ksandbox.dll

v12.1.0.23125 32-bit Windows NT Analyzed
Description
—
Authors
Copyright©2025 Kingsoft Corporation. All rights reserved.
File size
160.0 KB
Uploaded
2025-12-04 06:12
Views
57
SHA-256
263a48d2ef0651ca0e27854daf37024d

Exported functions 3

Exec #1 · 0x1fb0
GetSandboxManager #2 · 0x1fd0
ReHook #3 · 0x1fe0

Imported DLLs & functions 117

api-ms-win-crt-heap-l1-1-0.dll 3
_callnewh 0x1001814c
free 0x10018150
malloc 0x10018154
api-ms-win-crt-math-l1-1-0.dll 1
ceil 0x1001815c
api-ms-win-crt-runtime-l1-1-0.dll 13
_cexit 0x10018174
_configure_narrow_argv 0x10018180
_crt_atexit 0x1001817c
_errno 0x10018170
_execute_onexit_table 0x10018184
_initialize_narrow_environment 0x10018190
_initialize_onexit_table 0x1001818c
_initterm 0x1001816c
_initterm_e 0x10018164
_invalid_parameter_noinfo 0x10018168
_invalid_parameter_noinfo_noreturn 0x10018194
_register_onexit_function 0x10018188
_seh_filter_dll 0x10018178
api-ms-win-crt-stdio-l1-1-0.dll 2
__stdio_common_vsnwprintf_s 0x1001819c
__stdio_common_vswprintf_s 0x100181a0
api-ms-win-crt-string-l1-1-0.dll 3
_wcsicmp 0x100181b0
_wcsnicmp 0x100181a8
wcsncpy_s 0x100181ac
KERNEL32.dll 67
CloseHandle 0x10018078
CreateEventW 0x1001807c
CreateToolhelp32Snapshot 0x1001809c
DeleteCriticalSection 0x100180b4
DisableThreadLibraryCalls 0x10018008
EnterCriticalSection 0x10018038
ExpandEnvironmentStringsW 0x10018090
FindFirstVolumeW 0x10018058
FindNextVolumeW 0x1001805c
FindVolumeClose 0x10018060
FlushInstructionCache 0x100180ec
FreeLibrary 0x10018088
GetCurrentProcess 0x1001803c
GetCurrentProcessId 0x10018074
GetCurrentThread 0x10018040
GetCurrentThreadId 0x100180d8
GetEnvironmentVariableW 0x10018054
GetLastError 0x1001806c
GetModuleFileNameW 0x10018070
GetModuleHandleExW 0x100180d0
GetModuleHandleW 0x1001804c
GetNativeSystemInfo 0x100180bc
GetProcAddress 0x10018050
GetProductInfo 0x100180c0
GetSystemDirectoryW 0x10018080
GetSystemInfo 0x10018108
GetSystemTimeAsFileTime 0x1001800c
GetSystemWow64DirectoryW 0x10018084
GetThreadContext 0x100180e4
GetUserDefaultLangID 0x100180d4
GetVersionExW 0x100180b8
GetVolumePathNamesForVolumeNameW 0x10018068
InitializeCriticalSectionAndSpinCount 0x100180b0
InitializeSListHead 0x10018004
IsDebuggerPresent 0x10018014
IsProcessorFeaturePresent 0x10018018
IsWow64Process 0x100180c4
LeaveCriticalSection 0x10018034
LoadLibraryExA 0x10018100
LoadLibraryExW 0x10018104
LoadLibraryW 0x1001808c
OpenProcess 0x10018098
OutputDebugStringW 0x10018000
Process32FirstW 0x100180a0
Process32NextW 0x100180a4
ProcessIdToSessionId 0x10018094
QueryDosDeviceW 0x10018064
QueryPerformanceCounter 0x10018010
RaiseException 0x100180ac
ReadProcessMemory 0x100180c8
ResetEvent 0x1001802c
ResumeThread 0x100180e0
SetEvent 0x10018030
SetLastError 0x100180a8
SetThreadContext 0x100180e8
SetUnhandledExceptionFilter 0x10018020
SuspendThread 0x100180dc
TerminateProcess 0x1001801c
UnhandledExceptionFilter 0x10018024
VirtualAlloc 0x100180f0
VirtualAllocEx 0x10018044
VirtualFree 0x100180f8
VirtualProtect 0x100180f4
VirtualProtectEx 0x10018048
VirtualQuery 0x100180fc
WaitForSingleObjectEx 0x10018028
WriteProcessMemory 0x100180cc
MSVCP140.dll 2
?_Xlength_error@std@@YAXPBD@Z 0x10018114
?_Xout_of_range@std@@YAXPBD@Z 0x10018110
ntdll.dll 15
NtClose 0x100181dc
NtCreateEvent 0x100181e0
NtCreateFile 0x100181d0
NtGetTickCount 0x100181c0
NtQueryDirectoryFile 0x100181d4
NtQueryInformationFile 0x100181bc
NtQueryObject 0x100181c8
NtSetEvent 0x100181c4
NtWaitForSingleObject 0x100181cc
RtlAllocateHeap 0x100181e8
RtlCaptureStackBackTrace 0x100181b8
RtlCreateHeap 0x100181f0
RtlDestroyHeap 0x100181ec
RtlFreeHeap 0x100181e4
RtlInitUnicodeString 0x100181d8
VCRUNTIME140.dll 11
__CxxFrameHandler3 0x10018134
__std_exception_copy 0x10018128
__std_exception_destroy 0x1001812c
__std_terminate 0x10018124
__std_type_info_destroy_list 0x10018144
_CxxThrowException 0x10018130
_except_handler4_common 0x10018140
_purecall 0x10018120
memcpy 0x10018138
memmove 0x1001813c
memset 0x1001811c