EchoTrail

腾讯电脑管家 18.2.30833.214

by 腾讯科技(深圳)有限公司installer signed by Tencent Technology (Shenzhen) Company LimitedValid

Sources: observed in the EchoTrail lab on Windows 11 on November 2, 2026.

The install

Installer
(2in1)pcmgr_setup_18_2_30833_214_7cfd59_1984.exe
Installed through
the screenshot-and-model clicker
Install directory
C:\Program Files (x86)\Tencent
Launched
qmlauncher.exe
Windows
Windows 11
Date
November 2, 2026
Executables dropped
689

installer sha256 ccc47eddb6d3199ef39d8e6f68a1b4ecdd91fb043615a460c4bc1603f3e1e489

The lab used 腾讯电脑管家 for 3 minutes, changed a setting, then rebooted and watched what came back.

On screen

Frames from the lab session, cropped to 腾讯电脑管家's own windows.

腾讯电脑管家 18.2.30833.214: First window
First window. A Tencent PC Manager global search welcome window shows a first-run intro slide with a blue '下一步' (Next) button.
腾讯电脑管家 18.2.30833.214: Main window
Main window. The Tencent PC Manager global search popup is open, listing a welcome guide and quick features like file search and clipboard history.
腾讯电脑管家 18.2.30833.214: Settings
Settings. The global search popup is open with its menu showing 使用指南, 设置 (Ctrl S), 意见反馈, and other items.

What it dropped

Executables

  • qmlauncher.exesigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN, SERIALNUMBER=9144030071526726XG, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Shenzhen, OID.1.3.6.1.4.1.311.60.2.1.2=Guangdong Province, OID.1.3.6.1.4.1.311.60.2.1.3=CNValidran during the lab session
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QMLauncher\qmlauncher.exe
    sha256 051339b859abb22d5b52b4b454462b8d9549f4da1efe1abe21c9e8d74979daa7
  • libcef.dll
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\Qt64\libcef.dll
    sha256 c89ba1529e6f2535e4f15f48d099cf08d5da826a057e53a7adeface006a81df1
  • qmlauncher-1.0.0-setup.exesigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN, SERIALNUMBER=9144030071526726XG, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Shenzhen, OID.1.3.6.1.4.1.311.60.2.1.2=Guangdong Province, OID.1.3.6.1.4.1.311.60.2.1.3=CNValidran during the lab session
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\qmlauncher-1.0.0-setup.exe
    sha256 f5533c59d044fd71db844cb51de13ea07ed1da502b9ebba2bdda26610b95dbf5
  • installer.exesigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN, SERIALNUMBER=9144030071526726XG, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Shenzhen, OID.1.3.6.1.4.1.311.60.2.1.2=Guangdong Province, OID.1.3.6.1.4.1.311.60.2.1.3=CNValid
    C:\Users\lab\AppData\Local\qmlauncher-updater\installer.exe
    sha256 f5533c59d044fd71db844cb51de13ea07ed1da502b9ebba2bdda26610b95dbf5
  • libffmpeg.dll
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\Qt64\libFFmpeg.dll
    sha256 cf8fc6b76ddf5b3bb0eb34c6ed9fcaca4207a5009f9a5afa944205f1f8a4c557
  • qmruleenginetrayplugin.dllsigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN, SERIALNUMBER=9144030071526726XG, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Shenzhen, OID.1.3.6.1.4.1.311.60.2.1.2=Guangdong Province, OID.1.3.6.1.4.1.311.60.2.1.3=CNValid
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QMTrayPlugin\QMRuleEngineTrayPlugin\QMRuleEngineTrayPlugin.dll
    sha256 d9f585aeae08a09568f53b441a19f299314b5bcd518189d60ff19561d5d7c647
  • qmextrapackagesetup.exesigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN, SERIALNUMBER=9144030071526726XG, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Shenzhen, OID.1.3.6.1.4.1.311.60.2.1.2=Guangdong Province, OID.1.3.6.1.4.1.311.60.2.1.3=CNValidran during the lab session
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QMExtraPackageSetup.exe
    sha256 f787041bc6ec67a564ed63940b1a69e50b0d4f76506d7dcc5b37975ac1bf4ab7
  • mediaengine.dll
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\MediaEngine.dll
    sha256 2b6d85f82bc2818aaca432e36ca1b78d347a5f01d8058f4cc7af4ac0b6e2979b
  • qmremote.exe
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QMRemote.exe
    sha256 1dbfb152e154159579f6da2829be4ef9f45ab58dfe908a101d35993a2b554cf5
  • uninst.exe
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\Uninst.exe
    sha256 76232d51b8af2fdf1e6f71446c9613b8d8b8bdcb801c73fee941de2c4b5b2e84
  • qmuicontainer.dll
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\Qt64\QMUIContainer.dll
    sha256 7ea30d5b3a983626a8035acd9e745220bec004607e6d3968a22d2bab836b9201
  • qmhwdetect.exe
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QMHwDetect.exe
    sha256 96c6db27c60e261a35c8fd90ab469c50a0936749269c360786752fd3cc254ba8
  • libprotobuf.dllsigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN, SERIALNUMBER=9144030071526726XG, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Shenzhen, OID.1.3.6.1.4.1.311.60.2.1.2=Guangdong Province, OID.1.3.6.1.4.1.311.60.2.1.3=CNValid
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\Qt64\libprotobuf.dll
    sha256 b2ec9063b2a07f2d156449f2a92b4e44902635ffa82152afa3f3e874829173d0
  • libprotobuf.dllsigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN, SERIALNUMBER=9144030071526726XG, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Shenzhen, OID.1.3.6.1.4.1.311.60.2.1.2=Guangdong Province, OID.1.3.6.1.4.1.311.60.2.1.3=CNValid
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QMLauncher\libprotobuf.dll
    sha256 b2ec9063b2a07f2d156449f2a92b4e44902635ffa82152afa3f3e874829173d0
  • libprotobuf.dllsigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN, SERIALNUMBER=9144030071526726XG, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Shenzhen, OID.1.3.6.1.4.1.311.60.2.1.2=Guangdong Province, OID.1.3.6.1.4.1.311.60.2.1.3=CNValid
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QMLauncher\QMLib\libprotobuf.dll
    sha256 b2ec9063b2a07f2d156449f2a92b4e44902635ffa82152afa3f3e874829173d0
  • qmpcmgrplusuiplugin.dll
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\Qt64\plugins\QMPCMgrPlusUIPlugin\QMPCMgrPlusUIPlugin.dll
    sha256 add4b877578be07fbd891498ce25f6bf7badcd569f0ec667cf61aa49bf7e4094
  • syscleanpage64.dll
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\Qt64\plugins\QMSysCleanUIPlugin\SysCleanPage64.dll
    sha256 3c58df5bf69a21616c8c7d3c83cde86618ee761be524b43cc204e820553761b1
  • libprotobuf.dllsigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN, SERIALNUMBER=9144030071526726XG, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Shenzhen, OID.1.3.6.1.4.1.311.60.2.1.2=Guangdong Province, OID.1.3.6.1.4.1.311.60.2.1.3=CNValid
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\libprotobuf.dll
    sha256 b3ecd2bd19fcdc22ba48e85f7d25bb9f47d71dfad9f0ecaae892327f89353153
  • libprotobuf.dllsigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN, SERIALNUMBER=9144030071526726XG, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Shenzhen, OID.1.3.6.1.4.1.311.60.2.1.2=Guangdong Province, OID.1.3.6.1.4.1.311.60.2.1.3=CNValid
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QMUpdate\libprotobuf.dll
    sha256 b3ecd2bd19fcdc22ba48e85f7d25bb9f47d71dfad9f0ecaae892327f89353153
  • libprotobuf.dllsigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN, SERIALNUMBER=9144030071526726XG, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Shenzhen, OID.1.3.6.1.4.1.311.60.2.1.2=Guangdong Province, OID.1.3.6.1.4.1.311.60.2.1.3=CNValid
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\plugins\SystemAidBox\libprotobuf.dll
    sha256 b3ecd2bd19fcdc22ba48e85f7d25bb9f47d71dfad9f0ecaae892327f89353153
  • tpktt.dllsigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CNValid
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\tpk\2.0.13771.702\tpktt.dll
    sha256 2382dcf7bac778420c229faedd40c497918fdf0a921169525bdab4659c5af6bd
  • qmcoreservicetrayplugin.dllsigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN, SERIALNUMBER=9144030071526726XG, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Shenzhen, OID.1.3.6.1.4.1.311.60.2.1.2=Guangdong Province, OID.1.3.6.1.4.1.311.60.2.1.3=CNValid
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QMTrayPlugin\QMCoreServiceTrayPlugin\QMCoreServiceTrayPlugin.dll
    sha256 e719ca3937ea91e4e16e6ec2e520a64db7ed5b35324089e7fc335ea7774d5b1c
  • softmovepage64.dll
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\Qt64\plugins\QMSoftMoveUIPlugin\SoftMovePage64.dll
    sha256 c756a349fb4b434cf9c7023ea52c374868b302db88be0181ee5ab854b5233491
  • syshomepage64.dll
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\Qt64\plugins\QMHpCleanUIPlugin\SysHomePage64.dll
    sha256 a38ad9cd3bbadac7f6a6f129f49e3b71976077d67f4f5d6ef0471d6a6b6ddf31
  • libglesv2.dll
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QMLauncher\libGLESv2.dll
    sha256 ddd2c42bad1c4c7f1779f877372e5ec4fb704f1d973a0c4d0fe9c670d480ecbd
  • qmtray.dllsigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN, SERIALNUMBER=9144030071526726XG, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Shenzhen, OID.1.3.6.1.4.1.311.60.2.1.2=Guangdong Province, OID.1.3.6.1.4.1.311.60.2.1.3=CNValid
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QMTray.dll
    sha256 cdb43ed2e6fe920f2171a2710665d49caa667541c631b668068bd909c44a6956
  • qmavtrayplugin.dllsigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN, SERIALNUMBER=9144030071526726XG, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Shenzhen, OID.1.3.6.1.4.1.311.60.2.1.2=Guangdong Province, OID.1.3.6.1.4.1.311.60.2.1.3=CNValid
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QMTrayPlugin\qmavtrayplugin\QMAVTrayPlugin.dll
    sha256 ea3b5b89d4af66eb39febe4b6b599dc0db8006802c42d82966863f94822ffec5
  • qmtrojanplugin.dllsigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN, SERIALNUMBER=9144030071526726XG, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Shenzhen, OID.1.3.6.1.4.1.311.60.2.1.2=Guangdong Province, OID.1.3.6.1.4.1.311.60.2.1.3=CNValid
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QMTrayPlugin\QMTrojanPlugin\QMTrojanPlugin.dll
    sha256 8a245315149dcbbc4fc001801fb475967688eca0245f9d005d8f518b78621e5f
  • qt5gui.dllsigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN, SERIALNUMBER=9144030071526726XG, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Shenzhen, OID.1.3.6.1.4.1.311.60.2.1.2=Guangdong Province, OID.1.3.6.1.4.1.311.60.2.1.3=CNValid
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\Qt64\Qt5Gui.dll
    sha256 17ea0d24ff97cf65509367f9faf5c986da1e8a226d5a3d1da2066713ab13f6b4
  • qmpublictrayplugin.dllsigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN, SERIALNUMBER=9144030071526726XG, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Shenzhen, OID.1.3.6.1.4.1.311.60.2.1.2=Guangdong Province, OID.1.3.6.1.4.1.311.60.2.1.3=CNValid
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QMTrayPlugin\QMPublicTrayPlugin\QMPublicTrayPlugin.dll
    sha256 ed2f1c4c8f1be8af921904eda0e668954476df61a5c33cf7708907716c44a0c4
  • libglesv2.dll
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\Qt64\libGLESv2.dll
    sha256 e6057c32fb86cc262988b6beef7b33928e53e41aa417c9b7e4f19ed0df4c2e82
  • qt5core.dllsigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN, SERIALNUMBER=9144030071526726XG, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Shenzhen, OID.1.3.6.1.4.1.311.60.2.1.2=Guangdong Province, OID.1.3.6.1.4.1.311.60.2.1.3=CNValid
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\Qt64\Qt5Core.dll
    sha256 3a37a850ba7ed2b71476a4a527d87432ef733bc7259de8f42001ee6d7bd05015
  • qmcorefunccontrollerstub.dll
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\Qt64\QMCoreFuncControllerStub.dll
    sha256 1165dfe869038f0d1e633973ca8b0fe66902da8e917ca39ce9a72378855a8c3c
  • skottieexport64.dll
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\Qt64\SkottieExport64.dll
    sha256 15df28cb7b8781168063c8b53b9ba108a96a052bd3bf84053691429daccaff30
  • qt5gui.dllsigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN, SERIALNUMBER=9144030071526726XG, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Shenzhen, OID.1.3.6.1.4.1.311.60.2.1.2=Guangdong Province, OID.1.3.6.1.4.1.311.60.2.1.3=CNValid
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\Qt5Gui.dll
    sha256 4c2fd7e444d966c865c895f7627e76762f98be8555f73a2befcc7f4c9771a65b
  • qt5gui.dllsigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN, SERIALNUMBER=9144030071526726XG, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Shenzhen, OID.1.3.6.1.4.1.311.60.2.1.2=Guangdong Province, OID.1.3.6.1.4.1.311.60.2.1.3=CNValid
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QMUpdate\Qt5Gui.dll
    sha256 4c2fd7e444d966c865c895f7627e76762f98be8555f73a2befcc7f4c9771a65b
  • qt5widgets.dllsigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN, SERIALNUMBER=9144030071526726XG, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Shenzhen, OID.1.3.6.1.4.1.311.60.2.1.2=Guangdong Province, OID.1.3.6.1.4.1.311.60.2.1.3=CNValid
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\Qt64\Qt5Widgets.dll
    sha256 ee4959966a3b777746d1f8cc6ee28cccfb6d15215ff8bf15b9c4e53aa86862be
  • vk_swiftshader.dll
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QMLauncher\vk_swiftshader.dll
    sha256 dad72e911ef86bc4dfb1073eb3cb8bb466c23bc9054e203576a8527a9013459d
  • local_svr.dll
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\Qt64\local_svr.dll
    sha256 4a4dc2f6925944c44aa45ba459c1442e083659aac70d1cafef2a46ac9fb7ec6d
  • qt5core.dllsigned by CN=Tencent Technology (Shenzhen) Company Limited, O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN, SERIALNUMBER=9144030071526726XG, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Shenzhen, OID.1.3.6.1.4.1.311.60.2.1.2=Guangdong Province, OID.1.3.6.1.4.1.311.60.2.1.3=CNValid
    C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\Qt5Core.dll
    sha256 6f71017da108a4026088a4819e83026a05b9e5858e793afc69cd28426264bd2b

Drivers

  • QMUdisk
  • TFsFlt
  • TSSysKit
  • QQSysMonX64
  • TsNetHlpX64
  • TAOAccelerator
  • TcHardWare
  • qmbsec
  • TAOKernelDriver

Services

  • QQPCRTP (Auto)"C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QQPCRTP.exe" -r
  • 30320 (Auto)C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\30320.exe "-r"
  • qmbsrv (Auto)"C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\qmbsrv.exe"

Run keys

  • QQPCTray"C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QQPCTray.exe" /regrun

After the reboot

Autostart entries

  • driver: QMUdisk\??\C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QMUdisk64_ev.sys
  • driver: QQSysMonX64\??\C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QQSysMonX64_EV.sys
  • driver: TcHardWare\??\C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QQPCHW-x64_ev.sys
  • driver: Tsnethlpx64\??\C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\TsNetHlpX64_ev.sys
  • driver: TSSysKitC:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\TSSysKit64_EV.sys
  • run key: QQPCTray"C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QQPCTRAY.EXE" /regrun /qqrepair
  • service: 30320C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\30320.exe "-r"
  • service: qmbsrv"C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\qmbsrv.exe"
  • service: QQPCRTP"C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30833.214\QQPCRtp.exe" -r

What it talked to

Destinations

  • 221.228.67.148:80asked by qmdl.exe822 connections
  • 58.144.248.137:80asked by qmdl.exe810 connections
  • 10.77.0.1:80asked by qmdl.exe743 connections
  • 58.144.248.137:443asked by qmdl.exe135 connections
  • 101.91.21.251:8081asked by qmlauncher.exe104 connections
  • 43.154.254.18:443asked by qqpctray.exe81 connections
  • 10.77.0.1:443asked by qmdl.exe56 connections
  • 101.91.21.251:8081asked by minihomepagepro.exe39 connections
  • 101.91.21.251:8081asked by qqpcrtp.exe38 connections
  • 101.91.21.251:8081asked by qqpctray.exe37 connections
  • 43.154.254.18:443asked by qqpcrtp.exe34 connections
  • 101.91.21.251:8081asked by qmdl.exe31 connections
  • 10.77.0.1:8081asked by qqpctray.exe27 connections
  • 10.77.0.1:8081asked by qmlauncher.exe24 connections
  • 10.77.0.1:8081asked by minihomepagepro.exe24 connections
  • 10.77.0.1:443asked by qqpctray.exe18 connections
  • 10.77.0.1:8081asked by qmdl.exe17 connections
  • 10.77.0.1:8443asked by qmdl.exe16 connections
  • 101.91.21.251:8081asked by 30320.exe15 connections
  • 10.77.0.1:8000asked by qmdl.exe14 connections
  • 183.47.103.43:36688asked by qqpcrtp.exe14 connections
  • 175.27.22.80:443asked by qqpctray.exe13 connections
  • 42.187.183.237:443asked by qmdl.exe13 connections
  • 101.91.21.251:8081asked by qmsignscan.exe12 connections
  • 183.47.103.43:36688asked by qqpctray.exe12 connections
  • 10.77.0.1:8081asked by qmboottimeoptimizer.exe11 connections
  • 10.77.0.1:8081asked by qqpcpatch.exe11 connections
  • 43.154.254.18:8000asked by qqpctray.exe11 connections
  • 43.154.254.18:443asked by qmlauncher.exe10 connections
  • 43.168.117.43:80asked by qmdl.exe10 connections
  • 10.77.0.1:80asked by qmlauncher.exe9 connections
  • 43.129.2.38:443asked by qqpcsoftcmd.exe9 connections
  • 101.226.144.67:443asked by qqpctray.exe8 connections
  • 10.77.0.1:8081asked by qqrepair.exe8 connections
  • 119.29.29.29:80asked by qqpctray.exe8 connections
  • 43.154.254.18:443asked by qmproviderupdate.exe8 connections
  • 10.77.0.1:443asked by qqpcsoftcmd.exe7 connections
  • 157.255.4.39:443asked by pcmgr_setup.exe7 connections
  • 101.91.21.251:8081asked by qmproviderupdate.exe6 connections
  • 101.91.21.251:8081asked by tpkupdate.exe6 connections
  • 10.77.0.1:53asked by qmlauncher.exe6 connections
  • 10.77.0.1:36688asked by minihomepagepro.exe6 connections
  • 10.77.0.1:36688asked by qqpctray.exe6 connections
  • 23.11.33.159:80asked by qmsignscan.exe6 connections
  • 43.154.254.18:8000asked by qqpcrtp.exe5 connections
  • 42.187.183.162:8080asked by qmdl.exe4 connections
  • 42.187.183.76:8000asked by qmdl.exe4 connections
  • 43.154.254.18:443asked by qmgarbageautoclean.exe4 connections
  • 81.69.145.36:8443asked by qmdl.exe4 connections
  • 10.77.0.1:14309asked by qmdl.exe3 connections
  • 175.178.176.172:8000asked by qmdl.exe3 connections
  • 42.187.183.154:14309asked by qmdl.exe3 connections
  • 43.154.254.18:8000asked by qmlauncher.exe3 connections
  • 43.154.254.18:8000asked by tpkupdate.exe3 connections
  • 101.91.21.251:8081asked by qqpcleakscan.exe2 connections
  • 10.77.0.1:8080asked by qmdl.exe2 connections
  • 10.77.0.1:36688asked by qmproviderupdate.exe2 connections
  • 112.53.42.42:8000asked by 30320.exe2 connections
  • 127.0.0.1:60852asked by pcmgr_setup.exe2 connections
  • 127.0.0.1:60756asked by pcmgr_setup.exe2 connections
  • 127.0.0.1:60811asked by qqpctray.exe2 connections
  • 127.0.0.1:61803asked by qqpctray.exe2 connections
  • 127.0.0.1:61807asked by qqpctray.exe2 connections
  • 127.0.0.1:61811asked by qqpctray.exe2 connections
  • 127.0.0.1:61821asked by qqpctray.exe2 connections
  • 127.0.0.1:61824asked by qqpctray.exe2 connections
  • 127.0.0.1:61827asked by qqpctray.exe2 connections
  • 127.0.0.1:61832asked by qqpctray.exe2 connections
  • 127.0.0.1:61835asked by qqpctray.exe2 connections
  • 127.0.0.1:61838asked by qqpctray.exe2 connections
  • 127.0.0.1:62819asked by qqpctray.exe2 connections
  • 127.0.0.1:62822asked by qqpctray.exe2 connections
  • 127.0.0.1:62825asked by qqpctray.exe2 connections
  • 127.0.0.1:62836asked by qqpctray.exe2 connections
  • 127.0.0.1:62839asked by qqpctray.exe2 connections
  • 127.0.0.1:62842asked by qqpctray.exe2 connections
  • 127.0.0.1:62857asked by qqpctray.exe2 connections
  • 127.0.0.1:62860asked by qqpctray.exe2 connections
  • 127.0.0.1:62863asked by qqpctray.exe2 connections
  • 155.102.176.83:80asked by qqpcsoftcmd.exe2 connections
  • 157.255.4.39:443asked by (2in1)pcmgr_setup_18_2_30833_214_7cfd59_1984.exe2 connections
  • 183.47.103.43:36688asked by qmsignscan.exe2 connections
  • 43.139.18.234:8000asked by qmdl.exe2 connections
  • 43.154.254.18:443asked by qmlspping.exe2 connections
  • 43.154.254.18:443asked by tpkupdate.exe2 connections
  • 43.154.254.18:443asked by minihomepagepro.exe2 connections
  • 58.144.248.137:80asked by qqpctray.exe2 connections
  • 73.153.12.183:18093asked by qmdl.exe2 connections
  • 101.91.21.251:8081asked by qmlspping.exe
  • 101.91.21.251:8081asked by qmgarbageautoclean.exe
  • 10.77.0.1:36688asked by qqrepair.exe
  • 10.77.0.1:36688asked by qqpcleakscan.exe
  • 10.77.0.1:8000asked by qmdl.exe
  • 10.77.0.1:36688asked by qqpcpatch.exe
  • 112.53.42.42:443asked by 30320.exe
  • 112.53.42.42:443asked by qmlauncher.exe
  • 172.66.2.5:80asked by qmsignscan.exe
  • 175.27.22.80:8000asked by qqpctray.exe
  • 183.47.103.43:36688asked by 30320.exe
  • 183.47.103.43:36688asked by minihomepagepro.exe
  • 183.47.103.43:36688asked by tpkupdate.exe
  • 183.61.39.229:8000asked by qmdl.exe
  • 23.11.33.159:80asked by pcmgr_setup.exe
  • 43.135.106.184:443asked by (2in1)pcmgr_setup_18_2_30833_214_7cfd59_1984.exe
  • 43.135.106.184:443asked by pcmgr_setup.exe
  • 43.154.240.84:443asked by qqpctray.exe
  • 43.154.254.142:443asked by pcmgr_setup.exe
  • 43.154.254.18:8000asked by minihomepagepro.exe
  • 43.154.254.18:8000asked by qmlspping.exe
  • 43.154.254.18:8000asked by qqpcleakscan.exe
  • 43.163.177.32:443asked by pcmgr_setup.exe
  • 43.168.117.43:443asked by qmdl.exe
  • 43.174.196.149:443asked by qqpctray.exe
  • 58.144.248.137:80asked by pcmgr_setup.exe
  • 81.71.56.111:8000asked by qmdl.exe

DNS

  • masterconn2.qq.comasked by qmlauncher.exe
  • pm.myapp.comasked by qmdl.exe
  • ga.gamedl.qq.comasked by qmdl.exe
  • masterconn2.qq.comasked by qqpctray.exe
  • downloadtpt.gamedl.qq.comasked by qmdl.exe
  • masterconn2.qq.comasked by minihomepagepro.exe
  • masterconn2.qq.comasked by 30320.exe
  • snowflake.qq.comasked by qqpcsoftcmd.exe
  • stat.gamedl.qq.comasked by qmdl.exe
  • config.gamedl.qq.comasked by qmdl.exe
  • conna.gj.qq.comasked by qqpctray.exe
  • conna.gj.qq.comasked by qmlauncher.exe
  • connc.gj.qq.comasked by qmproviderupdate.exe
  • connc.gj.qq.comasked by qqpctray.exe
  • connc.gj.qq.comasked by minihomepagepro.exe
  • connpm.gj.qq.comasked by qmlauncher.exe
  • connpm.gj.qq.comasked by qqpctray.exe
  • connpm.gj.qq.comasked by qmproviderupdate.exe
  • connpm.gj.qq.comasked by minihomepagepro.exe
  • connps.gj.qq.comasked by qmproviderupdate.exe
  • dlied6.qq.comasked by qqpctray.exe
  • masterconn2.qq.comasked by qmdl.exe
  • masterconn2.qq.comasked by qmproviderupdate.exe
  • ocsp.digicert.cnasked by qqpcsoftcmd.exe
  • p2pupgrade.gamedl.qq.comasked by qmdl.exe
  • ps2.gamedl.qq.comasked by qmdl.exe
  • qqdata.ab.qq.comasked by qqpctray.exe
  • stun.qqlive.qq.comasked by qmdl.exe
  • bk.ps2.gamedl.qq.comasked by qmdl.exe
  • cdn.m.qq.comasked by qmdl.exe
  • c.gj.qq.comasked by (2in1)pcmgr_setup_18_2_30833_214_7cfd59_1984.exe
  • c.gj.qq.comasked by pcmgr_setup.exe
  • conna.gj.qq.comasked by qqpcrtp.exe
  • conna.gj.qq.comasked by 30320.exe
  • conna.gj.qq.comasked by minihomepagepro.exe
  • conna.gj.qq.comasked by qqpcpatch.exe
  • conna.gj.qq.comasked by qqrepair.exe
  • connb.gj.qq.comasked by qqpctray.exe
  • connb.gj.qq.comasked by 30320.exe
  • connb.gj.qq.comasked by qqpcrtp.exe
  • connb.gj.qq.comasked by qmlauncher.exe
  • connc.gj.qq.comasked by qmgarbageautoclean.exe
  • connc.gj.qq.comasked by 30320.exe
  • connc.gj.qq.comasked by qmsignscan.exe
  • connc.gj.qq.comasked by qqpcrtp.exe
  • connc.gj.qq.comasked by qqpcpatch.exe
  • connc.gj.qq.comasked by qqpcleakscan.exe
  • connc.gj.qq.comasked by tpkupdate.exe
  • connc.gj.qq.comasked by qqrepair.exe
  • connpm.gj.qq.comasked by qqpcleakscan.exe
  • connpm.gj.qq.comasked by qqpcrtp.exe
  • connpm.gj.qq.comasked by qqpcpatch.exe
  • connpm.gj.qq.comasked by 30320.exe
  • connpm.gj.qq.comasked by qmlspping.exe
  • connpm.gj.qq.comasked by qmgarbageautoclean.exe
  • connpm.gj.qq.comasked by tpkupdate.exe
  • connpm.gj.qq.comasked by qqrepair.exe
  • connps.gj.qq.comasked by qqpcrtp.exe
  • connps.gj.qq.comasked by 30320.exe
  • connps.gj.qq.comasked by minihomepagepro.exe
  • connps.gj.qq.comasked by qmgarbageautoclean.exe
  • connps.gj.qq.comasked by qmlauncher.exe
  • connps.gj.qq.comasked by qmlspping.exe
  • connps.gj.qq.comasked by qqpcleakscan.exe
  • connps.gj.qq.comasked by qqpctray.exe
  • connps.gj.qq.comasked by tpkupdate.exe
  • crl3.digicert.comasked by qmsignscan.exe
  • crl4.digicert.comasked by qmsignscan.exe
  • crl.verisign.comasked by qmsignscan.exe
  • dldir2.qq.comasked by qmdl.exe
  • dlied6.qq.comasked by pcmgr_setup.exe
  • galileotelemetry.tencent.comasked by qqpctray.exe
  • galileotelemetry.tencent.comasked by pcmgr_setup.exe
  • masterconn11.qq.comasked by pcmgr_setup.exe
  • masterconn2.qq.comasked by qqrepair.exe
  • masterconn2.qq.comasked by tpkupdate.exe
  • masterconn2.qq.comasked by volsnapshotx64.exe
  • masterconn2.qq.comasked by qmgarbageautoclean.exe
  • masterconn2.qq.comasked by qmsignscan.exe
  • masterconn2.qq.comasked by qmlspping.exe
  • masterconn2.qq.comasked by qqpcpatch.exe
  • masterconn2.qq.comasked by qqpcrtp.exe
  • masterconn2.qq.comasked by pcmgr_setup.exe
  • masterconn2.qq.comasked by qqpcleakscan.exe
  • masterconn2.qq.comasked by qmboottimeoptimizer.exe
  • master.etl.desktop.qq.comasked by (2in1)pcmgr_setup_18_2_30833_214_7cfd59_1984.exe
  • ocsp.verisign.comasked by qmsignscan.exe
  • pc3.gtimg.comasked by qmdl.exe
  • qqdata.ab.qq.comasked by pcmgr_setup.exe
  • sf.symcb.comasked by qmsignscan.exe
  • sf.symcd.comasked by qmsignscan.exe
  • webcdn.m.qq.comasked by qqpctray.exe
  • www.qq.comasked by qmsignscan.exe