qingshellext64.dll_d_1e2a4aeb
v12.1.0.26880
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DllCanUnloadNow
#1 · 0x33c0
DllGetClassObject
#2 · 0x3440
DllInstall
#3 · 0x35f0
DllRegisterServer
#4 · 0x3630
DllUnregisterServer
#5 · 0x4200
No function matches your filter.
Imported DLLs & functions 156
KERNEL32.dll
156
AcquireSRWLockExclusive
0x18008b350
AreFileApisANSI
0x18008b378
CloseHandle
0x18008b0d8
CreateDirectoryW
0x18008b1f8
CreateEventW
0x18008b188
CreateFileMappingW
0x18008b240
CreateFileW
0x18008b0c0
CreateMutexW
0x18008b230
CreateToolhelp32Snapshot
0x18008b210
DecodePointer
0x18008b000
DeleteCriticalSection
0x18008b020
DeleteFileW
0x18008b118
DeviceIoControl
0x18008b1f0
DisableThreadLibraryCalls
0x18008b028
EncodePointer
0x18008b038
EnterCriticalSection
0x18008b070
EnumSystemLocalesW
0x18008b478
ExitProcess
0x18008b440
ExpandEnvironmentStringsW
0x18008b2b8
FindClose
0x18008b120
FindFirstFileExW
0x18008b368
FindFirstFileW
0x18008b128
FindNextFileW
0x18008b130
FindResourceExW
0x18008b080
FindResourceW
0x18008b0b8
FlushFileBuffers
0x18008b490
FormatMessageA
0x18008b330
FreeEnvironmentStringsW
0x18008b4c8
FreeLibrary
0x18008b100
FreeResource
0x18008b1c8
GetACP
0x18008b4a8
GetCommandLineA
0x18008b4b8
GetCommandLineW
0x18008b260
GetConsoleCP
0x18008b498
GetConsoleMode
0x18008b480
GetCPInfo
0x18008b398
GetCurrentProcess
0x18008b2c0
GetCurrentProcessId
0x18008b2c8
GetCurrentThread
0x18008b2d0
GetCurrentThreadId
0x18008b190
GetDriveTypeW
0x18008b1e8
GetEnvironmentStringsW
0x18008b4c0
GetEnvironmentVariableW
0x18008b290
GetFileAttributesExW
0x18008b2a0
GetFileAttributesW
0x18008b1b8
GetFileInformationByHandleEx
0x18008b380
GetFileSizeEx
0x18008b2a8
GetFileType
0x18008b450
GetLastError
0x18008b010
GetLocaleInfoW
0x18008b460
GetLongPathNameW
0x18008b2f0
GetModuleFileNameW
0x18008b088
GetModuleHandleExW
0x18008b200
GetModuleHandleW
0x18008b090
GetOEMCP
0x18008b4b0
GetPrivateProfileIntW
0x18008b278
GetPrivateProfileStringW
0x18008b280
GetProcAddress
0x18008b098
GetProcessHeap
0x18008b068
GetProcessId
0x18008b160
GetStartupInfoW
0x18008b3f8
GetStdHandle
0x18008b448
GetStringTypeW
0x18008b338
GetSystemDirectoryW
0x18008b268
GetSystemInfo
0x18008b318
GetSystemTimeAsFileTime
0x18008b390
GetSystemWow64DirectoryW
0x18008b198
GetTempFileNameW
0x18008b138
GetTempPathW
0x18008b150
GetUserDefaultLCID
0x18008b470
GetUserDefaultUILanguage
0x18008b288
GlobalAlloc
0x18008b1d0
GlobalFree
0x18008b1d8
GlobalLock
0x18008b1a8
GlobalUnlock
0x18008b1a0
HeapAlloc
0x18008b048
HeapDestroy
0x18008b040
HeapFree
0x18008b058
HeapReAlloc
0x18008b050
HeapSize
0x18008b060
InitializeCriticalSectionAndSpinCount
0x18008b018
InitializeCriticalSectionEx
0x18008b358
InitializeSListHead
0x18008b3f0
InitializeSRWLock
0x18008b340
InterlockedFlushSList
0x18008b410
IsDebuggerPresent
0x18008b3a0
IsProcessorFeaturePresent
0x18008b3e8
IsValidCodePage
0x18008b4a0
IsValidLocale
0x18008b468
LCMapStringEx
0x18008b388
LCMapStringW
0x18008b458
LeaveCriticalSection
0x18008b078
LoadLibraryExA
0x18008b328
LoadLibraryExW
0x18008b108
LoadLibraryW
0x18008b208
LoadResource
0x18008b0a0
LocalFree
0x18008b168
LockResource
0x18008b0a8
lstrcmpiW
0x18008b110
lstrlenW
0x18008b270
MapViewOfFile
0x18008b250
MulDiv
0x18008b1e0
MultiByteToWideChar
0x18008b0f0
OpenFileMappingW
0x18008b248
OpenMutexW
0x18008b158
OpenProcess
0x18008b2e0
OutputDebugStringW
0x18008b030
Process32FirstW
0x18008b218
Process32NextW
0x18008b220
ProcessIdToSessionId
0x18008b2d8
QueryPerformanceCounter
0x18008b300
QueryPerformanceFrequency
0x18008b308
RaiseException
0x18008b008
ReadConsoleW
0x18008b488
ReadFile
0x18008b0c8
ReleaseMutex
0x18008b228
ReleaseSRWLockExclusive
0x18008b348
ResetEvent
0x18008b3a8
RtlCaptureContext
0x18008b3b8
RtlLookupFunctionEntry
0x18008b3c0
RtlPcToFileHeader
0x18008b408
RtlUnwind
0x18008b310
RtlUnwindEx
0x18008b400
RtlVirtualUnwind
0x18008b3c8
SetEndOfFile
0x18008b370
SetEnvironmentVariableW
0x18008b298
SetEvent
0x18008b178
SetFileAttributesW
0x18008b140
SetFilePointer
0x18008b148
SetFilePointerEx
0x18008b2b0
SetLastError
0x18008b2f8
SetNamedPipeHandleState
0x18008b0e0
SetStdHandle
0x18008b4d0
SetUnhandledExceptionFilter
0x18008b3d8
SizeofResource
0x18008b0b0
Sleep
0x18008b170
TerminateProcess
0x18008b3e0
TlsAlloc
0x18008b418
TlsFree
0x18008b430
TlsGetValue
0x18008b420
TlsSetValue
0x18008b428
TryEnterCriticalSection
0x18008b360
UnhandledExceptionFilter
0x18008b3d0
UnmapViewOfFile
0x18008b258
VerifyVersionInfoW
0x18008b1c0
VerSetConditionMask
0x18008b1b0
VirtualAlloc
0x18008b438
VirtualProtect
0x18008b320
VirtualQuery
0x18008b238
WaitForSingleObject
0x18008b180
WaitForSingleObjectEx
0x18008b3b0
WaitNamedPipeW
0x18008b0e8
WideCharToMultiByte
0x18008b0f8
WriteConsoleW
0x18008b4d8
WriteFile
0x18008b0d0
WTSGetActiveConsoleSessionId
0x18008b2e8
No function matches your filter.