shsvcs.dll - Online Dependency Analysis & Download

Description

Windows Shell Services Dll

Authors

File size

204.5 KB

Uploaded

2025-12-01 08:04

Views

SHA-256

01349eaf58469ca9f8fa17ad81495813

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess, VirtualAllocEx

Exported functions 16

#1 · 0x2ebed

#2 · 0x2ebdf

#3 · 0x2eba7

#4 · 0x2ebb5

#5 · 0x2ebc3

#6 · 0x2ebd1

#7 · 0x2ebfb

#8 · 0x2ec4f

#9 · 0x2ec33

#10 · 0x2ec25

#11 · 0x2ec41

#12 · 0x2ec17

#13 · 0x2ec09

#14 · 0x2ec5d

HardwareDetectionServiceMain #15 · 0x10320

CreateHardwareEventMoniker #16 · 0x5100

Imported DLLs & functions 175

api-ms-win-core-apiquery-l1-1-0.dll 1

ApiSetQueryApiSetPresence 0x10031008

api-ms-win-core-debug-l1-1-0.dll 3

DebugBreak 0x10031014

IsDebuggerPresent 0x10031018

OutputDebugStringW 0x10031010

api-ms-win-core-delayload-l1-1-0.dll 1

DelayLoadFailureHook 0x10031020

api-ms-win-core-delayload-l1-1-1.dll 1

ResolveDelayLoadedAPI 0x10031028

api-ms-win-core-errorhandling-l1-1-0.dll 5

GetLastError 0x10031038

RaiseException 0x10031034

SetLastError 0x10031030

SetUnhandledExceptionFilter 0x10031040

UnhandledExceptionFilter 0x1003103c

api-ms-win-core-file-l1-1-0.dll 7

CreateFileW 0x10031058

FindClose 0x10031060

FindFirstFileW 0x1003105c

GetFileAttributesW 0x10031048

GetVolumeInformationW 0x10031050

GetVolumePathNameW 0x10031054

ReadFile 0x1003104c

api-ms-win-core-file-l1-2-0.dll 2

GetVolumeNameForVolumeMountPointW 0x10031068

GetVolumePathNamesForVolumeNameW 0x1003106c

api-ms-win-core-handle-l1-1-0.dll 2

CloseHandle 0x10031074

DuplicateHandle 0x10031078

api-ms-win-core-heap-l1-1-0.dll 4

GetProcessHeap 0x10031084

HeapAlloc 0x1003108c

HeapFree 0x10031080

HeapReAlloc 0x10031088

api-ms-win-core-heap-l2-1-0.dll 2

LocalAlloc 0x10031094

LocalFree 0x10031098

api-ms-win-core-io-l1-1-0.dll 2

DeviceIoControl 0x100310a4

GetOverlappedResult 0x100310a0

api-ms-win-core-io-l1-1-1.dll 1

CancelIo 0x100310ac

api-ms-win-core-libraryloader-l1-2-0.dll 7

DisableThreadLibraryCalls 0x100310bc

FreeLibrary 0x100310c4

GetModuleFileNameA 0x100310b8

GetModuleHandleExW 0x100310c0

GetModuleHandleW 0x100310b4

GetProcAddress 0x100310c8

LoadLibraryExW 0x100310cc

api-ms-win-core-localization-l1-2-0.dll 1

FormatMessageW 0x100310d4

api-ms-win-core-memory-l1-1-0.dll 5

VirtualAlloc 0x100310e8

VirtualAllocEx 0x100310e0

VirtualFree 0x100310ec

VirtualFreeEx 0x100310e4

WriteProcessMemory 0x100310dc

api-ms-win-core-path-l1-1-0.dll 1

PathCchAddBackslash 0x100310f4

api-ms-win-core-privateprofile-l1-1-0.dll 2

GetPrivateProfileStringW 0x10031100

WritePrivateProfileStringW 0x100310fc

api-ms-win-core-processenvironment-l1-1-0.dll 1

ExpandEnvironmentStringsW 0x10031108

api-ms-win-core-processthreads-l1-1-0.dll 11

CreateThread 0x10031124

GetCurrentProcess 0x1003111c

GetCurrentProcessId 0x10031130

GetCurrentThread 0x10031118

GetCurrentThreadId 0x1003112c

OpenProcessToken 0x10031120

OpenThreadToken 0x10031114

ProcessIdToSessionId 0x10031128

QueueUserAPC 0x10031138

SetThreadToken 0x10031134

TerminateProcess 0x10031110

api-ms-win-core-processthreads-l1-1-1.dll 1

OpenProcess 0x10031140

api-ms-win-core-profile-l1-1-0.dll 1

QueryPerformanceCounter 0x10031148

api-ms-win-core-registry-l1-1-0.dll 7

RegCloseKey 0x10031154

RegCreateKeyExW 0x10031150

RegEnumValueW 0x10031168

RegGetValueW 0x1003115c

RegOpenKeyExW 0x10031164

RegQueryValueExW 0x10031160

RegSetValueExW 0x10031158

api-ms-win-core-string-l1-1-0.dll 3

CompareStringOrdinal 0x10031170

CompareStringW 0x10031174

MultiByteToWideChar 0x10031178

api-ms-win-core-string-obsolete-l1-1-0.dll 2

lstrcmpiW 0x10031184

lstrcmpW 0x10031180

api-ms-win-core-synch-l1-1-0.dll 23

AcquireSRWLockExclusive 0x100311bc

AcquireSRWLockShared 0x100311c4

CreateEventW 0x100311b0

CreateMutexExW 0x10031194

CreateSemaphoreExW 0x10031198

CreateWaitableTimerExW 0x100311dc

DeleteCriticalSection 0x100311d4

EnterCriticalSection 0x100311cc

InitializeCriticalSection 0x100311c8

InitializeCriticalSectionEx 0x100311d8

LeaveCriticalSection 0x100311d0

OpenEventW 0x100311b4

OpenSemaphoreW 0x1003118c

ReleaseMutex 0x1003119c

ReleaseSemaphore 0x100311a0

ReleaseSRWLockExclusive 0x100311c0

ReleaseSRWLockShared 0x100311e4

ResetEvent 0x100311e0

SetEvent 0x100311ac

SetWaitableTimer 0x100311b8

WaitForMultipleObjectsEx 0x100311a8

WaitForSingleObject 0x100311a4

WaitForSingleObjectEx 0x10031190

api-ms-win-core-synch-l1-2-0.dll 3

Sleep 0x100311f4

SleepConditionVariableSRW 0x100311ec

WakeAllConditionVariable 0x100311f0

api-ms-win-core-synch-l1-2-1.dll 1

WaitForMultipleObjects 0x100311fc

api-ms-win-core-sysinfo-l1-1-0.dll 4

GetLocalTime 0x10031208

GetSystemDirectoryW 0x10031210

GetSystemTimeAsFileTime 0x10031204

GetTickCount 0x1003120c

api-ms-win-core-threadpool-l1-2-0.dll 5

CloseThreadpoolTimer 0x1003121c

CreateThreadpoolTimer 0x10031224

SetThreadpoolTimer 0x10031218

TrySubmitThreadpoolCallback 0x10031220

WaitForThreadpoolTimerCallbacks 0x10031228

api-ms-win-core-threadpool-legacy-l1-1-0.dll 1

QueueUserWorkItem 0x10031230

api-ms-win-core-timezone-l1-1-0.dll 1

SystemTimeToFileTime 0x10031238

api-ms-win-devices-config-l1-1-1.dll 4

CM_Get_Device_IDW 0x10031240

CM_Get_Parent 0x10031248

CM_Register_Notification 0x1003124c

CM_Unregister_Notification 0x10031244

api-ms-win-eventing-classicprovider-l1-1-0.dll 1

TraceMessage 0x10031254

api-ms-win-security-base-l1-1-0.dll 4

AdjustTokenPrivileges 0x10031260

DuplicateTokenEx 0x10031264

ImpersonateLoggedOnUser 0x10031268

RevertToSelf 0x1003125c

api-ms-win-service-core-l1-1-0.dll 2

RegisterServiceCtrlHandlerExW 0x10031274

SetServiceStatus 0x10031270

api-ms-win-service-core-l1-1-1.dll 1

EnumDependentServicesW 0x1003127c

api-ms-win-service-management-l1-1-0.dll 3

CloseServiceHandle 0x1003128c

OpenSCManagerW 0x10031288

OpenServiceW 0x10031284

api-ms-win-service-private-l1-1-0.dll 2

I_ScRegisterDeviceNotification 0x10031294

I_ScUnregisterDeviceNotification 0x10031298

api-ms-win-service-winsvc-l1-1-0.dll 2

ControlService 0x100312a4

QueryServiceStatus 0x100312a0

api-ms-win-stateseparation-helpers-l1-1-0.dll 1

GetPersistedRegistryLocationW 0x100312ac

msvcrt.dll 24

__dllonexit 0x10031300

_amsg_exit 0x100312d8

_callnewh 0x10031308

_except_handler4_common 0x100312fc

_ftol2 0x100312f0

_initterm 0x100312e4

_lock 0x100312cc

_onexit 0x100312ec

_purecall 0x100312d4

_unlock 0x10031304

_vsnwprintf 0x100312d0

_wcsicmp 0x100312b4

_wcsnicmp 0x100312bc

_XcptFilter 0x100312e8

free 0x100312dc

malloc 0x100312e0

memcmp 0x100312f4

memcpy 0x100312f8

memcpy_s 0x100312b8

memmove 0x1003130c

memmove_s 0x100312c0

memset 0x10031310

wcscat_s 0x100312c8

wcscpy_s 0x100312c4

ntdll.dll 19

EtwEventRegister 0x10031360

EtwEventUnregister 0x1003135c

EtwEventWriteTransfer 0x10031344

EtwGetTraceEnableFlags 0x10031350

EtwGetTraceEnableLevel 0x10031354

EtwGetTraceLoggerHandle 0x10031358

EtwRegisterTraceGuidsW 0x1003134c

EtwTraceMessage 0x10031320

EtwUnregisterTraceGuids 0x10031348

NtClose 0x10031328

NtFilterToken 0x1003132c

NtOpenProcessToken 0x10031330

NtQueryVolumeInformationFile 0x1003131c

RtlAllocateAndInitializeSid 0x10031334

RtlCompareMemory 0x10031318

RtlFreeSid 0x10031324

RtlGetActiveConsoleId 0x10031338

RtlNtStatusToDosError 0x1003133c

RtlPublishWnfStateData 0x10031340

RPCRT4.dll 1

I_RpcBindingInqLocalClientPID 0x10031000