ACHelper.dll

Description:

Authors:

Version:

Architecture: 32-bit

Operating System:

SHA256: 887db8b7010b44eae9c0a47dfd5bc617

File Size: 73.5 KB

Uploaded At: Aug. 5, 2026, 11:51 p.m.

Views: 26

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

ACChangeCurrent (Ordinal: 1, Address: 0x4080)
ACGetHelpString (Ordinal: 2, Address: 0x2620)
ACMakeNew (Ordinal: 3, Address: 0x4410)
ACSetHelpString (Ordinal: 4, Address: 0x1d80)
ACVerifyAndRestore (Ordinal: 5, Address: 0x3ab0)

Imported DLLs & Functions

CRYPT32.dll

CertCloseStore (Address: 0x1000b014)
CertFindCertificateInStore (Address: 0x1000b010)
CertFreeCertificateContext (Address: 0x1000b00c)
CertGetNameStringW (Address: 0x1000b008)
CryptDecodeObject (Address: 0x1000b01c)
CryptMsgClose (Address: 0x1000b000)
CryptMsgGetParam (Address: 0x1000b018)
CryptQueryObject (Address: 0x1000b004)

KERNEL32.dll

CloseHandle (Address: 0x1000b050)
DecodePointer (Address: 0x1000b098)
DeleteFileW (Address: 0x1000b054)
DisableThreadLibraryCalls (Address: 0x1000b074)
EncodePointer (Address: 0x1000b09c)
FindClose (Address: 0x1000b044)
FindFirstFileW (Address: 0x1000b0b8)
FindNextFileW (Address: 0x1000b04c)
FreeLibrary (Address: 0x1000b0b0)
GetCurrentProcess (Address: 0x1000b084)
GetCurrentProcessId (Address: 0x1000b058)
GetCurrentThreadId (Address: 0x1000b068)
GetLastError (Address: 0x1000b034)
GetModuleFileNameW (Address: 0x1000b024)
GetProcAddress (Address: 0x1000b038)
GetSystemTimeAsFileTime (Address: 0x1000b064)
GetTickCount (Address: 0x1000b06c)
InterlockedCompareExchange (Address: 0x1000b08c)
InterlockedExchange (Address: 0x1000b094)
IsDebuggerPresent (Address: 0x1000b078)
IsProcessorFeaturePresent (Address: 0x1000b0c4)
LoadLibraryW (Address: 0x1000b0a0)
LocalAlloc (Address: 0x1000b048)
LocalFree (Address: 0x1000b05c)
lstrcmpA (Address: 0x1000b0c0)
lstrcmpW (Address: 0x1000b028)
lstrcpynW (Address: 0x1000b060)
lstrcpyW (Address: 0x1000b0bc)
lstrlenA (Address: 0x1000b0b4)
lstrlenW (Address: 0x1000b030)
MoveFileW (Address: 0x1000b040)
MultiByteToWideChar (Address: 0x1000b02c)
OpenProcess (Address: 0x1000b0a8)
QueryPerformanceCounter (Address: 0x1000b070)
SetUnhandledExceptionFilter (Address: 0x1000b07c)
Sleep (Address: 0x1000b090)
TerminateProcess (Address: 0x1000b088)
UnhandledExceptionFilter (Address: 0x1000b080)
VirtualAlloc (Address: 0x1000b03c)
VirtualFree (Address: 0x1000b0ac)
WideCharToMultiByte (Address: 0x1000b0a4)

MSVCP100.dll

?_BADOFF@std@@3_JB (Address: 0x1000b144)
?_Decref@facet@locale@std@@QAEPAV123@XZ (Address: 0x1000b118)
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z (Address: 0x1000b13c)
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x1000b130)
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ (Address: 0x1000b158)
?_Incref@facet@locale@std@@QAEXXZ (Address: 0x1000b11c)
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ (Address: 0x1000b12c)
?_Xlength_error@std@@YAXPBD@Z (Address: 0x1000b154)
?_Xout_of_range@std@@YAXPBD@Z (Address: 0x1000b148)
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@ (Address: 0x1000b134)
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@ (Address: 0x1000b140)
??0_Lockit@std@@QAE@H@Z (Address: 0x1000b150)
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ (Address: 0x1000b0d8)
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z (Address: 0x1000b0d0)
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z (Address: 0x1000b0d4)
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ (Address: 0x1000b15c)
??1_Lockit@std@@QAE@XZ (Address: 0x1000b14c)
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x1000b100)
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x1000b0ec)
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x1000b0f8)
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x1000b110)
??Bid@locale@std@@QAEIXZ (Address: 0x1000b120)
?always_noconv@codecvt_base@std@@QBE_NXZ (Address: 0x1000b114)
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z (Address: 0x1000b0dc)
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ (Address: 0x1000b0f0)
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ (Address: 0x1000b124)
?id@?$codecvt@DDH@std@@2V0locale@2@A (Address: 0x1000b138)
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z (Address: 0x1000b0e4)
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z (Address: 0x1000b0e0)
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z (Address: 0x1000b0e8)
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z (Address: 0x1000b128)
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z (Address: 0x1000b0fc)
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ (Address: 0x1000b10c)
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z (Address: 0x1000b0cc)
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z (Address: 0x1000b0f4)
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z (Address: 0x1000b108)
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z (Address: 0x1000b104)

MSVCR100.dll

__clean_type_info_names_internal (Address: 0x1000b214)
__CppXcptFilter (Address: 0x1000b1f4)
__CxxFrameHandler3 (Address: 0x1000b1d8)
__dllonexit (Address: 0x1000b1fc)
_amsg_exit (Address: 0x1000b1f0)
_crt_debugger_hook (Address: 0x1000b208)
_CxxThrowException (Address: 0x1000b230)
_encoded_null (Address: 0x1000b1e4)
_except_handler4_common (Address: 0x1000b218)
_fseeki64 (Address: 0x1000b194)
_initterm (Address: 0x1000b1e8)
_initterm_e (Address: 0x1000b1ec)
_localtime64 (Address: 0x1000b1c8)
_lock (Address: 0x1000b200)
_lock_file (Address: 0x1000b1b4)
_malloc_crt (Address: 0x1000b1dc)
_onexit (Address: 0x1000b204)
_time64 (Address: 0x1000b1d0)
_unlock (Address: 0x1000b1f8)
_unlock_file (Address: 0x1000b238)
_vswprintf (Address: 0x1000b1a0)
_wcsicmp (Address: 0x1000b234)
?_type_info_dtor_internal_method@type_info@@QAEXXZ (Address: 0x1000b210)
??_V@YAXPAX@Z (Address: 0x1000b1b8)
??0bad_cast@std@@QAE@ABV01@@Z (Address: 0x1000b168)
??0bad_cast@std@@QAE@PBD@Z (Address: 0x1000b164)
??0exception@std@@QAE@ABQBD@Z (Address: 0x1000b174)
??0exception@std@@QAE@ABV01@@Z (Address: 0x1000b178)
??1bad_cast@std@@UAE@XZ (Address: 0x1000b184)
??1exception@std@@UAE@XZ (Address: 0x1000b170)
??2@YAPAXI@Z (Address: 0x1000b1d4)
??3@YAXPAX@Z (Address: 0x1000b224)
?terminate@@YAXXZ (Address: 0x1000b20c)
?what@exception@std@@UBEPBDXZ (Address: 0x1000b16c)
ceil (Address: 0x1000b180)
fclose (Address: 0x1000b1cc)
fflush (Address: 0x1000b198)
fgetc (Address: 0x1000b19c)
fgetpos (Address: 0x1000b190)
fputc (Address: 0x1000b220)
free (Address: 0x1000b1e0)
fsetpos (Address: 0x1000b1a8)
fwrite (Address: 0x1000b1c4)
malloc (Address: 0x1000b188)
mbstowcs (Address: 0x1000b21c)
memcpy (Address: 0x1000b22c)
memcpy_s (Address: 0x1000b1c0)
memmove (Address: 0x1000b17c)
memset (Address: 0x1000b228)
setvbuf (Address: 0x1000b1b0)
tolower (Address: 0x1000b1a4)
ungetc (Address: 0x1000b18c)
wcsftime (Address: 0x1000b1bc)
wcsrchr (Address: 0x1000b1ac)

ole32.dll

CoInitializeEx (Address: 0x1000b25c)
CoUninitialize (Address: 0x1000b260)

OLEAUT32.dll

SysAllocString (Address: 0x1000b244)
VariantClear (Address: 0x1000b240)

PSAPI.DLL

GetModuleFileNameExW (Address: 0x1000b24c)

SHLWAPI.dll

PathFileExistsW (Address: 0x1000b254)