kwinfork.dll - Online Dependency Analysis & Download

Description

—

Authors

File size

611.5 KB

Uploaded

2025-12-04 06:13

Views

SHA-256

e5e74c3bf9ba05ed3c42262004db3e3d

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess

Exported functions 2

g_bForkProcess #1 · 0x8fe28

kwinfork #2 · 0x31a0

Imported DLLs & functions 257

api-ms-win-crt-convert-l1-1-0.dll 1

strtoul 0x10027330

api-ms-win-crt-filesystem-l1-1-0.dll 2

_lock_file 0x1002733c

_unlock_file 0x10027338

api-ms-win-crt-heap-l1-1-0.dll 3

_callnewh 0x1002734c

free 0x10027348

malloc 0x10027344

api-ms-win-crt-runtime-l1-1-0.dll 15

_beginthreadex 0x10027358

_cexit 0x1002736c

_configure_narrow_argv 0x10027374

_crt_atexit 0x10027388

_errno 0x10027360

_execute_onexit_table 0x10027384

_initialize_narrow_environment 0x10027378

_initialize_onexit_table 0x1002737c

_initterm 0x10027368

_initterm_e 0x10027364

_invalid_parameter_noinfo 0x10027354

_invalid_parameter_noinfo_noreturn 0x1002738c

_register_onexit_function 0x10027380

_seh_filter_dll 0x10027370

terminate 0x1002735c

api-ms-win-crt-stdio-l1-1-0.dll 14

__stdio_common_vsnprintf_s 0x100273a8

__stdio_common_vswprintf_s 0x10027398

_fseeki64 0x100273c0

_get_stream_buffer_pointers 0x100273c8

fclose 0x100273a4

fflush 0x1002739c

fgetc 0x10027394

fgetpos 0x100273a0

fputc 0x100273ac

fread 0x100273b0

fsetpos 0x100273c4

fwrite 0x100273bc

setvbuf 0x100273b8

ungetc 0x100273b4

api-ms-win-crt-string-l1-1-0.dll 3

_wcsicmp 0x100273d0

_wcsnicmp 0x100273d4

towlower 0x100273d8

api-ms-win-crt-time-l1-1-0.dll 1

_time64 0x100273e0

KERNEL32.dll 78

CloseHandle 0x10027078

CreateEventW 0x10027024

CreateFileMappingW 0x100270b4

CreateFileW 0x1002708c

CreateProcessW 0x10027108

CreateToolhelp32Snapshot 0x100270cc

DeleteCriticalSection 0x10027114

DeleteFileW 0x10027104

DisableThreadLibraryCalls 0x10027008

DuplicateHandle 0x10027090

EnterCriticalSection 0x1002704c

ExpandEnvironmentStringsW 0x100270d8

FlushInstructionCache 0x1002709c

FreeLibrary 0x100270e8

GetCurrentProcess 0x10027054

GetCurrentProcessId 0x10027058

GetCurrentThread 0x1002705c

GetCurrentThreadId 0x10027128

GetEnvironmentVariableW 0x100270fc

GetExitCodeProcess 0x10027098

GetHandleInformation 0x10027040

GetLastError 0x10027048

GetLongPathNameW 0x100270dc

GetModuleFileNameW 0x100270c0

GetModuleHandleA 0x10027068

GetModuleHandleExA 0x100270c4

GetModuleHandleW 0x100270ec

GetProcAddress 0x1002706c

GetProcessId 0x10027060

GetSystemDirectoryW 0x100270e0

GetSystemInfo 0x10027080

GetSystemTimeAsFileTime 0x1002700c

GetSystemWindowsDirectoryW 0x100270a0

GetSystemWow64DirectoryW 0x100270e4

GetThreadContext 0x10027134

GetThreadId 0x10027064

InitializeCriticalSectionAndSpinCount 0x10027110

InitializeSListHead 0x10027004

IsDebuggerPresent 0x10027014

IsProcessorFeaturePresent 0x10027018

IsWow64Process 0x100270bc

LeaveCriticalSection 0x10027050

LoadLibraryExA 0x100270c8

LoadLibraryW 0x100270f0

lstrlenW 0x100270f4

MapViewOfFile 0x100270b8

Module32FirstW 0x100270d0

Module32NextW 0x100270d4

MultiByteToWideChar 0x100270f8

OpenProcess 0x1002707c

OutputDebugStringW 0x10027000

Process32FirstW 0x1002711c

Process32NextW 0x10027120

ProcessIdToSessionId 0x10027118

QueryPerformanceCounter 0x10027010

RaiseException 0x1002710c

ResetEvent 0x1002702c

ResumeThread 0x10027130

SetEnvironmentVariableW 0x10027100

SetEvent 0x10027030

SetHandleInformation 0x10027074

SetLastError 0x10027124

SetThreadContext 0x1002703c

SetUnhandledExceptionFilter 0x10027044

SuspendThread 0x1002712c

TerminateProcess 0x1002701c

UnhandledExceptionFilter 0x10027020

UnmapViewOfFile 0x10027088

VerifyVersionInfoW 0x10027070

VirtualAlloc 0x100270a4

VirtualFree 0x10027038

VirtualProtect 0x100270a8

VirtualProtectEx 0x100270ac

VirtualQuery 0x10027034

VirtualQueryEx 0x10027084

WaitForSingleObject 0x10027094

WaitForSingleObjectEx 0x10027028

WriteProcessMemory 0x100270b0

krpt.dll 2

_krpt_RuntimeProtect 0x100273e8

_krpt_SuspendRuntimeProtect 0x100273ec

krt.dll 4

?setAppEnv@krt@@YA_NABVQString@kso_qt@@ABVQVariant@3@@Z 0x100273f4

?winBuildVersion@info@krt@@YAIXZ 0x10027400

?winMajorVersion@info@krt@@YAIXZ 0x100273f8

?winMinorVersion@info@krt@@YAIXZ 0x100273fc

ksolite.dll 3

?getData@KFpccomb@@QAE?AV?$QSharedPointer@VKFpccombData@@@kso_qt@@_J@Z 0x1002740c

?getInstance@KFpccomb@@SAPAV1@XZ 0x10027410

?writeInfo@KxLoggerLite@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z 0x10027408

MSVCP140.dll 85

_Cnd_do_broadcast_at_thread_exit 0x1002715c

_Mtx_destroy_in_situ 0x100271c8

_Mtx_init_in_situ 0x100271c4

_Mtx_lock 0x100271cc

_Mtx_unlock 0x100271d0

_Thrd_id 0x10027158

_Thrd_join 0x10027154

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z 0x10027268

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z 0x10027208

?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ 0x100271f4

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ 0x10027228

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z 0x10027258

?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ 0x10027198

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ 0x10027288

?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ 0x10027184

?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ 0x10027174

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ 0x10027224

?_Throw_C_error@std@@YAXH@Z 0x100271d4

?_Throw_Cpp_error@std@@YAXH@Z 0x10027160

?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ 0x1002719c

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ 0x1002728c

?_Xbad_function_call@std@@YAXXZ 0x100271e8

?_Xinvalid_argument@std@@YAXPBD@Z 0x100271bc

?_Xlength_error@std@@YAXPBD@Z 0x10027150

?_Xout_of_range@std@@YAXPBD@Z 0x100271c0

??0_Lockit@std@@QAE@H@Z 0x100271ec

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ 0x10027180

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ 0x10027240

??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z 0x10027190

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z 0x1002727c

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z 0x10027250

??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z 0x100271dc

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z 0x10027244

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ 0x10027164

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ 0x1002720c

??1_Lockit@std@@QAE@XZ 0x100271f0

??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ 0x10027178

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ 0x10027234

??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ 0x10027194

??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ 0x10027280

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ 0x10027254

??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ 0x100271e0

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ 0x10027248

??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ 0x10027168

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ 0x10027210

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z 0x100271e4

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z 0x10027188

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z 0x10027278

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z 0x10027274

??Bid@locale@std@@QAEIXZ 0x100271d8

?always_noconv@codecvt_base@std@@QBE_NXZ 0x100271f8

?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ 0x1002718c

?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ 0x10027214

?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A 0x10027270

?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z 0x100271a0

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z 0x10027148

?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z 0x100271fc

?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z 0x10027200

?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z 0x1002725c

?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ 0x10027218

?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z 0x10027260

?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z 0x100271a4

?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z 0x10027144

?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z 0x1002717c

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z 0x10027238

?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z 0x10027284

?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ 0x1002721c

?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ 0x100271a8

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ 0x1002726c

?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ 0x10027220

?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z 0x1002716c

?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z 0x10027170

?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ 0x100271ac

?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ 0x1002713c

?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ 0x10027264

?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ 0x100271b0

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ 0x10027140

?uncaught_exception@std@@YA_NXZ 0x1002714c

?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z 0x10027204

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z 0x1002723c

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z 0x1002724c

?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z 0x100271b4

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z 0x1002722c

?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z 0x100271b8

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z 0x10027230

ntdll.dll 9

NtAllocateVirtualMemory 0x10027418

NtCreateUserProcess 0x1002742c

NtFreeVirtualMemory 0x10027434

NtProtectVirtualMemory 0x1002741c

NtQueryInformationProcess 0x10027424

NtQueryObject 0x10027428

NtQueryVirtualMemory 0x10027420

NtReadVirtualMemory 0x10027430

VerSetConditionMask 0x10027438

Qt5CoreKso.dll 22

??0QByteArray@kso_qt@@QAE@PBDH@Z 0x1002729c

??0QString@kso_qt@@QAE@$$QAV01@@Z 0x100272e4

??0QString@kso_qt@@QAE@ABV01@@Z 0x10027298

??0QVariant@kso_qt@@QAE@_N@Z 0x100272ac

??1QByteArray@kso_qt@@QAE@XZ 0x10027294

??1QString@kso_qt@@QAE@XZ 0x100272e8

??1QVariant@kso_qt@@QAE@XZ 0x100272b0

??8QString@kso_qt@@QBE_NPBD@Z 0x100272dc

??9QString@kso_qt@@QBE_NPBD@Z 0x100272d8

??Mkso_qt@@YA_NABVQString@0@0@Z 0x100272e0

?applicationName@QCoreApplication@kso_qt@@SA?AVQString@2@XZ 0x100272a8

?begin@QListData@kso_qt@@QBEPAPAXXZ 0x100272cc

?createData@QMapDataBase@kso_qt@@SAPAU12@XZ 0x100272b8

?createNode@QMapDataBase@kso_qt@@QAEPAUQMapNodeBase@2@HHPAU32@_N@Z 0x100272c0

?end@QListData@kso_qt@@QBEPAPAXXZ 0x100272c8

?freeData@QMapDataBase@kso_qt@@SAXPAU12@@Z 0x100272b4

?freeTree@QMapDataBase@kso_qt@@QAEXPAUQMapNodeBase@2@H@Z 0x100272bc

?fromAscii_helper@QString@kso_qt@@CAPAU?$QTypedArrayData@G@2@PBDH@Z 0x100272d0

?instance@QCoreApplication@kso_qt@@SAPAV12@XZ 0x100272a4

?qputenv@kso_qt@@YA_NPBDABVQByteArray@1@@Z 0x100272a0

?recalcMostLeftNode@QMapDataBase@kso_qt@@QAEXXZ 0x100272c4

?toStdWString@QString@kso_qt@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ 0x100272d4

VCRUNTIME140.dll 15

__current_exception 0x10027300

__current_exception_context 0x100272fc

__CxxFrameHandler3 0x1002731c

__std_exception_copy 0x1002730c

__std_exception_destroy 0x10027310

__std_terminate 0x10027308

__std_type_info_destroy_list 0x100272f0

_CxxThrowException 0x10027318

_except_handler4_common 0x100272f8

memchr 0x10027304

memcpy 0x10027320

memmove 0x100272f4

memset 0x10027328

strstr 0x10027324

wcsstr 0x10027314