qimei.dll
vUnknown
32-bit
Unknown OS
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 12
a
#1 · 0xe7e10
a1
#2 · 0xe7d60
b
#3 · 0xe7e40
c
#4 · 0xe7f50
d
#5 · 0xe7fb0
e
#6 · 0xe80b0
f
#7 · 0xe80c0
g
#8 · 0xe80d0
h
#9 · 0xe8120
i
#10 · 0xe83c0
j
#11 · 0xe85c0
z
#12 · 0xe7d00
No function matches your filter.
Imported DLLs & functions 216
ADVAPI32.dll
11
CloseEventLog
0x6baf8bd4
CryptAcquireContextA
0x6baf8bd8
CryptGenRandom
0x6baf8bdc
CryptReleaseContext
0x6baf8be0
GetUserNameA
0x6baf8be4
OpenEventLogA
0x6baf8be8
ReadEventLogA
0x6baf8bec
RegCloseKey
0x6baf8bf0
RegEnumKeyExA
0x6baf8bf4
RegOpenKeyExA
0x6baf8bf8
RegQueryValueExA
0x6baf8bfc
atoll
0x6baf8e44
_callnewh
0x6baf8d84
calloc
0x6baf8d88
free
0x6baf8d8c
malloc
0x6baf8d90
_cexit
0x6baf8d98
_configure_narrow_argv
0x6baf8d9c
_crt_atexit
0x6baf8da0
_execute_onexit_table
0x6baf8da4
_initialize_narrow_environment
0x6baf8da8
_initialize_onexit_table
0x6baf8dac
_initterm
0x6baf8db0
_initterm_e
0x6baf8db4
_invalid_parameter_noinfo_noreturn
0x6baf8db8
_register_onexit_function
0x6baf8dbc
_seh_filter_dll
0x6baf8dc0
exit
0x6baf8dc4
__stdio_common_vsnprintf_s
0x6baf8dcc
__stdio_common_vsprintf
0x6baf8dd0
__stdio_common_vsscanf
0x6baf8dd4
fclose
0x6baf8dd8
feof
0x6baf8ddc
fopen
0x6baf8de0
fread
0x6baf8de4
_stricmp
0x6baf8e10
isalnum
0x6baf8e14
isprint
0x6baf8e18
isspace
0x6baf8e1c
isxdigit
0x6baf8e20
strcmp
0x6baf8e24
strlen
0x6baf8e28
strncmp
0x6baf8e2c
strncpy_s
0x6baf8e30
strpbrk
0x6baf8e34
tolower
0x6baf8e38
wcslen
0x6baf8e3c
_localtime64_s
0x6baf8dec
_mktime64
0x6baf8df0
_time64
0x6baf8df4
strftime
0x6baf8df8
CertGetNameStringA
0x6baf8d14
KERNEL32.dll
69
CloseHandle
0x6baf8aac
CreateEventW
0x6baf8ab0
CreateFileA
0x6baf8ab4
CreateFileMappingA
0x6baf8ab8
CreateFileW
0x6baf8abc
CreateMutexA
0x6baf8ac0
CreateThread
0x6baf8ac4
CreateToolhelp32Snapshot
0x6baf8ac8
DeleteCriticalSection
0x6baf8acc
DeviceIoControl
0x6baf8ad0
EnterCriticalSection
0x6baf8ad4
FreeLibrary
0x6baf8ad8
GetComputerNameA
0x6baf8adc
GetCurrentProcess
0x6baf8ae0
GetCurrentProcessId
0x6baf8ae4
GetCurrentThread
0x6baf8ae8
GetCurrentThreadId
0x6baf8aec
GetDiskFreeSpaceA
0x6baf8af0
GetDriveTypeA
0x6baf8af4
GetLastError
0x6baf8af8
GetLocalTime
0x6baf8afc
GetModuleFileNameA
0x6baf8b00
GetModuleHandleA
0x6baf8b04
GetModuleHandleW
0x6baf8b08
GetNativeSystemInfo
0x6baf8b0c
GetPrivateProfileStringA
0x6baf8b10
GetProcAddress
0x6baf8b14
GetProcessHeap
0x6baf8b18
GetSystemDefaultLCID
0x6baf8b1c
GetSystemDirectoryA
0x6baf8b20
GetSystemFirmwareTable
0x6baf8b24
GetSystemInfo
0x6baf8b28
GetSystemTimeAsFileTime
0x6baf8b2c
GetThreadContext
0x6baf8b30
GetTickCount64
0x6baf8b34
GetTimeZoneInformation
0x6baf8b38
GetVersionExA
0x6baf8b3c
GlobalMemoryStatusEx
0x6baf8b40
HeapAlloc
0x6baf8b44
HeapFree
0x6baf8b48
InitializeCriticalSection
0x6baf8b4c
InitializeCriticalSectionAndSpinCount
0x6baf8b50
InitializeSListHead
0x6baf8b54
IsBadCodePtr
0x6baf8b58
IsDebuggerPresent
0x6baf8b5c
IsProcessorFeaturePresent
0x6baf8b60
K32EnumProcessModules
0x6baf8b64
K32GetModuleFileNameExA
0x6baf8b68
LeaveCriticalSection
0x6baf8b6c
LoadLibraryA
0x6baf8b70
MapViewOfFile
0x6baf8b74
MultiByteToWideChar
0x6baf8b78
OpenFileMappingA
0x6baf8b7c
OpenMutexA
0x6baf8b80
OpenProcess
0x6baf8b84
Process32First
0x6baf8b88
Process32Next
0x6baf8b8c
QueryDosDeviceA
0x6baf8b90
QueryPerformanceCounter
0x6baf8b94
ReadFile
0x6baf8b98
ResetEvent
0x6baf8b9c
SetEvent
0x6baf8ba0
SetUnhandledExceptionFilter
0x6baf8ba4
Sleep
0x6baf8ba8
TerminateProcess
0x6baf8bac
UnhandledExceptionFilter
0x6baf8bb0
WaitForSingleObjectEx
0x6baf8bb4
WideCharToMultiByte
0x6baf8bb8
WriteFile
0x6baf8bbc
MSVCP140.dll
32
_Mtx_destroy_in_situ
0x6baf8c80
_Mtx_init_in_situ
0x6baf8c84
_Mtx_lock
0x6baf8c88
_Mtx_unlock
0x6baf8c8c
_Xtime_get_ticks
0x6baf8c90
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
0x6baf8c2c
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
0x6baf8c30
?_Throw_C_error@std@@YAXH@Z
0x6baf8c34
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
0x6baf8c38
?_Xbad_function_call@std@@YAXXZ
0x6baf8c3c
?_Xlength_error@std@@YAXPBD@Z
0x6baf8c40
?_Xout_of_range@std@@YAXPBD@Z
0x6baf8c44
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
0x6baf8c14
??0ios_base@std@@IAE@XZ
0x6baf8c18
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
0x6baf8c1c
??1ios_base@std@@UAE@XZ
0x6baf8c20
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
0x6baf8c24
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
0x6baf8c28
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
0x6baf8c48
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
0x6baf8c4c
?good@ios_base@std@@QBE_NXZ
0x6baf8c50
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
0x6baf8c54
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z
0x6baf8c58
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
0x6baf8c5c
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
0x6baf8c60
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
0x6baf8c64
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
0x6baf8c68
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
0x6baf8c6c
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
0x6baf8c70
?uncaught_exceptions@std@@YAHXZ
0x6baf8c74
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
0x6baf8c78
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
0x6baf8c7c
Netbios
0x6baf8c98
SetupDiDestroyDeviceInfoList
0x6baf8cc0
SetupDiEnumDeviceInfo
0x6baf8cc4
SetupDiGetClassDevsA
0x6baf8cc8
SetupDiGetDevicePropertyW
0x6baf8ccc
SetupDiGetDeviceRegistryPropertyA
0x6baf8cd0
GetCursorPos
0x6baf8a90
GetForegroundWindow
0x6baf8a94
GetKeyboardLayoutList
0x6baf8a98
GetKeyboardType
0x6baf8a9c
GetSystemMetrics
0x6baf8aa0
GetWindowTextA
0x6baf8aa4
__CxxFrameHandler3
0x6baf8d3c
__std_exception_copy
0x6baf8d40
__std_exception_destroy
0x6baf8d44
__std_terminate
0x6baf8d48
__std_type_info_destroy_list
0x6baf8d4c
_CxxThrowException
0x6baf8d38
_except_handler4_common
0x6baf8d50
_purecall
0x6baf8d54
memchr
0x6baf8d58
memcmp
0x6baf8d5c
memcpy
0x6baf8d60
memmove
0x6baf8d64
memset
0x6baf8d68
strstr
0x6baf8d6c
GetFileVersionInfoA
0x6baf8cd8
GetFileVersionInfoSizeA
0x6baf8cdc
VerQueryValueA
0x6baf8ce0
HttpOpenRequestA
0x6baf8d1c
HttpSendRequestA
0x6baf8d20
InternetCloseHandle
0x6baf8d24
InternetConnectA
0x6baf8d28
InternetOpenA
0x6baf8d2c
InternetReadFile
0x6baf8d30
WINTRUST.dll
10
CryptCATAdminAcquireContext
0x6baf8ce8
CryptCATAdminCalcHashFromFileHandle
0x6baf8cec
CryptCATAdminEnumCatalogFromHash
0x6baf8cf0
CryptCATAdminReleaseCatalogContext
0x6baf8cf4
CryptCATAdminReleaseContext
0x6baf8cf8
CryptCATCatalogInfoFromContext
0x6baf8cfc
WinVerifyTrust
0x6baf8d0c
WTHelperGetProvCertFromChain
0x6baf8d00
WTHelperGetProvSignerFromChain
0x6baf8d04
WTHelperProvDataFromStateData
0x6baf8d08
gethostbyname
0x6baf8cb0
gethostname
0x6baf8cb4
inet_ntoa
0x6baf8cb8
WSAStartup
0x6baf8cac
No function matches your filter.