PUP.QQPC

The detection of PUP.QQPC on your system indicates the presence of a potentially unwanted program (PUP) that may be causing issues with your computer's performance and security. It's essential to understand the nature of this threat and take appropriate steps to remove it and prevent future infections.

What Is PUP.QQPC?

PUP.QQPC is a type of malware that is classified as a potentially unwanted program. This means that it may not be as malicious as other types of malware, such as viruses or Trojans, but it can still cause problems with your system and compromise your privacy. PUPs are often installed unintentionally, and they can be difficult to remove without the right tools and techniques.

How PUP.QQPC Operates

PUP.QQPC, like other PUPs, can operate in various ways to achieve its goals. It may be designed to display unwanted advertisements, collect your personal data, or install additional malware on your system. In some cases, PUPs can also modify your system settings, such as changing your default search engine or homepage, to generate revenue for their creators. It's crucial to be aware of these tactics and take steps to protect yourself and your system.

Symptoms of Infection

If your system is infected with PUP.QQPC, you may notice various symptoms, including slow system performance, unwanted pop-ups and advertisements, and changes to your system settings. You may also experience issues with your browser, such as unexpected crashes or redirects to suspicious websites. Additionally, you may notice that your system is running more slowly than usual, or that your internet connection is being used for unknown purposes.

• Unwanted advertisements and pop-ups
• Changes to system settings, such as default search engine or homepage
• Slow system performance
• Browser issues, such as crashes or redirects
• Unknown processes running in the background

How to Remove PUP.QQPC

1. Boot your system in Safe Mode with Networking to prevent the malware from loading and to allow you to download and install removal tools.
2. Download and install a reputable anti-malware tool, such as SpyHunter, and perform a full scan of your system to detect and remove PUP.QQPC and any other malware.
3. Uninstall any suspicious programs that may be related to the infection, and be cautious when installing new software to avoid unintentionally installing PUPs.
4. Reset your browsers, such as Chrome, Firefox, or Edge, to their default settings to remove any changes made by the malware.
5. Reboot your system and perform another scan with your anti-malware tool to ensure that the malware has been completely removed.

Conclusion

Removing PUP.QQPC from your system requires careful attention to detail and the right tools. By following the steps outlined above, you can effectively remove this potentially unwanted program and prevent future infections. It's essential to remain vigilant and take proactive steps to protect your system and your personal data from malware and other online threats. Regularly updating your operating system, browser, and anti-malware software can help prevent infections, and being cautious when installing new software can reduce the risk of unintentionally installing PUPs.

Analysis Report

General information

Family Name:	PUP.QQPC
Signature status:	No Signature

Known Samples

i

Known Samples

This section lists other file samples believed to be associated with this family.

MD5: 6abadab81b7c9f7d807bb5884b70b554 SHA1: 77e54d18d45b80dc7df31c14b4992f7ce41d70d0 SHA256: F5E8CC5DDAD0EEF9178D2775F5FD946BFB0163E2432E8D96B1E84E01C77F965E File Size: 1.67 MB, 1669552 bytes

MD5: 0924c95c3c3f6a8b45f020a4b9e23217 SHA1: c51203c2ac7fad4794a9e52c629068d447001924 SHA256: 79D9B01E3A174DF85BB0B8D32674F6C8FA865A98D34CA05F290534420402F36A File Size: 1.27 MB, 1271688 bytes

MD5: 06a3d1998369e4c8f11bd5869effc5e3 SHA1: 747883a9b8bee88b958f239aa071fd01c02e912b SHA256: 35BA6A1A2FEDEDE1CCA81AFBCCCB18E82DFC4C2F621186B41740D0D8C598C5F3 File Size: 1.17 MB, 1167264 bytes

MD5: d3891b9c0068850d3448597fbe7fe751 SHA1: 41e2ef0a0b884ca914f79b5e1c275b59db4c8c7b SHA256: D6F58C316A90946B7F7BFBEDD6FA9F5F9663D0A83F77BE55766D4DE4961B0433 File Size: 555.71 KB, 555712 bytes

MD5: 05b8eca0313f831093bdc7c8a419a084 SHA1: a565e8e2721ae3960e5ba6795c856fcee8dc877a SHA256: 8386A730C19183FAE4B5E4B2BA2AF4685B8711C6E00077CB29772027103B7DC1 File Size: 680.39 KB, 680392 bytes

Show More

MD5: 0e20557c46f626f4f42e88596b41ba95 SHA1: 3bf0fa77a4f8e06ba498a9c10aaadda875b422a2 SHA256: 29AA30AFCE0334DE16197B2C2A5310700B9CDA64FE502A0532487BB074F4145F File Size: 733.62 KB, 733616 bytes

MD5: 1039fb74f1a6b6c2b409f95cc6dbb6ec SHA1: 0059095f3795c5c4be7227be114065cabd8ca904 SHA256: 515000718A09A9F522412754F30A5AA81F5ABA7C262DD19876248C0BD0653A24 File Size: 1.64 MB, 1643912 bytes

MD5: b75703868db96217c9709a5bfe78cd12 SHA1: f2686a26ce96e7c08a3c2bfde72725ad652d1915 SHA256: 1AF20773D71C6E67C3727099A06C4A1F958FDB0764D8231748B70AA7A486D2B4 File Size: 8.01 MB, 8011776 bytes

MD5: e499dbe261ea2341ced7bc0f49c37614 SHA1: 43df5a63fdb9d2d8fb80632152cac58300934774 SHA256: C74B875E6488273C47AEB2B9BFC0BD46F0E1A45B5B875E14BE9DFF35FD6E8002 File Size: 1.17 MB, 1167264 bytes

MD5: 5c1c08579ce6736eb6f67fb598e247d0 SHA1: 5865b3cccbf6c0e7a0538a69ed7d59e534fd7db8 SHA256: EE0D91A1FBFE199F6E6B2CBDB7F343819AEE8F66A726C499A6BE5F949022B31E File Size: 1.17 MB, 1166144 bytes

MD5: 65dc37e04af6e78dd20eeb76b24cf967 SHA1: 8449651a9951f48b34f0bed778823f7d24158020 SHA256: 131F3CB337B209DD63589F4B1AC006CF5653EC1B13D352F6694BA41656D16232 File Size: 2.13 MB, 2134961 bytes

Windows Portable Executable Attributes

i

Windows Portable Executable Attributes

This section lists file attributes found within family samples. These attributes are extracted from the files’ Windows PE (Portable Executable) specification and various system flags. Portable Executable Attributes give malware researchers insight into a file’s functionality, executable details, platform and runtime environment.

• File doesn't have "Rich" header
• File doesn't have debug information
• File doesn't have exports table
• File doesn't have relocations information
• File doesn't have security information
• File has exports table
• File has TLS information
• File is 32-bit executable
• File is either console or GUI application
• File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)

Show More

• File is Native application (NOT .NET application)
• File is not packed
• IMAGE_FILE_DLL is not set inside PE header (Executable)
• IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)

File Icons

i

File Icons

This section displays icon resources found within family samples. Malware often replicates icons commonly associated with legitimate software to mislead users into believing the malware is safe.

Windows PE Version Information

i

Windows PE Version Information

This section displays values and attributes that have been set in the Windows file version information data structure for samples within this family. To mislead users, malware actors often add fake version information mimicking legitimate software.

Name	Value
Cip Ver	10016
Comments	2014-07-16 00:00:00
Company Name	Oleg N. Scherbakov Tencent Tencent Inc.
Company Short Name	Tencent
File Description	7z Setup SFX (x86) QQ Browser QQBrowserLiveup QQ浏览器 QQ浏览器安装程序 电脑管家
File Version	13.3.20238.213 12.0.5442.400 11.9.5355.400 11.1.5140.400 11.0.5130.400 10.6.4254.400 9.7.13140.400 9.6.12190.400 9.6.11576.400 1.4.1.2100
Internal Name	7ZSfxMod bug_report_exe QQBrowser QQBrowserLiveup QQBrowser_exe QQPCMgrPacket
Kernel Build	129
Kernel Version	53.0.2785.104
Last Change	713bc9f76cb50125fdd45c5a1681158adfff5709
Legal Copyright	Copyright 2015 Tencent. All rights reserved. Copyright 2018 Tencent. All rights reserved. Copyright 2022 Tencent. All rights reserved. Copyright © 2005-2010 Oleg N. Scherbakov Copyright © 2018 Tencent. All Rights Reserved. Copyright © 2022 Tencent. All Rights Reserved.
Official Build	1
Original Filename	7ZSfxMod_x86.exe BugReport.exe QQBrowser.exe QQBrowserLiveup.exe QQPCMgrPacket.exe
Private Build	2011-04-28 10016
Product Name	7-Zip SFX QQ Browser QQ浏览器 电脑管家-安装程序
Product Short Name	QQ Browser QQ浏览器
Product Version	13.3.20238.213 12.0.5442.400 11.9.5355.400 11.1.5140.400 11.0.5130.400 10.6.4254.400 9.7.13140.400 9.6.12190.400 9.6.11576.400 1.4.1.2100
Special Build	1023
Url Ver	1

Digital Signatures

i

Digital Signatures

This section lists digital signatures that are attached to samples within this family. When analyzing and verifying digital signatures, it is important to confirm that the signature’s root authority is a well-known and trustworthy entity and that the status of the signature is good. Malware is often signed with non-trustworthy “Self Signed” digital signatures (which can be easily created by a malware author with no verification). Malware may also be signed by legitimate signatures that have an invalid status, and by signatures from questionable root authorities with fake or misleading “Signer” names.

Signer	Root	Status
Tencent Technology(Shenzhen) Company Limited	DigiCert Assured ID Code Signing CA-1	Self Signed
Tencent Technology(Shenzhen) Company Limited	DigiCert SHA2 Assured ID Code Signing CA	Self Signed
Tencent Technology(Shenzhen) Company Limited	Symantec Class 3 SHA256 Code Signing CA	Self Signed
Tencent Technology(Shenzhen) Company Limited	VeriSign Class 3 Code Signing 2010 CA	Self Signed

File Traits

• 7-zip (In Overlay)
• 7-zip SFX
• HighEntropy
• No Version Info
• WriteProcessMemory
• x86

Block Information

i

Block Information

During analysis, EnigmaSoft breaks file samples into logical blocks for classification and comparison with other samples. Blocks can be used to generate malware detection rules and to group file samples into families based on shared source code, functionality and other distinguishing attributes and characteristics. This section lists a summary of this block data, as well as its classification by EnigmaSoft. A visual representation of the block data is also displayed, where available.

Similar Families

i

Similar Families

This section lists other families that share similarities with this family, based on EnigmaSoft’s analysis. Many malware families are created from the same malware toolkits and use the same packing and encryption techniques but uniquely extend functionality. Similar families may also share source code, attributes, icons, subcomponents, compromised and/or invalid digital signatures, and network characteristics. Researchers leverage these similarities to rapidly and effectively triage file samples and extend malware detection rules.

• Patched.E

Files Modified

i

Files Modified

This section lists files that were created, modified, moved and/or deleted by samples in this family. File system activity can provide valuable insight into how malware functions on the operating system.

File	Attributes
\device\harddisk0\dr0	Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\programdata\tencent\qqpcmgr\qqpcmgrinstall_20260204142436.log	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\adblock	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\adblock\mainlist.ze	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\adblock\mainlist.ze	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\adblock\wbg.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\adblock\wbg.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\adblock\whitelist.ze	Generic Write,Read Attributes

Show More

c:\users\administrator\appdata\roaming\tencent\qqbrowser\adblock\whitelist.ze	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\adblock\{43789a6f-8316-54a6-96d4-87874b9cc177}	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\adblock\{43789a6f-8316-54a6-96d4-87874b9cc177}	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\clientupdate	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\0	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\0\backups	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\0\backups\favorite.db_20161003150819687	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\0\backups\favorite.db_20161003150819687	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\0\backups\favorite.db_20161003150822109	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\0\backups\favorite.db_20161003150822109	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\0\backups\favorite.db_20161003150825844	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\0\backups\favorite.db_20161003150825844	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\0\backups\favorite.db_20161003150831594	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\0\backups\favorite.db_20161003150831594	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\0\backups\favorite.db_20161003150834531	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\0\backups\favorite.db_20161003150834531	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\0\backups\favorite.db_20161003150838297	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\0\backups\favorite.db_20161003150838297	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\0\backups\favorite.db_20161003150845895	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\0\backups\favorite.db_20161003150845895	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\0\backups\favorite.db_20161003150848020	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\0\backups\favorite.db_20161003150848020	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\favicons.db	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\favicons.db	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\favorite.db	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\favorite.db	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\history.db	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\history.db	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\homepage.db	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\homepage.db	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\random.db	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\random.db	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\urlusage.db	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\db\urlusage.db	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\dr_packet.dat	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\dr_packet.dat	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\temp	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{00000000-0000-0000-0000-000000000000}	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{00000000-0000-0000-0000-000000000000}\jquery.js	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{00000000-0000-0000-0000-000000000000}\jquery.js	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{0508df1f-2ab6-4fac-a99e-45bbbf24e1e6}	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{0508df1f-2ab6-4fac-a99e-45bbbf24e1e6}\8.0.0.12	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{0508df1f-2ab6-4fac-a99e-45bbbf24e1e6}\8.0.0.12\manifest.json	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{0508df1f-2ab6-4fac-a99e-45bbbf24e1e6}\8.0.0.12\manifest.json	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{0508df1f-2ab6-4fac-a99e-45bbbf24e1e6}\8.0.0.12\qbsafe.dll	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{0508df1f-2ab6-4fac-a99e-45bbbf24e1e6}\8.0.0.12\qbsafe.dll	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\accountinfobar.html	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\accountinfobar.html	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\background.html	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\background.html	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\background.js	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\background.js	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\content.js	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\content.js	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\css	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\css\style.css	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\css\style.css	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\image	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\image\accountinfo.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\image\accountinfo.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\image\infobar_close_active.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\image\infobar_close_active.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\image\infobar_close_hover.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\image\infobar_close_hover.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\image\infobar_close_normal.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\image\infobar_close_normal.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\js	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\js\inforbar.js	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\js\inforbar.js	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\manifest.json	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{309147a1-5ca9-4082-bab3-bf9020cde0c2}\8.0.0.25\manifest.json	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{5062f1c6-d76b-43c8-adae-d060662c6546}	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{5062f1c6-d76b-43c8-adae-d060662c6546}\extplayer.js	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{5062f1c6-d76b-43c8-adae-d060662c6546}\extplayer.js	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\certerror.html	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\certerror.html	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\error.html	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\error.html	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\bkg.gif	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\bkg.gif	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\hse.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\hse.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\icon_not_recommended.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\icon_not_recommended.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\icon_suggested_action.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\icon_suggested_action.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\pixel.gif	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\pixel.gif	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\private-icon.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\private-icon.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\search_btn.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\search_btn.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\searchlogo_24_baidu.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\searchlogo_24_baidu.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\searchlogo_24_bing.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\searchlogo_24_bing.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\searchlogo_24_google.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\searchlogo_24_google.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\searchlogo_24_sogou.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\searchlogo_24_sogou.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\searchlogo_24_soso.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\searchlogo_24_soso.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\shadow-bottom.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\shadow-bottom.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\small.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\images\small.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\lib	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\lib\jquery.easing.js	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\lib\jquery.easing.js	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\lib\jquery.mcustomscrollbar.concat.min.js	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\lib\jquery.mcustomscrollbar.concat.min.js	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\lib\jquery.mcustomscrollbar.css	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\lib\jquery.mcustomscrollbar.css	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\lib\jquery.min.js	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\lib\jquery.min.js	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\lib\template.js	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\lib\template.js	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\lib\ycalendar.js	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\lib\ycalendar.js	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\app.js	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\app.js	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\css	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\css\app.css	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\css\app.css	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\default-icon.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\default-icon.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\installed_arrow.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\installed_arrow.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\large_installed_arrow.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\large_installed_arrow.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\loading.gif	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\loading.gif	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\plugin1.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\plugin1.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\plugin2.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\plugin2.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\plugin3.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\plugin3.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\qblogo.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\qblogo.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\site_text.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\site_text.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\small_installed_arrow.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\small_installed_arrow.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\uninstallbtn.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\uninstallbtn.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\warn-dialog-close.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\warn-dialog-close.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\wifi_dialog_cancel_btn.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\wifi_dialog_cancel_btn.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\wifi_dialog_close_btn.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\wifi_dialog_close_btn.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\wifi_dialog_continue_btn.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\images\wifi_dialog_continue_btn.png	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\sliderman.1.3.7.js	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\app\sliderman.1.3.7.js	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\css	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\css\style.css	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\css\style.css	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\css\ycalendar.css	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\css\ycalendar.css	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\favicon	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\favicon\index.html#account.ico	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\favicon\index.html#account.ico	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\favicon\index.html#app.ico	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\favicon\index.html#app.ico	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\favicon\index.html#history.ico	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\favicon\index.html#history.ico	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\favicon\index.html#skin.ico	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\favicon\index.html#skin.ico	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\history	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\history\css	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\history\css\history.css	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\history\css\history.css	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\history\history2.js	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\history\history2.js	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\history\img	Synchronize,Write Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\history\img\atbk1.png	Generic Write,Read Attributes
c:\users\administrator\appdata\roaming\tencent\qqbrowser\extensions8\{807849b3-40d8-42e3-8001-d541fd7cebfb}\8.0.3.25\html\manage\history\img\atbk1.png	Synchronize,Write Attributes

319 additional files are not displayed above.

Registry Modifications

i

Registry Modifications

This section lists registry keys and values that were created, modified and/or deleted by samples in this family. Windows Registry activity can provide valuable insight into malware functionality. Additionally, malware often creates registry values to allow itself to automatically start and indefinitely persist after an initial infection has compromised the system.

Key::Value	Data	API Name
HKCU\software\microsoft\internet explorer\browsermachinecode::machineguid	�BS��ۤw6�G9��	RegNtPreCreateKey
HKCU\software\tencent\qqbrowser\liveup::lur		RegNtPreCreateKey
HKCU\software\microsoft\internet explorer\browsermachinecode::machineguid	��jD��=iT8ksk@	RegNtPreCreateKey
HKCU\software\microsoft\internet explorer\browsermachinecode::machineguid	��${�o���M=� �'	RegNtPreCreateKey

Windows API Usage

i

Windows API Usage

This section lists Windows API calls that are used by the samples in this family. Windows API usage analysis is a valuable tool that can help identify malicious activity, such as keylogging, security privilege escalation, data encryption, data exfiltration, interference with antivirus software, and network request manipulation.

Category	API
Other Suspicious	AdjustTokenPrivileges
Anti Debug	OutputDebugString
Network Info Queried	GetAdaptersInfo
Network Winhttp	WinHttpConnect WinHttpOpen WinHttpOpenRequest WinHttpSendRequest WinHttpWriteData
Process Manipulation Evasion	ReadProcessMemory
Network Winsock2	WSAStartup
Network Winsock	connect gethostbyname inet_addr send setsockopt socket