shell.dll
v1.9.18.0
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 2
DllCanUnloadNow
#1 · 0xae2c0
DllGetClassObject
#2 · 0xae2f0
No function matches your filter.
Imported DLLs & functions 473
ADVAPI32.dll
22
AllocateAndInitializeSid
0x180157070
CheckTokenMembership
0x180157078
FreeSid
0x180157068
GetSecurityInfo
0x180157058
GetUserNameW
0x180157098
RegCloseKey
0x180157048
RegCreateKeyExW
0x180157040
RegDeleteKeyExW
0x180157038
RegDeleteKeyValueW
0x1801570a8
RegDeleteTreeW
0x1801570a0
RegDeleteValueW
0x180157030
RegEnumKeyExW
0x180157090
RegEnumValueW
0x180157088
RegFlushKey
0x180157028
RegGetValueW
0x180157080
RegOpenKeyExW
0x180157020
RegQueryInfoKeyW
0x180157018
RegQueryValueExW
0x180157010
RegSetKeyValueW
0x180157000
RegSetValueExW
0x180157008
SetEntriesInAclW
0x180157060
SetSecurityInfo
0x180157050
d2d1.dll
1
0x180157b38
DwmExtendFrameIntoClientArea
0x180157b60
DwmGetCompositionTimingInfo
0x180157b48
DwmIsCompositionEnabled
0x180157b50
DwmSetWindowAttribute
0x180157b58
DWriteCreateFactory
0x1801570d8
GDI32.dll
28
AddFontMemResourceEx
0x180157108
BitBlt
0x180157120
CreateCompatibleBitmap
0x1801570f8
CreateCompatibleDC
0x180157180
CreateDIBSection
0x180157170
CreateFontIndirectW
0x1801570e8
CreateFontW
0x180157188
CreateRectRgn
0x1801570f0
CreateRoundRectRgn
0x180157118
CreateSolidBrush
0x180157198
DeleteDC
0x180157190
DeleteObject
0x1801571c0
EnumFontFamiliesExW
0x180157178
ExcludeClipRect
0x180157128
GdiAlphaBlend
0x1801571b0
GetDeviceCaps
0x180157130
GetDIBits
0x180157138
GetObjectType
0x180157140
GetObjectW
0x180157100
GetPixel
0x180157148
GetStockObject
0x180157150
GetTextMetricsW
0x1801571b8
RemoveFontMemResourceEx
0x180157110
SelectObject
0x180157158
SetBkColor
0x180157160
SetBkMode
0x180157168
SetDIBits
0x1801571a0
SetTextColor
0x1801571a8
KERNEL32.dll
152
AcquireSRWLockExclusive
0x1801574b8
AreFileApisANSI
0x180157468
CloseHandle
0x180157668
CloseThreadpoolTimer
0x180157358
CloseThreadpoolWait
0x180157680
CompareStringEx
0x1801573e0
CopyFileW
0x180157458
CreateDirectoryExW
0x180157460
CreateDirectoryW
0x1801575c8
CreateEventExW
0x1801573a8
CreateFileW
0x180157688
CreateHardLinkW
0x180157448
CreateSemaphoreExW
0x1801573a0
CreateSymbolicLinkW
0x180157438
CreateThreadpoolTimer
0x180157370
CreateThreadpoolWait
0x180157350
CreateToolhelp32Snapshot
0x1801571d0
DecodePointer
0x1801573e8
DeleteCriticalSection
0x1801573f8
DeleteFileW
0x1801575c0
DeviceIoControl
0x1801571f0
DisableThreadLibraryCalls
0x180157238
EncodePointer
0x1801573f0
EnterCriticalSection
0x180157410
ExitProcess
0x180157290
ExpandEnvironmentStringsW
0x180157610
FileTimeToLocalFileTime
0x1801575b8
FileTimeToSystemTime
0x1801574d8
FindClose
0x1801575b0
FindFirstFileExW
0x180157498
FindFirstFileW
0x1801575a8
FindNextFileW
0x1801575a0
FindResourceW
0x180157278
FlushInstructionCache
0x180157228
FlushProcessWriteBuffers
0x180157398
FormatMessageA
0x1801574a8
FreeLibrary
0x180157650
FreeLibraryWhenCallbackReturns
0x180157378
FreeResource
0x180157258
GetComputerNameW
0x1801574e0
GetCPInfo
0x1801573d8
GetCurrentDirectoryW
0x1801575d8
GetCurrentProcess
0x180157210
GetCurrentProcessId
0x180157218
GetCurrentProcessorNumber
0x180157390
GetCurrentThread
0x180157220
GetCurrentThreadId
0x180157208
GetDiskFreeSpaceExW
0x180157490
GetDriveTypeW
0x1801571e8
GetEnvironmentVariableW
0x1801575e8
GetExitCodeProcess
0x180157528
GetExitCodeThread
0x180157418
GetFileAttributesExW
0x180157488
GetFileAttributesW
0x180157600
GetFileInformationByHandle
0x180157480
GetFileInformationByHandleEx
0x180157440
GetFileSize
0x180157598
GetFileTime
0x180157590
GetFinalPathNameByHandleW
0x180157478
GetFullPathNameW
0x180157588
GetLastError
0x180157660
GetLocaleInfoEx
0x1801574a0
GetLocalTime
0x180157518
GetLongPathNameW
0x180157580
GetModuleFileNameW
0x180157648
GetModuleHandleA
0x180157240
GetModuleHandleExW
0x180157248
GetModuleHandleW
0x180157640
GetNativeSystemInfo
0x180157658
GetPrivateProfileStringW
0x1801574f8
GetProcAddress
0x180157638
GetShortPathNameW
0x180157578
GetStartupInfoW
0x180157308
GetStringTypeW
0x180157430
GetSystemDirectoryW
0x180157288
GetSystemTimeAsFileTime
0x180157388
GetTempPathW
0x180157548
GetThreadContext
0x1801572e0
GetThreadUILanguage
0x180157340
GetTickCount64
0x180157380
GlobalAlloc
0x180157510
GlobalFree
0x180157620
GlobalLock
0x180157500
GlobalUnlock
0x180157508
InitializeCriticalSectionEx
0x180157400
InitializeSListHead
0x1801572f8
InitOnceExecuteOnce
0x1801573b0
InterlockedFlushSList
0x1801572b0
IsDebuggerPresent
0x180157320
IsProcessorFeaturePresent
0x180157300
K32EnumProcessModulesEx
0x180157280
K32GetModuleFileNameExW
0x180157568
LCIDToLocaleName
0x180157298
LCMapStringEx
0x1801573d0
LeaveCriticalSection
0x180157408
LoadLibraryExW
0x180157630
LoadLibraryW
0x180157628
LoadResource
0x180157260
LocalFileTimeToFileTime
0x180157570
LocalFree
0x180157618
LockResource
0x180157268
lstrcmpiW
0x180157250
MoveFileExW
0x180157450
MoveFileW
0x1801574e8
MultiByteToWideChar
0x1801574c8
OpenProcess
0x180157520
Process32FirstW
0x1801571d8
Process32NextW
0x1801571e0
QueryPerformanceCounter
0x1801571f8
QueryPerformanceFrequency
0x180157200
RaiseException
0x1801572a0
ReleaseSRWLockExclusive
0x1801574c0
RemoveDirectoryW
0x180157560
ResumeThread
0x1801572e8
RtlCaptureContext
0x180157338
RtlLookupFunctionEntry
0x180157330
RtlUnwindEx
0x1801572a8
RtlVirtualUnwind
0x180157328
SearchPathW
0x1801575d0
SetCurrentDirectoryW
0x1801575e0
SetFileAttributesW
0x180157558
SetFileInformationByHandle
0x180157470
SetFilePointer
0x180157678
SetFileTime
0x180157550
SetLastError
0x1801572b8
SetThreadContext
0x1801572d8
SetThreadpoolTimer
0x180157368
SetThreadpoolWait
0x180157348
SetUnhandledExceptionFilter
0x180157310
SizeofResource
0x180157270
Sleep
0x180157538
SleepConditionVariableSRW
0x1801573b8
SuspendThread
0x1801572f0
SwitchToThread
0x180157420
SystemTimeToFileTime
0x1801574d0
TerminateProcess
0x180157530
TryAcquireSRWLockExclusive
0x1801574b0
UnhandledExceptionFilter
0x180157318
VerifyVersionInfoW
0x1801575f8
VerSetConditionMask
0x180157608
VirtualAlloc
0x1801572d0
VirtualFree
0x1801572c8
VirtualProtect
0x180157230
VirtualQuery
0x1801572c0
WaitForSingleObject
0x180157540
WaitForSingleObjectEx
0x180157428
WaitForThreadpoolTimerCallbacks
0x180157360
WakeAllConditionVariable
0x1801573c0
WakeConditionVariable
0x1801573c8
WideCharToMultiByte
0x1801575f0
WriteFile
0x180157670
WritePrivateProfileStringW
0x1801574f0
msvcrt.dll
113
___lc_codepage_func
0x180157ee8
___lc_collate_cp_func
0x180157e78
___lc_handle_func
0x180157c88
___mb_cur_max_func
0x180157e48
__C_specific_handler
0x180157de8
__CppXcptFilter
0x180157c98
__CxxFrameHandler3
0x180157ee0
__DestructExceptionObject
0x180157db0
__getmainargs
0x180157ca0
__pctype_func
0x180157e60
__strncnt
0x180157cc0
__wgetmainargs
0x180157ca8
_amsg_exit
0x180157db8
_beginthreadex
0x180157ea8
_callnewh
0x180157ba8
_clearfp
0x180157ce8
_CxxThrowException
0x180157e08
_endthreadex
0x180157e38
_environ
0x180157cb0
_errno
0x180157d88
_fileno
0x180157cd8
_Getdays
0x180157b78
_getmbcp
0x180157c80
_Getmonths
0x180157b80
_Gettnames
0x180157b88
_initterm
0x180157bb0
_initterm_e
0x180157bb8
_iob
0x180157c58
_isatty
0x180157cc8
_isctype_l
0x180157c90
_local_unwind
0x180157de0
_localtime64_s
0x180157da0
_lock
0x180157c60
_mbtowc_l
0x180157c38
_memicmp
0x180157d90
_msize
0x180157ec8
_setjmp
0x180157dc8
_setmbcp
0x180157c78
_Strftime
0x180157b90
_stricmp
0x180157e98
_time64
0x180157d98
_unlock
0x180157c68
_wcsdup
0x180157e68
_wenviron
0x180157cb8
_wfopen_s
0x180157d48
_wrename
0x180157ed0
?name@type_info@@QEBAPEBDXZ
0x180157dc0
?terminate@@YAXXZ
0x180157c50
abort
0x180157e80
acos
0x180157c08
atan2
0x180157bd0
calloc
0x180157e88
ceil
0x180157bd8
ceilf
0x180157d60
cos
0x180157be0
fclose
0x180157d40
fflush
0x180157cd0
floor
0x180157ea0
fmod
0x180157c10
fopen_s
0x180157bc8
fputs
0x180157e90
fread
0x180157d38
free
0x180157d58
frexp
0x180157e30
fseek
0x180157d30
ftell
0x180157d28
isdigit
0x180157d70
islower
0x180157b70
isspace
0x180157b98
isupper
0x180157e58
iswalnum
0x180157d18
iswalpha
0x180157ec0
iswcntrl
0x180157d10
iswctype
0x180157c48
iswdigit
0x180157d80
iswlower
0x180157d08
iswpunct
0x180157d00
iswspace
0x180157eb8
iswupper
0x180157cf8
iswxdigit
0x180157cf0
isxdigit
0x180157d68
log10
0x180157ce0
longjmp
0x180157dd0
malloc
0x180157eb0
memchr
0x180157dd8
memcmp
0x180157e10
memcpy
0x180157df8
memmove
0x180157e00
memset
0x180157e18
pow
0x180157be8
rand_s
0x180157e40
realloc
0x180157d50
rewind
0x180157d20
sin
0x180157bf0
sqrt
0x180157bf8
strchr
0x180157df0
strcpy_s
0x180157c18
strcspn
0x180157e20
strnlen
0x180157c20
strrchr
0x180157ef0
strtod
0x180157e28
strtol
0x180157c30
strtoul
0x180157bc0
tan
0x180157c00
tolower
0x180157ba0
towlower
0x180157e70
towupper
0x180157d78
wcsftime
0x180157da8
wcsnlen
0x180157e50
wcsrchr
0x180157ed8
wcstol
0x180157c28
wcstombs_s
0x180157c70
wctomb_s
0x180157c40
CoCreateGuid
0x180157f38
CoCreateInstance
0x180157f18
CoInitializeEx
0x180157f28
CoTaskMemFree
0x180157f08
CoUninitialize
0x180157f30
CreateBindCtx
0x180157f00
IIDFromString
0x180157f20
PropVariantClear
0x180157f10
SHELL32.dll
12
0x1801576c8
0x1801576d8
0x1801576e0
0x1801576e8
0x1801576f8
ExtractIconExW
0x180157720
SHBindToObject
0x1801576d0
SHChangeNotify
0x180157718
ShellExecuteExW
0x180157710
SHGetDesktopFolder
0x1801576f0
SHGetFileInfoW
0x180157708
SHGetPropertyStoreFromParsingName
0x180157700
0x180157768
AssocQueryStringW
0x180157760
PathAddExtensionW
0x180157758
PathCompactPathW
0x180157750
PathGetArgsW
0x180157748
PathQuoteSpacesW
0x180157740
PathRemoveArgsW
0x180157738
PathRemoveExtensionW
0x180157730
PathRenameExtensionW
0x180157770
USER32.dll
102
BeginDeferWindowPos
0x180157a00
CallNextHookEx
0x180157888
CallWindowProcW
0x1801579d0
CascadeWindows
0x1801579a8
CloseClipboard
0x180157870
CopyImage
0x180157810
CreateDialogParamW
0x180157968
CreatePopupMenu
0x180157a30
CreateWindowExW
0x1801579d8
DeferWindowPos
0x180157a08
DefWindowProcW
0x1801577c8
DestroyCursor
0x180157818
DestroyIcon
0x1801577e0
DestroyMenu
0x180157a38
DestroyWindow
0x180157830
DispatchMessageW
0x180157808
DrawTextW
0x180157a70
EmptyClipboard
0x1801578a8
EndDeferWindowPos
0x180157a10
EndDialog
0x180157850
EnumThreadWindows
0x180157898
EnumWindows
0x180157948
FillRect
0x180157918
FindWindowExW
0x180157988
GetActiveWindow
0x1801578b8
GetAncestor
0x1801579b8
GetAsyncKeyState
0x1801578c0
GetClassLongPtrW
0x1801578e8
GetClassNameW
0x180157990
GetClassWord
0x180157940
GetClipboardData
0x180157880
GetCursorPos
0x180157930
GetDesktopWindow
0x1801578a0
GetDlgItemTextW
0x180157860
GetForegroundWindow
0x180157960
GetGUIThreadInfo
0x180157798
GetKeyState
0x180157a18
GetMenuInfo
0x180157a48
GetMenuItemCount
0x180157a40
GetMenuItemInfoW
0x180157a60
GetMenuItemRect
0x180157a68
GetMessageW
0x1801577f8
GetMonitorInfoW
0x1801577b0
GetParent
0x180157980
GetPropW
0x1801578d8
GetShellWindow
0x1801579c8
GetSysColor
0x180157920
GetSystemMetrics
0x1801577d8
GetWindowDC
0x180157a80
GetWindowLongPtrW
0x180157978
GetWindowRect
0x180157aa0
GetWindowTextW
0x1801578f8
GetWindowThreadProcessId
0x180157890
InsertMenuItemW
0x180157a58
IsClipboardFormatAvailable
0x1801578b0
IsDialogMessageW
0x180157998
IsMenu
0x1801579e0
IsWindow
0x180157828
IsWindowVisible
0x180157840
keybd_event
0x1801578c8
KillTimer
0x180157a28
LoadCursorW
0x180157820
LoadImageW
0x1801577e8
LoadMenuW
0x180157958
LoadStringW
0x1801577f0
MessageBeep
0x180157908
MessageBoxW
0x180157900
MonitorFromPoint
0x1801577b8
MonitorFromWindow
0x180157950
OpenClipboard
0x180157868
PostMessageW
0x180157970
PostQuitMessage
0x1801577d0
RegisterClassW
0x180157788
RegisterWindowMessageW
0x180157790
ReleaseDC
0x180157a88
RemovePropW
0x180157a98
ScreenToClient
0x1801579c0
SendMessageW
0x1801579e8
SetClassLongPtrW
0x1801578e0
SetClipboardData
0x180157878
SetCursor
0x180157aa8
SetDlgItemTextW
0x180157858
SetFocus
0x1801577c0
SetMenuInfo
0x180157a50
SetPropW
0x1801578d0
SetTimer
0x180157a20
SetWindowLongPtrW
0x180157910
SetWindowPos
0x1801579f8
SetWindowRgn
0x180157a90
SetWindowTextW
0x1801578f0
SetWinEventHook
0x1801577a8
ShowWindow
0x180157838
SystemParametersInfoW
0x1801579b0
TileWindows
0x1801579a0
TrackPopupMenu
0x180157848
TrackPopupMenuEx
0x180157928
TranslateMessage
0x180157800
UnhookWinEvent
0x1801577a0
UnregisterClassW
0x180157780
UpdateLayeredWindow
0x1801579f0
UpdateWindow
0x180157a78
WindowFromPoint
0x180157938
UxTheme.dll
11
BeginBufferedPaint
0x180157ae8
BufferedPaintClear
0x180157af8
CloseThemeData
0x180157b08
DrawThemeBackground
0x180157ac0
DrawThemeTextEx
0x180157ae0
EndBufferedPaint
0x180157af0
GetThemeColor
0x180157ac8
GetThemeInt
0x180157ad0
GetThemeSysFont
0x180157ad8
IsCompositionActive
0x180157b00
OpenThemeData
0x180157ab8
No function matches your filter.