ChsEM.dll
v10.0.19041.6456
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 6
DestroyMtf
#1 · 0x114f0
DllCanUnloadNow
#2 · 0xe180
DllGetClassObject
#3 · 0xe0a0
DllRegisterServer
#4 · 0xe4b0
DllUnregisterServer
#5 · 0xe4c0
SetupMtf
#6 · 0x114b0
No function matches your filter.
Imported DLLs & functions 268
ApiSetQueryApiSetPresence
0x150648b28
CoCreateFreeThreadedMarshaler
0x150648b38
CoCreateInstance
0x150648b78
CoGetApartmentType
0x150648b50
CoGetMalloc
0x150648b88
CoInitializeEx
0x150648b48
CoTaskMemAlloc
0x150648b68
CoTaskMemFree
0x150648b60
CoTaskMemRealloc
0x150648b70
CoUninitialize
0x150648b80
CoWaitForMultipleHandles
0x150648b40
StringFromGUID2
0x150648b58
DebugBreak
0x150648b98
IsDebuggerPresent
0x150648ba8
OutputDebugStringW
0x150648ba0
DelayLoadFailureHook
0x150648bb8
ResolveDelayLoadedAPI
0x150648bc8
GetLastError
0x150648bf0
RaiseException
0x150648be8
SetLastError
0x150648be0
SetUnhandledExceptionFilter
0x150648bd8
UnhandledExceptionFilter
0x150648bf8
RaiseFailFastException
0x150648c08
CreateDirectoryW
0x150648c18
CreateFileW
0x150648c30
DeleteFileW
0x150648c20
FindClose
0x150648c40
FindFirstFileW
0x150648c28
FindNextFileW
0x150648c38
GetFileAttributesW
0x150648c58
GetFullPathNameW
0x150648c50
WriteFile
0x150648c48
CloseHandle
0x150648c68
GetProcessHeap
0x150648c88
HeapAlloc
0x150648ca0
HeapDestroy
0x150648c80
HeapFree
0x150648c98
HeapReAlloc
0x150648c90
HeapSize
0x150648c78
GlobalAlloc
0x150648cc0
LocalAlloc
0x150648cb0
LocalFree
0x150648cb8
VerifyVersionInfoW
0x150648ce8
GetModuleFileNameA
0x150648d18
GetModuleFileNameW
0x150648d00
GetModuleHandleExW
0x150648d20
GetModuleHandleW
0x150648d10
GetProcAddress
0x150648cf8
LoadStringW
0x150648d08
FormatMessageW
0x150648d30
GetPrivateProfileStringA
0x150648d40
GetPrivateProfileStringW
0x150648d48
CreateThread
0x150648d88
GetCurrentProcess
0x150648d60
GetCurrentProcessId
0x150648d80
GetCurrentThreadId
0x150648d70
OpenProcessToken
0x150648d58
ResumeThread
0x150648d78
TerminateProcess
0x150648d68
OpenProcess
0x150648d98
QueryPerformanceCounter
0x150648da8
K32GetModuleBaseNameW
0x150648db8
RegCloseKey
0x150648dd0
RegCreateKeyExW
0x150648e00
RegDeleteTreeW
0x150648e10
RegDeleteValueW
0x150648de0
RegEnumValueW
0x150648df0
RegGetValueW
0x150648de8
RegOpenCurrentUser
0x150648dc8
RegOpenKeyExW
0x150648df8
RegQueryValueExW
0x150648e08
RegSetValueExW
0x150648dd8
RegSetKeyValueW
0x150648e20
RtlCaptureContext
0x150648e30
RtlLookupFunctionEntry
0x150648e38
RtlVirtualUnwind
0x150648e40
PathFileExistsW
0x150648e58
PathFindExtensionW
0x150648e50
ActivateActCtx
0x150648e68
CreateActCtxW
0x150648e70
DeactivateActCtx
0x150648e78
CompareStringOrdinal
0x150648ea0
GetStringTypeW
0x150648e98
MultiByteToWideChar
0x150648e88
WideCharToMultiByte
0x150648e90
AcquireSRWLockExclusive
0x150648f38
AcquireSRWLockShared
0x150648f28
CreateEventExW
0x150648ef8
CreateEventW
0x150648ee0
CreateMutexExW
0x150648f08
CreateSemaphoreExW
0x150648f00
DeleteCriticalSection
0x150648f20
EnterCriticalSection
0x150648f40
InitializeCriticalSection
0x150648f10
InitializeCriticalSectionEx
0x150648f50
InitializeSRWLock
0x150648f18
LeaveCriticalSection
0x150648f48
OpenSemaphoreW
0x150648eb0
ReleaseMutex
0x150648ed8
ReleaseSemaphore
0x150648ef0
ReleaseSRWLockExclusive
0x150648f58
ReleaseSRWLockShared
0x150648f30
ResetEvent
0x150648ed0
SetEvent
0x150648ec8
WaitForMultipleObjectsEx
0x150648ec0
WaitForSingleObject
0x150648ee8
WaitForSingleObjectEx
0x150648eb8
InitOnceBeginInitialize
0x150648f80
InitOnceComplete
0x150648f90
InitOnceExecuteOnce
0x150648f88
Sleep
0x150648f78
SleepConditionVariableSRW
0x150648f70
WakeAllConditionVariable
0x150648f68
WaitForMultipleObjects
0x150648fa0
GetSystemTime
0x150648fc0
GetSystemTimeAsFileTime
0x150648fd0
GetTickCount
0x150648fb8
GetTickCount64
0x150648fc8
GetWindowsDirectoryW
0x150648fb0
VerSetConditionMask
0x150648fe0
CloseThreadpoolTimer
0x150649008
CreateThreadpoolTimer
0x150648ff0
SetThreadpoolTimer
0x150648ff8
WaitForThreadpoolTimerCallbacks
0x150649000
SystemTimeToFileTime
0x150649018
PathIsURLW
0x150649028
Beep
0x150649048
DecodePointer
0x150649038
EncodePointer
0x150649040
GetRestrictedErrorInfo
0x150649068
RoOriginateError
0x150649058
RoOriginateErrorW
0x150649060
RoTransformError
0x150649070
SetRestrictedErrorInfo
0x150649078
IsErrorPropagationEnabled
0x150649090
RoGetMatchingRestrictedErrorInfo
0x150649088
RoReportFailedDelegate
0x150649098
RoGetActivationFactory
0x1506490a8
WindowsCreateString
0x1506490b8
WindowsCreateStringReference
0x1506490c8
WindowsGetStringRawBuffer
0x1506490c0
EventActivityIdControl
0x1506490f0
EventRegister
0x1506490e0
EventSetInformation
0x1506490d8
EventUnregister
0x1506490f8
EventWriteTransfer
0x1506490e8
CopySid
0x150649118
EqualSid
0x150649138
GetLengthSid
0x150649108
GetSidLengthRequired
0x150649130
GetSidSubAuthority
0x150649120
GetTokenInformation
0x150649128
InitializeSid
0x150649140
IsValidSid
0x150649110
CryptAcquireContextW
0x150649168
CryptCreateHash
0x150649170
CryptDecrypt
0x150649180
CryptDeriveKey
0x150649190
CryptDestroyHash
0x1506491a0
CryptDestroyKey
0x150649160
CryptEncrypt
0x150649188
CryptGetHashParam
0x150649150
CryptHashData
0x150649178
CryptReleaseContext
0x150649158
CryptSetKeyParam
0x150649198
ConvertSidToStringSidW
0x1506491b0
CoreUICreate
0x150648a70
msvcrt.dll
80
___lc_codepage_func
0x150649330
___lc_handle_func
0x150649328
___mb_cur_max_func
0x150649308
__C_specific_handler
0x1506493b8
__crtLCMapStringW
0x150649310
__CxxFrameHandler3
0x1506493e0
__dllonexit
0x150649358
__pctype_func
0x150649340
__uncaught_exception
0x1506492e8
_amsg_exit
0x1506493d8
_callnewh
0x1506492c0
_CxxThrowException
0x1506492d0
_errno
0x150649300
_initterm
0x1506493c0
_ismbblead
0x150649338
_lock
0x150649398
_onexit
0x150649350
_purecall
0x150649410
_ultow_s
0x150649288
_unlock
0x150649360
_vsnprintf_s
0x1506493f0
_vsnwprintf
0x150649420
_wcsdup
0x1506493a8
_wcsicmp
0x1506492b8
_wcsnicmp
0x1506491c0
_wsetlocale
0x150649220
_wtoi
0x150649200
_XcptFilter
0x1506493e8
??_V@YAXPEAX@Z
0x150649368
??0bad_cast@@QEAA@AEBV0@@Z
0x150649238
??0bad_cast@@QEAA@PEBD@Z
0x150649228
??0exception@@QEAA@AEBQEBD@Z
0x150649250
??0exception@@QEAA@AEBQEBDH@Z
0x1506492c8
??0exception@@QEAA@AEBV0@@Z
0x1506493f8
??0exception@@QEAA@XZ
0x150649400
??1bad_cast@@UEAA@XZ
0x150649230
??1exception@@UEAA@XZ
0x150649408
??1type_info@@UEAA@XZ
0x150649348
??3@YAXPEAX@Z
0x150649428
?terminate@@YAXXZ
0x1506493a0
?what@exception@@UEBAPEBDXZ
0x150649278
abort
0x150649380
calloc
0x1506492a8
free
0x1506493d0
isalnum
0x150649320
isdigit
0x1506492f8
isspace
0x150649370
iswalnum
0x1506491f8
iswalpha
0x1506492a0
iswgraph
0x150649290
iswprint
0x150649208
iswpunct
0x150649430
iswspace
0x1506491f0
iswupper
0x1506491e8
ldexp
0x150649268
localeconv
0x150649218
malloc
0x1506493c8
memchr
0x150649378
memcmp
0x1506493b0
memcpy
0x1506492d8
memcpy_s
0x150649418
memmove
0x1506492e0
memmove_s
0x150649318
memset
0x150649390
qsort
0x150649248
qsort_s
0x150649260
setlocale
0x1506492f0
sprintf_s
0x150649240
strcspn
0x150649210
swprintf_s
0x150649298
swscanf_s
0x1506491d0
time
0x1506492b0
tolower
0x1506491e0
toupper
0x1506491c8
towlower
0x150649388
wcscat_s
0x150649258
wcscmp
0x150649438
wcscpy_s
0x1506491d8
wcstod
0x150649280
wcstok_s
0x150649270
SysAllocString
0x150648a90
SysAllocStringLen
0x150648a80
SysFreeString
0x150648ab0
SysStringByteLen
0x150648a98
SysStringLen
0x150648aa8
VariantClear
0x150648a88
VariantInit
0x150648aa0
USER32.dll
12
CloseClipboard
0x150648ad0
EmptyClipboard
0x150648af8
EnumChildWindows
0x150648ad8
EnumThreadWindows
0x150648af0
GetForegroundWindow
0x150648ae0
GetWindowThreadProcessId
0x150648b10
IsWindow
0x150648ae8
OpenClipboard
0x150648ac8
RegisterClipboardFormatW
0x150648ac0
SendInput
0x150648b00
SetClipboardData
0x150648b08
SystemParametersInfoW
0x150648b18
No function matches your filter.