qingshellext64.dll
v12.1.0.23125
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DllCanUnloadNow
#1 · 0x33b0
DllGetClassObject
#2 · 0x3430
DllInstall
#3 · 0x35e0
DllRegisterServer
#4 · 0x3620
DllUnregisterServer
#5 · 0x41f0
No function matches your filter.
Imported DLLs & functions 160
KERNEL32.dll
160
AcquireSRWLockExclusive
0x18008b348
AreFileApisANSI
0x18008b380
CloseHandle
0x18008b0d8
CreateEventW
0x18008b190
CreateFileA
0x18008b2e8
CreateFileMappingW
0x18008b248
CreateFileW
0x18008b0c0
CreateMutexW
0x18008b238
CreateThread
0x18008b2f0
CreateToolhelp32Snapshot
0x18008b218
DecodePointer
0x18008b000
DeleteCriticalSection
0x18008b020
DeleteFileW
0x18008b118
DeviceIoControl
0x18008b200
DisableThreadLibraryCalls
0x18008b028
EncodePointer
0x18008b038
EnterCriticalSection
0x18008b070
EnumSystemLocalesW
0x18008b490
ExitProcess
0x18008b458
ExitThread
0x18008b440
ExpandEnvironmentStringsW
0x18008b2a8
FindClose
0x18008b120
FindFirstFileExW
0x18008b360
FindFirstFileW
0x18008b128
FindNextFileW
0x18008b130
FindResourceExW
0x18008b080
FindResourceW
0x18008b0b8
FlushFileBuffers
0x18008b4a8
FormatMessageA
0x18008b328
FreeEnvironmentStringsW
0x18008b4e8
FreeLibrary
0x18008b100
FreeLibraryAndExitThread
0x18008b448
FreeResource
0x18008b1d8
GetACP
0x18008b4c8
GetCommandLineA
0x18008b4d8
GetCommandLineW
0x18008b268
GetConsoleCP
0x18008b4b0
GetConsoleMode
0x18008b498
GetCPInfo
0x18008b3a0
GetCurrentProcess
0x18008b2b0
GetCurrentProcessId
0x18008b2b8
GetCurrentThread
0x18008b2c0
GetCurrentThreadId
0x18008b1a0
GetDriveTypeW
0x18008b1f8
GetEnvironmentStringsW
0x18008b4e0
GetEnvironmentVariableW
0x18008b298
GetFileAttributesExW
0x18008b368
GetFileAttributesW
0x18008b1c8
GetFileInformationByHandleEx
0x18008b388
GetFileSizeEx
0x18008b4b8
GetFileType
0x18008b468
GetLastError
0x18008b010
GetLocaleInfoW
0x18008b478
GetLongPathNameW
0x18008b2e0
GetModuleFileNameW
0x18008b088
GetModuleHandleExW
0x18008b208
GetModuleHandleW
0x18008b090
GetOEMCP
0x18008b4d0
GetPrivateProfileIntW
0x18008b280
GetPrivateProfileStringW
0x18008b288
GetProcAddress
0x18008b098
GetProcessHeap
0x18008b068
GetProcessId
0x18008b160
GetStartupInfoW
0x18008b400
GetStdHandle
0x18008b460
GetStringTypeW
0x18008b330
GetSystemDirectoryW
0x18008b270
GetSystemInfo
0x18008b310
GetSystemTimeAsFileTime
0x18008b398
GetSystemWow64DirectoryW
0x18008b1a8
GetTempFileNameW
0x18008b138
GetTempPathW
0x18008b150
GetUserDefaultLCID
0x18008b488
GetUserDefaultUILanguage
0x18008b290
GlobalAlloc
0x18008b1e0
GlobalFree
0x18008b1e8
GlobalLock
0x18008b1b8
GlobalUnlock
0x18008b1b0
HeapAlloc
0x18008b048
HeapDestroy
0x18008b040
HeapFree
0x18008b058
HeapReAlloc
0x18008b050
HeapSize
0x18008b060
InitializeCriticalSection
0x18008b178
InitializeCriticalSectionAndSpinCount
0x18008b018
InitializeCriticalSectionEx
0x18008b350
InitializeSListHead
0x18008b3f8
InitializeSRWLock
0x18008b338
InterlockedFlushSList
0x18008b418
IsDebuggerPresent
0x18008b3a8
IsProcessorFeaturePresent
0x18008b3f0
IsValidCodePage
0x18008b4c0
IsValidLocale
0x18008b480
LCMapStringEx
0x18008b390
LCMapStringW
0x18008b470
LeaveCriticalSection
0x18008b078
LoadLibraryExA
0x18008b320
LoadLibraryExW
0x18008b108
LoadLibraryW
0x18008b210
LoadResource
0x18008b0a0
LocalFree
0x18008b168
LockResource
0x18008b0a8
lstrcmpiW
0x18008b110
lstrlenW
0x18008b278
MapViewOfFile
0x18008b258
MulDiv
0x18008b1f0
MultiByteToWideChar
0x18008b0f0
OpenFileMappingW
0x18008b250
OpenMutexW
0x18008b158
OpenProcess
0x18008b2d0
OutputDebugStringW
0x18008b030
Process32FirstW
0x18008b220
Process32NextW
0x18008b228
ProcessIdToSessionId
0x18008b2c8
QueryPerformanceCounter
0x18008b2f8
QueryPerformanceFrequency
0x18008b300
RaiseException
0x18008b008
ReadConsoleW
0x18008b4a0
ReadFile
0x18008b0c8
ReleaseMutex
0x18008b230
ReleaseSRWLockExclusive
0x18008b340
ResetEvent
0x18008b3b0
RtlCaptureContext
0x18008b3c0
RtlLookupFunctionEntry
0x18008b3c8
RtlPcToFileHeader
0x18008b410
RtlUnwind
0x18008b4f8
RtlUnwindEx
0x18008b408
RtlVirtualUnwind
0x18008b3d0
SetEndOfFile
0x18008b370
SetEnvironmentVariableW
0x18008b2a0
SetEvent
0x18008b180
SetFileAttributesW
0x18008b140
SetFilePointer
0x18008b148
SetFilePointerEx
0x18008b378
SetLastError
0x18008b2d8
SetNamedPipeHandleState
0x18008b0e0
SetStdHandle
0x18008b4f0
SetUnhandledExceptionFilter
0x18008b3e0
SizeofResource
0x18008b0b0
Sleep
0x18008b170
TerminateProcess
0x18008b3e8
TerminateThread
0x18008b198
TlsAlloc
0x18008b420
TlsFree
0x18008b438
TlsGetValue
0x18008b428
TlsSetValue
0x18008b430
TryEnterCriticalSection
0x18008b358
UnhandledExceptionFilter
0x18008b3d8
UnmapViewOfFile
0x18008b260
VerifyVersionInfoW
0x18008b1d0
VerSetConditionMask
0x18008b1c0
VirtualAlloc
0x18008b450
VirtualProtect
0x18008b318
VirtualQuery
0x18008b240
WaitForSingleObject
0x18008b188
WaitForSingleObjectEx
0x18008b3b8
WaitNamedPipeW
0x18008b0e8
WideCharToMultiByte
0x18008b0f8
WriteConsoleW
0x18008b308
WriteFile
0x18008b0d0
No function matches your filter.