ToolsInjectionHelper32.dll
vUnknown
32-bit
Unknown OS
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess, VirtualAllocEx
Exported functions 3
DetourFinishHelperProcess
#1 · 0x2b220
FakeEntryPoint
#2 · 0xc980
GetExportTable
#3 · 0xca70
No function matches your filter.
Imported DLLs & functions 173
InitializeSecurityDescriptor
0x10082010
RegCloseKey
0x10082008
RegOpenKeyExA
0x10082004
RegQueryValueExA
0x10082000
SetSecurityDescriptorDacl
0x1008200c
KERNEL32.dll
162
AreFileApisANSI
0x10082180
CloseHandle
0x100821d0
CompareStringEx
0x10082200
CompareStringW
0x10082254
CreateDirectoryA
0x10082090
CreateEventW
0x10082210
CreateFileA
0x10082094
CreateFileMappingA
0x100820f8
CreateFileW
0x1008216c
CreateMutexA
0x100820cc
CreatePipe
0x1008201c
CreateProcessW
0x10082058
CreateSemaphoreA
0x100820f4
CreateSemaphoreW
0x10082190
CreateThread
0x10082194
DecodePointer
0x100821f4
DeleteCriticalSection
0x1008202c
DeleteFileA
0x1008213c
DuplicateHandle
0x100821cc
EncodePointer
0x100821f0
EnterCriticalSection
0x10082024
EnumSystemLocalesW
0x10082268
ExitProcess
0x10082148
ExitThread
0x10082230
FileTimeToSystemTime
0x10082108
FindClose
0x10082098
FindFirstFileA
0x1008209c
FindFirstFileExW
0x10082280
FindNextFileA
0x100820a0
FindNextFileW
0x1008217c
FlushFileBuffers
0x10082170
FlushInstructionCache
0x100821e0
FormatMessageA
0x100820f0
FormatMessageW
0x10082178
FreeEnvironmentStringsW
0x1008229c
FreeLibrary
0x10082060
FreeLibraryAndExitThread
0x10082234
GetACP
0x10082288
GetCommandLineA
0x10082290
GetCommandLineW
0x10082294
GetConsoleMode
0x10082270
GetConsoleOutputCP
0x1008226c
GetCPInfo
0x10082204
GetCurrentDirectoryW
0x10082168
GetCurrentProcess
0x10082034
GetCurrentProcessId
0x10082038
GetCurrentThread
0x10082040
GetCurrentThreadId
0x10082044
GetDateFormatW
0x1008224c
GetEnvironmentStringsW
0x10082298
GetEnvironmentVariableW
0x100821e4
GetExitCodeProcess
0x1008214c
GetFileAttributesW
0x100821dc
GetFileSizeEx
0x100820a4
GetFileType
0x10082248
GetLastError
0x10082120
GetLocaleInfoEx
0x100821fc
GetLocaleInfoW
0x1008225c
GetModuleFileNameA
0x10082084
GetModuleFileNameW
0x10082088
GetModuleHandleA
0x100820e8
GetModuleHandleExA
0x10082100
GetModuleHandleExW
0x10082238
GetModuleHandleW
0x10082064
GetNativeSystemInfo
0x10082164
GetOEMCP
0x1008228c
GetProcAddress
0x10082068
GetProcessHeap
0x100821c8
GetProcessId
0x1008219c
GetProcessTimes
0x100820d0
GetStartupInfoW
0x10082220
GetStdHandle
0x10082244
GetStringTypeW
0x100821e8
GetSystemInfo
0x100820d8
GetSystemTimeAsFileTime
0x100820fc
GetTempFileNameA
0x10082144
GetTempPathA
0x10082140
GetThreadContext
0x10082118
GetThreadId
0x1008205c
GetTickCount
0x100820dc
GetTimeFormatW
0x10082250
GetTimeZoneInformation
0x1008227c
GetUserDefaultLCID
0x10082264
HeapAlloc
0x10082240
HeapFree
0x1008223c
HeapReAlloc
0x10082278
HeapSize
0x100821bc
InitializeCriticalSection
0x10082020
InitializeCriticalSectionAndSpinCount
0x10082208
InitializeCriticalSectionEx
0x100821ec
InitializeSListHead
0x10082214
InterlockedFlushSList
0x10082228
InterlockedPushEntrySList
0x10082224
IsDebuggerPresent
0x100821d4
IsProcessorFeaturePresent
0x1008221c
IsValidCodePage
0x10082284
IsValidLocale
0x10082260
IsWow64Process
0x10082160
LCMapStringEx
0x100821f8
LCMapStringW
0x10082258
LeaveCriticalSection
0x10082028
LoadLibraryA
0x10082074
LoadLibraryExA
0x1008206c
LoadLibraryExW
0x10082070
LoadLibraryW
0x10082078
LocalFree
0x100820ec
MapViewOfFileEx
0x100820e0
MultiByteToWideChar
0x10082184
OpenProcess
0x10082150
OutputDebugStringA
0x1008210c
QueryFullProcessImageNameA
0x1008207c
QueryPerformanceCounter
0x100820b8
QueryPerformanceFrequency
0x100820bc
RaiseException
0x1008208c
ReadConsoleW
0x100821c0
ReadFile
0x100821d8
ReadProcessMemory
0x10082158
ReleaseMutex
0x100820c4
ReleaseSemaphore
0x100820c0
RemoveDirectoryA
0x100820a8
ResetEvent
0x100821b0
ResumeThread
0x10082114
RtlCaptureContext
0x10082188
RtlUnwind
0x1008222c
SetEndOfFile
0x100820ac
SetEnvironmentVariableW
0x10082274
SetEvent
0x100821ac
SetFilePointer
0x100820b0
SetFilePointerEx
0x10082174
SetLastError
0x10082018
SetNamedPipeHandleState
0x100821a0
SetStdHandle
0x100821c4
SetThreadContext
0x1008211c
SetUnhandledExceptionFilter
0x1008218c
Sleep
0x10082030
SuspendThread
0x10082110
SwitchToThread
0x100820d4
SystemTimeToTzSpecificLocalTime
0x10082104
TerminateProcess
0x1008203c
TerminateThread
0x10082198
TlsAlloc
0x10082048
TlsFree
0x10082054
TlsGetValue
0x1008204c
TlsSetValue
0x10082050
TransactNamedPipe
0x100821a4
UnhandledExceptionFilter
0x10082218
UnmapViewOfFile
0x100820e4
VirtualAlloc
0x10082124
VirtualAllocEx
0x10082154
VirtualFree
0x1008212c
VirtualProtect
0x10082128
VirtualProtectEx
0x10082134
VirtualQuery
0x10082130
VirtualQueryEx
0x10082138
WaitForMultipleObjects
0x100821b4
WaitForSingleObject
0x100820c8
WaitForSingleObjectEx
0x1008220c
WaitNamedPipeW
0x100821a8
WideCharToMultiByte
0x10082080
WriteConsoleW
0x100821b8
WriteFile
0x100820b4
WriteProcessMemory
0x1008215c
CoCreateGuid
0x100822bc
MessageBoxA
0x100822a8
RegisterClassA
0x100822a4
RegisterClassExA
0x100822b0
RegisterClassExW
0x100822ac
RegisterClassW
0x100822b4
No function matches your filter.