kwpsshellext64.dll
v12.1.0.23542
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DllCanUnloadNow
#1 · 0x6aa0
DllGetClassObject
#2 · 0x6b80
DllInstall
#3 · 0x6d70
DllRegisterServer
#4 · 0x6db0
DllUnregisterServer
#5 · 0x8a10
No function matches your filter.
Imported DLLs & functions 195
KERNEL32.dll
161
AcquireSRWLockExclusive
0x18011c440
AreFileApisANSI
0x18011c478
CloseHandle
0x18011c0f8
CompareFileTime
0x18011c1c8
CompareStringEx
0x18011c4a0
CompareStringW
0x18011c3b8
CreateDirectoryW
0x18011c1d0
CreateEventW
0x18011c2b0
CreateFileW
0x18011c180
CreateProcessW
0x18011c268
CreateToolhelp32Snapshot
0x18011c288
DecodePointer
0x18011c020
DeleteCriticalSection
0x18011c040
DeleteFileW
0x18011c260
DisableThreadLibraryCalls
0x18011c058
EncodePointer
0x18011c060
EnterCriticalSection
0x18011c098
EnumSystemLocalesW
0x18011c388
ExitProcess
0x18011c3e0
ExpandEnvironmentStringsW
0x18011c270
FileTimeToSystemTime
0x18011c220
FindClose
0x18011c1d8
FindFirstFileExW
0x18011c468
FindFirstFileW
0x18011c150
FindNextFileW
0x18011c1e0
FindResourceExW
0x18011c170
FindResourceW
0x18011c0e0
FlushFileBuffers
0x18011c370
FlushInstructionCache
0x18011c2f0
FormatMessageA
0x18011c428
FreeEnvironmentStringsW
0x18011c330
FreeLibrary
0x18011c0a8
GetACP
0x18011c350
GetCommandLineA
0x18011c340
GetCommandLineW
0x18011c230
GetCompressedFileSizeW
0x18011c2a8
GetConsoleCP
0x18011c368
GetConsoleMode
0x18011c380
GetCPInfo
0x18011c4a8
GetCurrentProcess
0x18011c1a8
GetCurrentProcessId
0x18011c048
GetCurrentThread
0x18011c158
GetCurrentThreadId
0x18011c050
GetDateFormatW
0x18011c3c8
GetDriveTypeW
0x18011c130
GetEnvironmentStringsW
0x18011c338
GetEnvironmentVariableW
0x18011c250
GetFileAttributesExW
0x18011c1f0
GetFileAttributesW
0x18011c1e8
GetFileInformationByHandleEx
0x18011c190
GetFileSizeEx
0x18011c188
GetFileType
0x18011c3d0
GetLastError
0x18011c030
GetLocaleInfoEx
0x18011c498
GetLocaleInfoW
0x18011c3a0
GetLocalTime
0x18011c128
GetLongPathNameW
0x18011c2a0
GetModuleFileNameW
0x18011c0b0
GetModuleHandleExW
0x18011c3e8
GetModuleHandleW
0x18011c0b8
GetNumberFormatW
0x18011c198
GetOEMCP
0x18011c348
GetPrivateProfileIntW
0x18011c238
GetPrivateProfileStringW
0x18011c240
GetProcAddress
0x18011c0c0
GetProcessHeap
0x18011c090
GetStartupInfoW
0x18011c320
GetStdHandle
0x18011c3d8
GetStringTypeW
0x18011c458
GetSystemDirectoryW
0x18011c138
GetSystemInfo
0x18011c420
GetSystemTime
0x18011c210
GetSystemTimeAsFileTime
0x18011c490
GetThreadContext
0x18011c2e0
GetTickCount
0x18011c148
GetTimeFormatW
0x18011c3c0
GetTimeZoneInformation
0x18011c360
GetUserDefaultLCID
0x18011c390
GetUserDefaultUILanguage
0x18011c248
GetWindowsDirectoryW
0x18011c1b0
GlobalLock
0x18011c110
GlobalUnlock
0x18011c108
HeapAlloc
0x18011c070
HeapDestroy
0x18011c068
HeapFree
0x18011c080
HeapReAlloc
0x18011c078
HeapSize
0x18011c088
InitializeCriticalSectionAndSpinCount
0x18011c038
InitializeCriticalSectionEx
0x18011c448
InitializeSListHead
0x18011c3b0
InitializeSRWLock
0x18011c430
InterlockedFlushSList
0x18011c410
InterlockedPushEntrySList
0x18011c418
IsDebuggerPresent
0x18011c4b0
IsProcessorFeaturePresent
0x18011c4f8
IsValidCodePage
0x18011c358
IsValidLocale
0x18011c398
IsWow64Process
0x18011c1b8
LCMapStringEx
0x18011c488
LCMapStringW
0x18011c3a8
LeaveCriticalSection
0x18011c0a0
LoadLibraryExA
0x18011c318
LoadLibraryExW
0x18011c0c8
LoadLibraryW
0x18011c140
LoadResource
0x18011c0d0
LocalFree
0x18011c460
LockResource
0x18011c178
lstrcmpiW
0x18011c0e8
lstrlenW
0x18011c1c0
MultiByteToWideChar
0x18011c0f0
OpenProcess
0x18011c100
OutputDebugStringA
0x18011c2b8
OutputDebugStringW
0x18011c018
Process32FirstW
0x18011c290
Process32NextW
0x18011c298
ProcessIdToSessionId
0x18011c280
QueryFullProcessImageNameW
0x18011c118
QueryPerformanceCounter
0x18011c2c0
QueryPerformanceFrequency
0x18011c2c8
RaiseException
0x18011c028
ReadConsoleW
0x18011c378
ReadFile
0x18011c1f8
ReleaseSRWLockExclusive
0x18011c438
ResetEvent
0x18011c4c0
ResumeThread
0x18011c2d8
RtlCaptureContext
0x18011c4c8
RtlLookupFunctionEntry
0x18011c4d0
RtlPcToFileHeader
0x18011c500
RtlUnwind
0x18011c000
RtlUnwindEx
0x18011c008
RtlVirtualUnwind
0x18011c4d8
SetEndOfFile
0x18011c470
SetEnvironmentVariableW
0x18011c258
SetEvent
0x18011c4b8
SetFilePointerEx
0x18011c200
SetLastError
0x18011c1a0
SetStdHandle
0x18011c328
SetThreadContext
0x18011c2e8
SetUnhandledExceptionFilter
0x18011c4e8
SizeofResource
0x18011c0d8
Sleep
0x18011c278
SuspendThread
0x18011c2d0
SystemTimeToFileTime
0x18011c228
SystemTimeToTzSpecificLocalTime
0x18011c218
TerminateProcess
0x18011c4f0
TlsAlloc
0x18011c408
TlsFree
0x18011c3f0
TlsGetValue
0x18011c400
TlsSetValue
0x18011c3f8
TryEnterCriticalSection
0x18011c450
UnhandledExceptionFilter
0x18011c4e0
VerifyVersionInfoW
0x18011c168
VerSetConditionMask
0x18011c160
VirtualAlloc
0x18011c2f8
VirtualFree
0x18011c308
VirtualProtect
0x18011c300
VirtualQuery
0x18011c310
WaitForSingleObjectEx
0x18011c480
WideCharToMultiByte
0x18011c120
WriteConsoleW
0x18011c010
WriteFile
0x18011c208
PropVariantToString
0x18011c510
USER32.dll
33
CharNextW
0x18011c618
CreateMenu
0x18011c5e8
EnumChildWindows
0x18011c520
FindWindowExW
0x18011c560
GetDC
0x18011c5c0
GetDlgCtrlID
0x18011c538
GetDlgItem
0x18011c620
GetDlgItemTextW
0x18011c540
GetIconInfo
0x18011c5b0
GetMenuItemCount
0x18011c610
GetMenuItemInfoW
0x18011c608
GetMenuStringW
0x18011c5f0
GetParent
0x18011c568
GetSubMenu
0x18011c548
GetSysColor
0x18011c528
GetWindowLongPtrW
0x18011c578
GetWindowRect
0x18011c580
GetWindowTextLengthW
0x18011c598
GetWindowTextW
0x18011c588
InsertMenuItemW
0x18011c5c8
InsertMenuW
0x18011c5e0
KillTimer
0x18011c5f8
MonitorFromWindow
0x18011c550
ReleaseDC
0x18011c5b8
RemoveMenu
0x18011c5d8
SendMessageW
0x18011c5a8
SetDlgItemTextW
0x18011c590
SetMenuItemBitmaps
0x18011c5d0
SetTimer
0x18011c600
SetWindowLongPtrW
0x18011c570
SetWindowPos
0x18011c5a0
SetWindowTextW
0x18011c530
SystemParametersInfoW
0x18011c558
No function matches your filter.