qingshellext.dll
v12.1.0.23125
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DllCanUnloadNow
#1 · 0x3400
DllGetClassObject
#2 · 0x3470
DllInstall
#3 · 0x3610
DllRegisterServer
#4 · 0x3640
DllUnregisterServer
#5 · 0x3d70
No function matches your filter.
Imported DLLs & functions 155
KERNEL32.dll
155
AcquireSRWLockExclusive
0x1007c1a4
AreFileApisANSI
0x1007c1c0
CloseHandle
0x1007c06c
CreateEventW
0x1007c0c8
CreateFileA
0x1007c174
CreateFileMappingW
0x1007c124
CreateFileW
0x1007c060
CreateMutexW
0x1007c11c
CreateThread
0x1007c178
CreateToolhelp32Snapshot
0x1007c10c
DecodePointer
0x1007c000
DeleteCriticalSection
0x1007c010
DeleteFileW
0x1007c08c
DeviceIoControl
0x1007c100
DisableThreadLibraryCalls
0x1007c014
EncodePointer
0x1007c01c
EnterCriticalSection
0x1007c038
EnumSystemLocalesW
0x1007c238
ExitProcess
0x1007c21c
ExitThread
0x1007c210
ExpandEnvironmentStringsW
0x1007c154
FindClose
0x1007c090
FindFirstFileExW
0x1007c1b0
FindFirstFileW
0x1007c094
FindNextFileW
0x1007c098
FindResourceExW
0x1007c040
FindResourceW
0x1007c05c
FlushFileBuffers
0x1007c244
FormatMessageA
0x1007c194
FreeEnvironmentStringsW
0x1007c264
FreeLibrary
0x1007c080
FreeLibraryAndExitThread
0x1007c214
FreeResource
0x1007c0ec
GetACP
0x1007c254
GetCommandLineA
0x1007c25c
GetCommandLineW
0x1007c134
GetConsoleCP
0x1007c248
GetConsoleMode
0x1007c23c
GetCPInfo
0x1007c1d0
GetCurrentProcess
0x1007c158
GetCurrentProcessId
0x1007c15c
GetCurrentThread
0x1007c160
GetCurrentThreadId
0x1007c0d0
GetDriveTypeW
0x1007c0fc
GetEnvironmentStringsW
0x1007c260
GetEnvironmentVariableW
0x1007c14c
GetFileAttributesExW
0x1007c1b4
GetFileAttributesW
0x1007c0e4
GetFileInformationByHandleEx
0x1007c1c4
GetFileSizeEx
0x1007c24c
GetFileType
0x1007c224
GetLastError
0x1007c008
GetLocaleInfoW
0x1007c22c
GetLongPathNameW
0x1007c170
GetModuleFileNameW
0x1007c044
GetModuleHandleExW
0x1007c104
GetModuleHandleW
0x1007c048
GetOEMCP
0x1007c258
GetPrivateProfileIntW
0x1007c140
GetPrivateProfileStringW
0x1007c144
GetProcAddress
0x1007c04c
GetProcessHeap
0x1007c034
GetProcessId
0x1007c0b0
GetStartupInfoW
0x1007c1f4
GetStdHandle
0x1007c220
GetStringTypeW
0x1007c198
GetSystemDirectoryW
0x1007c138
GetSystemInfo
0x1007c188
GetSystemTimeAsFileTime
0x1007c1cc
GetSystemWow64DirectoryW
0x1007c0d4
GetTempFileNameW
0x1007c09c
GetTempPathW
0x1007c0a8
GetUserDefaultLCID
0x1007c234
GetUserDefaultUILanguage
0x1007c148
GlobalAlloc
0x1007c0f0
GlobalFree
0x1007c0f4
GlobalLock
0x1007c0dc
GlobalUnlock
0x1007c0d8
HeapAlloc
0x1007c024
HeapDestroy
0x1007c020
HeapFree
0x1007c02c
HeapReAlloc
0x1007c028
HeapSize
0x1007c030
InitializeCriticalSection
0x1007c0bc
InitializeCriticalSectionAndSpinCount
0x1007c00c
InitializeCriticalSectionEx
0x1007c1a8
InitializeSListHead
0x1007c1f0
InitializeSRWLock
0x1007c19c
InterlockedFlushSList
0x1007c1fc
IsDebuggerPresent
0x1007c1d4
IsProcessorFeaturePresent
0x1007c1ec
IsValidCodePage
0x1007c250
IsValidLocale
0x1007c230
LCMapStringEx
0x1007c1c8
LCMapStringW
0x1007c228
LeaveCriticalSection
0x1007c03c
LoadLibraryExA
0x1007c190
LoadLibraryExW
0x1007c084
LoadLibraryW
0x1007c108
LoadResource
0x1007c050
LocalFree
0x1007c0b4
LockResource
0x1007c054
lstrcmpiW
0x1007c088
lstrlenW
0x1007c13c
MapViewOfFile
0x1007c12c
MulDiv
0x1007c0f8
MultiByteToWideChar
0x1007c078
OpenFileMappingW
0x1007c128
OpenMutexW
0x1007c0ac
OpenProcess
0x1007c168
OutputDebugStringW
0x1007c018
Process32FirstW
0x1007c110
Process32NextW
0x1007c114
ProcessIdToSessionId
0x1007c164
QueryPerformanceCounter
0x1007c17c
QueryPerformanceFrequency
0x1007c180
RaiseException
0x1007c004
ReadConsoleW
0x1007c240
ReadFile
0x1007c064
ReleaseMutex
0x1007c118
ReleaseSRWLockExclusive
0x1007c1a0
ResetEvent
0x1007c1d8
RtlUnwind
0x1007c1f8
SetEndOfFile
0x1007c1b8
SetEnvironmentVariableW
0x1007c150
SetEvent
0x1007c0c0
SetFileAttributesW
0x1007c0a0
SetFilePointer
0x1007c0a4
SetFilePointerEx
0x1007c1bc
SetLastError
0x1007c16c
SetNamedPipeHandleState
0x1007c070
SetStdHandle
0x1007c184
SetUnhandledExceptionFilter
0x1007c1e4
SizeofResource
0x1007c058
Sleep
0x1007c0b8
TerminateProcess
0x1007c1e8
TerminateThread
0x1007c0cc
TlsAlloc
0x1007c200
TlsFree
0x1007c20c
TlsGetValue
0x1007c204
TlsSetValue
0x1007c208
TryEnterCriticalSection
0x1007c1ac
UnhandledExceptionFilter
0x1007c1e0
UnmapViewOfFile
0x1007c130
VerifyVersionInfoW
0x1007c0e8
VerSetConditionMask
0x1007c0e0
VirtualAlloc
0x1007c218
VirtualProtect
0x1007c18c
VirtualQuery
0x1007c120
WaitForSingleObject
0x1007c0c4
WaitForSingleObjectEx
0x1007c1dc
WaitNamedPipeW
0x1007c074
WideCharToMultiByte
0x1007c07c
WriteConsoleW
0x1007c268
WriteFile
0x1007c068
No function matches your filter.