ShGuardian.dll
vUnknown
32-bit
Unknown OS
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 1
Main
#1 · 0x1970
No function matches your filter.
Imported DLLs & functions 141
GetStockObject
0x1001b000
SelectObject
0x1001b00c
SetBkMode
0x1001b008
SetTextColor
0x1001b004
KERNEL32.dll
105
CloseHandle
0x1001b024
CompareStringW
0x1001b1ac
CreateEventA
0x1001b030
CreateFileW
0x1001b158
CreateMutexA
0x1001b07c
CreateProcessA
0x1001b05c
CreateThread
0x1001b0e8
CreateToolhelp32Snapshot
0x1001b03c
DecodePointer
0x1001b06c
DeleteCriticalSection
0x1001b138
EncodePointer
0x1001b12c
EnterCriticalSection
0x1001b130
ExitProcess
0x1001b174
FileTimeToSystemTime
0x1001b170
FindClose
0x1001b0d8
FindFirstFileExW
0x1001b0d4
FindNextFileW
0x1001b0d0
FlsAlloc
0x1001b198
FlsFree
0x1001b1a4
FlsGetValue
0x1001b19c
FlsSetValue
0x1001b1a0
FlushFileBuffers
0x1001b08c
FreeEnvironmentStringsW
0x1001b0ac
FreeLibrary
0x1001b150
GetACP
0x1001b0c8
GetCommandLineA
0x1001b0bc
GetCommandLineW
0x1001b0b8
GetConsoleMode
0x1001b084
GetConsoleOutputCP
0x1001b088
GetCPInfo
0x1001b0c0
GetCurrentDirectoryW
0x1001b18c
GetCurrentProcess
0x1001b04c
GetCurrentProcessId
0x1001b02c
GetCurrentThreadId
0x1001b104
GetDriveTypeW
0x1001b15c
GetEnvironmentStringsW
0x1001b0b0
GetFileInformationByHandle
0x1001b160
GetFileSizeEx
0x1001b0a0
GetFileType
0x1001b164
GetFullPathNameW
0x1001b190
GetLastError
0x1001b01c
GetLocalTime
0x1001b058
GetModuleFileNameA
0x1001b0e4
GetModuleFileNameW
0x1001b17c
GetModuleHandleA
0x1001b018
GetModuleHandleExW
0x1001b178
GetModuleHandleW
0x1001b118
GetOEMCP
0x1001b0c4
GetProcAddress
0x1001b060
GetProcessHeap
0x1001b0a4
GetStartupInfoW
0x1001b114
GetStdHandle
0x1001b188
GetStringTypeW
0x1001b098
GetSystemTimeAsFileTime
0x1001b108
GetTempPathA
0x1001b054
GetTimeZoneInformation
0x1001b094
HeapAlloc
0x1001b184
HeapFree
0x1001b180
HeapReAlloc
0x1001b0ec
HeapSize
0x1001b080
InitializeCriticalSectionAndSpinCount
0x1001b13c
InitializeCriticalSectionEx
0x1001b1a8
InitializeSListHead
0x1001b10c
InterlockedFlushSList
0x1001b124
IsDebuggerPresent
0x1001b110
IsProcessorFeaturePresent
0x1001b0fc
IsValidCodePage
0x1001b0cc
LCMapStringW
0x1001b1b0
LeaveCriticalSection
0x1001b134
LoadLibraryExW
0x1001b154
MultiByteToWideChar
0x1001b194
OpenEventA
0x1001b0e0
OpenProcess
0x1001b038
PeekNamedPipe
0x1001b168
Process32First
0x1001b034
Process32FirstW
0x1001b068
Process32Next
0x1001b040
Process32NextW
0x1001b064
QueryPerformanceCounter
0x1001b100
RaiseException
0x1001b120
ReadConsoleW
0x1001b074
ReadFile
0x1001b078
ReadProcessMemory
0x1001b044
ResetEvent
0x1001b028
RtlUnwind
0x1001b11c
SetEndOfFile
0x1001b070
SetEnvironmentVariableW
0x1001b0a8
SetEvent
0x1001b020
SetFilePointerEx
0x1001b09c
SetLastError
0x1001b128
SetStdHandle
0x1001b0dc
SetUnhandledExceptionFilter
0x1001b0f8
Sleep
0x1001b0f0
SystemTimeToTzSpecificLocalTime
0x1001b16c
TerminateProcess
0x1001b050
TlsAlloc
0x1001b140
TlsFree
0x1001b14c
TlsGetValue
0x1001b144
TlsSetValue
0x1001b148
UnhandledExceptionFilter
0x1001b0f4
VirtualProtect
0x1001b048
WaitForSingleObject
0x1001b014
WideCharToMultiByte
0x1001b0b4
WriteConsoleW
0x1001b1b4
WriteFile
0x1001b090
USER32.dll
32
BeginPaint
0x1001b22c
ClientToScreen
0x1001b1fc
CreateWindowExA
0x1001b210
DefWindowProcA
0x1001b20c
DestroyWindow
0x1001b1dc
DispatchMessageA
0x1001b1d8
DrawTextA
0x1001b1f4
EndPaint
0x1001b230
EnumWindows
0x1001b208
FindWindowA
0x1001b1f8
FindWindowExA
0x1001b234
GetActiveWindow
0x1001b1e4
GetClientRect
0x1001b21c
GetForegroundWindow
0x1001b204
GetMessageA
0x1001b1d0
GetWindow
0x1001b1d4
GetWindowLongA
0x1001b200
GetWindowTextA
0x1001b1c0
GetWindowThreadProcessId
0x1001b1cc
IsWindow
0x1001b1ec
IsWindowVisible
0x1001b1e0
KillTimer
0x1001b220
MessageBoxA
0x1001b1c8
RegisterClassExA
0x1001b224
SetLayeredWindowAttributes
0x1001b214
SetTimer
0x1001b1f0
SetWindowLongA
0x1001b238
ShowWindow
0x1001b1e8
TranslateMessage
0x1001b218
UpdateWindow
0x1001b228
WaitForInputIdle
0x1001b1c4
WindowFromPoint
0x1001b1bc
No function matches your filter.