@@Z
?setLocation@QQmlSettings@@QEAAXAEBVQUrl@@@Z
?setValue@QQmlSettings@@QEAAXAEBVQString@@AEBVQVariant@@@Z
?standardLocations@QQmlStandardPaths@@QEBA?AV?$QList@VQUrl@@@@W4StandardLocation@QStandardPaths@@@Z
?staticMetaObject@QQmlSettings@@2UQMetaObject@@B
?staticMetaObject@QQmlStandardPaths@@2UQMetaObject@@B
?staticMetaObject@QQmlSystemInformation@@2UQMetaObject@@B
?sync@QQmlSettings@@QEAAXXZ
?timerEvent@QQmlSettings@@MEAAXPEAVQTimerEvent@@@Z
?tr@QQmlSettings@@SA?AVQString@@PEBD0H@Z
?tr@QQmlStandardPaths@@SA?AVQString@@PEBD0H@Z
?tr@QQmlSystemInformation@@SA?AVQString@@PEBD0H@Z
?value@QQmlSettings@@QEBA?AVQVariant@@AEBVQString@@AEBV2@@Z
?wordSize@QQmlSystemInformation@@QEBAHXZ
?writableLocation@QQmlStandardPaths@@QEBA?AVQUrl@@W4StandardLocation@QStandardPaths@@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ