kwinfork.dll - Online Dependency Analysis & Download

Description

—

Authors

File size

614.5 KB

Uploaded

2025-12-04 06:17

Views

SHA-256

2bb9b30d54bbb155aa15f9afdbe93b4b

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess

Exported functions 2

g_bForkProcess #1 · 0x90e28

kwinfork #2 · 0x31e0

Imported DLLs & functions 259

api-ms-win-crt-convert-l1-1-0.dll 1

strtoul 0x10028334

api-ms-win-crt-filesystem-l1-1-0.dll 2

_lock_file 0x10028340

_unlock_file 0x1002833c

api-ms-win-crt-heap-l1-1-0.dll 3

_callnewh 0x10028350

free 0x1002834c

malloc 0x10028348

api-ms-win-crt-runtime-l1-1-0.dll 15

_beginthreadex 0x10028360

_cexit 0x10028368

_configure_narrow_argv 0x1002837c

_crt_atexit 0x10028390

_errno 0x10028364

_execute_onexit_table 0x1002838c

_initialize_narrow_environment 0x10028380

_initialize_onexit_table 0x10028384

_initterm 0x10028370

_initterm_e 0x1002836c

_invalid_parameter_noinfo 0x10028358

_invalid_parameter_noinfo_noreturn 0x10028374

_register_onexit_function 0x10028388

_seh_filter_dll 0x10028378

terminate 0x1002835c

api-ms-win-crt-stdio-l1-1-0.dll 14

__stdio_common_vsnprintf_s 0x100283a8

__stdio_common_vswprintf_s 0x100283a4

_fseeki64 0x100283c0

_get_stream_buffer_pointers 0x100283a0

fclose 0x100283b8

fflush 0x10028398

fgetc 0x1002839c

fgetpos 0x100283cc

fputc 0x100283c8

fread 0x100283b0

fsetpos 0x100283c4

fwrite 0x100283bc

setvbuf 0x100283b4

ungetc 0x100283ac

api-ms-win-crt-string-l1-1-0.dll 3

_wcsicmp 0x100283d4

_wcsnicmp 0x100283d8

towlower 0x100283dc

api-ms-win-crt-time-l1-1-0.dll 1

_time64 0x100283e4

KERNEL32.dll 80

CloseHandle 0x10028080

CreateEventW 0x10028024

CreateFileMappingW 0x100280bc

CreateFileW 0x10028094

CreateProcessW 0x10028110

CreateToolhelp32Snapshot 0x100280d4

DeleteCriticalSection 0x1002811c

DeleteFileW 0x1002810c

DisableThreadLibraryCalls 0x10028008

DuplicateHandle 0x10028098

EnterCriticalSection 0x10028050

ExpandEnvironmentStringsW 0x100280e0

FlushInstructionCache 0x100280a4

FreeLibrary 0x100280f0

GetCurrentProcess 0x1002805c

GetCurrentProcessId 0x10028060

GetCurrentThread 0x10028064

GetCurrentThreadId 0x10028130

GetEnvironmentVariableW 0x10028104

GetExitCodeProcess 0x100280a0

GetHandleInformation 0x10028040

GetLastError 0x10028048

GetLongPathNameW 0x100280e4

GetModuleFileNameW 0x100280c8

GetModuleHandleA 0x10028070

GetModuleHandleExA 0x100280cc

GetModuleHandleW 0x100280f4

GetProcAddress 0x10028074

GetProcessId 0x10028068

GetSystemDirectoryW 0x100280e8

GetSystemInfo 0x10028088

GetSystemTimeAsFileTime 0x1002800c

GetSystemWindowsDirectoryW 0x100280a8

GetSystemWow64DirectoryW 0x100280ec

GetThreadContext 0x1002813c

GetThreadId 0x1002806c

InitializeCriticalSection 0x1002804c

InitializeCriticalSectionAndSpinCount 0x10028118

InitializeSListHead 0x10028004

IsDebuggerPresent 0x10028014

IsProcessorFeaturePresent 0x10028018

IsWow64Process 0x100280c4

LeaveCriticalSection 0x10028054

LoadLibraryExA 0x100280d0

LoadLibraryW 0x100280f8

lstrlenW 0x100280fc

MapViewOfFile 0x100280c0

Module32FirstW 0x100280d8

Module32NextW 0x100280dc

MultiByteToWideChar 0x10028100

OpenProcess 0x10028084

OutputDebugStringW 0x10028000

Process32FirstW 0x10028124

Process32NextW 0x10028128

ProcessIdToSessionId 0x10028120

QueryPerformanceCounter 0x10028010

RaiseException 0x10028114

ResetEvent 0x1002802c

ResumeThread 0x10028138

SetEnvironmentVariableW 0x10028108

SetEvent 0x10028030

SetHandleInformation 0x1002807c

SetLastError 0x1002812c

SetThreadContext 0x1002803c

SetUnhandledExceptionFilter 0x10028044

SuspendThread 0x10028134

TerminateProcess 0x1002801c

TryEnterCriticalSection 0x10028058

UnhandledExceptionFilter 0x10028020

UnmapViewOfFile 0x10028090

VerifyVersionInfoW 0x10028078

VirtualAlloc 0x100280ac

VirtualFree 0x10028038

VirtualProtect 0x100280b0

VirtualProtectEx 0x100280b4

VirtualQuery 0x10028034

VirtualQueryEx 0x1002808c

WaitForSingleObject 0x1002809c

WaitForSingleObjectEx 0x10028028

WriteProcessMemory 0x100280b8

krpt.dll 2

_krpt_RuntimeProtect 0x100283ec

_krpt_SuspendRuntimeProtect 0x100283f0

krt.dll 4

?setAppEnv@krt@@YA_NABVQString@kso_qt@@ABVQVariant@3@@Z 0x10028400

?winBuildVersion@info@krt@@YAIXZ 0x100283fc

?winMajorVersion@info@krt@@YAIXZ 0x10028404

?winMinorVersion@info@krt@@YAIXZ 0x100283f8

ksolite.dll 3

?getData@KFpccomb@@QAE?AV?$QSharedPointer@VKFpccombData@@@kso_qt@@_J@Z 0x10028410

?getInstance@KFpccomb@@SAPAV1@XZ 0x10028414

?writeInfo@KxLoggerLite@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z 0x1002840c

MSVCP140.dll 85

_Cnd_do_broadcast_at_thread_exit 0x10028164

_Mtx_destroy_in_situ 0x100281d0

_Mtx_init_in_situ 0x100281cc

_Mtx_lock 0x100281d4

_Mtx_unlock 0x100281d8

_Thrd_id 0x10028160

_Thrd_join 0x1002815c

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z 0x10028270

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z 0x10028210

?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ 0x100281fc

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ 0x10028230

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z 0x10028260

?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ 0x100281a0

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ 0x10028290

?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ 0x1002818c

?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ 0x1002817c

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ 0x1002822c

?_Throw_C_error@std@@YAXH@Z 0x100281dc

?_Throw_Cpp_error@std@@YAXH@Z 0x10028168

?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ 0x100281a4

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ 0x10028294

?_Xbad_function_call@std@@YAXXZ 0x100281f0

?_Xinvalid_argument@std@@YAXPBD@Z 0x100281c4

?_Xlength_error@std@@YAXPBD@Z 0x10028158

?_Xout_of_range@std@@YAXPBD@Z 0x100281c8

??0_Lockit@std@@QAE@H@Z 0x100281f4

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ 0x10028188

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ 0x10028248

??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z 0x10028198

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z 0x10028284

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z 0x10028258

??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z 0x100281e4

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z 0x1002824c

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ 0x1002816c

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ 0x10028214

??1_Lockit@std@@QAE@XZ 0x100281f8

??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ 0x10028180

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ 0x1002823c

??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ 0x1002819c

??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ 0x10028288

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ 0x1002825c

??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ 0x100281e8

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ 0x10028250

??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ 0x10028170

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ 0x10028218

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z 0x100281ec

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z 0x10028190

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z 0x10028280

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z 0x1002827c

??Bid@locale@std@@QAEIXZ 0x100281e0

?always_noconv@codecvt_base@std@@QBE_NXZ 0x10028200

?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ 0x10028194

?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ 0x1002821c

?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A 0x10028278

?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z 0x100281a8

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z 0x10028150

?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z 0x10028204

?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z 0x10028208

?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z 0x10028264

?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ 0x10028220

?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z 0x10028268

?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z 0x100281ac

?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z 0x1002814c

?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z 0x10028184

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z 0x10028240

?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z 0x1002828c

?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ 0x10028224

?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ 0x100281b0

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ 0x10028274

?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ 0x10028228

?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z 0x10028174

?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z 0x10028178

?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ 0x100281b4

?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ 0x10028144

?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ 0x1002826c

?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ 0x100281b8

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ 0x10028148

?uncaught_exception@std@@YA_NXZ 0x10028154

?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z 0x1002820c

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z 0x10028244

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z 0x10028254

?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z 0x100281bc

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z 0x10028234

?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z 0x100281c0

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z 0x10028238

ntdll.dll 10

NtAllocateVirtualMemory 0x10028424

NtCreateUserProcess 0x10028438

NtFreeVirtualMemory 0x1002841c

NtProtectVirtualMemory 0x1002843c

NtQueryInformationProcess 0x10028430

NtQueryObject 0x10028434

NtQueryVirtualMemory 0x10028428

NtReadVirtualMemory 0x10028420

RtlExitUserThread 0x1002842c

VerSetConditionMask 0x10028440

Qt5CoreKso.dll 21

??0QByteArray@kso_qt@@QAE@PBDH@Z 0x100282a4

??0QString@kso_qt@@QAE@$$QAV01@@Z 0x100282e8

??0QString@kso_qt@@QAE@ABV01@@Z 0x100282a0

??0QVariant@kso_qt@@QAE@_N@Z 0x100282b4

??1QByteArray@kso_qt@@QAE@XZ 0x1002829c

??1QString@kso_qt@@QAE@XZ 0x100282ec

??1QVariant@kso_qt@@QAE@XZ 0x100282b8

??8QString@kso_qt@@QBE_NPBD@Z 0x100282e0

??Mkso_qt@@YA_NABVQString@0@0@Z 0x100282e4

?applicationName@QCoreApplication@kso_qt@@SA?AVQString@2@XZ 0x100282b0

?begin@QListData@kso_qt@@QBEPAPAXXZ 0x100282d4

?createData@QMapDataBase@kso_qt@@SAPAU12@XZ 0x100282c0

?createNode@QMapDataBase@kso_qt@@QAEPAUQMapNodeBase@2@HHPAU32@_N@Z 0x100282c8

?end@QListData@kso_qt@@QBEPAPAXXZ 0x100282d0

?freeData@QMapDataBase@kso_qt@@SAXPAU12@@Z 0x100282bc

?freeTree@QMapDataBase@kso_qt@@QAEXPAUQMapNodeBase@2@H@Z 0x100282c4

?fromAscii_helper@QString@kso_qt@@CAPAU?$QTypedArrayData@G@2@PBDH@Z 0x100282d8

?instance@QCoreApplication@kso_qt@@SAPAV12@XZ 0x100282ac

?qputenv@kso_qt@@YA_NPBDABVQByteArray@1@@Z 0x100282a8

?recalcMostLeftNode@QMapDataBase@kso_qt@@QAEXXZ 0x100282cc

?toStdWString@QString@kso_qt@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ 0x100282dc

VCRUNTIME140.dll 15

__current_exception 0x10028304

__current_exception_context 0x10028300

__CxxFrameHandler3 0x10028324

__std_exception_copy 0x10028314

__std_exception_destroy 0x10028318

__std_terminate 0x10028310

__std_type_info_destroy_list 0x100282f8

_CxxThrowException 0x10028320

_except_handler4_common 0x100282f4

memchr 0x10028308

memcpy 0x10028328

memmove 0x100282fc

memset 0x1002832c

strstr 0x1002831c

wcsstr 0x1002830c