Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
aa6074dbeea3b2e8bca36cbeca7a110e06437351f6b2a750d3635bf8c4714ac8.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aa6074dbeea3b2e8bca36cbeca7a110e06437351f6b2a750d3635bf8c4714ac8.dll
Resource
win10v2004-20240802-en
Target
aa6074dbeea3b2e8bca36cbeca7a110e06437351f6b2a750d3635bf8c4714ac8
Size
213KB
MD5
cf656e044c45316822f8d679cd589adb
SHA1
9ea21a56f751c60044994a2bbedc5c45092dabdb
SHA256
aa6074dbeea3b2e8bca36cbeca7a110e06437351f6b2a750d3635bf8c4714ac8
SHA512
1e17ea5a946e927e320bddbc66180385ad5b480ee0f8a415eab7bf15c7192e078c2738b59959fb9ed203e57deefa07972be1992ecdff3c8febe7bc782a741641
SSDEEP
3072:3iox6+mN4prKbfuUfDo8SJOLfDp8Z1OZsaWOAG420+k1:yox6DN0ubfnreJ2fDeqZfWOAGtA1
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
I:\Hummer\QQ1.61\Basic_Hummer3_VOB\Hummer2010\Output\Bin\QInterLive.pdb
?ReverseFind@CTXStringW@@QBEH_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??0CCmdCodecBase@@QAE@XZ
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
?AddRef@CCmdCodecBase@@MAGKXZ
?Release@CCmdCodecBase@@MAGKXZ
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
??1CCmdCodecBase@@UAE@XZ
?AllocSysString@CTXStringW@@QBEPA_WXZ
??M@YA_NABVCTXStringW@@0@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
??0CTXBSTR@@QAE@PB_W@Z
??1CTXBSTR@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXStringW@@@Z
?ConvertXMLStrToTXData@Convert@Util@@YAHPA_WPAPA_WPAUITXData@@0@Z
??ICTXBSTR@@QAEPAPA_WXZ
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??0CTXBSTR@@QAE@XZ
?DeleteDirectory@FS@@YAHPB_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
?Format@CTXStringW@@QAAXPB_WZZ
?Download@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@0H@Z
ord34
ord33
?ParseTencentProtParam@Misc@Util@@YAHABVCTXStringW@@AAV?$map@VCTXStringW@@V1@U?$less@VCTXStringW@@@std@@V?$allocator@U?$pair@$$CBVCTXStringW@@V1@@std@@@3@@std@@@Z
??0CTXStringW@@QAE@ABUtagVARIANT@@@Z
??9@YA_NABVCTXStringW@@PB_W@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?CodeEndArray@CCmdCodecBase@@IAEXXZ
?CodeArrayNumber@CCmdCodecBase@@IAEXW4TX_DATA_TYPE@@@Z
?CodeArrayToEnd@CCmdCodecBase@@IAEXPB_WH@Z
?GetCodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?DecodeEndArray@CCmdCodecBase@@IAEXXZ
?DecodeArrayTXDataStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?DecodeArrayTXDataNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z
?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?DecodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z
?Empty@CTXStringW@@QAEXXZ
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
?Delete@CTXStringW@@QAEHHH@Z
?GetLength@CTXStringW@@QBEHXZ
?Find@CTXStringW@@QBEHPB_WH@Z
??8CTXBSTR@@QBE_NPB_W@Z
?IsEmpty@CTXBSTR@@QAEHXZ
?IsFileExist@FS@@YAHPB_W@Z
?OnError@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@K@Z
?OnProgress@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@@Z
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
??0CTXHttpDownloadSink@@IAE@XZ
??0CTXHttpDownload@@QAE@XZ
?SetUIInterface@CTXHttpDownload@@QAEXPAVCTXHttpDownloadSink@@@Z
??1CTXHttpDownloadSink@@UAE@XZ
??1CTXHttpDownload@@UAE@XZ
?CreateTypedExtensionAgentMatch@Extension@Util@@YAXABVCTXStringW@@PAPAUITXExtensionAgentMatch@@@Z
??0CTXStringW@@QAE@PB_W@Z
??0CTXStringW@@QAE@XZ
?CancelDownload@CTXHttpDownload@@QAEXXZ
??0CTXStringW@@QAE@PA_W@Z
?MoveDownloadFile@CTXHttpDownload@@QAEHPB_WH@Z
??BCTXStringW@@QBEPB_WXZ
?FormatV@CTXStringW@@QAEXPB_WPAD@Z
??0CTXStringW@@QAE@ABV0@@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?IsEmpty@CTXStringW@@QBE_NXZ
??1CTXStringW@@QAE@XZ
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z
?Get32ByteValueAddedSign@Misc@Util@@YA?AVCTXStringW@@XZ
?CreateMsgPack@Msg@Util@@YAHPAPAUITXMsgPack@@@Z
?IsVASFlagValid@Contact@Util@@YAHKE@Z
?IsBuddy@Contact@Util@@YAHK@Z
?GetPublicName@Contact@Util@@YA?AVCTXStringW@@K@Z
?GetAccountName@Account@Util@@YA?AVCTXStringW@@K@Z
?GetSelfUin@Contact@Util@@YAKXZ
?ChatFrameEvent@AFChatSession@Util@@YAHPAUIAFChatFrameType@@W4CFEventType@ChatFrame@@PAUITXData@@@Z
?GetImageDir@QInterLive@Misc@Util@@YA?AVCTXStringW@@K@Z
?IsQInterLiveUser@QInterLive@Misc@Util@@YAHK@Z
SetThreadLocale
GetThreadLocale
RaiseException
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLastError
lstrlenW
lstrcmpiW
GetModuleHandleW
GetModuleFileNameW
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
InterlockedDecrement
GetLocaleInfoA
GetACP
InterlockedExchange
InitializeCriticalSection
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LeaveCriticalSection
EnterCriticalSection
Sleep
GetVersionExA
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedIncrement
HeapDestroy
DeleteCriticalSection
CharNextW
UnregisterClassA
RegDeleteKeyW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
SHGetFileInfoW
StringFromCLSID
CoTaskMemFree
CoCreateInstance
SysFreeString
VariantInit
VariantClear
SysAllocString
VarUI4FromStr
SysStringLen
LoadTypeLi
LoadRegTypeLi
ord31
ord58
ord32
ord61
ord23
ord64
ord22
ord18
ord15
ord30
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CppXcptFilter
__clean_type_info_names_internal
??3@YAXPAX@Z
_invalid_parameter_noinfo
_CxxThrowException
memmove_s
_time64
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
__CxxFrameHandler3
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
_recalloc
memcpy_s
malloc
free
wcscpy_s
wcsncpy_s
??_V@YAXPAX@Z
_purecall
_adjust_fdiv
_except_handler4_common
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
memset
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ