holmes.dll

vUnknown 64-bit Unknown OS Analyzed
Download
Description
—
Authors
Unknown
File size
311.1 KB
Uploaded
2025-12-02 14:41
Views
40
SHA-256
7d6426af9e8923d21653c846412ac141

Exported functions 33

GetHolmesLevel #1 · 0x1b2e0
GetHolmesVerion #2 · 0x1b300
HolmesAddDetectingFilter #3 · 0x1b310
HolmesAddTemplateSpecialization #4 · 0x1d460
HolmesAppendTemplatesToSpecialization #5 · 0x1d880
HolmesFinishSpecialDetecting #6 · 0x1b4b0
HolmesFlush #7 · 0x1b4d0
HolmesFlushDirectory #8 · 0x1b500
HolmesFreeMemory #9 · 0x1b750
HolmesGetLogFileList #10 · 0x1b760
HolmesIncreaseAutomaticTraceID #11 · 0x1b910
HolmesLog #12 · 0x1ba70
HolmesReceiptDetectingSubmit #13 · 0x1bd60
HolmesReceiveClue #14 · 0x1bd90
HolmesRemoveDetectingFilter #15 · 0x1bf10
HolmesRemoveSpecialization #16 · 0x1db70
HolmesRemoveTemplatesFromSpecialization #17 · 0x1db90
HolmesSetDebugHandler #18 · 0x1c0b0
HolmesSetDetectingCommonParam #19 · 0x1c0c0
HolmesSetGlobalFileResubmitHandler #20 · 0x1c1a0
HolmesStartSpecialDetecting #21 · 0x1c1b0
HolmesTemplateTrace #22 · 0x1de80
HolmesTrace #23 · 0x1c1f0
HolmesUpdateDetectingProperties #24 · 0x1c560
HolmesWrite #25 · 0x1c640
InitHolmes #26 · 0x1c780
ReadHolmes #27 · 0x21770
ReadHolmesBlocks #28 · 0x218e0
SetHolmesConsoleLogger #29 · 0x1cfb0
SetHolmesInstanceCommonParams #30 · 0x1cfc0
SetHolmesLevel #31 · 0x1d0a0
SetHolmesServerTimeOffset #32 · 0x1d0c0
UnInitHolmes #33 · 0x1d0d0

Imported DLLs & functions 168

api-ms-win-crt-convert-l1-1-0.dll 1
atoi 0x1800353f8
api-ms-win-crt-filesystem-l1-1-0.dll 2
_lock_file 0x180035408
_unlock_file 0x180035410
api-ms-win-crt-heap-l1-1-0.dll 5
_callnewh 0x180035440
calloc 0x180035428
free 0x180035438
malloc 0x180035430
realloc 0x180035420
api-ms-win-crt-math-l1-1-0.dll 1
pow 0x180035450
api-ms-win-crt-runtime-l1-1-0.dll 14
_beginthreadex 0x180035478
_cexit 0x1800354c0
_configure_narrow_argv 0x180035488
_crt_atexit 0x1800354b0
_execute_onexit_table 0x1800354a8
_getpid 0x180035468
_initialize_narrow_environment 0x180035490
_initialize_onexit_table 0x180035498
_initterm 0x1800354c8
_initterm_e 0x180035470
_invalid_parameter_noinfo_noreturn 0x180035460
_register_onexit_function 0x1800354a0
_seh_filter_dll 0x180035480
terminate 0x1800354b8
api-ms-win-crt-stdio-l1-1-0.dll 18
__stdio_common_vsprintf 0x180035500
__stdio_common_vsprintf_s 0x1800354f0
_fseeki64 0x180035538
_get_stream_buffer_pointers 0x1800354e0
_wfopen 0x180035530
fclose 0x180035558
fflush 0x1800354e8
fgetc 0x180035510
fgetpos 0x180035528
fopen 0x180035520
fputc 0x180035560
fread 0x180035548
fseek 0x1800354d8
fsetpos 0x180035550
ftell 0x1800354f8
fwrite 0x180035540
setvbuf 0x180035518
ungetc 0x180035508
api-ms-win-crt-string-l1-1-0.dll 2
isdigit 0x180035578
isprint 0x180035570
api-ms-win-crt-time-l1-1-0.dll 2
_localtime64_s 0x180035588
strftime 0x180035590
KERNEL32.dll 34
CloseHandle 0x180035010
CreateDirectoryW 0x180035030
CreateFileMappingW 0x180035018
CreateFileW 0x180035000
DeleteFileW 0x180035038
DisableThreadLibraryCalls 0x1800350a0
FindClose 0x180035058
FindFirstFileExW 0x180035068
FindFirstFileW 0x180035060
FindNextFileW 0x180035070
GetCurrentProcess 0x1800350d8
GetCurrentProcessId 0x1800350b0
GetCurrentThreadId 0x180035088
GetFileAttributesW 0x180035040
GetFileSizeEx 0x180035008
GetLastError 0x180035050
GetSystemTimeAsFileTime 0x1800350a8
GetVersionExA 0x180035078
InitializeSListHead 0x180035108
IsDebuggerPresent 0x1800350c0
IsProcessorFeaturePresent 0x1800350c8
MapViewOfFile 0x180035020
MultiByteToWideChar 0x180035090
QueryPerformanceCounter 0x1800350b8
RtlCaptureContext 0x180035100
RtlLookupFunctionEntry 0x1800350f8
RtlVirtualUnwind 0x1800350f0
SetFileAttributesW 0x180035048
SetUnhandledExceptionFilter 0x1800350e0
Sleep 0x180035080
TerminateProcess 0x1800350d0
UnhandledExceptionFilter 0x1800350e8
UnmapViewOfFile 0x180035028
WideCharToMultiByte 0x180035098
MSVCP140.dll 73
_Cnd_broadcast 0x180035128
_Cnd_destroy_in_situ 0x180035118
_Cnd_do_broadcast_at_thread_exit 0x180035130
_Cnd_init_in_situ 0x180035300
_Cnd_timedwait 0x180035120
_Mtx_current_owns 0x180035350
_Mtx_destroy_in_situ 0x180035348
_Mtx_init_in_situ 0x180035338
_Mtx_lock 0x180035358
_Mtx_unlock 0x1800352c8
_Thrd_id 0x180035330
_Thrd_join 0x180035328
_Xtime_get_ticks 0x180035320
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z 0x180035218
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z 0x180035188
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z 0x1800352d0
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ 0x180035160
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z 0x1800351b8
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ 0x1800351b0
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z 0x1800352f0
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ 0x180035220
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ 0x180035278
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ 0x1800351a8
?_Throw_C_error@std@@YAXH@Z 0x180035138
?_Throw_Cpp_error@std@@YAXH@Z 0x180035140
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ 0x180035228
?_Xbad_alloc@std@@YAXXZ 0x180035310
?_Xbad_function_call@std@@YAXXZ 0x180035290
?_Xlength_error@std@@YAXPEBD@Z 0x180035308
?_Xout_of_range@std@@YAXPEBD@Z 0x180035318
??0_Lockit@std@@QEAA@H@Z 0x180035148
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ 0x1800351e8
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z 0x180035208
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z 0x1800351f8
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ 0x180035190
??1_Lockit@std@@QEAA@XZ 0x180035150
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x1800351d0
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x180035210
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x180035200
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x180035198
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z 0x180035340
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z 0x180035280
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z 0x1800352c0
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z 0x1800351f0
??Bid@locale@std@@QEAA_KXZ 0x180035158
?always_noconv@codecvt_base@std@@QEBA_NXZ 0x180035168
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z 0x1800351d8
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ 0x180035288
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ 0x1800351a0
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ 0x1800352d8
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A 0x180035258
?id@?$ctype@D@std@@2V0locale@2@A 0x1800352f8
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z 0x180035230
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z 0x180035170
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z 0x180035178
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z 0x1800352a8
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z 0x1800352b0
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z 0x1800352a0
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z 0x180035238
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z 0x1800351e0
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ 0x1800352e0
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ 0x180035240
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ 0x1800352e8
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z 0x180035268
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z 0x180035270
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ 0x180035248
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ 0x1800352b8
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ 0x180035250
?uncaught_exception@std@@YA_NXZ 0x180035260
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z 0x180035180
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z 0x180035298
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z 0x1800351c0
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z 0x1800351c8
VCRUNTIME140_1.dll 1
__CxxFrameHandler4 0x1800353e8
VCRUNTIME140.dll 15
__C_specific_handler 0x1800353c0
__current_exception 0x1800353c8
__current_exception_context 0x1800353d0
__RTDynamicCast 0x1800353d8
__std_exception_copy 0x180035370
__std_exception_destroy 0x180035378
__std_terminate 0x1800353b8
__std_type_info_destroy_list 0x180035368
_CxxThrowException 0x180035380
_purecall 0x1800353b0
memchr 0x180035388
memcmp 0x1800353a8
memcpy 0x180035390
memmove 0x180035398
memset 0x1800353a0