FileTracker.dll
v14.8.4084.0
32-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, VirtualAllocEx
Exported functions 10
TrackerExportOne
#1 · 0xf050
StartTrackingContext
#2 · 0xf060
StartTrackingContextWithRoot
#3 · 0xf100
EndTrackingContext
#4 · 0xf190
StopTrackingAndCleanup
#5 · 0xf1d0
SuspendTracking
#6 · 0xf210
ResumeTracking
#7 · 0xf240
WriteAllTLogs
#8 · 0xf280
WriteContextTLogs
#9 · 0xf310
SetThreadCount
#10 · 0xf3b0
No function matches your filter.
Imported DLLs & functions 141
KERNEL32.dll
141
CloseHandle
0x10035114
CompareFileTime
0x10035134
CopyFileA
0x1003502c
CopyFileExA
0x10035034
CopyFileExW
0x10035038
CopyFileW
0x10035030
CreateDirectoryA
0x1003506c
CreateDirectoryW
0x10035068
CreateEventW
0x10035110
CreateFileA
0x10035024
CreateFileW
0x10035028
CreateHardLinkA
0x1003503c
CreateHardLinkW
0x10035040
CreateProcessA
0x10035044
CreateProcessW
0x10035048
CreateThread
0x1003504c
DecodePointer
0x1003513c
DeleteCriticalSection
0x10035104
DeleteFileA
0x10035074
DeleteFileW
0x10035070
DisableThreadLibraryCalls
0x10035080
EncodePointer
0x10035168
EnterCriticalSection
0x1003501c
ExitProcess
0x1003507c
FindClose
0x100351a8
FindFirstFileExA
0x100351ac
FindFirstFileW
0x10035214
FindNextFileA
0x100351b0
FindNextFileW
0x100351b4
FindResourceExW
0x100350bc
FindResourceW
0x100350b8
FlushFileBuffers
0x10035190
FlushInstructionCache
0x100351fc
FormatMessageW
0x10035220
FreeEnvironmentStringsA
0x10035100
FreeEnvironmentStringsW
0x100350f4
FreeLibrary
0x10035174
GetACP
0x1003518c
GetCommandLineA
0x100351c4
GetCommandLineW
0x100350e0
GetConsoleCP
0x10035194
GetConsoleMode
0x10035198
GetConsoleOutputCP
0x10035228
GetCPInfo
0x100351c0
GetCurrentProcess
0x10035150
GetCurrentProcessId
0x10035088
GetCurrentThread
0x100350a8
GetCurrentThreadId
0x100350c8
GetEnvironmentStrings
0x100350fc
GetEnvironmentStringsW
0x100350f0
GetEnvironmentVariableA
0x100350f8
GetEnvironmentVariableW
0x10035018
GetFileAttributesA
0x10035054
GetFileAttributesExA
0x1003505c
GetFileAttributesExW
0x10035058
GetFileAttributesW
0x10035050
GetFileType
0x10035094
GetFullPathNameW
0x10035218
GetLastError
0x10035090
GetLocaleInfoW
0x100351a0
GetModuleFileNameA
0x100350ec
GetModuleFileNameW
0x100350a4
GetModuleHandleA
0x10035210
GetModuleHandleExW
0x10035184
GetModuleHandleW
0x10035144
GetOEMCP
0x100351bc
GetProcAddress
0x1003510c
GetProcessHeap
0x10035014
GetProcessId
0x1003509c
GetStartupInfoW
0x10035160
GetStdHandle
0x100351a4
GetStringTypeW
0x100351c8
GetSystemTimeAsFileTime
0x10035124
GetThreadContext
0x100351f4
GetTickCount
0x10035200
GetUserDefaultUILanguage
0x10035224
HeapAlloc
0x10035010
HeapDestroy
0x10035000
HeapFree
0x1003500c
HeapReAlloc
0x10035008
HeapSize
0x10035004
InitializeCriticalSection
0x100350dc
InitializeCriticalSectionAndSpinCount
0x1003516c
InitializeCriticalSectionEx
0x10035138
InitializeSListHead
0x10035158
InterlockedCompareExchange
0x100350e4
InterlockedFlushSList
0x1003517c
InterlockedIncrement
0x100350cc
IsDebuggerPresent
0x1003515c
IsProcessorFeaturePresent
0x10035154
IsValidCodePage
0x100351b8
LCMapStringW
0x1003519c
LeaveCriticalSection
0x10035020
LoadLibraryExW
0x10035178
LoadLibraryW
0x100350a0
LoadResource
0x100350b4
LocalFree
0x1003521c
LockResource
0x100350b0
MultiByteToWideChar
0x10035108
OutputDebugStringW
0x100351d8
QueryPerformanceCounter
0x100350d0
QueryPerformanceFrequency
0x100350d4
RaiseException
0x10035180
ReadConsoleW
0x1003522c
ReadFile
0x1003512c
ReadProcessMemory
0x100351e8
RemoveDirectoryA
0x10035064
RemoveDirectoryW
0x10035060
ResetEvent
0x1003511c
ResumeThread
0x1003508c
RtlUnwind
0x10035164
SetDllDirectoryW
0x100350e8
SetEndOfFile
0x10035230
SetEnvironmentVariableW
0x10035084
SetEvent
0x10035120
SetFilePointer
0x10035130
SetFilePointerEx
0x100351d0
SetLastError
0x10035098
SetStdHandle
0x100351cc
SetThreadContext
0x100351f8
SetUnhandledExceptionFilter
0x1003514c
SizeofResource
0x100350ac
SuspendThread
0x100351f0
TerminateProcess
0x10035078
TlsAlloc
0x100350d8
TlsFree
0x10035170
TlsGetValue
0x100350c0
TlsSetValue
0x100350c4
UnhandledExceptionFilter
0x10035148
VirtualAlloc
0x10035204
VirtualAllocEx
0x100351dc
VirtualProtect
0x10035208
VirtualProtectEx
0x100351e0
VirtualQuery
0x1003520c
VirtualQueryEx
0x100351e4
WaitForSingleObject
0x10035118
WaitForSingleObjectEx
0x10035140
WideCharToMultiByte
0x10035188
WriteConsoleW
0x100351d4
WriteFile
0x10035128
WriteProcessMemory
0x100351ec
No function matches your filter.