qingshellext.dll
v12.1.0.23542
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DllCanUnloadNow
#1 · 0x3400
DllGetClassObject
#2 · 0x3470
DllInstall
#3 · 0x3610
DllRegisterServer
#4 · 0x3640
DllUnregisterServer
#5 · 0x3d70
No function matches your filter.
Imported DLLs & functions 149
KERNEL32.dll
149
AcquireSRWLockExclusive
0x10070194
AreFileApisANSI
0x100701b0
CloseHandle
0x1007006c
CreateEventW
0x100700c4
CreateFileMappingW
0x1007011c
CreateFileW
0x10070060
CreateMutexW
0x10070114
CreateToolhelp32Snapshot
0x10070104
DecodePointer
0x10070000
DeleteCriticalSection
0x10070010
DeleteFileW
0x1007008c
DeviceIoControl
0x100700f8
DisableThreadLibraryCalls
0x10070014
EncodePointer
0x1007001c
EnterCriticalSection
0x10070038
EnumSystemLocalesW
0x10070220
ExitProcess
0x10070204
ExpandEnvironmentStringsW
0x1007014c
FindClose
0x10070090
FindFirstFileExW
0x100701a0
FindFirstFileW
0x10070094
FindNextFileW
0x10070098
FindResourceExW
0x10070040
FindResourceW
0x1007005c
FlushFileBuffers
0x1007022c
FormatMessageA
0x10070184
FreeEnvironmentStringsW
0x1007024c
FreeLibrary
0x10070080
FreeResource
0x100700e4
GetACP
0x1007023c
GetCommandLineA
0x10070244
GetCommandLineW
0x1007012c
GetConsoleCP
0x10070230
GetConsoleMode
0x10070224
GetCPInfo
0x100701c0
GetCurrentProcess
0x10070150
GetCurrentProcessId
0x10070154
GetCurrentThread
0x10070158
GetCurrentThreadId
0x100700c8
GetDriveTypeW
0x100700f4
GetEnvironmentStringsW
0x10070248
GetEnvironmentVariableW
0x10070144
GetFileAttributesExW
0x100701a4
GetFileAttributesW
0x100700dc
GetFileInformationByHandleEx
0x100701b4
GetFileSizeEx
0x10070234
GetFileType
0x1007020c
GetLastError
0x10070008
GetLocaleInfoW
0x10070214
GetLongPathNameW
0x10070168
GetModuleFileNameW
0x10070044
GetModuleHandleExW
0x100700fc
GetModuleHandleW
0x10070048
GetOEMCP
0x10070240
GetPrivateProfileIntW
0x10070138
GetPrivateProfileStringW
0x1007013c
GetProcAddress
0x1007004c
GetProcessHeap
0x10070034
GetProcessId
0x100700b0
GetStartupInfoW
0x100701e4
GetStdHandle
0x10070208
GetStringTypeW
0x10070188
GetSystemDirectoryW
0x10070130
GetSystemInfo
0x10070178
GetSystemTimeAsFileTime
0x100701bc
GetSystemWow64DirectoryW
0x100700cc
GetTempFileNameW
0x1007009c
GetTempPathW
0x100700a8
GetUserDefaultLCID
0x1007021c
GetUserDefaultUILanguage
0x10070140
GlobalAlloc
0x100700e8
GlobalFree
0x100700ec
GlobalLock
0x100700d4
GlobalUnlock
0x100700d0
HeapAlloc
0x10070024
HeapDestroy
0x10070020
HeapFree
0x1007002c
HeapReAlloc
0x10070028
HeapSize
0x10070030
InitializeCriticalSectionAndSpinCount
0x1007000c
InitializeCriticalSectionEx
0x10070198
InitializeSListHead
0x100701e0
InitializeSRWLock
0x1007018c
InterlockedFlushSList
0x100701ec
IsDebuggerPresent
0x100701c4
IsProcessorFeaturePresent
0x100701dc
IsValidCodePage
0x10070238
IsValidLocale
0x10070218
LCMapStringEx
0x100701b8
LCMapStringW
0x10070210
LeaveCriticalSection
0x1007003c
LoadLibraryExA
0x10070180
LoadLibraryExW
0x10070084
LoadLibraryW
0x10070100
LoadResource
0x10070050
LocalFree
0x100700b4
LockResource
0x10070054
lstrcmpiW
0x10070088
lstrlenW
0x10070134
MapViewOfFile
0x10070124
MulDiv
0x100700f0
MultiByteToWideChar
0x10070078
OpenFileMappingW
0x10070120
OpenMutexW
0x100700ac
OpenProcess
0x10070160
OutputDebugStringW
0x10070018
Process32FirstW
0x10070108
Process32NextW
0x1007010c
ProcessIdToSessionId
0x1007015c
QueryPerformanceCounter
0x1007016c
QueryPerformanceFrequency
0x10070170
RaiseException
0x10070004
ReadConsoleW
0x10070228
ReadFile
0x10070064
ReleaseMutex
0x10070110
ReleaseSRWLockExclusive
0x10070190
ResetEvent
0x100701c8
RtlUnwind
0x100701e8
SetEndOfFile
0x100701a8
SetEnvironmentVariableW
0x10070148
SetEvent
0x100700bc
SetFileAttributesW
0x100700a0
SetFilePointer
0x100700a4
SetFilePointerEx
0x100701ac
SetLastError
0x10070164
SetNamedPipeHandleState
0x10070070
SetStdHandle
0x10070174
SetUnhandledExceptionFilter
0x100701d4
SizeofResource
0x10070058
Sleep
0x100700b8
TerminateProcess
0x100701d8
TlsAlloc
0x100701f0
TlsFree
0x100701fc
TlsGetValue
0x100701f4
TlsSetValue
0x100701f8
TryEnterCriticalSection
0x1007019c
UnhandledExceptionFilter
0x100701d0
UnmapViewOfFile
0x10070128
VerifyVersionInfoW
0x100700e0
VerSetConditionMask
0x100700d8
VirtualAlloc
0x10070200
VirtualProtect
0x1007017c
VirtualQuery
0x10070118
WaitForSingleObject
0x100700c0
WaitForSingleObjectEx
0x100701cc
WaitNamedPipeW
0x10070074
WideCharToMultiByte
0x1007007c
WriteConsoleW
0x10070250
WriteFile
0x10070068
No function matches your filter.