kstabilityguard.dll

Description:

Authors: Copyright©2025 Kingsoft Corporation. All rights reserved.

Version: 12.9.0.23890

Architecture: 32-bit

Operating System: Windows NT

SHA256: 12d530f435501fdf86a77f7b7d13f23c

File Size: 85.0 KB

Uploaded At: Dec. 4, 2025, 6:16 a.m.

Views: 13

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess

Exported Functions

  • AcceptHostMessage (Ordinal: 1, Address: 0x12b0)

Imported DLLs & Functions

api-ms-win-crt-heap-l1-1-0.dll
  • _callnewh (Address: 0x1000a228)
  • free (Address: 0x1000a224)
  • malloc (Address: 0x1000a22c)
api-ms-win-crt-math-l1-1-0.dll
  • round (Address: 0x1000a234)
api-ms-win-crt-runtime-l1-1-0.dll
  • _cexit (Address: 0x1000a254)
  • _configure_narrow_argv (Address: 0x1000a264)
  • _crt_atexit (Address: 0x1000a24c)
  • _execute_onexit_table (Address: 0x1000a248)
  • _initialize_narrow_environment (Address: 0x1000a23c)
  • _initialize_onexit_table (Address: 0x1000a240)
  • _initterm (Address: 0x1000a258)
  • _initterm_e (Address: 0x1000a25c)
  • _invalid_parameter_noinfo_noreturn (Address: 0x1000a260)
  • _register_onexit_function (Address: 0x1000a244)
  • _seh_filter_dll (Address: 0x1000a250)
api-ms-win-crt-stdio-l1-1-0.dll
  • __stdio_common_vswprintf_s (Address: 0x1000a26c)
KERNEL32.dll
  • CloseHandle (Address: 0x1000a09c)
  • CreateEventA (Address: 0x1000a078)
  • FlushInstructionCache (Address: 0x1000a064)
  • FreeLibrary (Address: 0x1000a024)
  • GetCurrentProcess (Address: 0x1000a068)
  • GetCurrentProcessId (Address: 0x1000a094)
  • GetCurrentThread (Address: 0x1000a090)
  • GetCurrentThreadId (Address: 0x1000a048)
  • GetLastError (Address: 0x1000a098)
  • GetLocalTime (Address: 0x1000a060)
  • GetModuleHandleA (Address: 0x1000a088)
  • GetModuleHandleExA (Address: 0x1000a084)
  • GetModuleHandleW (Address: 0x1000a070)
  • GetProcAddress (Address: 0x1000a080)
  • GetSystemInfo (Address: 0x1000a000)
  • GetSystemTimeAsFileTime (Address: 0x1000a00c)
  • GetThreadContext (Address: 0x1000a03c)
  • InitializeSListHead (Address: 0x1000a008)
  • IsDebuggerPresent (Address: 0x1000a014)
  • IsProcessorFeaturePresent (Address: 0x1000a018)
  • LoadLibraryExA (Address: 0x1000a020)
  • lstrcmpiW (Address: 0x1000a054)
  • OpenProcess (Address: 0x1000a08c)
  • QueryPerformanceCounter (Address: 0x1000a010)
  • RaiseException (Address: 0x1000a004)
  • ReadProcessMemory (Address: 0x1000a058)
  • ResumeThread (Address: 0x1000a040)
  • SetEvent (Address: 0x1000a07c)
  • SetLastError (Address: 0x1000a028)
  • SetThreadContext (Address: 0x1000a038)
  • SetUnhandledExceptionFilter (Address: 0x1000a0a0)
  • SuspendThread (Address: 0x1000a044)
  • TerminateProcess (Address: 0x1000a01c)
  • UnhandledExceptionFilter (Address: 0x1000a0a4)
  • VerifyVersionInfoW (Address: 0x1000a050)
  • VerSetConditionMask (Address: 0x1000a06c)
  • VirtualAlloc (Address: 0x1000a034)
  • VirtualFree (Address: 0x1000a030)
  • VirtualProtect (Address: 0x1000a05c)
  • VirtualQuery (Address: 0x1000a02c)
  • WaitForMultipleObjects (Address: 0x1000a074)
  • WriteProcessMemory (Address: 0x1000a04c)
krt.dll
  • ??0KPluginsSettings@krt@@QAE@W4Scope@QSettings@kso_qt@@@Z (Address: 0x1000a278)
  • ??1KPluginsSettings@krt@@UAE@XZ (Address: 0x1000a274)
ksolite.dll
  • ?getData@KFpccomb@@QAE?AV?$QSharedPointer@VKFpccombData@@@kso_qt@@_J@Z (Address: 0x1000a28c)
  • ?getInstance@KFpccomb@@SAPAV1@XZ (Address: 0x1000a280)
  • ?instance@KDcInfoC@@SAPAV1@XZ (Address: 0x1000a290)
  • ?postGeneralEvent@KDcInfoC@@QAEXABVQString@kso_qt@@ABV?$QHash@VQString@kso_qt@@V12@@3@IIW4KDcProbability@@_N@Z (Address: 0x1000a288)
  • ?writeInfo@KxLoggerLite@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z (Address: 0x1000a284)
Qt5CoreKso.dll
  • ??0QChar@kso_qt@@QAE@UQLatin1Char@1@@Z (Address: 0x1000a1bc)
  • ??0QObject@kso_qt@@QAE@PAV01@@Z (Address: 0x1000a174)
  • ??0QSettings@kso_qt@@QAE@W4Format@01@W4Scope@01@ABVQString@1@2PAVQObject@1@@Z (Address: 0x1000a150)
  • ??0QString@kso_qt@@QAE@ABV01@@Z (Address: 0x1000a0ac)
  • ??0QThread@kso_qt@@QAE@PAVQObject@1@@Z (Address: 0x1000a10c)
  • ??0QVariant@kso_qt@@QAE@_K@Z (Address: 0x1000a18c)
  • ??0QVariant@kso_qt@@QAE@_N@Z (Address: 0x1000a144)
  • ??0QVariant@kso_qt@@QAE@H@Z (Address: 0x1000a1f0)
  • ??0QVariant@kso_qt@@QAE@XZ (Address: 0x1000a194)
  • ??1Connection@QMetaObject@kso_qt@@QAE@XZ (Address: 0x1000a178)
  • ??1QDateTime@kso_qt@@QAE@XZ (Address: 0x1000a0f8)
  • ??1QObject@kso_qt@@UAE@XZ (Address: 0x1000a170)
  • ??1QSettings@kso_qt@@UAE@XZ (Address: 0x1000a154)
  • ??1QString@kso_qt@@QAE@XZ (Address: 0x1000a1d8)
  • ??1QThread@kso_qt@@UAE@XZ (Address: 0x1000a110)
  • ??1QVariant@kso_qt@@QAE@XZ (Address: 0x1000a190)
  • ??4QString@kso_qt@@QAEAAV01@ABV01@@Z (Address: 0x1000a0b0)
  • ??8kso_qt@@YA_NABVQString@0@0@Z (Address: 0x1000a0cc)
  • ??Mkso_qt@@YA_NABVQString@0@0@Z (Address: 0x1000a1ac)
  • ?allocateNode@QHashData@kso_qt@@QAEPAXH@Z (Address: 0x1000a0e0)
  • ?applicationName@QCoreApplication@kso_qt@@SA?AVQString@2@XZ (Address: 0x1000a1c4)
  • ?arg@QString@kso_qt@@QBE?AV12@_KHHVQChar@2@@Z (Address: 0x1000a0b4)
  • ?arg@QString@kso_qt@@QBE?AV12@ABV12@HVQChar@2@@Z (Address: 0x1000a1b4)
  • ?arg@QString@kso_qt@@QBE?AV12@HHHVQChar@2@@Z (Address: 0x1000a1b8)
  • ?arg@QString@kso_qt@@QBE?AV12@KHHVQChar@2@@Z (Address: 0x1000a0b8)
  • ?at@QListData@kso_qt@@QBEPAPAXH@Z (Address: 0x1000a0dc)
  • ?begin@QListData@kso_qt@@QBEPAPAXXZ (Address: 0x1000a19c)
  • ?beginGroup@QSettings@kso_qt@@QAEXABVQString@2@@Z (Address: 0x1000a184)
  • ?childEvent@QObject@kso_qt@@MAEXPAVQChildEvent@2@@Z (Address: 0x1000a168)
  • ?compare@QString@kso_qt@@QBEHABV12@W4CaseSensitivity@Qt@2@@Z (Address: 0x1000a1cc)
  • ?connect@QObject@kso_qt@@SA?AVConnection@QMetaObject@2@PBV12@PBD01W4ConnectionType@Qt@2@@Z (Address: 0x1000a16c)
  • ?connectNotify@QObject@kso_qt@@MAEXABVQMetaMethod@2@@Z (Address: 0x1000a164)
  • ?currentMSecsSinceEpoch@QDateTime@kso_qt@@SA_JXZ (Address: 0x1000a104)
  • ?customEvent@QObject@kso_qt@@MAEXPAVQEvent@2@@Z (Address: 0x1000a160)
  • ?detach_helper@QHashData@kso_qt@@QAEPAU12@P6AXPAUNode@12@PAX@ZP6AX0@ZHH@Z (Address: 0x1000a0e4)
  • ?detach@QListData@kso_qt@@QAEPAUData@12@H@Z (Address: 0x1000a1a8)
  • ?disconnectNotify@QObject@kso_qt@@MAEXABVQMetaMethod@2@@Z (Address: 0x1000a15c)
  • ?dispose@QListData@kso_qt@@QAEXXZ (Address: 0x1000a0d4)
  • ?dispose@QListData@kso_qt@@SAXPAUData@12@@Z (Address: 0x1000a1a4)
  • ?dynamicMetaObject@QObjectData@kso_qt@@QBEPAUQMetaObject@2@XZ (Address: 0x1000a1e4)
  • ?end@QListData@kso_qt@@QBEPAPAXXZ (Address: 0x1000a198)
  • ?event@QObject@kso_qt@@UAE_NPAVQEvent@2@@Z (Address: 0x1000a158)
  • ?event@QThread@kso_qt@@UAE_NPAVQEvent@2@@Z (Address: 0x1000a12c)
  • ?eventFilter@QObject@kso_qt@@UAE_NPAV12@PAVQEvent@2@@Z (Address: 0x1000a0f0)
  • ?free_helper@QHashData@kso_qt@@QAEXP6AXPAUNode@12@@Z@Z (Address: 0x1000a0ec)
  • ?fromAscii_helper@QString@kso_qt@@CAPAU?$QTypedArrayData@G@2@PBDH@Z (Address: 0x1000a1c8)
  • ?fromMSecsSinceEpoch@QDateTime@kso_qt@@SA?AV12@_J@Z (Address: 0x1000a100)
  • ?fromUtf16@QString@kso_qt@@SA?AV12@PBGH@Z (Address: 0x1000a1d0)
  • ?fromWCharArray@QString@kso_qt@@SA?AV12@PB_WH@Z (Address: 0x1000a140)
  • ?indexOf@QString@kso_qt@@QBEHABV12@HW4CaseSensitivity@Qt@2@@Z (Address: 0x1000a1d4)
  • ?instance@QCoreApplication@kso_qt@@SAPAV12@XZ (Address: 0x1000a1c0)
  • ?isEmpty@QListData@kso_qt@@QBE_NXZ (Address: 0x1000a1a0)
  • ?isFinished@QThread@kso_qt@@QBE_NXZ (Address: 0x1000a114)
  • ?isRunning@QThread@kso_qt@@QBE_NXZ (Address: 0x1000a118)
  • ?metaObject@QThread@kso_qt@@UBEPBUQMetaObject@2@XZ (Address: 0x1000a130)
  • ?number@QString@kso_qt@@SA?AV12@_KH@Z (Address: 0x1000a0c4)
  • ?number@QString@kso_qt@@SA?AV12@NDH@Z (Address: 0x1000a0c8)
  • ?qHash@kso_qt@@YAIABVQString@1@I@Z (Address: 0x1000a0d0)
  • ?qt_metacall@QObject@kso_qt@@UAEHW4Call@QMetaObject@2@HPAPAX@Z (Address: 0x1000a1dc)
  • ?qt_metacall@QThread@kso_qt@@UAEHW4Call@QMetaObject@2@HPAPAX@Z (Address: 0x1000a134)
  • ?qt_metacast@QObject@kso_qt@@UAEPAXPBD@Z (Address: 0x1000a1e0)
  • ?qt_metacast@QThread@kso_qt@@UAEPAXPBD@Z (Address: 0x1000a138)
  • ?quit@QThread@kso_qt@@QAEXXZ (Address: 0x1000a124)
  • ?rehash@QHashData@kso_qt@@QAEXH@Z (Address: 0x1000a0e8)
  • ?remove@QSettings@kso_qt@@QAEXABVQString@2@@Z (Address: 0x1000a108)
  • ?setValue@QSettings@kso_qt@@QAEXABVQString@2@ABVQVariant@2@@Z (Address: 0x1000a180)
  • ?shared_null@QHashData@kso_qt@@2U12@B (Address: 0x1000a13c)
  • ?size@QListData@kso_qt@@QBEHXZ (Address: 0x1000a0d8)
  • ?split@QString@kso_qt@@QBE?AVQStringList@2@ABV12@W4SplitBehavior@12@W4CaseSensitivity@Qt@2@@Z (Address: 0x1000a0bc)
  • ?start@QThread@kso_qt@@QAEXW4Priority@12@@Z (Address: 0x1000a11c)
  • ?staticMetaObject@QObject@kso_qt@@2UQMetaObject@2@B (Address: 0x1000a1e8)
  • ?terminate@QThread@kso_qt@@QAEXXZ (Address: 0x1000a120)
  • ?timerEvent@QObject@kso_qt@@MAEXPAVQTimerEvent@2@@Z (Address: 0x1000a1ec)
  • ?toBool@QVariant@kso_qt@@QBE_NXZ (Address: 0x1000a14c)
  • ?toInt@QVariant@kso_qt@@QBEHPA_N@Z (Address: 0x1000a148)
  • ?toStdWString@QString@kso_qt@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ (Address: 0x1000a1b0)
  • ?toString@QVariant@kso_qt@@QBE?AVQString@2@XZ (Address: 0x1000a0f4)
  • ?toStringEx@QDateTime@kso_qt@@QBE?AVQString@2@ABV32@@Z (Address: 0x1000a0fc)
  • ?toULongLong@QString@kso_qt@@QBE_KPA_NH@Z (Address: 0x1000a0c0)
  • ?toULongLong@QVariant@kso_qt@@QBE_KPA_N@Z (Address: 0x1000a188)
  • ?value@QSettings@kso_qt@@QBE?AVQVariant@2@ABVQString@2@ABV32@@Z (Address: 0x1000a17c)
  • ?wait@QThread@kso_qt@@QAE_NK@Z (Address: 0x1000a128)
VCRUNTIME140.dll
  • __CxxFrameHandler3 (Address: 0x1000a218)
  • __std_exception_copy (Address: 0x1000a20c)
  • __std_exception_destroy (Address: 0x1000a210)
  • __std_terminate (Address: 0x1000a21c)
  • __std_type_info_destroy_list (Address: 0x1000a214)
  • _CxxThrowException (Address: 0x1000a1f8)
  • _except_handler4_common (Address: 0x1000a208)
  • memcpy (Address: 0x1000a204)
  • memset (Address: 0x1000a200)
  • wcsstr (Address: 0x1000a1fc)