Collider_-_ShayanXiters.dll

Description:

Authors:

Version:

Architecture: 64-bit

Operating System:

SHA256: 449f8dfba8936b1da8ad15af301bb490

File Size: 65.0 KB

Uploaded At: June 27, 2026, 5:15 p.m.

Views: 31

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

PyShellExt_AddPages (Ordinal: 1, Address: 0x55c0)
PyShellExt_CreateViewObject (Ordinal: 2, Address: 0x55c0)
PyShellExt_GetCommandString (Ordinal: 3, Address: 0x55c0)
PyShellExt_GetContextMenu (Ordinal: 4, Address: 0x55c0)
PyShellExt_HandleMenuMsg (Ordinal: 5, Address: 0x55c0)
PyShellExt_HandleMenuMsg2 (Ordinal: 6, Address: 0x55c0)
PyShellExt_Initialize (Ordinal: 7, Address: 0x55c0)
PyShellExt_InvokeCommand (Ordinal: 8, Address: 0x55c0)
PyShellExt_QueryContextMenu (Ordinal: 9, Address: 0x55c0)
PyShellExt_ReplacePage (Ordinal: 10, Address: 0x55c0)

Imported DLLs & Functions

api-ms-win-crt-convert-l1-1-0.dll

strtoull (Address: 0x18000b2f8)

api-ms-win-crt-heap-l1-1-0.dll

_callnewh (Address: 0x18000b318)
free (Address: 0x18000b308)
malloc (Address: 0x18000b310)

api-ms-win-crt-math-l1-1-0.dll

_fdclass (Address: 0x18000b328)
ceilf (Address: 0x18000b330)

api-ms-win-crt-runtime-l1-1-0.dll

_beginthreadex (Address: 0x18000b398)
_cexit (Address: 0x18000b358)
_configure_narrow_argv (Address: 0x18000b388)
_crt_atexit (Address: 0x18000b360)
_execute_onexit_table (Address: 0x18000b368)
_initialize_narrow_environment (Address: 0x18000b380)
_initialize_onexit_table (Address: 0x18000b340)
_initterm (Address: 0x18000b350)
_initterm_e (Address: 0x18000b378)
_invoke_watson (Address: 0x18000b348)
_register_onexit_function (Address: 0x18000b370)
_seh_filter_dll (Address: 0x18000b390)

api-ms-win-crt-string-l1-1-0.dll

_stricmp (Address: 0x18000b3b0)
strcmp (Address: 0x18000b3a8)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x18000b188)
CloseHandle (Address: 0x18000b088)
CreatePipe (Address: 0x18000b030)
CreateProcessA (Address: 0x18000b098)
CreateToolhelp32Snapshot (Address: 0x18000b060)
DisableThreadLibraryCalls (Address: 0x18000b078)
FlushInstructionCache (Address: 0x18000b130)
FreeLibraryAndExitThread (Address: 0x18000b040)
GetCurrentProcess (Address: 0x18000b0d8)
GetCurrentProcessId (Address: 0x18000b128)
GetCurrentThreadId (Address: 0x18000b0f0)
GetLastError (Address: 0x18000b070)
GetModuleFileNameA (Address: 0x18000b008)
GetModuleHandleA (Address: 0x18000b048)
GetProcAddress (Address: 0x18000b090)
GetSystemInfo (Address: 0x18000b0b0)
GetSystemTimeAsFileTime (Address: 0x18000b158)
GetThreadContext (Address: 0x18000b120)
HeapAlloc (Address: 0x18000b110)
HeapCreate (Address: 0x18000b0c0)
HeapDestroy (Address: 0x18000b118)
HeapFree (Address: 0x18000b0d0)
HeapReAlloc (Address: 0x18000b108)
InitializeSListHead (Address: 0x18000b150)
IsDebuggerPresent (Address: 0x18000b180)
IsProcessorFeaturePresent (Address: 0x18000b168)
OpenProcess (Address: 0x18000b050)
OpenThread (Address: 0x18000b140)
Process32First (Address: 0x18000b010)
Process32Next (Address: 0x18000b080)
QueryPerformanceCounter (Address: 0x18000b160)
ReadFile (Address: 0x18000b000)
ReleaseSRWLockExclusive (Address: 0x18000b148)
ResumeThread (Address: 0x18000b100)
RtlCaptureContext (Address: 0x18000b1a0)
RtlLookupFunctionEntry (Address: 0x18000b1a8)
RtlVirtualUnwind (Address: 0x18000b1b0)
SetCurrentDirectoryA (Address: 0x18000b058)
SetHandleInformation (Address: 0x18000b018)
SetThreadContext (Address: 0x18000b138)
SetUnhandledExceptionFilter (Address: 0x18000b170)
Sleep (Address: 0x18000b068)
SleepConditionVariableSRW (Address: 0x18000b198)
SuspendThread (Address: 0x18000b0f8)
TerminateProcess (Address: 0x18000b028)
Thread32First (Address: 0x18000b0e8)
Thread32Next (Address: 0x18000b0e0)
UnhandledExceptionFilter (Address: 0x18000b178)
VirtualAlloc (Address: 0x18000b0a8)
VirtualFree (Address: 0x18000b0a0)
VirtualProtect (Address: 0x18000b0c8)
VirtualQuery (Address: 0x18000b0b8)
WaitForSingleObject (Address: 0x18000b038)
WakeAllConditionVariable (Address: 0x18000b190)
WriteFile (Address: 0x18000b020)

MSVCP140.dll

_Query_perf_counter (Address: 0x18000b1c8)
_Query_perf_frequency (Address: 0x18000b240)
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ (Address: 0x18000b1d0)
?_Random_device@std@@YAIXZ (Address: 0x18000b248)
?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18000b1c0)
?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x18000b228)
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z (Address: 0x18000b210)
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z (Address: 0x18000b208)
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A (Address: 0x18000b220)
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A (Address: 0x18000b238)
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ (Address: 0x18000b200)
?good@ios_base@std@@QEBA_NXZ (Address: 0x18000b218)
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z (Address: 0x18000b1f8)
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z (Address: 0x18000b1d8)
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z (Address: 0x18000b1e8)
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z (Address: 0x18000b1f0)
?uncaught_exception@std@@YA_NXZ (Address: 0x18000b230)
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z (Address: 0x18000b1e0)

USER32.dll

EnumWindows (Address: 0x18000b278)
FindWindowExA (Address: 0x18000b288)
GetAsyncKeyState (Address: 0x18000b260)
GetClientRect (Address: 0x18000b280)
GetCursorPos (Address: 0x18000b258)
GetWindowThreadProcessId (Address: 0x18000b270)
PostMessageA (Address: 0x18000b268)

VCRUNTIME140_1.dll

__CxxFrameHandler4 (Address: 0x18000b2e8)

VCRUNTIME140.dll

__C_specific_handler (Address: 0x18000b2c0)
__std_exception_copy (Address: 0x18000b2a0)
__std_exception_destroy (Address: 0x18000b2d8)
__std_terminate (Address: 0x18000b2a8)
__std_type_info_destroy_list (Address: 0x18000b298)
_CxxThrowException (Address: 0x18000b2b8)
memcpy (Address: 0x18000b2c8)
memmove (Address: 0x18000b2b0)
memset (Address: 0x18000b2d0)