mqqm.dll
v5.0.1.1
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 1
QMMain
#1 · 0x2ff20
No function matches your filter.
Imported DLLs & functions 510
ADVAPI32.dll
85
AddAccessAllowedAce
0x18010c7f8
ConvertSidToStringSidW
0x18010c6c0
CopySid
0x18010c5c0
CryptAcquireContextW
0x18010c770
CryptCreateHash
0x18010c618
CryptDecrypt
0x18010c788
CryptDestroyHash
0x18010c650
CryptDestroyKey
0x18010c6b0
CryptEncrypt
0x18010c6f0
CryptExportKey
0x18010c6e8
CryptGenKey
0x18010c6e0
CryptGenRandom
0x18010c750
CryptGetHashParam
0x18010c758
CryptGetUserKey
0x18010c7c0
CryptHashData
0x18010c760
CryptImportKey
0x18010c6f8
CryptReleaseContext
0x18010c778
CryptSetKeyParam
0x18010c780
CryptVerifySignatureW
0x18010c848
EnableTrace
0x18010c738
EqualSid
0x18010c768
EventActivityIdControl
0x18010c5b8
EventEnabled
0x18010c5b0
EventRegister
0x18010c7b0
EventSetInformation
0x18010c7a8
EventUnregister
0x18010c7b8
EventWrite
0x18010c5a8
EventWriteTransfer
0x18010c7f0
GetAce
0x18010c6c8
GetAclInformation
0x18010c6d0
GetFileSecurityW
0x18010c658
GetLengthSid
0x18010c7e0
GetSecurityDescriptorControl
0x18010c6a8
GetSecurityDescriptorDacl
0x18010c6d8
GetSecurityDescriptorGroup
0x18010c810
GetSecurityDescriptorLength
0x18010c828
GetSecurityDescriptorOwner
0x18010c7e8
GetSecurityDescriptorSacl
0x18010c6a0
GetTokenInformation
0x18010c5d0
GetTraceEnableFlags
0x18010c638
GetTraceEnableLevel
0x18010c640
GetTraceLoggerHandle
0x18010c648
InitializeAcl
0x18010c7d0
InitializeSecurityDescriptor
0x18010c800
IsValidRelativeSecurityDescriptor
0x18010c5c8
IsValidSecurityDescriptor
0x18010c7c8
IsValidSid
0x18010c838
LookupAccountNameW
0x18010c840
LookupAccountSidW
0x18010c6b8
MakeSelfRelativeSD
0x18010c830
OpenProcessToken
0x18010c5d8
PerfCreateInstance
0x18010c5f8
PerfDeleteInstance
0x18010c5e8
PerfSetCounterRefValue
0x18010c5f0
PerfSetCounterSetInfo
0x18010c600
PerfStartProviderEx
0x18010c608
PerfStopProvider
0x18010c610
QueryTraceW
0x18010c748
RegCloseKey
0x18010c7a0
RegCreateKeyExW
0x18010c680
RegCreateKeyTransactedW
0x18010c688
RegDeleteValueW
0x18010c670
RegEnumKeyExW
0x18010c660
RegEnumValueW
0x18010c5e0
RegGetValueW
0x18010c620
RegisterEventSourceW
0x18010c720
RegisterServiceCtrlHandlerW
0x18010c708
RegisterTraceGuidsW
0x18010c630
RegOpenKeyExW
0x18010c798
RegOpenKeyTransactedW
0x18010c668
RegQueryInfoKeyW
0x18010c678
RegQueryValueExW
0x18010c790
RegSetValueExW
0x18010c690
ReportEventW
0x18010c718
SetFileSecurityW
0x18010c698
SetSecurityDescriptorDacl
0x18010c820
SetSecurityDescriptorGroup
0x18010c818
SetSecurityDescriptorOwner
0x18010c808
SetServiceStatus
0x18010c700
StartServiceCtrlDispatcherW
0x18010c710
StartTraceW
0x18010c730
StopTraceW
0x18010c740
TraceEvent
0x18010c728
TraceMessage
0x18010c7d8
UnregisterTraceGuids
0x18010c628
AuthzAccessCheck
0x18010c870
AuthzFreeContext
0x18010c880
AuthzFreeResourceManager
0x18010c878
AuthzGetInformationFromContext
0x18010c868
AuthzInitializeContextFromSid
0x18010c860
AuthzInitializeResourceManager
0x18010c858
BCryptGenRandom
0x18010d068
CloseCluster
0x18010c8c0
CloseClusterResource
0x18010c8c8
ClusterResourceCloseEnum
0x18010c8b0
ClusterResourceControl
0x18010c890
ClusterResourceEnum
0x18010c8a0
ClusterResourceOpenEnum
0x18010c898
OpenCluster
0x18010c8b8
OpenClusterResource
0x18010c8a8
CertCloseStore
0x18010c8d8
CertFindCertificateInStore
0x18010c900
CertFreeCertificateChain
0x18010c8f8
CertFreeCertificateContext
0x18010c908
CertGetCertificateChain
0x18010c8e8
CertOpenStore
0x18010c910
CertOpenSystemStoreW
0x18010c8f0
CertVerifyCertificateChainPolicy
0x18010c8e0
DsMakeSpnW
0x18010c920
KERNEL32.dll
117
AcquireSRWLockExclusive
0x18010ca58
AcquireSRWLockShared
0x18010ca68
CloseHandle
0x18010ca80
CloseThreadpoolTimer
0x18010caa8
CompareStringW
0x18010cb60
CopyFileExW
0x18010cba8
CopyFileW
0x18010c938
CreateDirectoryW
0x18010cca0
CreateEventW
0x18010cbf8
CreateFileA
0x18010ccb0
CreateFileMappingW
0x18010cc20
CreateFileW
0x18010cb28
CreateIoCompletionPort
0x18010c970
CreateMutexExW
0x18010caf8
CreateSemaphoreExW
0x18010cb00
CreateSemaphoreW
0x18010c968
CreateThread
0x18010cc30
CreateThreadpoolTimer
0x18010cae0
DebugBreak
0x18010ca28
DeleteCriticalSection
0x18010cac8
DeleteFileW
0x18010cbc8
DuplicateHandle
0x18010cb50
EnterCriticalSection
0x18010cab8
ExitProcess
0x18010cc40
ExpandEnvironmentStringsW
0x18010c960
FindClose
0x18010cb78
FindFirstFileW
0x18010cb88
FindNextFileW
0x18010cb90
FlushFileBuffers
0x18010cb80
FlushViewOfFile
0x18010cb70
FormatMessageW
0x18010c9f0
FreeLibrary
0x18010c930
GetComputerNameExW
0x18010cb38
GetComputerNameW
0x18010cb40
GetCurrentProcess
0x18010cb58
GetCurrentProcessId
0x18010caf0
GetCurrentThreadId
0x18010c9f8
GetDateFormatW
0x18010cb18
GetExitCodeThread
0x18010ccc8
GetFileAttributesW
0x18010cc90
GetFileSize
0x18010cbd8
GetLastError
0x18010ca40
GetLocalTime
0x18010cb10
GetModuleFileNameA
0x18010ca20
GetModuleHandleExW
0x18010ca18
GetModuleHandleW
0x18010ca30
GetPrivateProfileStringW
0x18010cbd0
GetProcAddress
0x18010ca38
GetProcessHeap
0x18010ca08
GetQueuedCompletionStatus
0x18010c980
GetSystemInfo
0x18010cbe8
GetSystemTimeAsFileTime
0x18010cb48
GetTickCount
0x18010cc50
GetTimeFormatW
0x18010cb20
GetVersionExW
0x18010cc10
HeapAlloc
0x18010ca00
HeapFree
0x18010ca10
HeapSetInformation
0x18010c998
InitializeCriticalSection
0x18010cb08
InitializeCriticalSectionAndSpinCount
0x18010cb30
InitializeCriticalSectionEx
0x18010cac0
IsDebuggerPresent
0x18010ca48
LeaveCriticalSection
0x18010cae8
LoadLibraryExW
0x18010c940
LoadLibraryW
0x18010ccb8
LocalAlloc
0x18010c990
LocalFree
0x18010cc58
MapViewOfFile
0x18010cc28
MoveFileExW
0x18010cbb8
MultiByteToWideChar
0x18010cc48
OpenProcess
0x18010cc38
OpenSemaphoreW
0x18010cad8
OutputDebugStringA
0x18010c9c8
OutputDebugStringW
0x18010ca50
PostQueuedCompletionStatus
0x18010c978
PulseEvent
0x18010ccc0
QueryPerformanceCounter
0x18010c9e0
ReadFile
0x18010cbe0
ReleaseMutex
0x18010ca90
ReleaseSemaphore
0x18010ca88
ReleaseSRWLockExclusive
0x18010ca60
ReleaseSRWLockShared
0x18010ca70
RemoveDirectoryW
0x18010ccd0
ReplaceFileW
0x18010cbc0
ResetEvent
0x18010cc88
RtlCaptureContext
0x18010c9a0
RtlLookupFunctionEntry
0x18010c9a8
RtlVirtualUnwind
0x18010c9b0
SetEnvironmentVariableW
0x18010cbf0
SetEvent
0x18010cc78
SetFileAttributesW
0x18010cbb0
SetFilePointer
0x18010cca8
SetLastError
0x18010ca78
SetProcessMitigationPolicy
0x18010cc00
SetThreadpoolTimer
0x18010ca98
SetThreadStackGuarantee
0x18010c9e8
SetUnhandledExceptionFilter
0x18010c9b8
Sleep
0x18010cb68
SleepConditionVariableSRW
0x18010c9d8
SystemTimeToFileTime
0x18010c988
TerminateProcess
0x18010c9c0
TlsAlloc
0x18010cc60
TlsGetValue
0x18010cc68
TlsSetValue
0x18010cc70
UnhandledExceptionFilter
0x18010cc08
UnmapViewOfFile
0x18010cc18
VirtualAlloc
0x18010c950
VirtualProtect
0x18010c948
VirtualQuery
0x18010c958
WaitForMultipleObjects
0x18010cc80
WaitForSingleObject
0x18010cad0
WaitForSingleObjectEx
0x18010cab0
WaitForThreadpoolTimerCallbacks
0x18010caa0
WakeAllConditionVariable
0x18010c9d0
WideCharToMultiByte
0x18010cc98
WriteFile
0x18010cba0
WritePrivateProfileStringW
0x18010cb98
mqsec.dll
68
??0CColumns@@QEAA@I@Z
0x18010d240
??0CDSBaseUpdate@@QEAA@XZ
0x18010d298
??1CColumns@@QEAA@XZ
0x18010d248
??1CDSBaseUpdate@@QEAA@XZ
0x18010d288
?Add@CColumns@@QEAAXAEBK@Z
0x18010d250
?GetFalconSectionName@@YAJAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator_static@_W@2@V_STL70@@@std@@@Z
0x18010d200
?GetObjectType@CDSBaseUpdate@@QEAAKXZ
0x18010d290
?Init@CCancelRpc@@QEAAXXZ
0x18010d208
?Init@CDSBaseUpdate@@QEAAJPEAVBufferReader@@H@Z
0x18010d280
?KeepErrorHistory@COutputReport@@QEAAXPEB_WGJ@Z
0x18010d228
ComposeRPCEndPointName
0x18010d110
DeleteFalconKeyValue
0x18010d130
g_CancelRpc
0x18010d210
g_hProvVer
0x18010d0e0
GetComputerDnsNameInternal
0x18010d1f0
GetComputerNameInternal
0x18010d1e8
GetDomainFQDNName
0x18010d1c8
GetFalconKey
0x18010d238
GetFalconKeyValue
0x18010d128
GetFalconServiceName
0x18010d268
HashMessageProperties
0x18010d0d8
IdnNameCompare
0x18010d270
IsLocalSystemCluster
0x18010d1e0
mqrpcBindQMService
0x18010d120
mqrpcIsLocalCall
0x18010d258
mqrpcIsTcpipTransport
0x18010d118
MQSec_AccessCheck
0x18010d1c0
MQSec_AcquireCryptoProvider
0x18010d218
MQSec_CalculateServiceSid
0x18010d170
MQSec_CanGenerateAudit
0x18010d0e8
MQSec_ChooseBestAlgorithm
0x18010d090
MQSec_ConvertSDToNT4Format
0x18010d1a0
MQSec_CopySecurityDescriptor
0x18010d1b0
MQSec_GetAdminSid
0x18010d180
MQSec_GetAnonymousSid
0x18010d178
MQSec_GetDefaultPrivateQueueSecurityDescriptor
0x18010d190
MQSec_GetDefaultPublicQueueSecurityDescriptor
0x18010d260
MQSec_GetDefaultQueueAuthentication
0x18010d1a8
MQSec_GetDefaultSecDescriptor
0x18010d148
MQSec_GetImpersonationObject
0x18010d0f8
MQSec_GetLocalMachineSid
0x18010d198
MQSec_GetNetworkServiceSid
0x18010d188
MQSec_GetPrivLevelForProvider
0x18010d0c0
MQSec_GetProviderForPrivLevel
0x18010d2a0
MQSec_GetPubKeysFromDS
0x18010d0a8
MQSec_GetWorldSid
0x18010d150
MQSec_IsDC
0x18010d1d0
MQSec_IsWeakHashAlgorithm
0x18010d0c8
MQSec_MakeAbsoluteSD
0x18010d1b8
MQSec_MakeSelfRelative
0x18010d158
MQSec_RemovePrivilegesFromProcessToken
0x18010d1d8
MQSec_RpcAuthnLevel
0x18010d0f0
MQSec_SetDirectorySecurityForService
0x18010d0b8
MQSec_SetPrivilegeInThread
0x18010d278
MQSec_StorePubKeys
0x18010d160
MQSec_StorePubKeysInDS
0x18010d0b0
MQSec_TraceThreadTokenInfo
0x18010d100
MQSec_UpdateLocalMachineSid
0x18010d140
MQSigCreateCertificate
0x18010d108
MQSigHashMessageProperties
0x18010d0d0
MQUInitGlobalScurityVars
0x18010d220
MSMQGetOperatingSystem
0x18010d168
ProduceRPCErrorTracing
0x18010d2a8
Report
0x18010d230
SetFalconKeyValue
0x18010d138
SetFalconServiceName
0x18010d1f8
XactGetDTC
0x18010d098
XactGetWhereabouts
0x18010d0a0
MQGetResourceHandle
0x18010d2b8
msvcrt.dll
97
___lc_codepage_func
0x18010d418
___lc_handle_func
0x18010d420
___mb_cur_max_func
0x18010d430
__C_specific_handler
0x18010d5b8
__crtGetStringTypeW
0x18010d3e0
__crtLCMapStringA
0x18010d400
__crtLCMapStringW
0x18010d3e8
__CxxFrameHandler3
0x18010d568
__dllonexit
0x18010d348
__mb_cur_max
0x18010d3f0
__pctype_func
0x18010d410
__uncaught_exception
0x18010d3d0
_amsg_exit
0x18010d2d0
_CxxThrowException
0x18010d440
_errno
0x18010d428
_initterm
0x18010d2d8
_itow_s
0x18010d4a8
_lock
0x18010d2f0
_ltow
0x18010d530
_onexit
0x18010d308
_purecall
0x18010d538
_resetstkoflw
0x18010d450
_snscanf_s
0x18010d3c0
_snwscanf_s
0x18010d548
_strnicmp
0x18010d358
_unlock
0x18010d2f8
_vsnprintf
0x18010d3b8
_vsnprintf_s
0x18010d588
_vsnwprintf
0x18010d5b0
_waccess
0x18010d4f0
_wcsicmp
0x18010d510
_wcsnicmp
0x18010d4f8
_wstrtime
0x18010d480
_wtoi
0x18010d478
_wtoi64
0x18010d3a8
_wtol
0x18010d4a0
_XcptFilter
0x18010d2c8
?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
0x18010d4e0
??0exception@@QEAA@AEBQEBD@Z
0x18010d528
??0exception@@QEAA@AEBQEBDH@Z
0x18010d540
??0exception@@QEAA@AEBV0@@Z
0x18010d5a8
??0exception@@QEAA@XZ
0x18010d598
??1exception@@UEAA@XZ
0x18010d5a0
??1type_info@@UEAA@XZ
0x18010d2e0
?set_terminate@@YAP6AXXZP6AXXZ@Z
0x18010d4d8
?terminate@@YAXXZ
0x18010d2e8
?what@exception@@UEBAPEBDXZ
0x18010d580
abort
0x18010d300
atoi
0x18010d360
exit
0x18010d460
free
0x18010d448
gmtime
0x18010d3c8
isalnum
0x18010d560
isalpha
0x18010d490
iscntrl
0x18010d5c0
isdigit
0x18010d558
isgraph
0x18010d550
islower
0x18010d3d8
isprint
0x18010d340
ispunct
0x18010d338
isspace
0x18010d4c0
isupper
0x18010d408
iswalpha
0x18010d350
iswdigit
0x18010d470
iswspace
0x18010d468
isxdigit
0x18010d4c8
localeconv
0x18010d380
malloc
0x18010d3f8
memchr
0x18010d330
memcmp
0x18010d328
memcpy
0x18010d320
memcpy_s
0x18010d590
memmove
0x18010d318
memmove_s
0x18010d578
memset
0x18010d310
rand
0x18010d498
rand_s
0x18010d390
setlocale
0x18010d438
sprintf_s
0x18010d378
srand
0x18010d368
strchr
0x18010d3a0
strcspn
0x18010d388
strncmp
0x18010d398
strtoul
0x18010d4d0
swscanf_s
0x18010d488
time
0x18010d520
towupper
0x18010d370
wcschr
0x18010d518
wcscmp
0x18010d5c8
wcscspn
0x18010d4b8
wcsncmp
0x18010d570
wcspbrk
0x18010d500
wcsrchr
0x18010d508
wcsspn
0x18010d4b0
wcsstr
0x18010d4e8
wcstombs
0x18010d458
wcstoul
0x18010d3b0
DsGetDcNameW
0x18010cce8
NetApiBufferFree
0x18010ccf0
NetGetJoinInformation
0x18010cce0
NtClose
0x18010d5e0
NtDeviceIoControlFile
0x18010d5e8
NtOpenEvent
0x18010d600
RtlImageNtHeader
0x18010d5d8
RtlInitUnicodeString
0x18010d608
RtlIpv4AddressToStringW
0x18010d5f8
RtlIpv6AddressToStringA
0x18010d610
RtlIpv6AddressToStringW
0x18010d5f0
OLEAUT32.dll
20
BSTR_UserFree
0x18010cd60
BSTR_UserFree64
0x18010cd30
BSTR_UserMarshal
0x18010cd70
BSTR_UserMarshal64
0x18010cd18
BSTR_UserSize
0x18010cd98
BSTR_UserSize64
0x18010cd28
BSTR_UserUnmarshal
0x18010cd78
BSTR_UserUnmarshal64
0x18010cd50
LPSAFEARRAY_UserFree
0x18010cd90
LPSAFEARRAY_UserFree64
0x18010cd48
LPSAFEARRAY_UserMarshal
0x18010cd38
LPSAFEARRAY_UserMarshal64
0x18010cd80
LPSAFEARRAY_UserSize
0x18010cd58
LPSAFEARRAY_UserSize64
0x18010cd68
LPSAFEARRAY_UserUnmarshal
0x18010cd88
LPSAFEARRAY_UserUnmarshal64
0x18010cd40
SysFreeString
0x18010cd20
SysStringLen
0x18010cd10
VariantClear
0x18010cd08
VariantInit
0x18010cd00
RPCRT4.dll
35
I_RpcExceptionFilter
0x18010ce38
I_RpcServerUseProtseq2W
0x18010ce10
I_RpcServerUseProtseqEp2W
0x18010ce18
Ndr64AsyncClientCall
0x18010ce50
Ndr64AsyncServerCallAll
0x18010ce68
NdrAsyncServerCall
0x18010ce58
NdrClientCall3
0x18010ceb8
NdrServerCall2
0x18010ce70
NdrServerCallAll
0x18010ce60
RpcAsyncAbortCall
0x18010cdc8
RpcAsyncCompleteCall
0x18010cdd8
RpcAsyncInitializeHandle
0x18010cdd0
RpcBindingFree
0x18010ce98
RpcBindingInqAuthClientW
0x18010cea0
RpcBindingInqAuthInfoW
0x18010ce30
RpcBindingServerFromClient
0x18010cdc0
RpcBindingSetOption
0x18010ce48
RpcBindingToStringBindingW
0x18010cdb8
RpcEpRegisterW
0x18010cdf0
RpcMgmtSetComTimeout
0x18010ce40
RpcMgmtStopServerListening
0x18010ce90
RpcRaiseException
0x18010ce80
RpcServerInqBindings
0x18010cde8
RpcServerInqCallAttributesW
0x18010ce20
RpcServerListen
0x18010ce88
RpcServerRegisterAuthInfoW
0x18010cde0
RpcServerRegisterIf2
0x18010cea8
RpcServerRegisterIfEx
0x18010cdf8
RpcServerUseProtseqEpW
0x18010ce08
RpcServerUseProtseqW
0x18010ce00
RpcSsDestroyClientContext
0x18010ceb0
RpcStringBindingParseW
0x18010cdb0
RpcStringFreeW
0x18010cda8
UuidCreate
0x18010ce78
UuidToStringW
0x18010ce28
Secur32.dll
10
AcquireCredentialsHandleW
0x18010cee0
DecryptMessage
0x18010cf08
DeleteSecurityContext
0x18010cee8
EncryptMessage
0x18010cf10
FreeContextBuffer
0x18010cef0
FreeCredentialsHandle
0x18010ced8
GetComputerObjectNameW
0x18010cf20
GetUserNameExW
0x18010cf18
InitializeSecurityContextW
0x18010cef8
QueryContextAttributesW
0x18010cf00
SHGetKnownFolderPath
0x18010cec8
CreateWriter
0x18010cf48
WS2_32.dll
12
freeaddrinfo
0x18010cf80
FreeAddrInfoW
0x18010cfb8
getaddrinfo
0x18010cf88
GetAddrInfoW
0x18010cfc0
WSAAddressToStringW
0x18010cfa0
WSAConnect
0x18010cf90
WSAEnumProtocolsW
0x18010cf98
WSAIoctl
0x18010cfb0
WSARecv
0x18010cf70
WSASend
0x18010cf78
WSASocketW
0x18010cfa8
WSAStringToAddressW
0x18010cfc8
WSOCK32.dll
17
__WSAFDIsSet
0x18010cfe0
accept
0x18010cfd8
AcceptEx
0x18010d050
bind
0x18010d020
closesocket
0x18010cfe8
GetAcceptExSockaddrs
0x18010d048
getsockopt
0x18010d030
htons
0x18010d028
inet_ntoa
0x18010cff0
listen
0x18010d000
recvfrom
0x18010d010
select
0x18010d018
sendto
0x18010cff8
setsockopt
0x18010d038
socket
0x18010d008
WSAGetLastError
0x18010d040
WSAStartup
0x18010d058
No function matches your filter.