FileTrackerA4.dll
v17.0.36015.10
Unknown (0xaa64)
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess, VirtualAllocEx
Exported functions 10
#1 · 0x11b10
StartTrackingContext
#2 · 0xa8c0
StartTrackingContextWithRoot
#3 · 0xa9e0
EndTrackingContext
#4 · 0xab00
StopTrackingAndCleanup
#5 · 0xabb0
SuspendTracking
#6 · 0xac10
ResumeTracking
#7 · 0xac50
WriteAllTLogs
#8 · 0xacb0
WriteContextTLogs
#9 · 0xaf70
SetThreadCount
#10 · 0xb0f0
No function matches your filter.
Imported DLLs & functions 155
KERNEL32.dll
155
CloseHandle
0x180037260
CompareFileTime
0x1800372a0
CopyFileA
0x180037060
CopyFileExA
0x180037070
CopyFileExW
0x180037078
CopyFileW
0x180037068
CreateDirectoryA
0x180037110
CreateDirectoryW
0x180037108
CreateEventW
0x180037258
CreateFile2
0x180037058
CreateFileA
0x180037048
CreateFileW
0x180037050
CreateHardLinkA
0x1800370b0
CreateHardLinkW
0x1800370b8
CreateProcessA
0x1800370c0
CreateProcessW
0x1800370c8
CreateThread
0x1800370d0
DeleteCriticalSection
0x180037238
DeleteFileA
0x180037120
DeleteFileW
0x180037118
DeleteProcThreadAttributeList
0x180037430
DisableThreadLibraryCalls
0x180037138
EncodePointer
0x180037320
EnterCriticalSection
0x180037038
ExitProcess
0x180037130
FindClose
0x180037388
FindFirstFileExW
0x180037390
FindFirstFileW
0x1800374a8
FindNextFileW
0x180037398
FindResourceExW
0x1800371b8
FindResourceW
0x1800371b0
FlsAlloc
0x180037300
FlsFree
0x180037318
FlsGetValue
0x180037308
FlsSetValue
0x180037310
FlushFileBuffers
0x180037340
FlushInstructionCache
0x180037490
FormatMessageW
0x1800374c0
FreeEnvironmentStringsA
0x180037230
FreeEnvironmentStringsW
0x180037218
FreeLibrary
0x180037330
GetACP
0x1800373a8
GetCommandLineA
0x1800373c0
GetCommandLineW
0x1800371f8
GetConsoleMode
0x180037350
GetConsoleOutputCP
0x180037348
GetCPInfo
0x1800373b8
GetCurrentProcess
0x180037328
GetCurrentProcessId
0x180037148
GetCurrentThread
0x180037190
GetCurrentThreadId
0x1800371d0
GetEnvironmentStrings
0x180037228
GetEnvironmentStringsW
0x180037210
GetEnvironmentVariableA
0x180037220
GetEnvironmentVariableW
0x180037030
GetExitCodeProcess
0x180037460
GetFileAttributesA
0x1800370e0
GetFileAttributesExA
0x1800370f0
GetFileAttributesExW
0x1800370e8
GetFileAttributesW
0x1800370d8
GetFileSizeEx
0x1800373e8
GetFileType
0x180037160
GetFinalPathNameByHandleW
0x180037170
GetFullPathNameW
0x1800374b0
GetLastError
0x180037158
GetLocaleInfoW
0x180037378
GetModuleFileNameA
0x180037208
GetModuleFileNameW
0x180037188
GetModuleHandleExW
0x180037338
GetModuleHandleW
0x1800372c0
GetOEMCP
0x1800373b0
GetProcAddress
0x180037250
GetProcessHeap
0x180037028
GetProcessId
0x180037178
GetStartupInfoW
0x1800372b8
GetStdHandle
0x180037380
GetStringTypeW
0x1800373c8
GetSystemTimeAsFileTime
0x180037280
GetThreadContext
0x180037488
GetUserDefaultUILanguage
0x1800374c8
HeapAlloc
0x180037020
HeapDestroy
0x180037000
HeapFree
0x180037018
HeapReAlloc
0x180037010
HeapSize
0x180037008
InitializeCriticalSection
0x1800371f0
InitializeCriticalSectionAndSpinCount
0x180037358
InitializeCriticalSectionEx
0x1800372a8
InitializeProcThreadAttributeList
0x180037418
InitializeSListHead
0x1800372b0
InterlockedFlushSList
0x1800372e8
IsDebuggerPresent
0x1800373f8
IsValidCodePage
0x1800373a0
IsWow64Process
0x180037450
LCMapStringW
0x180037370
LeaveCriticalSection
0x180037040
LoadLibraryExW
0x180037368
LoadLibraryW
0x180037180
LoadResource
0x1800371a8
LocalFree
0x1800374b8
LockResource
0x1800371a0
MoveFileA
0x180037090
MoveFileExA
0x180037080
MoveFileExW
0x180037088
MoveFileW
0x180037098
MultiByteToWideChar
0x180037240
OpenProcess
0x180037420
OutputDebugStringA
0x180037410
OutputDebugStringW
0x180037400
QueryPerformanceCounter
0x1800371d8
QueryPerformanceFrequency
0x1800371e0
RaiseException
0x1800372f8
ReadConsoleW
0x1800373e0
ReadFile
0x180037290
ReadProcessMemory
0x180037448
RemoveDirectoryA
0x180037100
RemoveDirectoryW
0x1800370f8
ReplaceFileW
0x1800370a8
ResetEvent
0x180037270
ResumeThread
0x180037150
RtlLookupFunctionEntry
0x1800372c8
RtlPcToFileHeader
0x1800372f0
RtlUnwindEx
0x1800372d0
SetDllDirectoryW
0x180037200
SetEndOfFile
0x1800374d0
SetEnvironmentVariableW
0x180037140
SetEvent
0x180037278
SetFileInformationByHandle
0x1800370a0
SetFilePointer
0x180037298
SetFilePointerEx
0x1800373d8
SetLastError
0x180037168
SetStdHandle
0x1800373d0
SetThreadContext
0x180037498
SizeofResource
0x180037198
SuspendThread
0x180037480
TerminateProcess
0x180037128
TlsAlloc
0x1800371e8
TlsFree
0x180037360
TlsGetValue
0x1800371c0
TlsSetValue
0x1800371c8
UpdateProcThreadAttribute
0x180037428
VerifyVersionInfoW
0x1800372e0
VerSetConditionMask
0x1800372d8
VirtualAlloc
0x180037478
VirtualAllocEx
0x180037440
VirtualFree
0x180037470
VirtualProtect
0x180037468
VirtualProtectEx
0x180037438
VirtualQuery
0x1800374a0
VirtualQueryEx
0x180037458
WaitForSingleObject
0x180037268
WideCharToMultiByte
0x180037248
WriteConsoleW
0x1800373f0
WriteFile
0x180037288
WriteProcessMemory
0x180037408
No function matches your filter.