» accessibility.msaa264.dll
Overview
Analysis
File Details

accessibility.msaa264.dll

qTrace

QASymphony, LLC.

File name:

Publisher:

QASymphony LLC (signed by QASymphony, LLC.)

Product:

qTrace

Description:

Accessibility.Msaa2

Version:

1.2.0.151

MD5:

1b72ded7a4a6a5b580be110dca44b1c9

SHA-1:

3e5aa4d35cfb9f1d08d0d538fc8608967d41eb82

SHA-256:

8f455eeeffdf4a294ceb7ea1a67017384c86196768c8f2d6304c1e6fd7cc7ad5

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/23/2024 5:22:06 AM UTC (today)

File size:

164.6 KB (168,592 bytes)

Product version:

1.2.0.151

Original file name:

Accessibility.Msaa2

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\apps\qasymphony\qtrace\accessibility.msaa264.dll

Digital Signature

Signed by:

QASymphony, LLC.

Authority:

GlobalSign nv-sa

Valid from:

10/3/2012 4:17:35 PM

Valid to:

11/22/2013 2:25:17 PM

Subject:

E=info@qasymphony.com, CN="QASymphony, LLC.", OU=Information & Technology, O="QASymphony, LLC.", L=Sandy Springs, S=Georgia, C=US

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

11210B15D67BF437161631AAE8A8D853E971

File PE Metadata

Compilation timestamp:

3/14/2013 2:32:38 AM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

3072:5UfNA6Oo/FyTVnXW+CSDoHEgpskmpmISDe6J4mDB1P:WFf9yTVnXWpMGEuugDe6uq

Entry address:

0x5AB8

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 8B, 39, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, A7, FE, FF, FF, CC, CC, CC, 40, 53, 48, 83, EC, 40, 8B, D9, 48, 8D, 4C, 24, 20, E8, BE, F8, FF, FF, 48, 8B, 44, 24, 20, 44, 0F, B6, DB, 48, 8B, 88, 40, 01, 00, 00, 42, 0F, B7, 04, 59, 25, 00, 80, 00, 00, 80, 7C, 24, 38, 00, 74, 0C, 48, 8B, 4C, 24, 30, 83, A1, C8, 00, 00, 00, FD, 48... 
[+]

Entropy:

5.8719

Code size:

81.5 KB (83,456 bytes)

Scan accessibility.msaa264.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.