xcellstub.dll
v3.3.15.0
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess
Exported functions 28
DummyFunc0
#10 · 0x17c860
DummyFunc1
#11 · 0x17c720
DummyFunc2
#12 · 0x17c710
DummyFunc3
#13 · 0x17c6f0
DummyFunc4
#14 · 0x17bf50
DummyFunc5
#15 · 0x1797f0
DummyFunc6
#16 · 0x179110
DummyFunc7
#17 · 0x1790f0
DummyFunc8
#18 · 0x177550
DummyFunc9
#19 · 0x176f30
DummyFunc10
#20 · 0x173960
DummyFunc11
#21 · 0x176bc0
DummyFunc12
#22 · 0x176910
DummyFunc13
#23 · 0x1768f0
DummyFunc14
#24 · 0x176390
DummyFunc15
#25 · 0x176360
DummyFunc16
#26 · 0x175e70
DummyFunc17
#27 · 0x1745a0
DummyFunc18
#28 · 0x173820
DummyFunc19
#29 · 0x173780
DummyFunc20
#30 · 0x172370
DummyFunc21
#31 · 0x1793c0
DummyFunc22
#32 · 0x179260
DummyFunc23
#33 · 0x179120
DummyFunc24
#34 · 0x17bda0
xlAutoFree12
#35 · 0x1cdb20
xlAutoFree
#36 · 0x1cdbe0
xlAutoClose
#37 · 0x17c870
No function matches your filter.
Imported DLLs & functions 370
ADVAPI32.dll
24
ChangeServiceConfigA
0x1801ea038
CloseServiceHandle
0x1801ea048
ControlService
0x1801ea020
CreateServiceA
0x1801ea040
DeleteService
0x1801ea010
GetUserNameA
0x1801ea008
InitializeSecurityDescriptor
0x1801ea078
IsTextUnicode
0x1801ea080
OpenSCManagerA
0x1801ea018
OpenServiceA
0x1801ea028
RegCloseKey
0x1801ea0b8
RegCreateKeyExA
0x1801ea058
RegCreateKeyExW
0x1801ea090
RegDeleteKeyW
0x1801ea000
RegDeleteValueW
0x1801ea088
RegEnumKeyExW
0x1801ea0a8
RegOpenKeyExA
0x1801ea068
RegOpenKeyExW
0x1801ea0a0
RegQueryInfoKeyW
0x1801ea0b0
RegQueryValueExA
0x1801ea050
RegSetValueExA
0x1801ea060
RegSetValueExW
0x1801ea098
SetSecurityDescriptorDacl
0x1801ea070
StartServiceA
0x1801ea030
CreateBrushIndirect
0x1801ea128
CreateFontW
0x1801ea0e8
DeleteDC
0x1801ea110
DeleteObject
0x1801ea118
GetDeviceCaps
0x1801ea120
GetStockObject
0x1801ea100
GetTextExtentPoint32W
0x1801ea0f8
SelectObject
0x1801ea108
SetBkColor
0x1801ea0f0
gdiplus.dll
16
GdipAlloc
0x1801eab20
GdipCloneBrush
0x1801eab18
GdipCloneImage
0x1801eab68
GdipCreateFromHDC
0x1801eab48
GdipCreateSolidFill
0x1801eab38
GdipDeleteBrush
0x1801eab28
GdipDeleteGraphics
0x1801eab50
GdipDisposeImage
0x1801eab40
GdipDrawImageRectI
0x1801eab78
GdipFree
0x1801eab08
GdipGetImageBounds
0x1801eab30
GdipLoadImageFromStream
0x1801eab70
GdiplusShutdown
0x1801eab10
GdiplusStartup
0x1801eab80
GdipSetCompositingQuality
0x1801eab58
GdipSetSmoothingMode
0x1801eab60
KERNEL32.dll
180
AcquireSRWLockExclusive
0x1801ea668
BeginUpdateResourceW
0x1801ea1f8
CloseHandle
0x1801ea308
CompareStringW
0x1801ea3d8
CreateDirectoryW
0x1801ea498
CreateEventA
0x1801ea648
CreateFileA
0x1801ea320
CreateFileW
0x1801ea2f0
CreateMutexW
0x1801ea240
CreateProcessW
0x1801ea250
CreateSemaphoreA
0x1801ea610
CreateThread
0x1801ea210
DecodePointer
0x1801ea198
DeleteCriticalSection
0x1801ea188
DeleteFileW
0x1801ea4b0
DeviceIoControl
0x1801ea350
EncodePointer
0x1801ea6b8
EndUpdateResourceW
0x1801ea208
EnterCriticalSection
0x1801ea140
EnumSystemLocalesW
0x1801ea400
ExitProcess
0x1801ea1e8
ExitThread
0x1801ea490
FileTimeToLocalFileTime
0x1801ea330
FileTimeToSystemTime
0x1801ea328
FindClose
0x1801ea478
FindFirstFileExW
0x1801ea470
FindNextFileW
0x1801ea468
FindResourceW
0x1801ea168
FlsAlloc
0x1801ea3f8
FlsFree
0x1801ea3e0
FlsGetValue
0x1801ea3f0
FlsSetValue
0x1801ea3e8
FlushFileBuffers
0x1801ea3a0
FlushInstructionCache
0x1801ea698
FreeEnvironmentStringsW
0x1801ea580
FreeLibrary
0x1801ea558
FreeLibraryAndExitThread
0x1801ea488
GetACP
0x1801ea420
GetCommandLineA
0x1801ea388
GetCommandLineW
0x1801ea5a8
GetComputerNameA
0x1801ea640
GetConsoleMode
0x1801ea438
GetConsoleOutputCP
0x1801ea3c0
GetCPInfo
0x1801ea528
GetCurrentDirectoryW
0x1801ea4c0
GetCurrentProcess
0x1801ea1a8
GetCurrentProcessId
0x1801ea570
GetCurrentThread
0x1801ea6d0
GetCurrentThreadId
0x1801ea1a0
GetDateFormatW
0x1801ea340
GetDriveTypeW
0x1801ea4a8
GetEnvironmentStringsW
0x1801ea378
GetEnvironmentVariableW
0x1801ea2c0
GetExitCodeProcess
0x1801ea3a8
GetExitCodeThread
0x1801ea1d0
GetFileAttributesExW
0x1801ea4b8
GetFileAttributesW
0x1801ea228
GetFileSize
0x1801ea310
GetFileSizeEx
0x1801ea3b8
GetFileType
0x1801ea458
GetFullPathNameW
0x1801ea4a0
GetLastError
0x1801ea148
GetLocaleInfoW
0x1801ea360
GetLongPathNameW
0x1801ea258
GetModuleFileNameW
0x1801ea178
GetModuleHandleA
0x1801ea598
GetModuleHandleExW
0x1801ea480
GetModuleHandleW
0x1801ea548
GetOEMCP
0x1801ea418
GetOverlappedResult
0x1801ea650
GetPriorityClass
0x1801ea5c0
GetPrivateProfileIntA
0x1801ea608
GetPrivateProfileStringA
0x1801ea5e8
GetProcAddress
0x1801ea550
GetProcessHeap
0x1801ea2a8
GetShortPathNameW
0x1801ea230
GetStartupInfoW
0x1801ea4f0
GetStdHandle
0x1801ea448
GetStringTypeW
0x1801ea678
GetSystemDirectoryW
0x1801ea2b0
GetSystemTime
0x1801ea370
GetSystemTimeAsFileTime
0x1801ea530
GetTempPathW
0x1801ea220
GetThreadPriority
0x1801ea5c8
GetTickCount
0x1801ea600
GetTimeZoneInformation
0x1801ea450
GetUserDefaultLCID
0x1801ea408
GetVersionExA
0x1801ea5a0
GetVersionExW
0x1801ea358
GetVolumeInformationW
0x1801ea348
GetWindowsDirectoryA
0x1801ea5f8
GetWindowsDirectoryW
0x1801ea2b8
GlobalAlloc
0x1801ea260
GlobalFree
0x1801ea1c0
GlobalLock
0x1801ea268
GlobalReAlloc
0x1801ea280
GlobalUnlock
0x1801ea1b8
HeapAlloc
0x1801ea2a0
HeapFree
0x1801ea288
HeapQueryInformation
0x1801ea390
HeapReAlloc
0x1801ea298
HeapSize
0x1801ea290
InitializeCriticalSectionAndSpinCount
0x1801ea180
InitializeCriticalSectionEx
0x1801ea248
InitializeSListHead
0x1801ea6b0
InterlockedFlushSList
0x1801ea4e0
InterlockedPopEntrySList
0x1801ea6a8
InterlockedPushEntrySList
0x1801ea6a0
IsDebuggerPresent
0x1801ea6c8
IsProcessorFeaturePresent
0x1801ea4f8
IsValidCodePage
0x1801ea428
IsValidLocale
0x1801ea410
LCMapStringEx
0x1801ea538
LCMapStringW
0x1801ea3d0
LeaveCriticalSection
0x1801ea138
LoadLibraryA
0x1801ea618
LoadLibraryExA
0x1801ea680
LoadLibraryExW
0x1801ea170
LoadLibraryW
0x1801ea270
LoadResource
0x1801ea160
LocalAlloc
0x1801ea5e0
LocalFree
0x1801ea1f0
LocalHandle
0x1801ea5d8
LockFile
0x1801ea630
LockResource
0x1801ea2f8
lstrcatA
0x1801ea5f0
lstrcmpiW
0x1801ea380
lstrcpyA
0x1801ea5d0
lstrlenA
0x1801ea638
MulDiv
0x1801ea278
MultiByteToWideChar
0x1801ea150
OpenEventW
0x1801ea218
OpenProcess
0x1801ea578
OutputDebugStringW
0x1801ea6c0
QueryPerformanceCounter
0x1801ea318
QueryPerformanceFrequency
0x1801ea300
RaiseException
0x1801ea190
ReadConsoleW
0x1801ea430
ReadFile
0x1801ea440
ReleaseSRWLockExclusive
0x1801ea670
RtlCaptureContext
0x1801ea520
RtlLookupFunctionEntry
0x1801ea518
RtlPcToFileHeader
0x1801ea4d8
RtlUnwind
0x1801ea5b8
RtlUnwindEx
0x1801ea4e8
RtlVirtualUnwind
0x1801ea510
SetCurrentDirectoryW
0x1801ea4c8
SetEndOfFile
0x1801ea590
SetEnvironmentVariableW
0x1801ea2c8
SetEvent
0x1801ea1c8
SetFilePointer
0x1801ea628
SetFilePointerEx
0x1801ea3b0
SetLastError
0x1801ea1b0
SetPriorityClass
0x1801ea368
SetStdHandle
0x1801ea398
SetThreadPriority
0x1801ea5b0
SetUnhandledExceptionFilter
0x1801ea500
SizeofResource
0x1801ea158
Sleep
0x1801ea1d8
SleepConditionVariableSRW
0x1801ea540
SystemTimeToFileTime
0x1801ea338
SystemTimeToTzSpecificLocalTime
0x1801ea460
TerminateProcess
0x1801ea1e0
TlsAlloc
0x1801ea2e0
TlsFree
0x1801ea2d8
TlsGetValue
0x1801ea2d0
TlsSetValue
0x1801ea4d0
TryAcquireSRWLockExclusive
0x1801ea660
UnhandledExceptionFilter
0x1801ea508
UnlockFile
0x1801ea620
UpdateResourceW
0x1801ea200
VirtualAlloc
0x1801ea690
VirtualFree
0x1801ea688
VirtualProtect
0x1801ea568
WaitForSingleObject
0x1801ea238
WakeAllConditionVariable
0x1801ea658
WideCharToMultiByte
0x1801ea2e8
WriteConsoleW
0x1801ea588
WriteFile
0x1801ea3c8
WriteProcessMemory
0x1801ea560
ole32.dll
12
CLSIDFromProgID
0x1801eabb8
CoCreateInstance
0x1801eabc0
CoInitialize
0x1801eabb0
CoInitializeSecurity
0x1801eabe0
CoSetProxyBlanket
0x1801eab98
CoTaskMemAlloc
0x1801eabc8
CoTaskMemFree
0x1801eabe8
CoTaskMemRealloc
0x1801eabd8
CoUninitialize
0x1801eaba8
CreateBindCtx
0x1801eab90
CreateStreamOnHGlobal
0x1801eaba0
GetRunningObjectTable
0x1801eabd0
OLEAUT32.dll
20
CreateErrorInfo
0x1801ea758
SafeArrayCopy
0x1801ea760
SafeArrayCreate
0x1801ea730
SafeArrayDestroy
0x1801ea778
SafeArrayGetDim
0x1801ea748
SafeArrayGetElement
0x1801ea750
SafeArrayGetLBound
0x1801ea768
SafeArrayGetUBound
0x1801ea770
SafeArrayGetVartype
0x1801ea740
SafeArrayPutElement
0x1801ea738
SysAllocString
0x1801ea6e8
SysAllocStringByteLen
0x1801ea718
SysFreeString
0x1801ea6f0
SysStringByteLen
0x1801ea710
SysStringLen
0x1801ea728
VariantChangeType
0x1801ea6f8
VariantClear
0x1801ea6e0
VariantCopy
0x1801ea708
VariantInit
0x1801ea700
VarUI4FromStr
0x1801ea720
GetModuleInformation
0x1801ea788
CommandLineToArgvW
0x1801ea7b0
ExtractIconExW
0x1801ea7a0
ExtractIconW
0x1801ea7a8
ShellExecuteExW
0x1801ea7b8
SHGetFolderPathW
0x1801ea798
USER32.dll
82
BeginPaint
0x1801ea908
CallNextHookEx
0x1801eaa38
CallWindowProcW
0x1801eaa50
CharNextW
0x1801ea7c8
ClientToScreen
0x1801ea940
CloseClipboard
0x1801ea880
CreateWindowExW
0x1801ea8d8
DdeAccessData
0x1801ea848
DdeClientTransaction
0x1801ea850
DdeConnect
0x1801ea860
DdeCreateStringHandleW
0x1801ea868
DdeFreeDataHandle
0x1801ea830
DdeFreeStringHandle
0x1801ea858
DdeGetLastError
0x1801ea840
DdeInitializeW
0x1801ea870
DdeQueryStringW
0x1801ea7f0
DdeUnaccessData
0x1801ea838
DdeUninitialize
0x1801ea878
DefWindowProcW
0x1801ea9f8
DestroyIcon
0x1801ea9b8
DialogBoxIndirectParamW
0x1801ea9c0
DialogBoxParamW
0x1801ea990
DispatchMessageW
0x1801ea8a0
EmptyClipboard
0x1801ea890
EndDialog
0x1801ea9f0
EndPaint
0x1801ea900
EnumChildWindows
0x1801ea820
EnumWindows
0x1801ea828
FillRect
0x1801ea8d0
FindWindowExW
0x1801ea9b0
FindWindowW
0x1801ea988
GetActiveWindow
0x1801ea998
GetAsyncKeyState
0x1801ea8c0
GetClassInfoExW
0x1801ea8e8
GetClassNameW
0x1801ea808
GetClientRect
0x1801eaa20
GetDC
0x1801ea9d8
GetDialogBaseUnits
0x1801ea8c8
GetDlgCtrlID
0x1801ea910
GetDlgItem
0x1801eaa18
GetMessageW
0x1801ea8b0
GetMonitorInfoW
0x1801ea928
GetParent
0x1801ea978
GetSystemMetrics
0x1801ea938
GetWindow
0x1801ea918
GetWindowLongPtrW
0x1801ea958
GetWindowLongW
0x1801ea960
GetWindowPlacement
0x1801ea7d8
GetWindowRect
0x1801ea950
GetWindowTextW
0x1801eaa40
GetWindowThreadProcessId
0x1801ea980
HideCaret
0x1801ea8f8
InvalidateRect
0x1801eaa08
IsWindow
0x1801ea9a8
KillTimer
0x1801ea810
LoadCursorW
0x1801ea8e0
LoadStringW
0x1801ea9e8
MapWindowPoints
0x1801ea930
MessageBoxW
0x1801ea7f8
MonitorFromWindow
0x1801ea920
MoveWindow
0x1801ea9e0
OpenClipboard
0x1801ea898
PeekMessageW
0x1801ea8b8
PostMessageW
0x1801ea7e8
RegisterClassExW
0x1801ea8f0
ScreenToClient
0x1801ea948
SendMessageW
0x1801ea7e0
SetClipboardData
0x1801ea888
SetFocus
0x1801eaa00
SetForegroundWindow
0x1801ea9a0
SetTimer
0x1801ea9c8
SetWindowLongPtrW
0x1801eaa48
SetWindowLongW
0x1801ea968
SetWindowPos
0x1801ea970
SetWindowsHookExW
0x1801eaa30
SetWindowTextW
0x1801eaa10
ShowWindow
0x1801ea7d0
TranslateMessage
0x1801ea8a8
UnhookWindowsHookEx
0x1801eaa28
UnregisterClassW
0x1801ea9d0
UpdateWindow
0x1801ea818
wsprintfA
0x1801ea800
GetFileVersionInfoSizeW
0x1801eaa70
GetFileVersionInfoW
0x1801eaa68
VerQueryValueW
0x1801eaa60
ClosePrinter
0x1801eaa80
EnumPrintersA
0x1801eaa98
OpenPrinterA
0x1801eaa90
SetPrinterA
0x1801eaa88
WSOCK32.dll
11
connect
0x1801eaab0
gethostbyname
0x1801eaae0
htonl
0x1801eaac0
htons
0x1801eaad0
inet_addr
0x1801eaaf0
ntohl
0x1801eaac8
recv
0x1801eaaa8
select
0x1801eaaf8
send
0x1801eaae8
socket
0x1801eaab8
WSAStartup
0x1801eaad8
No function matches your filter.