QQPCDetector.dll

Description:

Authors:

Version:

Architecture: 32-bit

Operating System:

SHA256: 8ebd3005c11c29b25e591de1efe44209

File Size: 731.2 KB

Uploaded At: Dec. 2, 2025, 2:46 p.m.

Views: 14

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DetectorHelp (Ordinal: 1, Address: 0x573b)
  • DllCanUnloadNow (Ordinal: 2, Address: 0x136e8)
  • DllGetClassObject (Ordinal: 3, Address: 0x7ec9)
  • DllRegisterServer (Ordinal: 4, Address: 0x136e8)
  • DllUnregisterServer (Ordinal: 5, Address: 0x136e8)
  • InstHelpDW (Ordinal: 6, Address: 0x7e77)
  • InstHelpWStr (Ordinal: 7, Address: 0x7eaa)
  • NsisGetDectectorResult (Ordinal: 8, Address: 0x78d3)
  • NsisGetDectectorResultA (Ordinal: 9, Address: 0x7a84)
  • NsisGetDectectorResultEx (Ordinal: 10, Address: 0x7740)
  • NsisRunDetector (Ordinal: 11, Address: 0x7415)
  • NsisRunDetectorA (Ordinal: 12, Address: 0x7983)
  • NsisRunDetectorEx (Ordinal: 13, Address: 0x755e)
  • NsisWaitDetectorComplete (Ordinal: 14, Address: 0x771b)
  • NsisWaitDetectorCompleteA (Ordinal: 15, Address: 0x7b99)
  • NsisWaitDetectorCompleteEx (Ordinal: 16, Address: 0x76fb)
  • QQBrowserModuleEntry (Ordinal: 17, Address: 0x7e48)
  • QQBrowserProcessParamVersion (Ordinal: 18, Address: 0x7ec5)
  • SetDriverService (Ordinal: 19, Address: 0x7211)
  • CancelDetector (Ordinal: 20, Address: 0x7bbe)
  • GetDectectorResult (Ordinal: 21, Address: 0x72e4)
  • GetDectectorResultEx (Ordinal: 22, Address: 0x7251)
  • InitDetector (Ordinal: 23, Address: 0x7c03)
  • InitDownloader (Ordinal: 24, Address: 0x7d55)
  • InitLoadLoadParam (Ordinal: 25, Address: 0x56f4)
  • ReleaseDR (Ordinal: 26, Address: 0x569a)
  • RunDetector (Ordinal: 27, Address: 0x5d38)
  • RunDetectorEx (Ordinal: 28, Address: 0x576e)
  • RunDetectorWithNotification (Ordinal: 29, Address: 0x59d7)
  • SetGroupId (Ordinal: 30, Address: 0x56e5)
  • UnInitDetector (Ordinal: 31, Address: 0x7c2b)
  • WaitDetectorComplete (Ordinal: 32, Address: 0x6c3e)
  • WaitDetectorCompleteEx (Ordinal: 33, Address: 0x6884)

Imported DLLs & Functions

ADVAPI32.dll
  • CloseServiceHandle (Address: 0x10067008)
  • InitializeSecurityDescriptor (Address: 0x10067018)
  • OpenSCManagerW (Address: 0x10067010)
  • OpenServiceW (Address: 0x1006700c)
  • QueryServiceConfigW (Address: 0x10067004)
  • RegCloseKey (Address: 0x10067024)
  • RegCreateKeyExW (Address: 0x10067020)
  • RegOpenKeyExW (Address: 0x1006702c)
  • RegOpenKeyW (Address: 0x10067000)
  • RegQueryValueExW (Address: 0x10067028)
  • RegSetValueExW (Address: 0x1006701c)
  • SetSecurityDescriptorDacl (Address: 0x10067014)
KERNEL32.dll
  • CloseHandle (Address: 0x10067294)
  • CopyFileW (Address: 0x100670bc)
  • CreateDirectoryW (Address: 0x1006725c)
  • CreateEventW (Address: 0x10067298)
  • CreateFileA (Address: 0x100672a4)
  • CreateFileMappingW (Address: 0x100670f0)
  • CreateFileW (Address: 0x10067074)
  • CreateMutexW (Address: 0x1006708c)
  • CreateNamedPipeW (Address: 0x10067150)
  • CreateProcessW (Address: 0x10067060)
  • CreateThread (Address: 0x100670e8)
  • CreateToolhelp32Snapshot (Address: 0x10067040)
  • DeleteCriticalSection (Address: 0x10067160)
  • DeleteFileW (Address: 0x10067288)
  • DeviceIoControl (Address: 0x100671bc)
  • DuplicateHandle (Address: 0x10067108)
  • EnterCriticalSection (Address: 0x100670d0)
  • EnumSystemLocalesA (Address: 0x100672b4)
  • ExitProcess (Address: 0x100670fc)
  • ExitThread (Address: 0x10067200)
  • ExpandEnvironmentStringsW (Address: 0x100670ec)
  • FileTimeToSystemTime (Address: 0x10067104)
  • FindResourceExW (Address: 0x10067274)
  • FindResourceW (Address: 0x1006726c)
  • FlushFileBuffers (Address: 0x10067244)
  • FlushInstructionCache (Address: 0x100671d8)
  • FreeEnvironmentStringsA (Address: 0x10067248)
  • FreeEnvironmentStringsW (Address: 0x10067250)
  • FreeLibrary (Address: 0x10067054)
  • FreeResource (Address: 0x10067090)
  • GetACP (Address: 0x10067214)
  • GetCommandLineA (Address: 0x100671fc)
  • GetCommandLineW (Address: 0x100670ac)
  • GetConsoleCP (Address: 0x10067230)
  • GetConsoleMode (Address: 0x10067234)
  • GetConsoleOutputCP (Address: 0x100672b8)
  • GetCPInfo (Address: 0x100671ec)
  • GetCurrentDirectoryW (Address: 0x1006712c)
  • GetCurrentProcess (Address: 0x10067064)
  • GetCurrentProcessId (Address: 0x1006707c)
  • GetCurrentThreadId (Address: 0x10067170)
  • GetEnvironmentStrings (Address: 0x1006724c)
  • GetEnvironmentStringsW (Address: 0x10067254)
  • GetExitCodeProcess (Address: 0x100670e0)
  • GetFileAttributesW (Address: 0x100671a0)
  • GetFileSize (Address: 0x100670e4)
  • GetFileType (Address: 0x1006723c)
  • GetFullPathNameW (Address: 0x10067118)
  • GetLastError (Address: 0x10067058)
  • GetLocaleInfoA (Address: 0x10067210)
  • GetLocaleInfoW (Address: 0x100672c0)
  • GetLocalTime (Address: 0x10067270)
  • GetModuleFileNameA (Address: 0x100671b8)
  • GetModuleFileNameW (Address: 0x10067264)
  • GetModuleHandleA (Address: 0x100671cc)
  • GetModuleHandleW (Address: 0x10067070)
  • GetOEMCP (Address: 0x100671c4)
  • GetPrivateProfileIntW (Address: 0x100670cc)
  • GetPrivateProfileStringW (Address: 0x1006711c)
  • GetProcAddress (Address: 0x10067050)
  • GetProcessHeap (Address: 0x1006718c)
  • GetProcessTimes (Address: 0x10067068)
  • GetStartupInfoA (Address: 0x10067240)
  • GetStdHandle (Address: 0x100671c0)
  • GetStringTypeA (Address: 0x100671e8)
  • GetStringTypeW (Address: 0x100671e4)
  • GetSystemDefaultLangID (Address: 0x10067190)
  • GetSystemDirectoryW (Address: 0x10067124)
  • GetSystemInfo (Address: 0x10067198)
  • GetSystemTime (Address: 0x1006715c)
  • GetSystemTimeAsFileTime (Address: 0x10067204)
  • GetTempPathW (Address: 0x10067114)
  • GetThreadContext (Address: 0x100671dc)
  • GetThreadLocale (Address: 0x1006720c)
  • GetTickCount (Address: 0x100670b8)
  • GetUserDefaultLCID (Address: 0x100672b0)
  • GetVersion (Address: 0x10067158)
  • GetVersionExA (Address: 0x10067224)
  • GetVersionExW (Address: 0x1006705c)
  • GetWindowsDirectoryW (Address: 0x10067128)
  • GlobalAddAtomW (Address: 0x10067100)
  • GlobalAlloc (Address: 0x100670a4)
  • GlobalFree (Address: 0x1006709c)
  • HeapAlloc (Address: 0x10067188)
  • HeapCreate (Address: 0x1006722c)
  • HeapDestroy (Address: 0x10067220)
  • HeapFree (Address: 0x10067174)
  • HeapReAlloc (Address: 0x1006721c)
  • HeapSize (Address: 0x10067218)
  • InitializeCriticalSection (Address: 0x100672ac)
  • InitializeCriticalSectionAndSpinCount (Address: 0x100671b0)
  • InterlockedCompareExchange (Address: 0x100670d4)
  • InterlockedDecrement (Address: 0x10067144)
  • InterlockedExchange (Address: 0x10067088)
  • InterlockedIncrement (Address: 0x10067140)
  • IsBadReadPtr (Address: 0x100671b4)
  • IsDebuggerPresent (Address: 0x10067208)
  • IsValidCodePage (Address: 0x10067228)
  • IsValidLocale (Address: 0x100672c4)
  • LCMapStringA (Address: 0x100671f4)
  • LCMapStringW (Address: 0x100671f0)
  • LeaveCriticalSection (Address: 0x100670c0)
  • LoadLibraryA (Address: 0x1006719c)
  • LoadLibraryW (Address: 0x10067260)
  • LoadResource (Address: 0x10067278)
  • LocalFileTimeToFileTime (Address: 0x100671a8)
  • LocalFree (Address: 0x100670b4)
  • LockResource (Address: 0x1006727c)
  • lstrcmpiW (Address: 0x10067084)
  • lstrcpyA (Address: 0x100670a8)
  • lstrcpynA (Address: 0x100670b0)
  • lstrcpynW (Address: 0x1006703c)
  • lstrcpyW (Address: 0x10067098)
  • lstrlenA (Address: 0x1006716c)
  • lstrlenW (Address: 0x10067110)
  • MapViewOfFile (Address: 0x100670f4)
  • MoveFileExW (Address: 0x100670c4)
  • MultiByteToWideChar (Address: 0x10067268)
  • OpenEventW (Address: 0x1006710c)
  • OpenMutexW (Address: 0x1006714c)
  • OpenProcess (Address: 0x1006704c)
  • OpenSemaphoreW (Address: 0x10067154)
  • OutputDebugStringA (Address: 0x10067078)
  • OutputDebugStringW (Address: 0x1006706c)
  • Process32FirstW (Address: 0x10067044)
  • Process32NextW (Address: 0x10067048)
  • QueryPerformanceCounter (Address: 0x10067258)
  • RaiseException (Address: 0x100670a0)
  • ReadFile (Address: 0x100670dc)
  • ResetEvent (Address: 0x100671ac)
  • ResumeThread (Address: 0x10067148)
  • RtlUnwind (Address: 0x100671f8)
  • SetEndOfFile (Address: 0x100672a8)
  • SetEnvironmentVariableW (Address: 0x10067120)
  • SetEvent (Address: 0x10067284)
  • SetFilePointer (Address: 0x10067164)
  • SetFileTime (Address: 0x100671a4)
  • SetHandleCount (Address: 0x10067238)
  • SetLastError (Address: 0x100671c8)
  • SetStdHandle (Address: 0x100672a0)
  • SetThreadContext (Address: 0x100671e0)
  • SetUnhandledExceptionFilter (Address: 0x10067184)
  • SizeofResource (Address: 0x10067280)
  • Sleep (Address: 0x1006728c)
  • SleepEx (Address: 0x100670d8)
  • SystemTimeToFileTime (Address: 0x10067034)
  • TerminateProcess (Address: 0x10067180)
  • TerminateThread (Address: 0x100670c8)
  • TlsAlloc (Address: 0x10067130)
  • TlsFree (Address: 0x10067134)
  • TlsGetValue (Address: 0x1006713c)
  • TlsSetValue (Address: 0x10067138)
  • UnhandledExceptionFilter (Address: 0x10067168)
  • UnmapViewOfFile (Address: 0x100670f8)
  • VirtualAlloc (Address: 0x1006717c)
  • VirtualFree (Address: 0x100671d4)
  • VirtualProtect (Address: 0x100671d0)
  • VirtualQuery (Address: 0x10067194)
  • WaitForMultipleObjects (Address: 0x10067178)
  • WaitForSingleObject (Address: 0x10067290)
  • WideCharToMultiByte (Address: 0x10067038)
  • WriteConsoleA (Address: 0x100672bc)
  • WriteConsoleW (Address: 0x1006729c)
  • WriteFile (Address: 0x10067094)
  • WritePrivateProfileStringW (Address: 0x10067080)
ole32.dll
  • CLSIDFromProgID (Address: 0x100673d0)
  • CoCreateInstance (Address: 0x100673e8)
  • CoFreeLibrary (Address: 0x100673e4)
  • CoGetInterfaceAndReleaseStream (Address: 0x100673ec)
  • CoInitializeEx (Address: 0x100673d4)
  • CoLoadLibrary (Address: 0x100673dc)
  • CoMarshalInterThreadInterfaceInStream (Address: 0x100673d8)
  • CoUninitialize (Address: 0x100673e0)
OLEAUT32.dll
  • SysAllocString (Address: 0x100672d4)
  • SysAllocStringByteLen (Address: 0x100672cc)
  • SysFreeString (Address: 0x100672d0)
SHELL32.dll
  • CommandLineToArgvW (Address: 0x100672e8)
  • SHCreateDirectoryExW (Address: 0x100672e4)
  • ShellExecuteW (Address: 0x100672e0)
  • SHGetSpecialFolderPathW (Address: 0x100672dc)
SHLWAPI.dll
  • PathAddBackslashW (Address: 0x10067304)
  • PathAppendW (Address: 0x100672f8)
  • PathFileExistsW (Address: 0x10067300)
  • PathFindFileNameW (Address: 0x10067308)
  • PathIsDirectoryW (Address: 0x100672f4)
  • PathRemoveBackslashW (Address: 0x100672f0)
  • PathRemoveFileSpecW (Address: 0x100672fc)
USER32.dll
  • CharUpperW (Address: 0x10067370)
  • CreateWindowExW (Address: 0x10067344)
  • DefWindowProcW (Address: 0x10067330)
  • DestroyWindow (Address: 0x10067334)
  • DispatchMessageW (Address: 0x10067380)
  • EnumWindows (Address: 0x1006736c)
  • FindWindowA (Address: 0x10067338)
  • FindWindowW (Address: 0x10067368)
  • GetClassNameW (Address: 0x10067378)
  • GetDesktopWindow (Address: 0x10067324)
  • GetMessageW (Address: 0x10067314)
  • GetParent (Address: 0x10067358)
  • GetPropW (Address: 0x1006733c)
  • GetWindow (Address: 0x10067320)
  • GetWindowThreadProcessId (Address: 0x1006738c)
  • IsIconic (Address: 0x1006731c)
  • IsWindow (Address: 0x10067354)
  • IsWindowVisible (Address: 0x1006735c)
  • MessageBoxW (Address: 0x10067360)
  • PeekMessageW (Address: 0x10067388)
  • PostMessageW (Address: 0x10067364)
  • PostQuitMessage (Address: 0x10067348)
  • RegisterClassExW (Address: 0x1006732c)
  • RemovePropW (Address: 0x1006734c)
  • SendMessageTimeoutW (Address: 0x1006737c)
  • SendMessageW (Address: 0x10067350)
  • SetPropW (Address: 0x10067318)
  • SetWindowLongW (Address: 0x10067310)
  • ShowWindow (Address: 0x10067340)
  • TranslateMessage (Address: 0x10067384)
  • UnregisterClassA (Address: 0x10067374)
  • UnregisterClassW (Address: 0x10067328)
VERSION.dll
  • GetFileVersionInfoSizeW (Address: 0x10067394)
  • GetFileVersionInfoW (Address: 0x1006739c)
  • VerQueryValueW (Address: 0x10067398)
WININET.dll
  • HttpQueryInfoW (Address: 0x100673ac)
  • InternetCloseHandle (Address: 0x100673b0)
  • InternetGetConnectedState (Address: 0x100673b4)
  • InternetOpenUrlW (Address: 0x100673a8)
  • InternetOpenW (Address: 0x100673a4)
  • InternetReadFile (Address: 0x100673b8)
WS2_32.dll
  • htonl (Address: 0x100673c0)
  • htons (Address: 0x100673c4)
  • ntohl (Address: 0x100673c8)