FileTracker32.dll
v17.0.36015.10
32-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess, VirtualAllocEx
Exported functions 10
#1 · 0x14220
StartTrackingContext
#2 · 0xf7e0
StartTrackingContextWithRoot
#3 · 0xf880
EndTrackingContext
#4 · 0xf910
StopTrackingAndCleanup
#5 · 0xf950
SuspendTracking
#6 · 0xf990
ResumeTracking
#7 · 0xf9c0
WriteAllTLogs
#8 · 0xfa00
WriteContextTLogs
#9 · 0xfa90
SetThreadCount
#10 · 0xfb90
No function matches your filter.
Imported DLLs & functions 151
KERNEL32.dll
151
CloseHandle
0x10038130
CompareFileTime
0x10038150
CopyFileA
0x10038030
CopyFileExA
0x10038038
CopyFileExW
0x1003803c
CopyFileW
0x10038034
CreateDirectoryA
0x10038088
CreateDirectoryW
0x10038084
CreateEventW
0x1003812c
CreateFile2
0x1003802c
CreateFileA
0x10038024
CreateFileW
0x10038028
CreateHardLinkA
0x10038058
CreateHardLinkW
0x1003805c
CreateProcessA
0x10038060
CreateProcessW
0x10038064
CreateThread
0x10038068
DecodePointer
0x10038158
DeleteCriticalSection
0x1003811c
DeleteFileA
0x10038090
DeleteFileW
0x1003808c
DeleteProcThreadAttributeList
0x10038204
DisableThreadLibraryCalls
0x1003809c
EncodePointer
0x1003818c
EnterCriticalSection
0x1003801c
ExitProcess
0x10038098
FindClose
0x100381bc
FindFirstFileExW
0x100381c0
FindFirstFileW
0x10038240
FindNextFileW
0x100381c4
FindResourceExW
0x100380dc
FindResourceW
0x100380d8
FlushFileBuffers
0x100381a4
FlushInstructionCache
0x10038230
FormatMessageW
0x1003824c
FreeEnvironmentStringsA
0x10038118
FreeEnvironmentStringsW
0x1003810c
FreeLibrary
0x10038198
GetACP
0x100381cc
GetCommandLineA
0x100381d8
GetCommandLineW
0x100380fc
GetConsoleCP
0x100381a8
GetConsoleMode
0x100381ac
GetConsoleOutputCP
0x10038254
GetCPInfo
0x100381d4
GetCurrentProcess
0x10038168
GetCurrentProcessId
0x100380a4
GetCurrentThread
0x100380c8
GetCurrentThreadId
0x100380e8
GetEnvironmentStrings
0x10038114
GetEnvironmentStringsW
0x10038108
GetEnvironmentVariableA
0x10038110
GetEnvironmentVariableW
0x10038018
GetExitCodeProcess
0x10038218
GetFileAttributesA
0x10038070
GetFileAttributesExA
0x10038078
GetFileAttributesExW
0x10038074
GetFileAttributesW
0x1003806c
GetFileType
0x100380b0
GetFinalPathNameByHandleW
0x100380b8
GetFullPathNameW
0x10038244
GetLastError
0x100380ac
GetLocaleInfoW
0x100381b4
GetModuleFileNameA
0x10038104
GetModuleFileNameW
0x100380c4
GetModuleHandleExW
0x100381a0
GetModuleHandleW
0x1003817c
GetOEMCP
0x100381d0
GetProcAddress
0x10038128
GetProcessHeap
0x10038014
GetProcessId
0x100380bc
GetStartupInfoW
0x10038178
GetStdHandle
0x100381b8
GetStringTypeW
0x100381dc
GetSystemTimeAsFileTime
0x10038140
GetThreadContext
0x1003822c
GetUserDefaultUILanguage
0x10038250
HeapAlloc
0x10038010
HeapDestroy
0x10038000
HeapFree
0x1003800c
HeapReAlloc
0x10038008
HeapSize
0x10038004
InitializeCriticalSection
0x100380f8
InitializeCriticalSectionAndSpinCount
0x10038190
InitializeCriticalSectionEx
0x10038154
InitializeProcThreadAttributeList
0x100381f8
InitializeSListHead
0x10038170
InterlockedFlushSList
0x10038184
IsDebuggerPresent
0x10038174
IsProcessorFeaturePresent
0x1003816c
IsValidCodePage
0x100381c8
IsWow64Process
0x1003823c
LCMapStringW
0x100381b0
LeaveCriticalSection
0x10038020
LoadLibraryExW
0x1003819c
LoadLibraryW
0x100380c0
LoadResource
0x100380d4
LocalFree
0x10038248
LockResource
0x100380d0
MoveFileA
0x10038048
MoveFileExA
0x10038040
MoveFileExW
0x10038044
MoveFileW
0x1003804c
MultiByteToWideChar
0x10038120
OpenProcess
0x100381fc
OutputDebugStringA
0x100381f4
OutputDebugStringW
0x100381ec
QueryPerformanceCounter
0x100380ec
QueryPerformanceFrequency
0x100380f0
RaiseException
0x10038188
ReadConsoleW
0x1003815c
ReadFile
0x10038148
ReadProcessMemory
0x10038210
RemoveDirectoryA
0x10038080
RemoveDirectoryW
0x1003807c
ReplaceFileW
0x10038054
ResetEvent
0x10038138
ResumeThread
0x100380a8
RtlUnwind
0x10038180
SetDllDirectoryW
0x10038100
SetEndOfFile
0x10038258
SetEnvironmentVariableW
0x100380a0
SetEvent
0x1003813c
SetFileInformationByHandle
0x10038050
SetFilePointer
0x1003814c
SetFilePointerEx
0x100381e4
SetLastError
0x100380b4
SetStdHandle
0x100381e0
SetThreadContext
0x10038234
SetUnhandledExceptionFilter
0x10038164
SizeofResource
0x100380cc
SuspendThread
0x10038228
TerminateProcess
0x10038094
TlsAlloc
0x100380f4
TlsFree
0x10038194
TlsGetValue
0x100380e0
TlsSetValue
0x100380e4
UnhandledExceptionFilter
0x10038160
UpdateProcThreadAttribute
0x10038200
VirtualAlloc
0x10038224
VirtualAllocEx
0x1003820c
VirtualFree
0x10038220
VirtualProtect
0x1003821c
VirtualProtectEx
0x10038208
VirtualQuery
0x10038238
VirtualQueryEx
0x10038214
WaitForSingleObject
0x10038134
WideCharToMultiByte
0x10038124
WriteConsoleW
0x100381e8
WriteFile
0x10038144
WriteProcessMemory
0x100381f0
No function matches your filter.