qingshellext64.dll
v12.1.0.23542
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DllCanUnloadNow
#1 · 0x33b0
DllGetClassObject
#2 · 0x3430
DllInstall
#3 · 0x35e0
DllRegisterServer
#4 · 0x3620
DllUnregisterServer
#5 · 0x41f0
No function matches your filter.
Imported DLLs & functions 154
KERNEL32.dll
154
AcquireSRWLockExclusive
0x18007e328
AreFileApisANSI
0x18007e360
CloseHandle
0x18007e0d8
CreateEventW
0x18007e188
CreateFileMappingW
0x18007e238
CreateFileW
0x18007e0c0
CreateMutexW
0x18007e228
CreateToolhelp32Snapshot
0x18007e208
DecodePointer
0x18007e000
DeleteCriticalSection
0x18007e020
DeleteFileW
0x18007e118
DeviceIoControl
0x18007e1f0
DisableThreadLibraryCalls
0x18007e028
EncodePointer
0x18007e038
EnterCriticalSection
0x18007e070
EnumSystemLocalesW
0x18007e460
ExitProcess
0x18007e428
ExpandEnvironmentStringsW
0x18007e298
FindClose
0x18007e120
FindFirstFileExW
0x18007e340
FindFirstFileW
0x18007e128
FindNextFileW
0x18007e130
FindResourceExW
0x18007e080
FindResourceW
0x18007e0b8
FlushFileBuffers
0x18007e478
FormatMessageA
0x18007e308
FreeEnvironmentStringsW
0x18007e4b8
FreeLibrary
0x18007e100
FreeResource
0x18007e1c8
GetACP
0x18007e498
GetCommandLineA
0x18007e4a8
GetCommandLineW
0x18007e258
GetConsoleCP
0x18007e480
GetConsoleMode
0x18007e468
GetCPInfo
0x18007e380
GetCurrentProcess
0x18007e2a0
GetCurrentProcessId
0x18007e2a8
GetCurrentThread
0x18007e2b0
GetCurrentThreadId
0x18007e190
GetDriveTypeW
0x18007e1e8
GetEnvironmentStringsW
0x18007e4b0
GetEnvironmentVariableW
0x18007e288
GetFileAttributesExW
0x18007e348
GetFileAttributesW
0x18007e1b8
GetFileInformationByHandleEx
0x18007e368
GetFileSizeEx
0x18007e488
GetFileType
0x18007e438
GetLastError
0x18007e010
GetLocaleInfoW
0x18007e448
GetLongPathNameW
0x18007e2d0
GetModuleFileNameW
0x18007e088
GetModuleHandleExW
0x18007e1f8
GetModuleHandleW
0x18007e090
GetOEMCP
0x18007e4a0
GetPrivateProfileIntW
0x18007e270
GetPrivateProfileStringW
0x18007e278
GetProcAddress
0x18007e098
GetProcessHeap
0x18007e068
GetProcessId
0x18007e160
GetStartupInfoW
0x18007e3e0
GetStdHandle
0x18007e430
GetStringTypeW
0x18007e310
GetSystemDirectoryW
0x18007e260
GetSystemInfo
0x18007e2f0
GetSystemTimeAsFileTime
0x18007e378
GetSystemWow64DirectoryW
0x18007e198
GetTempFileNameW
0x18007e138
GetTempPathW
0x18007e150
GetUserDefaultLCID
0x18007e458
GetUserDefaultUILanguage
0x18007e280
GlobalAlloc
0x18007e1d0
GlobalFree
0x18007e1d8
GlobalLock
0x18007e1a8
GlobalUnlock
0x18007e1a0
HeapAlloc
0x18007e048
HeapDestroy
0x18007e040
HeapFree
0x18007e058
HeapReAlloc
0x18007e050
HeapSize
0x18007e060
InitializeCriticalSectionAndSpinCount
0x18007e018
InitializeCriticalSectionEx
0x18007e330
InitializeSListHead
0x18007e3d8
InitializeSRWLock
0x18007e318
InterlockedFlushSList
0x18007e3f8
IsDebuggerPresent
0x18007e388
IsProcessorFeaturePresent
0x18007e3d0
IsValidCodePage
0x18007e490
IsValidLocale
0x18007e450
LCMapStringEx
0x18007e370
LCMapStringW
0x18007e440
LeaveCriticalSection
0x18007e078
LoadLibraryExA
0x18007e300
LoadLibraryExW
0x18007e108
LoadLibraryW
0x18007e200
LoadResource
0x18007e0a0
LocalFree
0x18007e168
LockResource
0x18007e0a8
lstrcmpiW
0x18007e110
lstrlenW
0x18007e268
MapViewOfFile
0x18007e248
MulDiv
0x18007e1e0
MultiByteToWideChar
0x18007e0f0
OpenFileMappingW
0x18007e240
OpenMutexW
0x18007e158
OpenProcess
0x18007e2c0
OutputDebugStringW
0x18007e030
Process32FirstW
0x18007e210
Process32NextW
0x18007e218
ProcessIdToSessionId
0x18007e2b8
QueryPerformanceCounter
0x18007e2d8
QueryPerformanceFrequency
0x18007e2e0
RaiseException
0x18007e008
ReadConsoleW
0x18007e470
ReadFile
0x18007e0c8
ReleaseMutex
0x18007e220
ReleaseSRWLockExclusive
0x18007e320
ResetEvent
0x18007e390
RtlCaptureContext
0x18007e3a0
RtlLookupFunctionEntry
0x18007e3a8
RtlPcToFileHeader
0x18007e3f0
RtlUnwind
0x18007e4c8
RtlUnwindEx
0x18007e3e8
RtlVirtualUnwind
0x18007e3b0
SetEndOfFile
0x18007e350
SetEnvironmentVariableW
0x18007e290
SetEvent
0x18007e178
SetFileAttributesW
0x18007e140
SetFilePointer
0x18007e148
SetFilePointerEx
0x18007e358
SetLastError
0x18007e2c8
SetNamedPipeHandleState
0x18007e0e0
SetStdHandle
0x18007e4c0
SetUnhandledExceptionFilter
0x18007e3c0
SizeofResource
0x18007e0b0
Sleep
0x18007e170
TerminateProcess
0x18007e3c8
TlsAlloc
0x18007e400
TlsFree
0x18007e418
TlsGetValue
0x18007e408
TlsSetValue
0x18007e410
TryEnterCriticalSection
0x18007e338
UnhandledExceptionFilter
0x18007e3b8
UnmapViewOfFile
0x18007e250
VerifyVersionInfoW
0x18007e1c0
VerSetConditionMask
0x18007e1b0
VirtualAlloc
0x18007e420
VirtualProtect
0x18007e2f8
VirtualQuery
0x18007e230
WaitForSingleObject
0x18007e180
WaitForSingleObjectEx
0x18007e398
WaitNamedPipeW
0x18007e0e8
WideCharToMultiByte
0x18007e0f8
WriteConsoleW
0x18007e2e8
WriteFile
0x18007e0d0
No function matches your filter.