mqsnap.dll
v5.0.1.1
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 4
DllCanUnloadNow
#1 · 0x29d90
DllGetClassObject
#2 · 0x29df0
DllRegisterServer
#3 · 0x29e10
DllUnregisterServer
#4 · 0x29e80
No function matches your filter.
Imported DLLs & functions 597
0x1800790f0
ADVAPI32.dll
45
AddAccessAllowedAce
0x1800791a0
AdjustTokenPrivileges
0x1800791b8
CloseServiceHandle
0x180079228
ControlService
0x180079240
ConvertSidToStringSidW
0x1800791c0
CopySid
0x180079178
EnumDependentServicesW
0x180079248
EqualSid
0x1800791a8
GetAce
0x180079198
GetAclInformation
0x180079190
GetFileSecurityW
0x180079208
GetLengthSid
0x180079120
GetSecurityDescriptorDacl
0x180079188
GetSecurityDescriptorLength
0x1800791f8
GetTraceEnableFlags
0x1800791e0
GetTraceEnableLevel
0x1800791d8
GetTraceLoggerHandle
0x1800791d0
InitializeAcl
0x180079260
InitializeSecurityDescriptor
0x180079128
InitiateSystemShutdownExW
0x180079210
IsValidSid
0x180079170
LookupAccountSidW
0x1800791c8
LookupPrivilegeValueW
0x1800791b0
MakeSelfRelativeSD
0x180079278
MapGenericMask
0x180079200
OpenProcessToken
0x180079180
OpenSCManagerW
0x180079218
OpenServiceW
0x180079220
QueryServiceStatus
0x180079238
QueryServiceStatusEx
0x180079230
RegCloseKey
0x180079148
RegCreateKeyExW
0x180079150
RegDeleteKeyW
0x180079140
RegDeleteValueW
0x180079138
RegEnumKeyExW
0x180079168
RegisterTraceGuidsW
0x1800791e8
RegOpenKeyExW
0x180079158
RegQueryInfoKeyW
0x180079280
RegQueryValueExW
0x180079270
RegSetValueExW
0x180079160
SetSecurityDescriptorDacl
0x180079268
StartServiceW
0x180079250
TraceEvent
0x180079258
TraceMessage
0x180079130
UnregisterTraceGuids
0x1800791f0
CloseCluster
0x180079298
CloseClusterNode
0x1800792a8
OpenCluster
0x1800792a0
OpenClusterNode
0x180079290
CryptUIDlgSelectCertificateFromStore
0x1800792d0
CreateFontIndirectW
0x1800792e8
DeleteObject
0x1800792f0
GetTextExtentPoint32W
0x1800792e0
KERNEL32.dll
94
AcquireSRWLockExclusive
0x180079410
AcquireSRWLockShared
0x1800793c0
ActivateActCtx
0x180079370
CloseHandle
0x1800793f8
CloseThreadpoolTimer
0x180079418
CompareStringW
0x1800794e8
CreateActCtxW
0x180079358
CreateDirectoryW
0x180079528
CreateMutexExW
0x1800793c8
CreateSemaphoreExW
0x180079498
CreateThreadpoolTimer
0x1800793e0
DeactivateActCtx
0x180079380
DebugBreak
0x180079398
DecodePointer
0x180079580
DeleteCriticalSection
0x1800793b8
EncodePointer
0x180079578
EnterCriticalSection
0x180079480
ExpandEnvironmentStringsW
0x180079508
FindActCtxSectionStringW
0x180079360
FindClose
0x180079510
FindFirstFileW
0x180079538
FindNextFileW
0x180079548
FindResourceW
0x180079338
FlushInstructionCache
0x180079588
FormatMessageW
0x180079438
FreeLibrary
0x180079318
GetComputerNameW
0x180079560
GetCurrentProcess
0x180079300
GetCurrentProcessId
0x1800793b0
GetCurrentThreadId
0x180079448
GetDateFormatW
0x1800794d8
GetDriveTypeW
0x180079520
GetFileAttributesW
0x180079518
GetLastError
0x180079430
GetModuleFileNameA
0x1800794a0
GetModuleFileNameW
0x180079350
GetModuleHandleExW
0x180079470
GetModuleHandleW
0x1800793a0
GetProcAddress
0x1800793d0
GetProcessHeap
0x1800793a8
GetSystemTimeAsFileTime
0x1800795d8
GetTickCount
0x1800795e0
GetTimeFormatW
0x1800794e0
GetVersionExW
0x1800794d0
GlobalAlloc
0x1800794f8
GlobalFree
0x1800794b8
HeapAlloc
0x1800793d8
HeapDestroy
0x1800794a8
HeapFree
0x180079490
InitializeCriticalSection
0x1800795e8
InitializeCriticalSectionAndSpinCount
0x1800794c8
InitializeCriticalSectionEx
0x180079460
InterlockedPopEntrySList
0x180079598
InterlockedPushEntrySList
0x180079590
IsDebuggerPresent
0x180079390
LeaveCriticalSection
0x180079468
LoadLibraryExA
0x180079570
LoadLibraryExW
0x180079378
LoadLibraryW
0x180079368
LoadResource
0x180079330
LocalAlloc
0x180079500
LocalFree
0x1800794f0
LockResource
0x1800794c0
lstrcpynW
0x180079388
lstrcpyW
0x1800794b0
lstrlenA
0x1800795a0
MoveFileW
0x180079540
MultiByteToWideChar
0x180079320
OpenProcess
0x180079550
OpenSemaphoreW
0x180079400
OutputDebugStringA
0x180079340
OutputDebugStringW
0x180079420
QueryActCtxW
0x180079348
QueryPerformanceCounter
0x1800795d0
RaiseException
0x180079308
ReleaseMutex
0x180079440
ReleaseSemaphore
0x180079478
ReleaseSRWLockExclusive
0x180079428
ReleaseSRWLockShared
0x1800793e8
RemoveDirectoryW
0x180079530
SetLastError
0x180079488
SetThreadpoolTimer
0x1800793f0
SetUnhandledExceptionFilter
0x1800795b0
SizeofResource
0x180079328
Sleep
0x180079558
SleepConditionVariableSRW
0x1800795c8
TerminateProcess
0x1800795b8
UnhandledExceptionFilter
0x1800795a8
VirtualAlloc
0x180079310
VirtualFree
0x180079568
WaitForSingleObject
0x180079450
WaitForSingleObjectEx
0x180079408
WaitForThreadpoolTimerCallbacks
0x180079458
WakeAllConditionVariable
0x1800795c0
MFC42u.dll
273
0x1800795f8
0x180079600
0x180079608
0x180079610
0x180079618
0x180079620
0x180079628
0x180079630
0x180079638
0x180079640
0x180079648
0x180079650
0x180079658
0x180079660
0x180079668
0x180079670
0x180079678
0x180079680
0x180079688
0x180079690
0x180079698
0x1800796a0
0x1800796a8
0x1800796b0
0x1800796b8
0x1800796c0
0x1800796c8
0x1800796d0
0x1800796d8
0x1800796e0
0x1800796e8
0x1800796f0
0x1800796f8
0x180079700
0x180079708
0x180079710
0x180079718
0x180079720
0x180079728
0x180079730
0x180079738
0x180079740
0x180079748
0x180079750
0x180079758
0x180079760
0x180079768
0x180079770
0x180079778
0x180079780
0x180079788
0x180079790
0x180079798
0x1800797a0
0x1800797a8
0x1800797b0
0x1800797b8
0x1800797c0
0x1800797c8
0x1800797d0
0x1800797d8
0x1800797e0
0x1800797e8
0x1800797f0
0x1800797f8
0x180079800
0x180079808
0x180079810
0x180079818
0x180079820
0x180079828
0x180079830
0x180079838
0x180079840
0x180079848
0x180079850
0x180079858
0x180079860
0x180079868
0x180079870
0x180079878
0x180079880
0x180079888
0x180079890
0x180079898
0x1800798a0
0x1800798a8
0x1800798b0
0x1800798b8
0x1800798c0
0x1800798c8
0x1800798d0
0x1800798d8
0x1800798e0
0x1800798e8
0x1800798f0
0x1800798f8
0x180079900
0x180079908
0x180079910
0x180079918
0x180079920
0x180079928
0x180079930
0x180079938
0x180079940
0x180079948
0x180079950
0x180079958
0x180079960
0x180079968
0x180079970
0x180079978
0x180079980
0x180079988
0x180079990
0x180079998
0x1800799a0
0x1800799a8
0x1800799b0
0x1800799b8
0x1800799c0
0x1800799c8
0x180079db0
0x180079db8
0x180079dc0
0x180079dc8
0x180079dd0
0x180079dd8
0x180079de0
0x180079de8
0x180079df0
0x180079df8
0x180079e00
0x180079e08
0x180079e10
0x180079e18
0x180079e20
0x180079e28
0x180079e30
0x180079e38
0x180079e40
0x180079e48
0x180079e50
0x180079e58
0x180079e60
0x180079e68
0x180079e70
0x180079e78
0x1800799d0
0x1800799d8
0x1800799e0
0x1800799e8
0x1800799f0
0x1800799f8
0x180079a00
0x180079a08
0x180079a10
0x180079a18
0x180079a20
0x180079a28
0x180079a30
0x180079a38
0x180079a40
0x180079a48
0x180079a50
0x180079a58
0x180079a60
0x180079a68
0x180079a70
0x180079a78
0x180079a80
0x180079a88
0x180079a90
0x180079a98
0x180079aa0
0x180079aa8
0x180079ab0
0x180079ab8
0x180079ac0
0x180079ac8
0x180079ad0
0x180079ad8
0x180079ae0
0x180079ae8
0x180079af0
0x180079af8
0x180079b00
0x180079b08
0x180079b10
0x180079b18
0x180079b20
0x180079b28
0x180079b30
0x180079b38
0x180079b40
0x180079b48
0x180079b50
0x180079b58
0x180079b60
0x180079b68
0x180079b70
0x180079b78
0x180079b80
0x180079b88
0x180079b90
0x180079b98
0x180079ba0
0x180079ba8
0x180079bb0
0x180079bb8
0x180079bc0
0x180079bc8
0x180079bd0
0x180079bd8
0x180079be0
0x180079be8
0x180079bf0
0x180079bf8
0x180079c00
0x180079c08
0x180079c10
0x180079c18
0x180079c20
0x180079c28
0x180079c30
0x180079c38
0x180079c40
0x180079c48
0x180079c50
0x180079c58
0x180079c60
0x180079c68
0x180079c70
0x180079c78
0x180079c80
0x180079c88
0x180079c90
0x180079c98
0x180079ca0
0x180079ca8
0x180079cb0
0x180079cb8
0x180079cc0
0x180079cc8
0x180079cd0
0x180079cd8
0x180079ce0
0x180079ce8
0x180079cf0
0x180079cf8
0x180079d00
0x180079d08
0x180079d10
0x180079d18
0x180079d20
0x180079d28
0x180079d30
0x180079d38
0x180079d40
0x180079d48
0x180079d50
0x180079d58
0x180079d60
0x180079d68
0x180079d70
0x180079d78
0x180079d80
0x180079d88
0x180079d90
0x180079d98
0x180079da0
0x180079da8
SelectPersonalCertificateForRegister
0x180079e90
SelectPersonalCertificateForRemoval
0x180079e88
ShowCertificate
0x180079e98
ShowPersonalCertificates
0x180079ea0
mqrt.dll
29
MQBeginTransaction
0x18007a0f0
MQCloseCursor
0x18007a148
MQCloseQueue
0x18007a088
MQCreateCursor
0x18007a118
MQCreateQueue
0x18007a090
MQDeleteQueue
0x18007a0a0
MQFreeMemory
0x18007a138
MQGetMachineProperties
0x18007a0e8
MQGetQueueProperties
0x18007a0d0
MQGetQueueSecurity
0x18007a108
MQMgmtAction
0x18007a0e0
MQMgmtGetInfo
0x18007a0d8
MQMoveMessage
0x18007a0f8
MQOpenQueue
0x18007a078
MQPathNameToFormatName
0x18007a098
MQPurgeQueue
0x18007a120
MQReceiveMessage
0x18007a0b0
MQReceiveMessageByLookupId
0x18007a100
MQSendMessage
0x18007a080
MQSetQueueProperties
0x18007a110
MQSetQueueSecurity
0x18007a0a8
RTCreateInternalCertificate
0x18007a070
RTDeleteInternalCert
0x18007a130
RTGetInternalCert
0x18007a0b8
RTGetUserCerts
0x18007a140
RTIsDependentClient
0x18007a068
RTRegisterUserCert
0x18007a128
RTRemoveUserCert
0x18007a0c0
RTRemoveUserCertSid
0x18007a0c8
mqsec.dll
21
??0CColumns@@QEAA@I@Z
0x18007a168
??0CRestriction@@QEAA@I@Z
0x18007a1a0
??1CColumns@@QEAA@XZ
0x18007a160
??1CRestriction@@QEAA@XZ
0x18007a1a8
?Add@CColumns@@QEAAXAEBK@Z
0x18007a158
?AddRestriction@CRestriction@@QEAAXPEAU_GUID@@KK@Z
0x18007a1b0
GetComputerNameInternal
0x18007a190
GetDomainFQDNName
0x18007a1c0
GetFalconKeyValue
0x18007a178
IsLocalSystemCluster
0x18007a1f8
MQSec_GetAdminSid
0x18007a1f0
MQSec_GetAnonymousSid
0x18007a180
MQSec_GetProcessUserSid
0x18007a1d8
MQSec_GetUserType
0x18007a198
MQSec_GetWorldSid
0x18007a188
MQSec_SetDirectorySecurityForService
0x18007a1e8
MQSec_SetPrivilegeInThread
0x18007a1e0
MQSec_StorePubKeysInDS
0x18007a1c8
MQSigCreateCertificate
0x18007a1d0
MSMQGetOperatingSystem
0x18007a1b8
SetFalconKeyValue
0x18007a170
MQGetResourceHandle
0x18007a208
msvcrt.dll
51
__C_specific_handler
0x18007a280
__CxxFrameHandler3
0x18007a230
__dllonexit
0x18007a300
__RTDynamicCast
0x18007a228
_amsg_exit
0x18007a320
_CxxThrowException
0x18007a330
_initterm
0x18007a318
_itow_s
0x18007a2d0
_lock
0x18007a310
_onexit
0x18007a2f8
_purecall
0x18007a248
_snwscanf_s
0x18007a348
_strnicmp
0x18007a3a8
_ui64tow_s
0x18007a2d8
_unlock
0x18007a308
_vsnprintf_s
0x18007a268
_vsnwprintf
0x18007a238
_wcsdup
0x18007a2e0
_wcsicmp
0x18007a290
_wcsnicmp
0x18007a3a0
_wtoi
0x18007a360
_XcptFilter
0x18007a328
??0exception@@QEAA@AEBQEBD@Z
0x18007a378
??0exception@@QEAA@AEBQEBDH@Z
0x18007a2c8
??0exception@@QEAA@AEBV0@@Z
0x18007a260
??0exception@@QEAA@XZ
0x18007a2b0
??1exception@@UEAA@XZ
0x18007a250
??1type_info@@UEAA@XZ
0x18007a2e8
?terminate@@YAXXZ
0x18007a2f0
?what@exception@@UEBAPEBDXZ
0x18007a2c0
free
0x18007a298
isalpha
0x18007a390
iswdigit
0x18007a340
iswspace
0x18007a388
malloc
0x18007a288
memcmp
0x18007a220
memcpy
0x18007a218
memcpy_s
0x18007a240
memmove
0x18007a2a8
memmove_s
0x18007a270
memset
0x18007a258
qsort
0x18007a398
realloc
0x18007a2a0
swscanf_s
0x18007a2b8
towupper
0x18007a350
wcschr
0x18007a380
wcscmp
0x18007a338
wcscspn
0x18007a370
wcsnlen
0x18007a278
wcstol
0x18007a358
wcstoul
0x18007a368
RtlCaptureContext
0x18007a3b8
RtlLookupFunctionEntry
0x18007a3c0
RtlVirtualUnwind
0x18007a3c8
ole32.dll
11
CLSIDFromProgID
0x18007a428
CoCreateInstance
0x18007a3e8
CoInitialize
0x18007a420
CoTaskMemAlloc
0x18007a3d8
CoTaskMemFree
0x18007a410
CoTaskMemRealloc
0x18007a3e0
CreateStreamOnHGlobal
0x18007a400
IIDFromString
0x18007a3f0
OleRun
0x18007a418
StringFromCLSID
0x18007a3f8
StringFromGUID2
0x18007a408
OLEAUT32.dll
13
GetErrorInfo
0x180079f00
LoadTypeLib
0x180079f28
RegisterTypeLib
0x180079f20
SafeArrayGetElement
0x180079f08
SafeArrayGetLBound
0x180079f10
SafeArrayGetUBound
0x180079f18
SysAllocString
0x180079ef8
SysAllocStringLen
0x180079ef0
SysFreeString
0x180079ee0
SysStringLen
0x180079ee8
VarI4FromStr
0x180079f40
VariantClear
0x180079f38
VariantInit
0x180079f30
USER32.dll
34
BringWindowToTop
0x180079f78
CallNextHookEx
0x180079f50
CharNextW
0x180079f90
DestroyMenu
0x18007a008
EnableWindow
0x180079fe0
FindWindowExW
0x180079f70
GetClientRect
0x180079fc0
GetDC
0x18007a030
GetDlgItem
0x180079fa0
GetDlgItemTextW
0x18007a058
GetMenuItemInfoW
0x18007a000
GetParent
0x180079fb0
GetSubMenu
0x180079ff8
GetWindowLongPtrW
0x18007a048
GetWindowRect
0x180079fb8
GetWindowTextLengthW
0x180079fc8
GetWindowTextW
0x180079fd0
GetWindowThreadProcessId
0x180079f68
InsertMenuW
0x18007a020
IsWindow
0x18007a018
LoadIconW
0x18007a040
LoadImageW
0x180079fe8
LoadMenuW
0x180079ff0
LoadStringW
0x180079f98
PostMessageW
0x18007a010
RegisterClipboardFormatW
0x180079f88
ReleaseDC
0x18007a038
SendMessageW
0x180079fa8
SetActiveWindow
0x180079f80
SetDlgItemTextW
0x18007a050
SetWindowLongPtrW
0x180079fd8
SetWindowsHookExW
0x180079f60
SetWindowTextW
0x18007a028
UnhookWindowsHookEx
0x180079f58
No function matches your filter.